- COP-Variants generaly. Destruction: Files a shortened, and overwriten with a text. Please do not equalize this with Biomechanic (ref.) Biomechanic-variants do Not shorten files. It changes at least five Bytes inside file, not in start! Groupbuild: Files were shortened with 3E9-Trojanbegin. Files with the same Trojancodelength and the same Destruktiontext were give a Type >Type-A Trojan-part is two Hunks, 1920 Bytes. Filelength after destruction: 21 Bytes. Known filename: NComm32, 121896 Bytes. >Type-B Trojan-part is two Hunks, 1904 Bytes. Filelength after destruction: 19 Bytes. Known filename: LHA3.0, 69888 Bytes. CED4, 174500 Bytes. >Type-C Trojan-part is two Hunks, 1860 Bytes. Filelength after destruction: 6 Bytes. Known filenames: DOpus5, 347296 Bytes. >Type-D Trojan-part is unknown, only one Hunk. Filelength after destruction: 5 Bytes. Known filenames: SInfo, 2852 Bytes. >Type-E Trojan-part is unknown, only one Hunk. Filelength after destruction: 38 Bytes. Known filenames: FutureTracker, 317608 Bytes. Virusworkshop V5.0, 135744 Bytes. >Type-F Trojan-part is unknown, no 4EB9. Filelength after destruction: 20 Bytes. Known filenames: acp, 71904 Bytes. >Type-G Trojan-part is two Hunks, 460 Bytes. Filelength after destruktion: 31 Bytes. Known filenames: CopKiller, 8428 Bytes. cALLERSLOG.SFX, 8428 Bytes. The two file have the same content! >Type-H Trojan-part is unknown, no 4EB9. Filelength after destruktion: 63 Bytes. Known filenames: LZX130_680000EC, 67680 Bytes. LZX130_680020, 64896 Bytes. LZX130_680040, 65385 Bytes. >Type-I Trojan-part is unknown, no 4EB9. Filelength after destruction: 75 Bytes. Known filenames: ProTracker 4.0ß, 336804 Bytes. LZX125_68000EC, 68492 Bytes. LZX125_68020, 65708 Bytes. LZX125_68040, 65456 Bytes. >Type-J Trojan-part is unknown, no 4EB9. Filelength after destruction: 71 Bytes. Known filenames: ACP-4.20, 62384 Bytes. EXPRESS_4.20 Bytes. >Type-K Trojan-part is two Hunks, 432 Bytes. Filelength after destruction: 41 Bytes. Known filenames: dmv05.exe, 36480 Bytes. TETRIS.EXE, 21244 Bytes. TETRIS2.EXE, 21244 Bytes The two TETRIS.EXE have the same content! >Type-L Trojan-part is unknown, no 4EB9. Filelength after destruction: 31 Bytes. Known filenames: TP5_Andromeda.exe, 40216 Bytes. TP5_Parallax.exe, 39980 Bytes. TP5_SilentsDK.exe, 39440 Bytes. TP5_Spaceballs.exe, 38060 Bytes. TP5_TRSI.exe, 37412 Bytes.* BlueSky2.exe, 37412 Bytes.* The two files marked *, have the same content! >Type-M Trojan-part is unknown, no 4EB9. Filelength after destruction: 31 Bytes. Known filenames: PHA_XMAS.EXE, 461384 Bytes. >Type-N Trojan-part is unknown, no 4EB9. Filelength after destruction: 75 Bytes. Known filenames: QBTools3, 227716 Bytes. ------------------------------------------------------------ Translated to English by Steen Jacobsen © 2001 VHT-Denmark Org. Test by Heiner Schneegold. ------------------------------------------------------------ [Go back]