MacFormat 1999 July

home *** CD-ROM | disk | FTP | other *** search
/ MacFormat 1999 July / macformat-079.iso / Resources / Anti-virus / Agax 1.1 / Additives / AutoStart next >
MacBinary | 1999-02-24 | 2.5 KB | [APlg/Agax]
view JSON data |
view as text |
open on a Mac |
open on a PC

This file was processed as: MacBinary (archive/macBinary).

You can browse this item here: AutoStart
Confidence	Program	Detection	Match Type	Support
`10%`	dexvert	MacBinary `(archive/macBinary)`	fallback	Supported
`100%`	file	MacBinary II, inited, Mon Feb 22 07:47:19 1999, modified Wed Feb 24 11:47:48 1999, creator 'Agax', type 'APlg' "AutoStart", at 0x80 2397 bytes resource Apple HFS/HFS+ resource fork, map offset 0x921, map length 0x3c, data length 0x821, at 16 0x61736573, nextResourceMap 0x8232854, fileRef 0x1ad0, list offset 0x1c, name offset 0x32, 1 type, 0x41506c67 'APlg' * 1 resource offset 0xa	default (weak)
`99%`	file	data	default
`100%`	TrID	MacBinary 2	default (weak)
`100%`	siegfried	fmt/1762 MacBinary (II)	default
`100%`	lsar	MacBinary	default
id metadata
key	value
macFileType	`[APlg]`
macFileCreator	`[Agax]`
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 09 41 75 74 6f 53 74 | 61 72 74 00 00 00 00 00 |..AutoSt|art.....|
|00000010| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000040| 00 41 50 6c 67 41 67 61 | 78 01 00 00 00 00 00 00 |.APlgAga|x.......|
|00000050| 00 00 00 00 00 00 00 00 | 00 09 5d b2 f7 02 57 b2 |........|..]...W.|
|00000060| f9 dd b4 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000070| 00 00 00 00 00 00 00 00 | 00 00 81 81 3e f1 00 00 |........|....>...|
|00000080| 00 00 01 00 00 00 09 21 | 00 00 08 21 00 00 00 3c |.......!|...!...<|
|00000090| 61 73 65 73 20 2a 2f 0d | 09 6b 43 6f 6e 74 61 69 |ases */.|.kContai|
|000000a0| 6e 65 72 54 72 61 73 68 | 41 6c 69 61 73 54 79 70 |nerTrash|AliasTyp|
|000000b0| 09 41 75 74 6f 53 74 61 | 72 74 74 72 6f 6c 20 50 |.AutoSta|rttrol P|
|000000c0| 61 6e 65 6c 6e 74 73 29 | 74 69 63 61 6c 29 73 6f |anelnts)|tical)so|
|000000d0| 00 00 41 50 6c 67 41 67 | 61 78 01 00 00 00 00 01 |..APlgAg|ax......|
|000000e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000f0| 00 00 b2 f7 02 57 00 00 | 00 00 00 00 09 5d 79 70 |.....W..|.....]yp|
|00000100| 65 09 3d 20 27 68 64 73 | 6b 27 2c 09 09 09 09 09 |e.= 'hds|k',.....|
|00000110| 09 2f 2a 20 74 79 70 65 | 20 66 6f 72 20 68 61 72 |./* type| for har|
|00000120| 64 20 64 69 73 6b 20 61 | 6c 69 61 73 65 73 20 2a |d disk a|liases *|
|00000130| 2f 0d 09 6b 43 6f 6e 74 | 61 69 6e 65 72 46 6c 6f |/..kCont|ainerFlo|
|00000140| 70 70 79 41 6c 69 61 73 | 54 79 70 65 09 3d 20 27 |ppyAlias|Type.= '|
|00000150| 66 6c 70 79 27 2c 09 09 | 09 09 09 09 2f 2a 20 74 |flpy',..|..../* t|
|00000160| 79 70 65 20 66 6f 72 20 | 66 6c 6f 70 70 79 20 61 |ype for |floppy a|
|00000170| 6c 69 61 73 65 73 20 2a | 2f 0d 09 6b 43 6f 6e 74 |liases *|/..kCont|
|00000180| 00 00 08 1d 60 0a 00 00 | 41 50 6c 67 00 80 00 00 |....`...|APlg....|
|00000190| 48 e7 e0 c8 4e ba 00 f2 | 41 fa ff ea 20 08 a0 55 |H...N...|A... ..U|
|000001a0| 4e ba 00 90 4c df 13 07 | 4e fa 00 f2 41 fa ff d6 |N...L...|N...A...|
|000001b0| d1 fc 00 00 07 f2 20 08 | a0 55 4e 75 48 e7 06 00 |...... .|.UNuH...|
|000001c0| 59 4f 20 6f 00 10 22 6f | 00 14 2c 2f 00 18 1e 98 |YO o.."o|..,/....|
|000001d0| 1f 58 00 01 1f 58 00 02 | 1f 58 00 03 2a 17 74 00 |.X...X..|.X..*.t.|
|000001e0| 60 44 12 18 10 01 02 40 | 00 80 67 0c d2 01 10 01 |`D.....@|..g.....|
|000001f0| 48 80 48 c0 d4 80 60 28 | 1e 81 1f 58 00 01 10 01 |H.H...`(|...X....|
|00000200| 02 40 00 40 67 0c 30 17 | e5 48 e2 40 48 c0 d4 80 |.@.@g.0.|.H.@H...|
|00000210| 60 0e 1f 58 00 02 1f 58 | 00 03 24 17 e5 8a e2 82 |`..X...X|..$.....|
|00000220| dd b1 28 00 53 85 4a 85 | 6e b8 58 4f 4c df 00 60 |..(.S.J.|n.XOL..`|
|00000230| 4e 75 48 e7 10 20 24 40 | 20 2c 00 00 26 0a 96 80 |NuH.. $@| ,..&...|
|00000240| 67 40 4a 80 66 1c 42 2c | 00 04 30 3c a8 9f a7 46 |g@J.f.B,|..0<...F|
|00000250| 2f 08 30 3c a1 98 a3 46 | b1 df 56 c0 44 00 19 40 |/.0<...F|..V.D..@|
|00000260| 00 04 2f 03 2f 0a 4e ba | ff 44 2f 00 4e ba ff 4e |.././.N.|.D/.N..N|
|00000270| 4f ef 00 0c 29 4a 00 00 | 4a 2c 00 04 67 04 70 01 |O...)J..|J,..g.p.|
|00000280| a1 98 4c df 04 08 4e 75 | 41 fa fe fa d1 fc 00 00 |..L...Nu|A.......|
|00000290| 05 a0 20 08 a0 55 c1 8c | 4e 75 4e 75 4e 56 00 00 |.. ..U..|NuNuNV..|
|000002a0| 48 e7 18 30 26 2e 00 0c | 26 6e 00 08 78 00 70 11 |H..0&...|&n..x.p.|
|000002b0| b6 80 66 10 2f 0b 4e b9 | 00 00 02 e6 28 00 58 4f |..f./.N.|....(.XO|
|000002c0| 60 00 00 92 70 12 b6 80 | 66 0e 2f 0b 4e b9 00 00 |`...p...|f./.N...|
|000002d0| 01 e8 28 00 58 4f 60 7c | 4a 83 66 46 24 4b 48 79 |..(.XO`||J.fF$KHy|
|000002e0| 00 00 07 e2 2f 0a 4e b9 | 00 00 05 18 48 79 00 00 |..../.N.|....Hy..|
|000002f0| 07 d2 48 6a 00 20 4e b9 | 00 00 05 18 41 ea 01 20 |..Hj. N.|....A.. |
|00000300| 43 f9 00 00 06 ca 20 08 | 10 d9 66 fc 41 ea 05 20 |C..... .|..f.A.. |
|00000310| 43 f9 00 00 06 86 20 08 | 10 d9 66 fc 4f ef 00 10 |C..... .|..f.O...|
|00000320| 60 32 70 02 b6 80 66 14 | 24 4b 24 bc 61 70 70 65 |`2p...f.|$K$.appe|
|00000330| 15 7c 00 01 00 04 42 2a | 00 05 60 18 70 10 b6 80 |.|....B*|..`.p...|
|00000340| 66 12 70 01 b7 c0 54 c0 | 44 00 48 80 48 c0 13 c0 |f.p...T.|D.H.H...|
|00000350| 00 00 07 e8 2f 44 00 20 | 4c df 0c 18 4e 5e 20 5f |..../D. |L...N^ _|
|00000360| 50 4f 4e d0 84 6d 61 69 | 6e 00 00 00 4e 56 ff aa |PON..mai|n...NV..|
|00000370| 48 e7 10 30 26 6e 00 08 | 95 ca 55 4f 3f 2b 00 0e |H..0&n..|..UO?+..|
|00000380| 48 78 00 02 48 79 00 00 | 06 83 48 6e ff ba 70 01 |Hx..Hy..|..Hn..p.|
|00000390| aa 52 30 1f 36 00 67 5e | 55 4f 3f 2b 00 0e 48 78 |.R0.6.g^|UO?+..Hx|
|000003a0| 00 02 48 79 00 00 06 80 | 48 6e ff ba 70 01 aa 52 |..Hy....|Hn..p..R|
|000003b0| 30 1f 36 00 67 38 55 4f | 3f 2b 00 0e 48 78 00 02 |0.6.g8UO|?+..Hx..|
|000003c0| 48 79 00 00 06 7a 48 6e | ff ba 70 01 aa 52 30 1f |Hy...zHn|..p..R0.|
|000003d0| 36 00 67 12 0c 43 ff d5 | 66 04 70 00 60 74 20 3c |6.g..C..|f.p.`t <|
|000003e0| 00 00 00 ff 60 6c 45 f9 | 00 00 06 6e 60 0e 45 f9 |....`lE.|...n`.E.|
|000003f0| 00 00 06 62 60 06 45 f9 | 00 00 06 4c 55 4f 48 6e |...b`.E.|...LUOHn|
|00000400| ff ba 48 6e ff aa 70 07 | aa 52 30 1f 66 16 0c ae |..Hn..p.|.R0.f...|
|00000410| 41 50 50 4c ff aa 66 0c | 30 2e ff b2 02 80 00 00 |APPL..f.|0.......|
|00000420| 08 00 66 04 70 00 60 2a | 4a 39 00 00 07 e8 67 04 |..f.p.`*|J9....g.|
|00000430| 27 4a 00 12 4a 2b 00 10 | 66 04 70 01 60 14 55 4f |'J..J+..|f.p.`.UO|
|00000440| 48 6e ff ba 70 06 aa 52 | 30 1f 66 04 70 03 60 02 |Hn..p..R|0.f.p.`.|
|00000450| 70 01 4c df 0c 08 4e 5e | 4e 75 8d 45 78 61 6d 69 |p.L...N^|Nu.Exami|
|00000460| 6e 65 56 6f 6c 75 6d 65 | 00 00 4e 56 ff 62 48 e7 |neVolume|..NV.bH.|
|00000470| 10 30 24 6e 00 08 97 cb | 76 00 55 4f 20 52 48 68 |.0$n....|v.UO RHh|
|00000480| 00 06 48 79 00 00 06 36 | 1f 3c 00 01 1f 3c 00 01 |..Hy...6|.<...<..|
|00000490| 4e b9 00 00 05 3e 10 1f | 67 54 55 4f 3f 2a 00 0c |N....>..|gTUO?*..|
|000004a0| 48 6e ff 62 4e b9 00 00 | 05 7e 30 1f 0c ae 00 00 |Hn.bN...|.~0.....|
|000004b0| cf a0 ff 62 66 06 47 f9 | 00 00 06 2a 0c ae 00 00 |...bf.G.|...*....|
|000004c0| ce 5e ff 62 66 06 47 f9 | 00 00 06 1e 0c ae 00 00 |.^.bf.G.|........|
|000004d0| d1 31 ff 62 66 06 47 f9 | 00 00 06 12 0c ae 00 00 |.1.bf.G.|........|
|000004e0| d1 61 ff 62 66 06 47 f9 | 00 00 06 06 76 01 55 4f |.a.bf.G.|....v.UO|
|000004f0| 20 52 48 68 00 06 48 79 | 00 00 05 ef 1f 3c 00 01 | RHh..Hy|.....<..|
|00000500| 1f 3c 00 01 4e b9 00 00 | 05 3e 10 1f 67 12 0c ae |.<..N...|.>..g...|
|00000510| 00 00 d4 39 ff 62 66 06 | 47 f9 00 00 06 62 76 01 |...9.bf.|G....bv.|
|00000520| 55 4f 20 52 48 68 00 06 | 48 79 00 00 05 d6 1f 3c |UO RHh..|Hy.....<|
|00000530| 00 01 1f 3c 00 01 4e b9 | 00 00 05 3e 10 1f 67 12 |...<..N.|...>..g.|
|00000540| 0c ae 00 00 cc 3c ff 62 | 66 06 47 f9 00 00 06 6e |.....<.b|f.G....n|
|00000550| 76 01 20 0b 66 0c 4a 83 | 67 08 47 f9 00 00 05 a5 |v. .f.J.|g.G.....|
|00000560| 76 00 20 0b 66 06 70 00 | 60 00 01 1c 4a 2a 00 10 |v. .f.p.|`...J*..|
|00000570| 67 00 01 02 2d 79 00 00 | 07 ea ff 76 2d 79 00 00 |g...-y..|...v-y..|
|00000580| 07 ee ff 7a 60 00 00 dc | 42 2e ff c0 70 3c 2d 40 |...z`...|B...p<-@|
|00000590| ff 7e 42 ae ff 82 41 ee | ff ba 2d 48 ff b6 55 4f |.~B...A.|..-H..UO|
|000005a0| 48 6e ff 76 48 6e ff 7e | 3f 3c 00 3a a8 8f 30 1f |Hn.vHn.~|?<.:..0.|
|000005b0| 20 52 30 2e ff ba b0 50 | 66 00 00 a8 20 52 20 2e | R0....P|f... R .|
|000005c0| ff bc b0 a8 00 02 66 00 | 00 9a 55 4f 48 6e ff c0 |......f.|..UOHn..|
|000005d0| 20 52 48 68 00 06 1f 3c | 00 01 1f 3c 00 01 4e b9 | RHh...<|...<..N.|
|000005e0| 00 00 05 3e 10 1f 67 7a | 55 4f 2f 3c 70 73 6e 20 |...>..gz|UO/<psn |
|000005f0| 48 6e ff 76 48 78 00 08 | 48 6e ff 66 30 3c 08 25 |Hn.vHx..|Hn.f0<.%|
|00000600| a8 16 30 1f 55 4f 2f 3c | 61 65 76 74 2f 3c 71 75 |..0.UO/<|aevt/<qu|
|00000610| 69 74 48 6e ff 66 3f 3c | ff ff 42 a7 48 6e ff 6e |itHn.f?<|..B.Hn.n|
|00000620| 30 3c 0b 14 a8 16 30 1f | 55 4f 48 6e ff 6e 42 a7 |0<....0.|UOHn.nB.|
|00000630| 48 78 00 41 42 67 48 78 | ff ff 42 a7 42 a7 30 3c |Hx.ABgHx|..B.B.0<|
|00000640| 0d 17 a8 16 30 1f 55 4f | 48 6e ff 6e 30 3c 02 04 |....0.UO|Hn.n0<..|
|00000650| a8 16 30 1f 55 4f 48 6e | ff 66 30 3c 02 04 a8 16 |..0.UOHn|.f0<....|
|00000660| 30 1f 55 4f 48 6e ff 76 | 3f 3c 00 38 a8 8f 30 1f |0.UOHn.v|?<.8..0.|
|00000670| 67 00 ff 16 4a 39 00 00 | 07 e8 67 08 15 43 00 11 |g...J9..|..g..C..|
|00000680| 25 4b 00 12 70 01 4c df | 0c 08 4e 5e 4e 75 8b 45 |%K..p.L.|..N^Nu.E|
|00000690| 78 61 6d 69 6e 65 46 69 | 6c 65 00 00 4e 56 00 00 |xamineFi|le..NV..|
|000006a0| 20 6e 00 0c 70 00 10 10 | 52 80 20 6e 00 0c 22 6e | n..p...|R. n.."n|
|000006b0| 00 08 a0 2e 4e 5e 4e 75 | 87 50 53 74 72 43 70 79 |....N^Nu|.PStrCpy|
|000006c0| 00 00 20 6f 00 0c 22 6f | 00 08 70 00 10 18 48 40 |.. o.."o|..p...H@|
|000006d0| 10 19 4a 2f 00 04 67 0e | 4a 2f 00 06 67 04 a4 3c |..J/..g.|J/..g..<|
|000006e0| 60 10 a0 3c 60 0c 4a 2f | 00 06 67 04 a6 3c 60 02 |`..<`.J/|..g..<`.|
|000006f0| a2 3c 0a 00 00 01 1f 40 | 00 10 20 5f 4f ef 00 0c |.<.....@|.. _O...|
|00000700| 4e d0 4e 56 ff ce 20 4f | 31 6e 00 0c 00 18 a0 11 |N.NV.. O|1n......|
|00000710| 3d 40 00 0e 22 6e 00 08 | 22 a8 00 1c 4e 5e 22 5f |=@.."n..|"...N^"_|
|00000720| 5c 8f 4e d1 00 00 00 00 | 00 20 5b 69 6e 66 65 63 |\.N.....|. [infec|
|00000730| 74 69 6f 6e 20 75 6e 63 | 65 72 74 61 69 6e 20 2d |tion unc|ertain -|
|00000740| 20 75 6e 6b 6e 6f 77 6e | 20 73 74 72 61 69 6e 20 | unknown| strain |
|00000750| 69 66 20 69 74 20 69 73 | 5d 00 18 44 45 4c 44 65 |if it is|]..DELDe|
|00000760| 73 6b 74 6f 70 20 50 72 | 69 6e 74 20 53 70 6f 6f |sktop Pr|int Spoo|
|00000770| 6c 65 72 16 44 65 73 6b | 74 6f 70 20 50 72 69 6e |ler.Desk|top Prin|
|00000780| 74 72 20 53 70 6f 6f 6c | 65 72 20 5b 73 74 72 61 |tr Spool|er [stra|
|00000790| 69 6e 20 46 5d 00 20 5b | 73 74 72 61 69 6e 20 45 |in F]. [|strain E|
|000007a0| 5d 00 20 5b 73 74 72 61 | 69 6e 20 44 5d 00 20 5b |]. [stra|in D]. [|
|000007b0| 73 74 72 61 69 6e 20 41 | 5d 00 15 44 65 73 6b 74 |strain A|]..Deskt|
|000007c0| 6f 70 20 50 72 69 6e 74 | 20 53 70 6f 6f 6c 65 72 |op Print| Spooler|
|000007d0| 20 5b 73 74 72 61 69 6e | 20 41 2c 44 2c 45 20 6f | [strain| A,D,E o|
|000007e0| 72 20 46 5d 00 00 20 5b | 73 74 72 61 69 6e 20 42 |r F].. [|strain B|
|000007f0| 5d 00 20 5b 73 74 72 61 | 69 6e 20 43 5d 00 05 44 |]. [stra|in C]..D|
|00000800| 45 4c 44 42 02 42 44 02 | 44 42 68 74 74 70 3a 2f |ELDB.BD.|DBhttp:/|
|00000810| 2f 77 77 77 2e 63 73 65 | 2e 75 6e 73 77 2e 65 64 |/www.cse|.unsw.ed|
|00000820| 75 2e 61 75 2f 7e 73 32 | 31 39 31 33 33 31 2f 61 |u.au/~s2|191331/a|
|00000830| 67 61 78 2f 61 64 64 69 | 74 69 76 65 73 2f 61 75 |gax/addi|tives/au|
|00000840| 74 6f 73 74 61 72 74 2e | 68 74 6d 6c 00 00 54 68 |tostart.|html..Th|
|00000850| 69 73 20 77 6f 72 6d 20 | 69 6e 73 74 61 6c 6c 73 |is worm |installs|
|00000860| 20 69 74 73 65 6c 66 20 | 61 73 20 61 20 51 75 69 | itself |as a Qui|
|00000870| 63 6b 54 69 6d 65 20 41 | 75 74 6f 53 74 61 72 74 |ckTime A|utoStart|
|00000880| 20 66 69 6c 65 20 69 6e | 20 74 68 65 20 72 6f 6f | file in| the roo|
|00000890| 74 20 64 69 72 65 63 74 | 6f 72 79 20 6f 66 20 76 |t direct|ory of v|
|000008a0| 6f 6c 75 6d 65 73 20 61 | 74 74 61 63 68 65 64 20 |olumes a|ttached |
|000008b0| 74 6f 20 79 6f 75 72 20 | 63 6f 6d 70 75 74 65 72 |to your |computer|
|000008c0| 2e 20 49 74 20 61 6c 73 | 6f 20 65 78 69 73 74 73 |. It als|o exists|
|000008d0| 20 61 73 20 61 6e 20 65 | 78 74 65 6e 73 69 6f 6e | as an e|xtension|
|000008e0| 2e 20 49 74 20 63 6f 72 | 72 75 70 74 73 20 66 69 |. It cor|rupts fi|
|000008f0| 6c 65 73 20 77 68 6f 73 | 65 20 6e 61 6d 65 73 20 |les whos|e names |
|00000900| 65 6e 64 20 69 6e 20 27 | 64 61 74 61 27 2c 20 27 |end in '|data', '|
|00000910| 63 73 61 27 2c 20 6f 72 | 20 27 63 6f 64 27 20 28 |csa', or| 'cod' (|
|00000920| 6f 72 20 27 64 61 74 27 | 20 66 69 6c 65 73 20 6f |or 'dat'| files o|
|00000930| 76 65 72 20 32 20 6d 69 | 6c 6c 69 6f 6e 20 62 79 |ver 2 mi|llion by|
|00000940| 74 65 73 29 2e 20 49 74 | 20 69 73 20 50 50 43 20 |tes). It| is PPC |
|00000950| 6f 6e 6c 79 2e 00 0e 48 | 6f 6e 67 20 4b 6f 6e 67 |only...H|ong Kong|
|00000960| 20 77 6f 72 6d 00 05 31 | 2e 30 62 31 00 00 00 00 | worm..1|.0b1....|
|00000970| 00 00 00 00 00 00 00 00 | 00 22 40 ae 87 8a 88 9f |........|."@.....|
|00000980| 9b 8f 8f 93 84 84 99 ad | 9a 88 88 88 88 91 88 91 |........|........|
|00000990| 88 91 fc 40 80 7e 21 8b | 95 f8 41 7c 7f ac e7 c6 |...@.~!.|..A|....|
|000009a0| 8a 00 00 01 00 00 00 09 | 21 00 00 08 21 00 00 00 |........|!...!...|
|000009b0| 3c 08 23 28 54 1a d0 00 | 00 00 1c 00 32 00 00 41 |<.#(T...|....2..A|
|000009c0| 50 6c 67 00 00 00 0a 00 | 80 00 00 18 00 00 00 00 |Plg.....|........|
|000009d0| 00 00 00 09 41 75 74 6f | 53 74 61 72 74 00 00 00 |....Auto|Start...|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+