MacWorld 1999 April

home *** CD-ROM | disk | FTP | other *** search
/ MacWorld 1999 April / Macworld (1999-04).dmg / Shareware World / Anti-Virus / Agax v1.0 / Additives / CODE9811 next >
MacBinary | 1999-01-15 | 2.6 KB | [APlg/Agax]
open in:
MacOS 8.1 extracted |
Win98 extracted |
DOS extracted
view JSON data |
view as text

This file was processed as: MacBinary (archive/macBinary).

You can browse this item here: CODE9811
Confidence	Program	Detection	Match Type	Support
`10%`	dexvert	MacBinary `(archive/macBinary)`	fallback	Supported
`100%`	file	MacBinary II, inited, Thu Dec 31 07:21:47 1998, modified Fri Jan 15 06:27:55 1999, creator 'Agax', type 'APlg' "CODE9811", at 0x80 2470 bytes resource Apple HFS/HFS+ resource fork, map offset 0x96b, map length 0x3b, data length 0x86b, at 16 0x00c60008, nextResourceMap 0x8446804, fileRef 0x1ad0, list offset 0x1c, name offset 0x32, 1 type, 0x41506c67 'APlg' * 1 resource offset 0xa	default (weak)
`99%`	file	data	default
`100%`	TrID	MacBinary 2	default (weak)
`100%`	siegfried	fmt/1762 MacBinary (II)	default
`100%`	lsar	MacBinary	default
id metadata
key	value
macFileType	`[APlg]`
macFileCreator	`[Agax]`
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 08 43 4f 44 45 39 38 | 31 31 00 00 00 00 00 00 |..CODE98|11......|
|00000010| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000040| 00 41 50 6c 67 41 67 61 | 78 01 00 00 00 00 00 00 |.APlgAga|x.......|
|00000050| 00 00 00 00 00 00 00 00 | 00 09 a6 b2 b1 1c db b2 |........|........|
|00000060| c4 d6 bb 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000070| 00 00 00 00 00 00 00 00 | 00 00 81 81 70 70 00 00 |........|....pp..|
|00000080| 00 00 01 00 00 00 09 6b | 00 00 08 6b 00 00 00 3b |.......k|...k...;|
|00000090| 00 c6 00 08 00 14 00 00 | 00 1e 00 00 00 01 00 17 |........|........|
|000000a0| 00 00 05 1a 08 d4 00 02 | 00 00 05 19 08 02 00 02 |........|........|
|000000b0| 08 43 4f 44 45 39 38 31 | 31 44 02 00 00 00 41 50 |.CODE981|1D....AP|
|000000c0| 6c 67 41 67 61 78 01 00 | 00 00 00 01 00 00 00 00 |lgAgax..|........|
|000000d0| 00 00 41 50 6c 67 41 67 | 61 78 01 00 00 00 00 01 |..APlgAg|ax......|
|000000e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000f0| 00 00 b2 b1 1c db 00 00 | 00 00 00 00 09 a6 00 02 |........|........|
|00000100| 00 00 04 b1 08 a2 00 02 | 00 00 04 b3 08 e0 00 02 |........|........|
|00000110| 00 00 04 b0 08 35 00 02 | 00 00 04 50 07 d5 00 02 |.....5..|...P....|
|00000120| 00 00 05 89 09 16 00 02 | 00 00 00 0e 08 b4 00 02 |........|........|
|00000130| 00 00 00 0d 08 b6 00 02 | 00 00 00 0c 08 b2 00 02 |........|........|
|00000140| 00 00 00 0b 08 9e 00 02 | 00 00 00 12 08 e6 00 02 |........|........|
|00000150| 00 00 00 09 08 20 00 02 | 00 80 00 e4 00 00 00 00 |..... ..|........|
|00000160| 00 04 00 5d f6 60 00 00 | 00 00 00 00 00 00 00 00 |...].`..|........|
|00000170| 00 00 40 81 b0 1e 40 81 | af e4 00 00 c0 00 00 59 |..@...@.|.......Y|
|00000180| 00 00 08 67 60 0a 00 00 | 41 50 6c 67 00 80 00 00 |...g`...|APlg....|
|00000190| 48 e7 e0 c8 4e ba 00 f2 | 41 fa ff ea 20 08 a0 55 |H...N...|A... ..U|
|000001a0| 4e ba 00 90 4c df 13 07 | 4e fa 00 f2 41 fa ff d6 |N...L...|N...A...|
|000001b0| d1 fc 00 00 08 48 20 08 | a0 55 4e 75 48 e7 06 00 |.....H .|.UNuH...|
|000001c0| 59 4f 20 6f 00 10 22 6f | 00 14 2c 2f 00 18 1e 98 |YO o.."o|..,/....|
|000001d0| 1f 58 00 01 1f 58 00 02 | 1f 58 00 03 2a 17 74 00 |.X...X..|.X..*.t.|
|000001e0| 60 44 12 18 10 01 02 40 | 00 80 67 0c d2 01 10 01 |`D.....@|..g.....|
|000001f0| 48 80 48 c0 d4 80 60 28 | 1e 81 1f 58 00 01 10 01 |H.H...`(|...X....|
|00000200| 02 40 00 40 67 0c 30 17 | e5 48 e2 40 48 c0 d4 80 |.@.@g.0.|.H.@H...|
|00000210| 60 0e 1f 58 00 02 1f 58 | 00 03 24 17 e5 8a e2 82 |`..X...X|..$.....|
|00000220| dd b1 28 00 53 85 4a 85 | 6e b8 58 4f 4c df 00 60 |..(.S.J.|n.XOL..`|
|00000230| 4e 75 48 e7 10 20 24 40 | 20 2c 00 00 26 0a 96 80 |NuH.. $@| ,..&...|
|00000240| 67 40 4a 80 66 1c 42 2c | 00 04 30 3c a8 9f a7 46 |g@J.f.B,|..0<...F|
|00000250| 2f 08 30 3c a1 98 a3 46 | b1 df 56 c0 44 00 19 40 |/.0<...F|..V.D..@|
|00000260| 00 04 2f 03 2f 0a 4e ba | ff 44 2f 00 4e ba ff 4e |.././.N.|.D/.N..N|
|00000270| 4f ef 00 0c 29 4a 00 00 | 4a 2c 00 04 67 04 70 01 |O...)J..|J,..g.p.|
|00000280| a1 98 4c df 04 08 4e 75 | 41 fa fe fa d1 fc 00 00 |..L...Nu|A.......|
|00000290| 05 56 20 08 a0 55 c1 8c | 4e 75 4e 75 4e 56 00 00 |.V ..U..|NuNuNV..|
|000002a0| 48 e7 18 30 28 2e 00 0c | 26 6e 00 08 76 00 70 11 |H..0(...|&n..v.p.|
|000002b0| b8 80 66 0e 2f 0b 4e b9 | 00 00 01 e6 26 00 58 4f |..f./.N.|....&.XO|
|000002c0| 60 76 70 12 b8 80 66 0e | 2f 0b 4e b9 00 00 01 cc |`vp...f.|/.N.....|
|000002d0| 26 00 58 4f 60 62 4a 84 | 66 46 24 4b 48 79 00 00 |&.XO`bJ.|fF$KHy..|
|000002e0| 07 42 2f 0a 4e b9 00 00 | 04 f6 48 79 00 00 07 2e |.B/.N...|..Hy....|
|000002f0| 48 6a 00 20 4e b9 00 00 | 04 f6 41 ea 01 20 43 f9 |Hj. N...|..A.. C.|
|00000300| 00 00 05 b0 20 08 10 d9 | 66 fc 41 ea 05 20 43 f9 |.... ...|f.A.. C.|
|00000310| 00 00 05 6e 20 08 10 d9 | 66 fc 4f ef 00 10 60 18 |...n ...|f.O...`.|
|00000320| 70 02 b8 80 66 12 24 4b | 24 bc 41 50 50 4c 42 2a |p...f.$K|$.APPLB*|
|00000330| 00 04 15 7c 00 01 00 05 | 2f 43 00 20 4c df 0c 18 |...|....|/C. L...|
|00000340| 4e 5e 20 5f 50 4f 4e d0 | 84 6d 61 69 6e 00 00 00 |N^ _PON.|.main...|
|00000350| 4e 56 00 00 70 00 4e 5e | 4e 75 8d 45 78 61 6d 69 |NV..p.N^|Nu.Exami|
|00000360| 6e 65 56 6f 6c 75 6d 65 | 00 00 4e 56 ff 80 48 e7 |neVolume|..NV..H.|
|00000370| 18 30 26 6e 00 08 2d 79 | 00 00 05 64 ff c6 2d 79 |.0&n..-y|...d..-y|
|00000380| 00 00 05 68 ff ca 3d 79 | 00 00 05 6c ff ce 4a 6b |...h..=y|...l..Jk|
|00000390| 00 0e 67 08 0c 6b ff ff | 00 0e 66 0a 20 3c 00 00 |..g..k..|..f. <..|
|000003a0| 00 ff 60 00 02 12 3f 2b | 00 0e a9 98 55 4f 2f 3c |..`...?+|....UO/<|
|000003b0| 43 4f 44 45 a8 0d 30 1f | 55 40 67 06 70 00 60 00 |CODE..0.|U@g.p.`.|
|000003c0| 01 f6 59 4f 2f 3c 43 4f | 44 45 42 67 a8 1f 20 5f |..YO/<CO|DEBg.. _|
|000003d0| 24 48 20 0a 66 06 70 00 | 60 00 01 dc 59 4f 2f 0a |$H .f.p.|`...YO/.|
|000003e0| a9 a5 20 1f 72 18 b0 81 | 67 06 70 00 60 00 01 c8 |.. .r...|g.p.`...|
|000003f0| 59 4f 2f 3c 43 4f 44 45 | 3f 3c 00 01 a8 1f 20 5f |YO/<CODE|?<.... _|
|00000400| 24 48 20 0a 66 06 70 00 | 60 00 01 ac 59 4f 2f 0a |$H .f.p.|`...YO/.|
|00000410| a9 a5 20 1f 0c 80 00 00 | 2c 52 67 06 70 00 60 00 |.. .....|,Rg.p.`.|
|00000420| 01 96 4a 92 66 04 2f 0a | a9 a2 76 00 60 1a 41 ee |..J.f./.|..v.`.A.|
|00000430| ff c6 d0 c3 22 52 43 e9 | 27 76 d2 c3 30 31 30 00 |...."RC.|'v..010.|
|00000440| b0 70 30 00 66 08 52 43 | 0c 43 00 05 6d e0 0c 43 |.p0.f.RC|.C..m..C|
|00000450| 00 05 6c 06 70 00 60 00 | 01 5e 4a 2b 00 10 66 06 |..l.p.`.|.^J+..f.|
|00000460| 70 01 60 00 01 52 59 4f | 2f 3c 54 45 58 54 3f 3c |p.`..RYO|/<TEXT?<|
|00000470| 21 ca a8 1f 20 5f 24 48 | 20 0a 66 06 70 01 60 00 |!... _$H| .f.p.`.|
|00000480| 01 36 4a 92 66 04 2f 0a | a9 a2 20 52 1d 68 00 14 |.6J.f./.|.. R.h..|
|00000490| ff e0 20 52 18 28 00 05 | 48 84 76 01 60 1a 30 04 |.. R.(..|H.v.`.0.|
|000004a0| 48 c0 20 52 12 30 30 14 | 48 81 48 c1 92 80 41 ee |H. R.00.|H.H...A.|
|000004b0| ff e0 11 81 30 00 52 43 | 70 00 10 2e ff e0 32 03 |....0.RC|p.....2.|
|000004c0| 48 c1 b2 80 6f d8 70 00 | 10 2e ff e0 3f 00 48 6e |H...o.p.|....?.Hn|
|000004d0| ff e0 4e b9 00 00 04 48 | 48 79 00 00 07 48 48 6e |..N....H|Hy...HHn|
|000004e0| ff e0 4e b9 00 00 04 f6 | 20 53 43 ee ff 80 70 10 |..N.....| SC...p.|
|000004f0| 22 d8 51 c8 ff fc 32 d8 | 48 6e ff e0 48 6e ff 86 |".Q...2.|Hn..Hn..|
|00000500| 4e b9 00 00 04 f6 48 6e | ff 80 48 6e ff d0 70 07 |N.....Hn|..Hn..p.|
|00000510| aa 52 30 1f 4f ef 00 14 | 67 06 70 01 60 00 00 98 |.R0.O...|g.p.`...|
|00000520| 02 6e bf ff ff d8 20 6b | 00 04 2d 50 ff d0 20 6b |.n.... k|..-P.. k|
|00000530| 00 04 2d 68 00 04 ff d4 | 55 4f 48 6e ff 80 48 6e |..-h....|UOHn..Hn|
|00000540| ff d0 70 08 aa 52 30 1f | 55 4f 2f 13 48 6e ff 80 |..p..R0.|UO/.Hn..|
|00000550| 70 0f aa 52 30 1f 20 6b | 00 04 43 ee ff d0 22 d8 |p..R0. k|..C...".|
|00000560| 22 d8 22 d8 22 d8 2d 7c | 3f 3f 3f 3f ff d0 2d 7c |".".".-||????..-||
|00000570| 3f 3f 3f 3f ff d4 55 4f | 48 6e ff 80 48 6e ff d0 |????..UO|Hn..Hn..|
|00000580| 70 08 aa 52 30 1f 0c 2e | 00 17 ff e0 63 06 1d 7c |p..R0...|....c..||
|00000590| 00 17 ff e0 48 79 00 00 | 05 5c 48 6e ff e0 4e b9 |....Hy..|.\Hn..N.|
|000005a0| 00 00 05 1c 48 6e ff 80 | 48 6e ff e0 70 0b aa 52 |....Hn..|Hn..p..R|
|000005b0| 30 1f 70 03 5c 4f 4c df | 0c 18 4e 5e 4e 75 8b 45 |0.p.\OL.|..N^Nu.E|
|000005c0| 78 61 6d 69 6e 65 46 69 | 6c 65 00 00 4e 56 ff 00 |xamineFi|le..NV..|
|000005d0| 48 e7 0c 00 22 6e 00 08 | 3a 2e 00 0c 1d 51 ff 00 |H..."n..|:....Q..|
|000005e0| 78 01 30 04 53 40 72 00 | 12 11 92 40 41 ee ff 00 |x.0.S@r.|...@A...|
|000005f0| 11 b1 10 00 40 00 52 44 | 70 00 10 2e ff 00 b8 40 |....@.RD|p......@|
|00000600| 6f e0 42 39 00 00 07 48 | 78 01 41 ee ff 00 74 00 |o.B9...H|x.A...t.|
|00000610| 14 30 40 00 32 05 e2 41 | e0 49 ec 49 d2 45 e4 41 |.0@.2..A|.I.I.E.A|
|00000620| 52 41 c3 c2 74 00 14 31 | 40 00 d4 41 0c 42 00 5a |RA..t..1|@..A.B.Z|
|00000630| 6f 0a 04 42 00 19 0c 42 | 00 5a 6e f6 0c 42 00 41 |o..B...B|.Zn..B.A|
|00000640| 6c 0a 06 42 00 19 0c 42 | 00 41 6d f6 52 39 00 00 |l..B...B|.Am.R9..|
|00000650| 07 48 41 f9 00 00 07 48 | 11 82 40 00 52 44 70 00 |.HA....H|..@.RDp.|
|00000660| 10 2e ff 00 b8 40 6f a2 | 4c df 00 30 4e 5e 4e 75 |.....@o.|L..0N^Nu|
|00000670| 87 65 6e 63 72 79 70 74 | 00 00 4e 56 00 00 20 6e |.encrypt|..NV.. n|
|00000680| 00 0c 70 00 10 10 52 80 | 20 6e 00 0c 22 6e 00 08 |..p...R.| n.."n..|
|00000690| a0 2e 4e 5e 4e 75 87 50 | 53 74 72 43 70 79 00 00 |..N^Nu.P|StrCpy..|
|000006a0| 4e 56 00 00 48 e7 00 30 | 26 6e 00 08 24 6e 00 0c |NV..H..0|&n..$n..|
|000006b0| 70 00 10 13 52 80 43 f3 | 08 00 41 ea 00 01 70 00 |p...R.C.|..A...p.|
|000006c0| 10 12 a0 2e 10 12 d1 13 | 4c df 0c 00 4e 5e 4e 75 |........|L...N^Nu|
|000006d0| 87 50 53 74 72 43 61 74 | 00 00 00 00 00 00 00 00 |.PStrCat|........|
|000006e0| 07 28 76 69 72 75 73 29 | 89 6d 6f 76 65 77 6f 72 |.(virus)|.movewor|
|000006f0| 6d 73 68 74 74 70 3a 2f | 2f 77 77 77 2e 63 73 65 |mshttp:/|/www.cse|
|00000700| 2e 75 6e 73 77 2e 65 64 | 75 2e 61 75 2f 7e 73 32 |.unsw.ed|u.au/~s2|
|00000710| 31 39 31 33 33 31 2f 61 | 67 61 78 2f 61 64 64 69 |191331/a|gax/addi|
|00000720| 74 69 76 65 73 2f 63 6f | 64 65 39 38 31 31 2e 68 |tives/co|de9811.h|
|00000730| 74 6d 6c 00 54 68 69 73 | 20 76 69 72 75 73 20 69 |tml.This| virus i|
|00000740| 6e 66 65 63 74 73 20 61 | 70 70 6c 69 63 61 74 69 |nfects a|pplicati|
|00000750| 6f 6e 73 2e 20 49 74 20 | 63 6f 70 69 65 73 20 74 |ons. It |copies t|
|00000760| 68 65 20 6f 72 69 67 69 | 6e 61 6c 20 61 70 70 6c |he origi|nal appl|
|00000770| 69 63 61 74 69 6f 6e 20 | 74 6f 20 61 20 66 69 6c |ication |to a fil|
|00000780| 65 20 77 69 74 68 20 61 | 20 67 61 72 62 61 67 65 |e with a| garbage|
|00000790| 20 6e 61 6d 65 2c 20 74 | 68 65 6e 20 69 6e 73 65 | name, t|hen inse|
|000007a0| 72 74 73 20 69 74 73 65 | 6c 66 20 69 6e 74 6f 20 |rts itse|lf into |
|000007b0| 74 68 65 20 6f 72 69 67 | 69 6e 61 6c 20 61 70 70 |the orig|inal app|
|000007c0| 20 61 6e 64 20 64 6f 65 | 73 20 6c 6f 74 73 20 6f | and doe|s lots o|
|000007d0| 66 20 73 74 72 61 6e 67 | 65 20 74 68 69 6e 67 73 |f strang|e things|
|000007e0| 20 77 69 74 68 20 69 74 | 73 20 72 65 73 6f 75 72 | with it|s resour|
|000007f0| 63 65 73 2e 20 49 74 20 | 61 6c 73 6f 20 61 74 74 |ces. It |also att|
|00000800| 65 6d 70 74 73 20 74 6f | 20 64 65 6c 65 74 65 20 |empts to| delete |
|00000810| 61 6e 74 69 76 69 72 75 | 73 20 70 72 6f 67 72 61 |antiviru|s progra|
|00000820| 6d 73 2e 20 49 66 20 61 | 6e 20 69 6e 66 65 63 74 |ms. If a|n infect|
|00000830| 65 64 20 61 70 70 6c 69 | 63 61 69 74 6f 6e 20 69 |ed appli|caiton i|
|00000840| 73 20 72 75 6e 20 6f 6e | 20 61 20 4d 6f 6e 64 61 |s run on| a Monda|
|00000850| 79 20 6f 72 20 41 75 67 | 75 73 74 20 32 32 6e 64 |y or Aug|ust 22nd|
|00000860| 2c 20 74 68 65 72 65 20 | 69 73 20 61 20 32 35 25 |, there |is a 25%|
|00000870| 20 63 68 61 6e 63 65 20 | 74 68 61 74 20 69 74 27 | chance |that it'|
|00000880| 6c 6c 20 64 69 73 70 6c | 61 79 20 69 74 73 20 70 |ll displ|ay its p|
|00000890| 61 79 6c 6f 61 64 20 2d | 20 61 20 70 69 20 6d 61 |ayload -| a pi ma|
|000008a0| 64 65 20 6f 75 74 20 6f | 66 20 77 6f 72 6d 73 2e |de out o|f worms.|
|000008b0| 00 00 13 4e 6f 6e 65 20 | 74 68 61 74 20 49 20 6b |...None |that I k|
|000008c0| 6e 6f 77 20 6f 66 05 31 | 2e 30 62 31 00 00 00 00 |now of.1|.0b1....|
|000008d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 14 |........|........|
|000009d0| 40 ad 87 8a 88 bc fc fc | 40 b1 40 5e 40 5f fd db |@.......|@.@^@_..|
|000009e0| 7e 5a 8a 95 f8 40 f7 97 | f1 40 5e 00 00 01 00 00 |~Z...@..|.@^.....|
|000009f0| 00 09 6b 00 00 08 6b 00 | 00 00 3b 08 44 68 04 1a |..k...k.|..;.Dh..|
|00000a00| d0 00 00 00 1c 00 32 00 | 00 41 50 6c 67 00 00 00 |......2.|.APlg...|
|00000a10| 0a 00 80 00 00 18 00 00 | 00 00 00 00 00 08 43 4f |........|......CO|
|00000a20| 44 45 39 38 31 31 00 00 | 00 00 00 00 00 00 00 00 |DE9811..|........|
|00000a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+