In this section you will find the VX/AV scene news of 1999 year sorted by month.
December ´99:
VX:
- 29th december: Happy Birthday Cyber Shadow!!!
- Tip: AVP logs will be smaller if you use /H parameter.
- Asterix zine #2 released!!! (located last time: http://virus.cyberspace.sk/dl/asterix2.zip)
- Virus Café, MrSandman´s site already opened.
- DVL #9 released. (located last time: http://members.xoom.com/dukesmf/DVL9.ZIP)
DVL #10 will be a private release only for members.
- Infect Voice #15 released. It´s in printed format and for sale. (Ask Lovingod for more information)
- Mr Sandman wrote:
Bets are open for DataFellas' Y2K compliancy after their apocalyptic 12/16/99 (yes, 99) update... muahahha. Something weird has happened, i don't know (so far) whether someone put LSD in their xmas cakes or maybe their systems got infected once again... hahahah. I'm talking about 50 new entries which include false alerts and 90% of old DOS viruses (Ping-Pong, Pixel, VCL...), specimens not analysed and descriptions such as "A series of stupid, badly written, non-interesting, boring overwriting viruses from Sweden. The authors don't even seen (<- HOHOHO, look who's teaching english) to know how to spell the name of the virus correctly". Worth having a look/laugh.
- Misdirected Youth, releasers of Social Distortion zine, and Stealth Group, liderated by Lovingod, are going to meet to fight between them.
It´s known that Z0MBiE and Lovingod already met in a park this summer to fight.
And i ask myself... Why don´t they join their forces to go to kick some DrWeb´s asses as example?
That would be more interesting... :-))))
- <LysKovick> I'm about to go on a vacation and won't be back until sometime after january 9.
- 09th december: Happy Birthday Darkman!!!
AV:
- AVP plans to change the format of virii databases around summer of 2000.
- Some "well informed" AVers likeVince Gullotto, director of NAI anti-virus research team, should notice that Vecna is not a 29A member anymore.
- New bug reported by me in AVPDOS32: Depending of the hour you scan with AVPDOS32, it will hang while it scans inside packed files.
OTHER:
- VS2000 7.3 released!!! A lot of new features and new options added.
November ´99:
VX:
-
- We could say NOP is disbanded.
- A new group named [MaTRiX] is around. Members: mort, Ultras and NBK.
- If nothing changes, Nomercy Virus Team is disbanded.
- Foxz leaves the vx scene: Cya and good luck in life!
- 09th november: Happy Birthday Slage Hammer!!!
- Social Distortion #1 was released back in october.
- Someone doesn´t have Uruguay #10 on his wanted list anymore. Maybe he met Elvis and he gave him the virus.
- Someone claims a group of VX people have Uruguay #10.
And many people claim Elvis is still alive... and maybe he has Uruguay #10 too... who knows...
AV:
- I reported a new bug in F-Prot: F-Prot is detecting on my logs as "(exact)" some virii inside OBJ files, but when i make a scan of those files alone, they are detected as ".unknown?".
- DataFellows, F-Secure distributor infected with a virus. More info here.
- Someone offers 50 virii in exchange for Uruguay #10. Hey, AVers... don´t let the chance goes away!!!
- F-Prot 3.06a released.
OTHER:
- VS2000 7.0 and StripLog 6.8 released.
October ´99:
VX:
- 30th october: Happy Birthday Super!!!
- 26th october: Happy Birthday Billy Belcebú!!!
- Virus Brasil #4 released. (located last time: http://www.fortunecity.com/campus/medicine/120/virbr04_rtf.zip)
- Ratios changed.
- No more test log files on the site. Since now, they are trading logs. They have the stuff i can trade only.
- Moonbug #11 was released. (located last time: http://members.tripod.com/MooNBuG/)
- Del_Armg0 says goodbye:
"So, I leave VX & Hackin' Scene, i don't know if it's permanent ot not, and i don't want to know ... I leave for lot'sss reasons, lot's personnal problems, & i haven't time anymore for Del_Armg0 ... VX People disappointment me too much, lot's good coders, but lot's "bloody hell" too ... I guess (i hope?) Del_ is not dead, but only sleeping ... We Will See ! Bye."
- In my try to fix things i´ld like to say:
+ I try to fix and solve problems, not make more.
+ "NOSEND" virii are not mine to send because they were given to me under the agreement that i never send them. I´ld like to ask respect because i intend to keep my word.
- 11th october: Happy Birthday, Lys Kovick!!!
- Zordhak Virii Team is no longer valid... now they are called IVCG (Internet Virii Collecting Group).
- RVR #1 was released.
- 04th october: Happy Birthday CyberYoda!!!
- If you need to change something in your profile at Undernet´s #virus channel, you only have to catch me online and tell me what you want.
- ISP problems fixed. My e-mail account is again darknode@oninet.es.
AV:
- 22nd October, 1999: 10th anniversary of AVP! Happy Birthday to your son, Eugene!!!! :)))
- AVP build 132 released on russian site.
- F-Prot 3.06 released.
OTHER:
- VS2000´s package updated AGAIN. StripLog 6.5 updated and VS2000 6.7 released.
- I decided to choose Guillermito´s site as "Worst Updated VX Site" of the year. (I was bored, only a joke... :)
September ´99:
VX:
- "The most wanted" section has been removed.
- IKX released Xine #4!!!
- Ren - Zine #3 (italian version) was released.
- Duke is preparing RVR #1. (Russian Viral Review)
- 09th september: Happy Birthday nfission!!!
- X-Vex2000 group disbaned after the quit of Duke first and HomeSlice later.
AV:
- In AVP, changing the place of AVC files at AVP.SET you get different logs. If you place UP*.AVC before main AVC file, you will get some virii detected that in other case you would not get.
- Slage Hammer and me discovered that l- is working for US gov. He works spying #vir and #virus activies and researching for new virii technologies.
- AVPDOS32 got problems with some packed files in 0.48 version.
OTHER:
- VS2000 package updated again. Now it includes VS2000 6.4 and StripLog 6.4. Also it includes the new version of Bulk by Jim Fougeron.
August ´99:
VX:
- The 28th, doxtor L, LethalMind, Mist and Thermopyle did a meet in Paris.
- VX-tasy #1 released.
- DVL #8 released.
- VX meeting in Amsterdam.
AV:
-
OTHER:
-
July ´99:
VX:
- Since now, VS2000 and StripLog will be updated without notice it. You will find the latest versions at "Utilities to sort your virii collection" section.
- Vecna, one of the best virii coders the vx scene ever had says goodbye too. But he promised he would try to return someday. For my friend, one of the best guys i ever met, my best regards... Take care and be back soon!
- Virtual Daemon, leader of SLAM Virus Team said the group was dead for him.
- VS2000 5.0 and StripLog 5.3 released.
- VS2000 4.6 (final version) and StripLog 5.2 released.
- VS2000 4.6EV released. Since now, VS2000 and StripLog are released together.
- VS2000 4.5 released.
- Virus Brasil #3 was released.
- Virus Trading Center is not a group anymore. Since now VTC will be only the name of a site.
- DVL #7 was released.
- VS2000 4.4 and StripLog 5.1 released.
- The GREAT Jacky Qwerty leaves 29A and says goodbye to the vx scene. We´ll miss you so much, friend.
- Since now, "/W+" is a must for all good virii collectors. "/W" is the option in AVP to create a log file of the scanned virii.
- AVLIST doesn´t work with Dr. Solomon 7.96.
- DIE #1 released.
- VS2000 4.3 and StripLong 5.0 released.
- VDAT 1.9 was released.
AV:
- A new bug discovered for AVP. Several virii are detected different depending if you scan them under Win9x or WinNT. "Madcow.886" (on Win9x) vs. "Intended.Madcow.866" (on NT) as example. The same for "Chelle" virus.
- Another bug for F-Prot 3.05b found by me. "Marburg.8582" and "Marburg.8590.A" are detected as "destroyed by" when they should be reported as "Infection:".
- Rod Fewster, AVP distributor for Australia, is a fucking lier. He said Win32.HLLC.Nan had been reported on Australia. Well, the reality is that only F-Prot, AVP and me, besides the coder, have the virus.
- F-Prot releases a new SIGN.DEF on 12th in order to detect BO 2000.
- Rare bug for F-Prot 3.05b, discovered by Furkon and me: "Crucifix.2916.A" and "Crucifix.2914" need to have an extension different to .COM in order to be detected with "Infection:". If you have them with .COM extension, you will get "destroyed by".
- Fprot 3.05b released.
- Redundant scan (/v) was finally removed from AVPLITE. They had 2 options, remove or fix it. Easy way rules. ;)
- Don´t update AVP with cumulative update. You must to get AVP 3.0 build 131. If you update your old AVP with the cumulative you will get bugs on the scan. (And later someone could blame you saying you try to cheat him ;)
- AVP 3.0 build 131 was released.
OTHER:
- Bulk added.
- Hiew 6.15 added.
- S-Ice 4.0 complete suite added.
June ´99:
VX:
- Trey.Jayson@til.vg -> Intelserv´s email account. Please, mail this asshole there...
- StripLog 4.01. It has several bugs fixed, and now it supports VirusScan and Dr. Web -> F-Prot conversion.
- Virogen said: "I am out of the vx stuff".
- 22th june: Happy Birthday Evul!!!
- I decreased the number of new viruses in order to join VTC from 1,000 to 500.
- StripLog 4.0 released. You have to check it!!! Now it has the option to store the viruses in directories naming them as the antivirus detects them.
- Intelserv is impersonating people, but now he is doing it better than before. He is using the same server of the impersonated people using the trick of use a guy in the same ISP with port 1080 opened. So... TAKE A LOT OF CARE!!!
- CodeBreakers #5 released.
- Poly Engine contest result: The only one competitor won the constest... Bumblebee. Congratulations!
- 16th June: Happy Birthday Renegade!!!
- VS2000 4.2 released. I promise documentation for 4.3.
- Striplog 3.1 released.
- codebreakers.org is back!!!
- VS2000 4.1 and StripLog 3.0 released!!! Together fix the problem of packed files (ZIP/ARJ) on F-Prot.
- <-------------------------//LineZerØ Network 99\\------------------------->
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
-Contest: Smallest macro virus ever!-
>---------------------------------------------------------------------<
Hi macro coders out there! What you see here are the rules for our first contest. The task is to create the smallest macro virus ever. The following rules are:
~~+ Fixed day is 31th July 1999
~~+ You can code alone or in team
~~+ Platform can be Word, Excel or cross
~~+ You can use modul or class objects
~~+ The macro must have the following features:
-Small ;)
-SR-1 compatible
-installation check
-small payload
-Basic stuff like turn off 'VirusProtection'
If you join this contest, please mail the virus and the .bas file to the following email address:
slagehammer@usa.net or jack.twoflower@disinfo.net
The winner is who codes the smallest macro virus with the set rules.
How codes the shortest code in length of lines wins. There will be the categories 'Smallest Word Module Virus', 'Smallest Word Class Virus', 'Smallest Excel Module Virus', 'Smallest Excel Class Virus', 'Smallest Cross Module Virus' and 'Smallest Cross Class Virus'.
The source code will be published in our next e.zine and an article about this contest will be written.
>---------------------------------------------------------------------<
Good Luck,
Slage Hammer & Jack Twoflower
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
<-------------------------\\LineZerØ Network 99//------------------------->
- 4th June: Happy birthday GriYo!!!!!!!!!!
- Alert!!! A lamer with nick VGrep, also named Intelserv, is impersonating vxers at Undernet to get new viruses from people.
He has been impersonating ShadSeek lately, and he used to impersonate CyberYoda, GriYo or Vecna to get stuff.
He usually asks for the same viruses: Uwaga, WinNT.Tenta, Win95.Voodoo and Uruguay #9 and #10. He asks too for the last stuff you got. He could ask you for the \NOSEND\ stuff.
Be sure you are talking with the right guy to don´t be fooled by that fucking bitch.
Here you have the usual masks for VTC members:
ShadSeek: *!*shadseek@*.mediaone.net
Tally: *!*VirCollect@*.ponyexpress.net
Slage Hammer: *!*SlageHamme@*.enter.it
VirusBuster: *!*darknode@*.oninet.es
Cicatrix: never connects to IRC.
- Bumblebee left UC group.
- VS2000 4.0 released. Now it supports F-Macrow log files and
processes up to 3 log files at time.
AV:
- Dr. Solomon 7.96 was released.
- Mad-man is now AVP´s supporter.
OTHER:
-
May ´99:
VX:
- I registered #vx-vtc channel at Undernet!!!
- DDT #1 released.
- VS2000 3.5 released. Now you can add viruses and generate NEWXXX.LOG. It has several fixes more and runs better.
- 19th May: Today is my birthday. I´m 25 years old... :)
- I created this site 1 year ago. I got almost 40,000 visitors in this time.
- VS2000 3.1 was released.
- Pinoy Virus Writers´s #5 was released.
- I had a HD crash, so i´ve been a bit disconnected this last week.
- MoonBug #10 was released.
AV:
- Norman Data Defense Systems, Inc. announced the completed merger of two award-winning, virus protection products. ThunderBYTE AntiVirus purchased by Norman in February 1998 and distributed in North America by NovaStor corporation, has merged with Norman Virus Control (NVC), developed by Norman Data Defense Systems, Inc.
- Bug found in F-PROT 3.05: Just after F-PROT 3.05 was released, a problem was found in the F-STOPW program, which could occasionally make it crash. This problem has now been fixed and we recommend that anyone who downloaded the original fp-305.zip file downloads the affected file ftp://ftp.complex.is/pub/f-stopw.vxd.
- F-Prot 3.05 was released. (On 19th, may... maybe it was a present for my birthday ;)
OTHER:
- Hiew 6.04 added.
April ´99:
VX:
- DVL #6 was released.
- Billy Belcebú leaves DDT.
- 26th April: Happy CIH´s day!!!
- The final date to send your creations for Poly Engine contest is now 10th june.
- Codebreakers is back!!!
- Meanwhile Source of Kaos is not back, a lot of links will not work.
- Opic is back again. He decided don´t retire from vx scene.
- VS2000 3.0 is out!!!
- Someone named David Smith has been arrested acused as Melissa virus coder. (Who is him???)
- Melissa has originated a revolution in the vx scene:
At this moment FBI is investigating a lot of people trying to know who is related with the coding of Melissa macro virus. (Anyway the real deal is try to know who was related with the spreading of the virus)
VicodinES has been the more investigated virii coder because the GUID code at Melissa virus was the same than the GUID code that appear in other viruses written by VicodinES in the past. (Anyway VicodineES was retired of vx scene, so, it´s not probably he wrote it. Maybe someone ripped his code in order to make Melissa virus)
All sites related to Melissa virus have been taken down, as Source of Kaos, managed by jtr, or CodeBreakers´s site, managed by Raid. Why? Because FBI has asked for the computers in order to copy and then analyze the contents of HDs.
But what are the reactions at vx scene?
A lot of people is afraid that FBI investigate them, even when they are not related with Melissa virus. Even people that is not at USA is afraid of this situation.
Some people as Opic has decided to retire of vx scene (more info at http://members.tripod.com/~opiccb/index.htm).
Some people has deleted his vx site. (What was up with Intergang site?)
What´s the next?
I really don´t know, but probably Melissa virus will give more to talk about...
AV:
- F/WIN32 1.80 and F/WIN 4.42 were released.
March ´99:
VX:
- VDAT 1.80 was released.
- My email works again!!!!!
- Z0MBiE left 29A. (I hope you get all you expect from vx scene :)
- Technological Illusions #1 was released.
- DVL #5 was released.
- Int13h, member of IKX, left the scene. A few time for coding and new laws about viruses were the reasons of the quit. We will miss you, Inty!!! (Y aúpa el Barcelona ;)
- *-zine #2 should be released about june, and Xine #4 in a few weeks.
- Vecna has left 29A. (My best wishes for you Vecna. I hope all you want from life you get it)
- My e-mail is not working. So, be patient until my ISP fixes the problems. They are migrating from Unix to NT.
AV:
- Eugene Kaspersky is at holiday too. He is skiing somwhere... :-) (Good holidays, Eugene!)
- "The person responsible for updateing complex.is is on a short vacation, but he will be back soon" said Einar Indridason, Ftp admin at Complex.is.
February ´99:
VX:
- We already got WinNT.Remote Explorer.
- Virus Trading Center site reached over 25,000 visitors in only 9 months!!!
- Mad Daemon's Viruz pAge was shut down.
- The first Windows 9x/NT virus construction kit is going to be released soon.
- VS2000 2.8 is out!!!
- The password for the SG´s virii collection is "vXc011ofSG".
- I´m going to discontinue the making of AVPLITE log file since it doesn´t work fine. (It doesn´t scan inside TD0 or packed files)
- Moonbug #9 was already released.
- I will not make more Dr. Solly log files. Maybe i´ll continue with them in the future, but don´t think so.
AV:
- New FWIN and FWIN/32 were released.
- F-Prot needs /PACKED command to be able to detect "WildLicker.2280" virus.
- After make some tests i reach to one conclusion: AVPLITE and AVPDOS32 don´t scan the same stuff. Meanwhile one of them detect a virus on a file, other doesn´t detect nothing or viceversa. It happens on ± 40 viruses of my collection.
January ´99:
VX:
- Metaphase #2 is going to be released soon. Knowdeth is looking for contributions. If you have some stuff you´ld like to offer email him.
- I put new VS2000 version. (2.666.4)
- The long awaited 29A #3 was released and 29A´s site is up at Source of Kaos. (www.sourceofkaos.com/homes/29a)
- VDAT 1.70 was released.
- I added some new statements at the trading section.
AV:
- F-Prot 3.04 was released.