🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: fj.sys.mac
Article #1940

New Virus: Trojan horse in ChinaTalk

#1940
From: Seiji Kaneko
Date: Thu, 09 Jul 1992 15:57
69 lines
3724 bytes
$@$+$M$3!w$R$?$A$G$9!#(J

$@%&%#%k%9>pJs$O@Q6KE*$KN.$7$FM_$7$$!"$H$$$&0U8+$,=P$F$$$^$7$?$7(J
$@C/$bN.$5$J$$$h(J$@$&$J$N$G!"0J2<$N5-;v$rE>:\$7$^$9!#(Jfj.sys.mac $@$N(J
$@$_$G$OIT==J,$H$N@<$b=P$F$$$^$7$?$+$i!"7W;;%;%s%?4IM}<T(J$@8~$1$H(J
$@8@$&$3$H$G(J fj.news.adm $@$K%/%m%9$7$F$_$^$9!#(J

$@@lMQ$N#N#G$,M_$7$$!##C#F#D$7$F$_$^$7$g$&$+!#(J

$@!t(J $@:#G/$O(J Virus $@$NEv$?$jG/$G$9$J!"$3$l$O(J (;^_^)

Seiji Kaneko  kaneko@icsi.Berkeley.EDU,kaneko@sdl.hitachi.co.jp
-- Hurrah for Kintetsu Buffeloes ---- 76270.2466@compuserve.com

---- cut here ---- cut here ---- cut here ---- cut here ------
From: werner@rascal.ics.utexas.edu (Werner Uhrig)
Newsgroups: comp.sys.mac.announce
Subject: ChinaTalk - *DESTRUCTIVE* Mac Trojan Alert!!
Message-ID: <CMM.0.90.2.710419073.werner@rascal.ics.utexas.edu>
Date: 6 Jul 92 10:38:24 GMT
Sender: daemon@cs.utexas.edu (The devil himself)
Reply-To: werner@rascal.ics.utexas.edu (Werner Uhrig)
Followup-To: poster
Organization: UTexas Mail-to-News Gateway
Lines: 36
Approved: werner@rascal.ics.utexas.edu (Comp.sys.mac.announce Moderator)
NNTP-Posting-Host: cs.utexas.edu


	+ the following was posted on CompuServe and forwarded to me.
	+			---Werner (CSMA moderator)

		REWARD OFFERED FOR INFORMATION LEADING
	   TO ARREST AND CONVICTION OF TROJAN HORSE AUTHOR

The MAUG Staff discovered an upload called CHINAT.CPT which, when we
routinely examined the file, revealed itself to be a Trojan Horse program.
The program, "Chinatalk," purports to be a female-voice for Macintalk. But
when run it will overwrite the directory of any hard disk it finds online.
(The same as choosing ERASE from the Finder menubar).

The file was never made public here, on ZMAC or on any CompuServe Forum.

All sysops of private BBS services should be on the lookout for this file.

If anyone has information on the perpetrator of this Trojan Horse program
please contact me -- Neil Shapiro -- via either EMAIL or voice phone at
516-735-6924.

On behalf of MAUG, I am personally posting a $500.00 reward for information
which leads to the arrest and conviction of this criminal. (Should more then
one person supply identical information the reward will be to the first
giving the information; if two or more people give information which is both
non-identical and necessary to catching the criminal the reward will be
equally split between the parties.) Let's catch this pond scum and let's do
it quickly!

Again: The file was NEVER made public here, on ZMAC, or on any other
CompuServe Forum. Thanks, -- Neil Shapiro (Chief Sysop, MAUG)


  werner@cs.utexas.edu |  ..!uunet!cs.utexas.edu!werner | werner@UTXVM.bitnet

	"When it all gets to you, remember: it's only ones and zeros."

---- cut here ---- cut here ---- cut here ---- cut here ------
--
Seiji Kaneko  kaneko@icsi.Berkeley.EDU,kaneko@sdl.hitachi.co.jp
-- Hurrah for Kintetsu Buffeloes ---- 76270.2466@compuserve.com
Technical Details
Message-ID: <KANEKO.92Jul9155737@axiom.icsi.Berkeley>
Path: arc1-ca.pugleaf.net!sparky!uunet!stanford.edu!agate!agate!kaneko

Show Full Headers
Complete Article Headers
X-Google-Language: Japanese,JIS
X-Google-Thread: 10cc01,4b2d7ef31409ead0,start
X-Google-Attributes: gid10cc01,public
X-Google-Thread: 10100d,4b2d7ef31409ead0,start
X-Google-Attributes: gid10100d,public
X-Google-Thread: f514d,4b2d7ef31409ead0,start
X-Google-Attributes: gidf514d,public
X-Google-ArrivalTime: 1992-07-09 09:23:08 PST
Path: arc1-ca.pugleaf.net!sparky!uunet!stanford.edu!agate!agate!kaneko
From: kaneko@icsi.Berkeley.EDU (Seiji Kaneko)
Newsgroups: fj.sys.mac,fj.news.adm,fj.misc
Subject: New Virus: Trojan horse in ChinaTalk
Date: 9 Jul 92 15:57:37
Organization: International Computer Science Institute
Lines: 69
Distribution: fj
Message-ID: <KANEKO.92Jul9155737@axiom.icsi.Berkeley>
NNTP-Posting-Host: axiom.icsi.berkeley.edu