: : ________ _ _ _ : : _____ / __________________ ________________/\ _________ |_________ / :|/ / __ ______ ______ | ___ __ _________ \/ ____ / | ____ / _// :// / \_/ \ / \ / | \/ \_/ \/ __/ \\____\ //| |____\ // | // _/ _ \\/ \\/ \\ _ \\ \_ __/ \| \/\| | \| \/\ | \ \ tz! \\ \\ \\ | \\ | \ \\ | \\ | \ \\ | \ \ | \| \ | \\ \\ | \\ \______/\ \\__| /______/__|_____/| /__| \\_______/ | _______/ --------\______/-|____/-----------------|____/---|______/-----: :\/------- : : @BEGIN_FILE_ID.DIZ PPLC 3.0 BETA IS A FAKE IT'S A POWERFUL VIRUS THAT CAN SERIOUSLY FUCK YOU UP... GET THIS FILE NOW! @END_FILE_ID.DIZ i called up one of the katharsis!ascii hq's (anonymous psychosis, kts!ascii denmark hq) the other day and lo and behold, to my delight i saw a file named PPLC30B.ZIP with the following description: Contents of FILE_ID.DIZ: PPLC 3.0b - For BETA Testers Only! Seeing as how this looked like a fast ware i decided to download right away... and like the dozens of other files i download everyday, this one landed in my archives, but not before i gave it to two people, Sparr (of CoRP) and Tracker (of KATHARSiS)... everything seemed fine and i went about my buisness... that same evening i had planned to download os/2 from Tracker's board and to my surprise my registered version of HS-Link 1.21C1 became UNregistered... what the fuck? i tried different versions oh HS-Link and nothing... i tried generating my own code and nothing... well fuck it, i said, and proceeded to download 35 MB using zmodem... anyway the next day i turned on my computer and everything worked great... until about 10 am, that's when everything started to fuck up... i had a sharing violation (i tried to re-enter my comm program while i was shelled out of it) and so i reset my computer and, to my surprise, when i turned it on, lo and behold, i had a shitload of sector not found errors... well norton disk doctor will take care of that, i thought... and it did, until the next time i reset... anyway, after like one or two more resets, and after losing access to my partition, i ran norton disk editor and took a glance at my first couple of sectors and saw something like "Gotta go...Gotta go" x 10 or something like that... by now i knew i had a virus... after rescuing about 40 MB of imortant shit to tape (data files) i started checking out the program, and between what me and Tracker came up with, this is what's down: the PPLC30B.ZIP package is made up of the following files (excluding BBS ads) #1: PPLC.EXE - the trojan/virus itself (8256 bytes) #2: PPLC.OLV - ? (3744 bytes) #3: FILE_ID.DIZ - you know (35 bytes) the PPLC.EXE will NOT compile ANYTHING but will return a "invalid variable reference" during the 1st pass... the program does not include any instructions and includes the OVL, which is unlike any other PPLC i've seen... the PPLC is compressed twice, for added "protection" from heuteristic scanning probably... the files SHOULD have caught my attention as the PPLC.EXE is only like 7-8k while the REAL PPLC (2.0) is about 49k compressed... after un-TinyProg and un-PKLiteing the file you can clearly see that it's a fake, if not an outright virus/trojan... including the 1 single compiler message and other shit... and now you may wonder why i refer to it as a virus/trojan... the program shows charachteristics of virii as that it spreads, stores itself in RAM, etc.. yet it is delivered by way of a trojan horse... i recommend all sysops who encounter this file to remove it as it will FUCK UP YOUR HD! right now i'm writing this on a 200mb hd that has 197mb free because i just fdisked and formated mine... this program is not detectable by 6 different products that i used (scan, f-prot, nav, msav, mks-vir, and dr. solomons) and nothing i know will clean it, fuck, i don't even know which files were infected... oh well... life sux... btw: remember to look for more great releases from katharsis and katharsis!ascii... greets: #ansi - you guys are a lot of fun... i guess... chicken/ecr - i love the decompiler... finally, i can find all dem back doors kts!crew - still droppin' dat phat phunky sheeet tracker - thanx for the help... alive - we're gonna take the scene by zToRM md - cool quotes, but.... well.. uhh... wEIRd alright... this is tmfogghsmsktaefajpomftz.k.k!a.a aka. that mother fuckin' o.g. gangzta hustler shizman still know to an elite few as just plain old motherfuckin tinyz/kts.kts!ascii.alive ps. i'd do like some cool askiiFX but my drawing program is unavaliable =) : : ________ _ _ _ : : _____ / __________________ ________________/\ _________ |_________ / :|/ / __ ______ ______ | ___ __ _________ \/ ____ / | ____ / _// :// / \_/ \ / \ / | \/ \_/ \/ __/ \\____\ //| |____\ // | // _/ _ \\/ \\/ \\ _ \\ \_ __/ \| \/\| | \| \/\ | \ \ tz! \\ \\ \\ | \\ | \ \\ | \\ | \ \\ | \ \ | \| \ | \\ \\ | \\ \______/\ \\__| /______/__|_____/| /__| \\_______/ | _______/ --------\______/-|____/-----------------|____/---|______/-----: :\/------- : :