In this section you will find the VX/AV scene news of all year sorted by month, and at the bottom of the site a link to the news of past years.
March ´00:
VX:
-
AV:
-
OTHER:
- New VS2000´s package released: StripLog 7.1 is out and VS2000 8.3 reissused fixing a minor bug in -D command.
February ´00:
VX:
- Question:
How many days will pass until someone steal LordDark´s link from my link section?
- Secret a.k.a. Stratomonium left the scene. I will miss you, man!!!
- The collaboration between Black Cat and me developing VS2000 has been stoped. Maybe next time...
- Black Cat and me are going to collaborate together making an improved version of VS2000.
Black Cat can be reached at:
HTTP://JUMP.TO/BCVES
BCAT_H@YAHOO.COM
- Another bad notice for vx scene:
From: Webmaster <webmaster@sok4ever.zone.ne.jp>
To: sok4ever members
Subject: Important Information
Hello.
This is very "Important Information". New law are to be settled Feb 13 in Japan. This's fatal one for all Hacker/VXers. For this law all sites which contain H/C/V may be illigal in Japan. Coz SOK4EVER is obliged to close temporary. ;)
Sadly i cant do anything facing with Big Brother...;))
I'll delete all contents in SOK4EVER tomorrow. Don't worry, i back up all contents in SOK4EVER. Someday may recover the SOK4EVER.
"SOK4EVER is temporary dead but VX sowl never die"
Regards for all dear Clients
============================================================================
BEAMZ
Get knowledge and have a real freedom!
webmaster@sok4ever.zone.ne.jp
http://sok4ever.zone.ne.jp
-
2 months ago or so, someone released fake viruses taking advantage of a "bug" in F-Prot´s engine. The fooler added a Windows header to DOS viruses. That way, a virus named "Goma.754", as example, became "Win/Goma.754", being new for all virus collectors.
Lately, i have seen some viruses using a similar trick in the logs of other virus collector. This time the trick consists in take a macro virus for WM/XM, and save it in W97M/X97M or viceversa. Here you can see some examples:
X:\XXXXXXXX\XXXXXX\97-LS.XLS Infection: X97M/Laroux.LS
X:\XXXXXXXX\XXXXXX\97-LT.XLS Infection: X97M/Laroux.LT
X:\XXXXXXXX\XXXXXX\97-LU.XLS Infection: X97M/Laroux.LU
X:\XXXXXXXX\XXXXXX\97-LV.XLS Infection: X97M/Laroux.LV
X:\XXXXXXXX\XXXXXX\95-KQ.XLS Infection: XM/Laroux.KQ
X:\XXXXXXXX\XXXXXX\95-KZ.XLS Infection: XM/Laroux.KZ
X:\XXXXXXXX\XXXXXX\95-LA.XLS Infection: XM/Laroux.LA
X:\XXXXXXXX\XXXXXX\95-LK.XLS Infection: XM/Laroux.LK
If you make F-Prot´s list of detected viruses (F-PROT /VIRLIST >F-PROT.LST) you will see that those viruses doesn´t exist.
- MrSandman has released a new worm named "Haiku". More info in:
http://www.virusexchange.org/viruscafe/myviruses_window.html#I-Worm.Haiku
- 8th february: Happy Birthday Raid!!!
- 7th february: Happy Birthday Lord Julus!!!
- 3th february: Happy Birthday Vein!!!
- Some months ago i joked saying Guillermito´s site was the most outdated of all vx sites.
Well, to be honest i should say you can find some sites that were updated last time in 1997 or even in 1996 as Computer Virus Research Lab. (20th of March 1996)
Other sites are not so outdated by they start to smell to dead already. An example would be Anaktas´ site.
I know that mantain a site is hard, but here is my tip: it´s better if you update your site 1 time per month, that if you update all days a month and then you stop updating it.
AV:
- Virus Trading Center reveals a question that many people have been making for a while...
Question:
Why does NOMACRO.DEF change?
Answer from Peter Ferrie:
Because it contains also the false positive records (so we don't false alarm on documents even though we aren't scanning for viruses), and the false positive records are updated sometimes.
- Some time ago, GriYo released a virus and AV companies were not able to make detection routine for months, 8 to be exact. This time a similar case is happening. Prizzy released a virus named Crypto and AV companies have problems to detect it. Powerful AV companies like F-Prot or AVP didn´t add a detection routine for Crypto virus yet, even when they have samples since some months ago.
OTHER:
-
January ´00:
VX:
- Spyda said on 28th january: i'm gonna be leaving tomorrow for at least 4 months, probably 8.
- No more logs in my site.
- CeBIT2000 Expo, from February 24th to March 1st, will be held in Hannover, Germany.
- Virus Brasil #5 released.
- 17th january: Happy Birthday ShadSeek!!!
- 12th january: Happy Birthday Kamaileon and BinaryBob!!!
- Matrix group added 2 new members: Del_Armg0 and Trg-.
- GriYo is also a DJ, and he is going to broadcast techno in direct this saturday!!! (8th january)
Reach Low-Level, the new dimension at: http://lowlevel.cjb.net/
- Virus Trading Center is another year again the best reference site for virus links, virus news and for trading sites.
The style and contents of Virus Trading Center is the most copied of all virus sites ever. I really enjoy you like it. Many thanks.
- Foxz didn´t want to resign and let his group gets disbanded... he is back to the scene. :-)
- Final Chaos #1 released. (located last time: http://abuse.ultimatechaos.org/ucfc.zip)
- VDAT 2000 released.
- The Lich is still alive and coding; his last virus is W95.Esmeralda.
AV:
- I´m not the only one having problems with AVPDOS32. If your AVP hangs just:
1) Close AVP window.
2) Open a new DOS window.
3) Type: TIME 10:00am
4) Try to scan with AVP again.
It should work.
OTHER:
-
You can find the news for past years here: