home *** CD-ROM | disk | FTP | other *** search
| Unknown | 1996-02-16 | 2.5 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 4b 0e 53 41 4d aa 20 | 49 6e 74 65 72 63 65 70 |.K.SAM. |Intercep|
|00000010| 74 05 41 6c 6c 6f 77 04 | 44 65 6e 79 08 52 65 6d |t.Allow.|Deny.Rem|
|00000020| 65 6d 62 65 72 07 50 72 | 6f 63 65 65 64 07 52 75 |ember.Pr|oceed.Ru|
|00000030| 6e 20 53 41 4d 04 53 74 | 6f 70 06 49 67 6e 6f 72 |n SAM.St|op.Ignor|
|00000040| 65 07 54 75 72 6e 20 4f | 6e 3d 53 41 4d 20 64 65 |e.Turn O|n=SAM de|
|00000050| 74 65 63 74 65 64 20 61 | 6e 20 61 74 74 65 6d 70 |tected a|n attemp|
|00000060| 74 20 74 6f 20 61 64 64 | 20 61 20 76 69 72 61 6c |t to add| a viral|
|00000070| 20 72 65 73 6f 75 72 63 | 65 20 6f 66 20 74 79 70 | resourc|e of typ|
|00000080| 65 20 27 5e 31 27 21 2c | 41 20 73 75 73 70 69 63 |e '^1'!,|A suspic|
|00000090| 69 6f 75 73 20 63 68 61 | 6e 67 65 20 69 73 20 62 |ious cha|nge is b|
|000000a0| 65 69 6e 67 20 61 74 74 | 65 6d 70 74 65 64 2e 20 |eing att|empted. |
|000000b0| 28 5e 31 29 2e 41 20 73 | 75 73 70 69 63 69 6f 75 |(^1).A s|uspiciou|
|000000c0| 73 20 61 64 64 69 74 69 | 6f 6e 20 69 73 20 62 65 |s additi|on is be|
|000000d0| 69 6e 67 20 61 74 74 65 | 6d 70 74 65 64 2e 20 28 |ing atte|mpted. (|
|000000e0| 5e 31 29 35 53 41 4d 20 | 64 65 74 65 63 74 65 64 |^1)5SAM |detected|
|000000f0| 20 61 6e 20 61 74 74 65 | 6d 70 74 20 74 6f 20 63 | an atte|mpt to c|
|00000100| 72 65 61 74 65 20 61 20 | 73 74 61 72 74 75 70 20 |reate a |startup |
|00000110| 64 6f 63 75 6d 65 6e 74 | 2e 30 53 41 4d 20 64 65 |document|.0SAM de|
|00000120| 74 65 63 74 65 64 20 61 | 6e 20 61 74 74 65 6d 70 |tected a|n attemp|
|00000130| 74 20 74 6f 20 62 79 70 | 61 73 73 20 53 41 4d 20 |t to byp|ass SAM |
|00000140| 49 6e 74 65 72 63 65 70 | 74 2e 30 53 41 4d 20 64 |Intercep|t.0SAM d|
|00000150| 65 74 65 63 74 65 64 20 | 61 6e 20 61 74 74 65 6d |etected |an attem|
|00000160| 70 74 20 74 6f 20 6d 6f | 64 69 66 79 20 53 41 4d |pt to mo|dify SAM|
|00000170| 20 49 6e 74 65 72 63 65 | 70 74 2e 2b 53 41 4d 20 | Interce|pt.+SAM |
|00000180| 64 65 74 65 63 74 65 64 | 20 61 6e 20 61 74 74 65 |detected| an atte|
|00000190| 6d 70 74 20 74 6f 20 66 | 6f 72 6d 61 74 20 61 20 |mpt to f|ormat a |
|000001a0| 76 6f 6c 75 6d 65 2e 1e | 53 41 4d 20 64 65 74 65 |volume..|SAM dete|
|000001b0| 63 74 65 64 20 61 6e 20 | 61 74 74 65 6d 70 74 20 |cted an |attempt |
|000001c0| 74 6f 20 5e 30 2e 1e 63 | 68 61 6e 67 65 20 61 20 |to ^0..c|hange a |
|000001d0| 72 65 73 6f 75 72 63 65 | 20 6f 66 20 74 79 70 65 |resource| of type|
|000001e0| 20 27 5e 31 27 1b 61 64 | 64 20 61 20 72 65 73 6f | '^1'.ad|d a reso|
|000001f0| 75 72 63 65 20 6f 66 20 | 74 79 70 65 20 27 5e 31 |urce of |type '^1|
|00000200| 27 19 63 72 65 61 74 65 | 20 61 20 73 74 61 72 74 |'.create| a start|
|00000210| 75 70 20 64 6f 63 75 6d | 65 6e 74 17 6d 6f 76 65 |up docum|ent.move|
|00000220| 20 61 20 73 74 61 72 74 | 75 70 20 64 6f 63 75 6d | a start|up docum|
|00000230| 65 6e 74 1b 62 79 70 61 | 73 73 20 74 68 65 20 72 |ent.bypa|ss the r|
|00000240| 65 73 6f 75 72 63 65 20 | 6d 61 6e 61 67 65 72 16 |esource |manager.|
|00000250| 62 79 70 61 73 73 20 74 | 68 65 20 66 69 6c 65 20 |bypass t|he file |
|00000260| 73 79 73 74 65 6d 14 62 | 79 70 61 73 73 20 53 41 |system.b|ypass SA|
|00000270| 4d 20 49 6e 74 65 72 63 | 65 70 74 1c 6d 6f 64 69 |M Interc|ept.modi|
|00000280| 66 79 20 61 20 73 70 65 | 63 69 61 6c 20 73 79 73 |fy a spe|cial sys|
|00000290| 74 65 6d 20 66 69 6c 65 | 19 61 64 64 20 61 20 73 |tem file|.add a s|
|000002a0| 70 65 63 69 61 6c 20 73 | 79 73 74 65 6d 20 66 69 |pecial s|ystem fi|
|000002b0| 6c 65 15 63 72 65 61 74 | 65 20 61 6e 20 61 70 70 |le.creat|e an app|
|000002c0| 6c 69 63 61 74 69 6f 6e | 0f 66 6f 72 6d 61 74 20 |lication|.format |
|000002d0| 61 20 76 6f 6c 75 6d 65 | 1d 63 68 61 6e 67 65 20 |a volume|.change |
|000002e0| 53 41 4d 27 73 20 66 69 | 6c 65 20 69 6e 66 6f 72 |SAM's fi|le infor|
|000002f0| 6d 61 74 69 6f 6e 12 6d | 6f 76 65 20 53 41 4d 20 |mation.m|ove SAM |
|00000300| 49 6e 74 65 72 63 65 70 | 74 14 72 65 6e 61 6d 65 |Intercep|t.rename|
|00000310| 20 53 41 4d 20 49 6e 74 | 65 72 63 65 70 74 14 64 | SAM Int|ercept.d|
|00000320| 65 6c 65 74 65 20 53 41 | 4d 20 49 6e 74 65 72 63 |elete SA|M Interc|
|00000330| 65 70 74 1c 77 72 69 74 | 65 20 74 6f 20 53 41 4d |ept.writ|e to SAM|
|00000340| 27 73 20 72 65 73 6f 75 | 72 63 65 20 66 6f 72 6b |'s resou|rce fork|
|00000350| 1f 61 64 64 20 61 20 72 | 65 73 6f 75 72 63 65 20 |.add a r|esource |
|00000360| 74 6f 20 53 41 4d 20 49 | 6e 74 65 72 63 65 70 74 |to SAM I|ntercept|
|00000370| 18 63 68 61 6e 67 65 20 | 61 20 72 65 73 6f 75 72 |.change |a resour|
|00000380| 63 65 20 69 6e 20 53 41 | 4d 1a 72 65 6d 6f 76 65 |ce in SA|M.remove|
|00000390| 20 61 20 72 65 73 6f 75 | 72 63 65 20 66 72 6f 6d | a resou|rce from|
|000003a0| 20 53 41 4d 21 63 68 61 | 6e 67 65 20 72 65 73 6f | SAM!cha|nge reso|
|000003b0| 75 72 63 65 20 61 74 74 | 72 69 62 75 74 65 73 20 |urce att|ributes |
|000003c0| 69 6e 20 53 41 4d 1e 63 | 68 61 6e 67 65 20 49 6e |in SAM.c|hange In|
|000003d0| 74 65 72 63 65 70 74 27 | 73 20 65 6e 64 20 6f 66 |tercept'|s end of|
|000003e0| 20 66 69 6c 65 20 54 68 | 65 20 66 69 6c 65 20 62 | file Th|e file b|
|000003f0| 65 69 6e 67 20 61 66 66 | 65 63 74 65 64 20 69 73 |eing aff|ected is|
|00000400| 20 27 5e 32 27 2e 22 54 | 68 65 20 76 6f 6c 75 6d | '^2'."T|he volum|
|00000410| 65 20 62 65 69 6e 67 20 | 61 66 66 65 63 74 65 64 |e being |affected|
|00000420| 20 69 73 20 27 5e 32 27 | 2e 26 54 68 65 20 64 72 | is '^2'|.&The dr|
|00000430| 69 76 65 20 62 65 69 6e | 67 20 61 66 66 65 63 74 |ive bein|g affect|
|00000440| 65 64 20 69 73 20 6e 75 | 6d 62 65 72 20 5e 32 2e |ed is nu|mber ^2.|
|00000450| 29 54 68 65 20 63 75 72 | 72 65 6e 74 6c 79 20 61 |)The cur|rently a|
|00000460| 63 74 69 76 65 20 61 70 | 70 6c 69 63 61 74 69 6f |ctive ap|plicatio|
|00000470| 6e 20 69 73 20 27 5e 33 | 27 2e 2e 54 68 65 20 63 |n is '^3|'..The c|
|00000480| 75 72 72 65 6e 74 6c 79 | 20 61 63 74 69 76 65 20 |urrently| active |
|00000490| 73 79 73 74 65 6d 20 65 | 78 74 65 6e 73 69 6f 6e |system e|xtension|
|000004a0| 20 69 73 20 27 5e 33 27 | 2e 37 4e 6f 20 61 70 70 | is '^3'|.7No app|
|000004b0| 6c 69 63 61 74 69 6f 6e | 20 6f 72 20 73 79 73 74 |lication| or syst|
|000004c0| 65 6d 20 65 78 74 65 6e | 73 69 6f 6e 20 69 73 20 |em exten|sion is |
|000004d0| 63 75 72 72 65 6e 74 6c | 79 20 61 63 74 69 76 65 |currentl|y active|
|000004e0| 2e 2b 57 41 52 4e 49 4e | 47 21 21 21 20 53 41 4d |.+WARNIN|G!!! SAM|
|000004f0| 20 68 61 73 20 64 65 74 | 65 63 74 65 64 20 61 20 | has det|ected a |
|00000500| 73 74 72 61 69 6e 20 6f | 66 20 5e 30 21 2a 54 68 |strain o|f ^0!*Th|
|00000510| 65 20 66 69 6c 65 20 63 | 6f 6e 74 61 69 6e 69 6e |e file c|ontainin|
|00000520| 67 20 74 68 65 20 69 6e | 66 65 63 74 69 6f 6e 20 |g the in|fection |
|00000530| 69 73 20 27 5e 31 27 2e | 14 57 41 52 4e 49 4e 47 |is '^1'.|.WARNING|
|00000540| 21 21 21 20 46 69 6c 65 | 20 27 5e 31 27 26 68 61 |!!! File| '^1'&ha|
|00000550| 73 20 63 68 61 6e 67 65 | 64 20 73 69 6e 63 65 20 |s change|d since |
|00000560| 69 74 20 77 61 73 20 6c | 61 73 74 20 73 63 61 6e |it was l|ast scan|
|00000570| 6e 65 64 2e 1e 44 6f 20 | 79 6f 75 20 72 65 61 6c |ned..Do |you real|
|00000580| 6c 79 20 77 69 73 68 20 | 74 6f 20 70 72 6f 63 65 |ly wish |to proce|
|00000590| 65 64 3f 2f 57 61 72 6e | 69 6e 67 21 20 53 41 4d |ed?/Warn|ing! SAM|
|000005a0| 20 49 6e 74 65 72 63 65 | 70 74 20 69 73 20 63 75 | Interce|pt is cu|
|000005b0| 72 72 65 6e 74 6c 79 20 | 74 75 72 6e 65 64 20 6f |rrently |turned o|
|000005c0| 66 66 21 3b 57 61 72 6e | 69 6e 67 21 21 21 20 53 |ff!;Warn|ing!!! S|
|000005d0| 41 4d 20 68 61 73 20 66 | 6f 75 6e 64 20 65 78 65 |AM has f|ound exe|
|000005e0| 63 75 74 61 62 6c 65 20 | 63 6f 64 65 20 69 6e 20 |cutable |code in |
|000005f0| 61 20 44 65 73 6b 74 6f | 70 20 66 69 6c 65 21 28 |a Deskto|p file!(|
|00000600| 54 68 65 20 27 5e 30 27 | 20 77 68 69 63 68 20 77 |The '^0'| which w|
|00000610| 61 73 20 66 6f 75 6e 64 | 20 6d 61 79 20 62 65 20 |as found| may be |
|00000620| 61 20 76 69 72 75 73 2e | 29 57 61 72 6e 69 6e 67 |a virus.|)Warning|
|00000630| 21 20 53 41 4d 20 49 6e | 74 65 72 63 65 70 74 20 |! SAM In|tercept |
|00000640| 68 61 73 20 62 65 65 6e | 20 6d 6f 64 69 66 69 65 |has been| modifie|
|00000650| 64 2e 2b 49 74 20 63 6f | 75 6c 64 20 6e 6f 74 20 |d.+It co|uld not |
|00000660| 62 65 20 66 6f 75 6e 64 | 20 69 6e 20 74 68 65 20 |be found| in the |
|00000670| 73 79 73 74 65 6d 20 66 | 6f 6c 64 65 72 2e 32 57 |system f|older.2W|
|00000680| 61 72 6e 69 6e 67 21 20 | 53 41 4d 27 73 20 66 69 |arning! |SAM's fi|
|00000690| 6c 65 20 69 6e 66 6f 72 | 6d 61 74 69 6f 6e 20 68 |le infor|mation h|
|000006a0| 61 73 20 62 65 65 6e 20 | 6d 6f 64 69 66 69 65 64 |as been |modified|
|000006b0| 2e 2a 49 74 20 77 69 6c | 6c 20 6e 6f 74 20 72 75 |.*It wil|l not ru|
|000006c0| 6e 20 74 68 65 20 6e 65 | 78 74 20 74 69 6d 65 20 |n the ne|xt time |
|000006d0| 79 6f 75 20 72 65 73 74 | 61 72 74 2e 36 57 61 72 |you rest|art.6War|
|000006e0| 6e 69 6e 67 21 20 53 79 | 73 74 65 6d 20 73 74 61 |ning! Sy|stem sta|
|000006f0| 72 74 75 70 20 69 6e 66 | 6f 72 6d 61 74 69 6f 6e |rtup inf|ormation|
|00000700| 20 68 61 73 20 62 65 65 | 6e 20 6d 6f 64 69 66 69 | has bee|n modifi|
|00000710| 65 64 2e 2b 54 68 65 20 | 64 65 62 75 67 67 65 72 |ed.+The |debugger|
|00000720| 20 6e 61 6d 65 20 68 61 | 73 20 62 65 65 6e 20 63 | name ha|s been c|
|00000730| 68 61 6e 67 65 64 20 74 | 6f 20 27 5e 30 27 2e 2f |hanged t|o '^0'./|
|00000740| 54 68 65 20 64 69 73 61 | 73 73 65 6d 62 6c 65 72 |The disa|ssembler|
|00000750| 20 6e 61 6d 65 20 68 61 | 73 20 62 65 65 6e 20 63 | name ha|s been c|
|00000760| 68 61 6e 67 65 64 20 74 | 6f 20 27 5e 30 27 2e 31 |hanged t|o '^0'.1|
|00000770| 54 68 65 20 73 74 61 72 | 74 75 70 20 61 70 70 6c |The star|tup appl|
|00000780| 69 63 61 74 69 6f 6e 20 | 68 61 73 20 62 65 65 6e |ication |has been|
|00000790| 20 63 68 61 6e 67 65 64 | 20 74 6f 20 27 5e 30 27 | changed| to '^0'|
|000007a0| 2e 29 54 68 65 20 46 69 | 6e 64 65 72 20 6e 61 6d |.)The Fi|nder nam|
|000007b0| 65 20 68 61 73 20 62 65 | 65 6e 20 63 68 61 6e 67 |e has be|en chang|
|000007c0| 65 64 20 74 6f 20 27 5e | 30 27 2e 2f 59 6f 75 20 |ed to '^|0'./You |
|000007d0| 61 70 70 65 61 72 20 74 | 6f 20 62 65 20 69 6e 73 |appear t|o be ins|
|000007e0| 74 61 6c 6c 69 6e 67 20 | 73 6f 66 74 77 61 72 65 |talling |software|
|000007f0| 2e 20 20 20 44 6f 20 79 | 6f 75 20 2f 77 61 6e 74 |. Do y|ou /want|
|00000800| 20 53 41 4d 20 74 6f 20 | 73 75 73 70 65 6e 64 20 | SAM to |suspend |
|00000810| 74 68 65 20 64 69 73 70 | 6c 61 79 20 6f 66 20 73 |the disp|lay of s|
|00000820| 75 73 70 69 63 69 6f 75 | 73 20 20 24 61 63 74 69 |uspiciou|s $acti|
|00000830| 76 69 74 79 20 61 6c 65 | 72 74 73 20 64 75 72 69 |vity ale|rts duri|
|00000840| 6e 67 20 69 6e 73 74 61 | 6c 6c 61 74 69 6f 6e 3f |ng insta|llation?|
|00000850| 02 4e 6f 03 59 65 73 28 | 53 41 4d aa 20 49 6e 74 |.No.Yes(|SAM. Int|
|00000860| 65 72 63 65 70 74 20 53 | 75 73 70 69 63 69 6f 75 |ercept S|uspiciou|
|00000870| 73 20 41 63 74 69 76 69 | 74 79 20 41 6c 65 72 74 |s Activi|ty Alert|
|00000880| 1a 53 41 4d aa 20 49 6e | 74 65 72 63 65 70 74 20 |.SAM. In|tercept |
|00000890| 56 69 72 75 73 20 41 6c | 65 72 74 22 41 6e 20 65 |Virus Al|ert"An e|
|000008a0| 72 72 6f 72 20 6f 63 63 | 75 72 72 65 64 20 64 75 |rror occ|urred du|
|000008b0| 72 69 6e 67 20 74 68 65 | 20 73 63 61 6e 21 30 53 |ring the| scan!0S|
|000008c0| 41 4d 20 49 6e 74 65 72 | 63 65 70 74 20 77 61 73 |AM Inter|cept was|
|000008d0| 20 75 6e 61 62 6c 65 20 | 74 6f 20 63 6f 6d 70 6c | unable |to compl|
|000008e0| 65 74 65 6c 79 20 73 63 | 61 6e 20 27 5e 31 27 30 |etely sc|an '^1'0|
|000008f0| 53 41 4d 20 64 65 74 65 | 63 74 65 64 20 61 6e 20 |SAM dete|cted an |
|00000900| 61 74 74 65 6d 70 74 20 | 74 6f 20 61 64 64 20 61 |attempt |to add a|
|00000910| 20 76 69 72 61 6c 20 72 | 65 73 6f 75 72 63 65 21 | viral r|esource!|
|00000920| 28 41 20 73 75 73 70 69 | 63 69 6f 75 73 20 63 68 |(A suspi|cious ch|
|00000930| 61 6e 67 65 20 69 73 20 | 62 65 69 6e 67 20 61 74 |ange is |being at|
|00000940| 74 65 6d 70 74 65 64 2e | 20 2a 41 20 73 75 73 70 |tempted.| *A susp|
|00000950| 69 63 69 6f 75 73 20 61 | 64 64 69 74 69 6f 6e 20 |icious a|ddition |
|00000960| 69 73 20 62 65 69 6e 67 | 20 61 74 74 65 6d 70 74 |is being| attempt|
|00000970| 65 64 2e 20 2d 53 41 4d | 20 64 65 74 65 63 74 65 |ed. -SAM| detecte|
|00000980| 64 20 61 6e 20 61 74 74 | 65 6d 70 74 20 74 6f 20 |d an att|empt to |
|00000990| 63 68 61 6e 67 65 20 61 | 20 72 65 73 6f 75 72 63 |change a| resourc|
|000009a0| 65 2e 2a 53 41 4d 20 64 | 65 74 65 63 74 65 64 20 |e.*SAM d|etected |
|000009b0| 61 6e 20 61 74 74 65 6d | 70 74 20 74 6f 20 61 64 |an attem|pt to ad|
|000009c0| 64 20 61 20 72 65 73 6f | 75 72 63 65 2e |d a reso|urce. |
+--------+-------------------------+-------------------------+--------+--------+
