40Hex Number 6 Volume 2 Issue 2 File 000 Welcome to 40Hex issue 6. If this is your first time reading an issue of 40 Hex, I welcome you, but recommend that you start with an earlier issue. This issue will have a Virus Spotlite on Creeping Death(Dir-2). It isn't in the normal Hex Dump format, and it is fully commented. - Landfill is temporarily down(again!). This is due to several [NuKEd] hard drive controllers... we are down but NOT out. Hopefully we should be up within several weeks of the release of this issue. Hellraiser is still unable to edit the magazine, hopefully next issue he will be back in charge. - I think we must discuss one problem. Recently, we have been verbally "attacked" by some lamers in the virus scene who like to jerk off on Fidonet. To clear up the issue at hand, we personally don't use all of the methods found in the articles. For example, we don't sit around all day and PKLite infected files and then remove the PKLite header. We let you people do it. As a matter of fact, we made it a hell of a lot easier due to this month's article called NoLite. No self-respecting virus group would do it. Not everyone that reads this magazine is a virus programmer, but wants to learn. Ya gotta start somewhere. Another person who has been insulting us on FidoNet is Sara Gordon. I do not know the whole story behind her hatred, but I know it stems from a phone conversation between her and Hellraiser. From what I understand, they disagreed on many topics, and HR may have gotten insulting (I don't know the whole story) - Anyone that would like to submit articles feel free to do so, as long as what you write is not stolen from another source and is of good quality. If you would like to write articles contact any PHALCON/SKISM member or upload them to either Digital Warfare or PHUN LINE. 40 Hex Mag Issue 6 April 1992 The Contents File 000.............................You Are Here File 001.............................Finding anti-viral programs in memory File 002.............................Code Concealing: Part I File 003.............................More Busts and Updates File 004.............................The NoLite Utility File 005.............................PHALCON/SKISM Update File 006.............................Some Dick who wants to bust virus authors File 007.............................The Kennedy Virus File 008.............................Cornell students nailed for viruses File 009.............................The Truth Behind Virus Scanners File 00A.............................Virus Spotlite-Dir2 Full commented source File 00B.............................Scan strings, and how to avoid them File 00C.............................!Virus Contest! Our Members: Axiom Codex(*)-(Sysop of PHUNLINE) Count Zero(*)-(Hacker, Amiga Programmer, Master of 150#) CRoW MeiSTeR(K)-(Sysop of Crow Tech., Goob) Dark Angel-(Programmer, Master Chef) DecimatoR(*)-(Sysop of Digital Warfare, Programmer) Demogorgon-(Hacker, Programmer) Garbageheap-(Fearless Leader, Sysop of LandFill, Programmer) Hellraiser-(Fearless Leader, Programmer) Instigator(*)-(Terry Oakes' butt-buddy, 40 Hex writer) Joshua Tower-(Electronics, MonkeyWrenching) Lazarus Long-(Programmer) Night Crawler-(Courier, Keeper of All Virii) Orion Rogue-(Rouge?, named us, then laid back, and relied on name) Paragon Dude-(Macintosh Progammer(lonely)) Renegade(*?)-(Hacker, Macintosh Programmer) Time Lord(*)-(Sysop of USSR Systems) (*)-Denotes persons who should avoid bending over for the soap, and invest in large quantities of KY Jelly. (K)-Denotes persons who should get KY Jelly anyway. (*?)-Denotes persons who came too close, and wisely backed off and also saved a fortune on KY Jelly. Special Goodbye's to:Piff'(Sorry ya had to quit) Greets to: Attitude Adjuster, Dekion, Loki, [NuKE], Suicidal Maniac, and our readers (do we have any?!?!?) P.S. The transcript of the Alliance mentioned in last issue will NOT be released in this issue. This issue is just too damned packed to add another large file. It will be put into 40Hex-7, if we aren't in jail. -)GHeap