Copy Link
Add to Bookmark
Report
NuKE Issue 01-031
ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ> Noxious Trojan v4.0 :
Created by: Mechanix
Released : September 1991
Description:
This is you're basic FAT Trojan. Does drives C:, D:, E:, A:, B: in order
and will not bug on write-protection and missing drives. Recovery is almost
impossible.
The following 3 trojans are the first in my line of Parasite Trojans. I
call them this because, they are not really deadly (although some are) but
they are the most fun because if you want to recover from these, they are a
real pain.
ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ> Kreator Trojan v3.0 and v4.0 :
Created by: Mechanix
Released : September 1991
Description:
The Kreator Trojans will create directories on drives C: to E:. These
drives are named with random ASCII characters (Alt-130 to Alt-254). Also,
within each created directory will be a Hidden and Read Only file. These
trojans are slow but Ctrl-Break has been disabled, and rebooting during
execution might leave lost chains and/or invalid directory structure. These
also check for write-protected disks as to not result in a runtime error. The
only difference between the two versions is that v3.0 will create 20
directories each containing 10 directories, where as v4.0 will create 255
directories with no sub-directories. v4.0 is also much faster.
ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ> Scanner Trojan v1.0 and v2.0 :
Created by: Mechanix
Released : October 1991
Description:
These trojans scans all directories and sub-directories on drives C: to
E:. They also check for write-protection before starting. Then they proceed to
rewrite all files, no matter what the attribute, then they delete the files.
This makes undeletion much harder. This will affect all files, even Hidden and
Read-Only. The only difference between the two versions is that v2.0 is
disguised as a Anti-Virus utility. v1.0 disable's Ctrl-Break before running,
but v2.0 has to keep it because of the screen access.
ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ> Infector Trojan v1.0 :
Created by: Mechanix
Released : October 1991
Description:
Using the same process as the Scanner Trojan, the Infector Trojan only
scans for .COM, .EXE and .SYS files, and truncates the file in half,
making it unusable and unrecoverable.
ÄÄ> You can get all of the preceding trojans and all other NUKE WaReZ, in it's
original form, on any [NuKE] site. See the appropriate article for more
information.
Mechanix [NuKE]