[comp.virus] VirusX Trojan

consp11@bingvaxu.cc.binghamton.edu (Brett L. Kessler) (03/21/90)

A friend of mine here at SUNY-Binghamton just informed me of a message
that was posted to CompuServe recently.  I've no idea as to how valid
it is, but it's better to be safe than sorry, even VIA 3rd-hand news.

It seems that somebody has released something called "VirusX 4.4" into
the public domain.  THIS IS A BOGUS PROGRAM, and may be a trojan.
According to Steve Tibbett (sp?), the author of VirusX, the most
recent version of the disinfectant is 4.0.

Just thought you might like to know.

+------///-+------------------| BRETT KESSLER |------------------+-\\\------+
|     ///  |         consp11@bingvaxu.cc.binghamton.edu          |  \\\     |
| \\\///   |              consp11@bingvaxa.BITNET                |   \\\/// |
|  \XX/    |              (PeopleLink)  B.KESSLER                |    \XX/  |
+----------+-----------------------------------------------------+----------+

consp11@bingvaxu.cc.binghamton.edu (Brett L. Kessler) (03/21/90)

With regards to my earlier posting about the bogus version of VirusX
(version 4.4), here is the original text.  It originally appeared in
comp.sys.amiga and comp.sys.amiga.tech.  I thought that my posting was
a little sketchy, so here's a (slightly) better one.

- -----8X-----8X-----8X-----8X-----8X-----8X-----8X-----8X-----8X-----8X-----
There is a file going around now that supposedly has a new version of
VIRUSX.   The archive says the file has version VIRUSX 4.4 and that it was
released on March 10th.

I've done some analysis on the files in the archive, and the archive
appears to have the same executables as VirusX 4.0.  The doc files and
the C code in the archive talk about two viruses that are supposedly
"harmless".  It appears the messages were put there to lull people into
a false sense of security.

I've contacted Steve Tibbett he has confirmed that this archive was NOT
released by him.  He's working on a new version of VIRUSX, but this is
NOT IT.

WATCH OUT FOR THIS BAD ARCHIVE, AND LET PEOPLE KNOW ABOUT IT!

Official VIRUSX releases are posted to ALL the national networks by Steve
Tibbett, or by an official agent.
- ------------------
SR Pietrowicz    UUCP:  ...!uunet!modcomp!srp        CIS:  73047,2313
			73047.2313@compuserve.com
- -----8X-----8X-----8X-----8X-----8X-----8X-----8X-----8X-----8X-----8X-----

No more "hard info," but at least it's a confirmation that the darned
thing exists, and that it is probably trouble.

+------///-+------------------| BRETT KESSLER |------------------+-\\\------+
|     ///  |         consp11@bingvaxu.cc.binghamton.edu          |  \\\     |
| \\\///   |              consp11@bingvaxa.BITNET                |   \\\/// |
|  \XX/    |              (PeopleLink)  B.KESSLER                |    \XX/  |
+----------+-----------------------------------------------------+----------+