-----BEGIN PGP SIGNED MESSAGE----- ......................... VIRUS HELP DENMARK ...................... -------------------- 28 October 2001 Hi All.... A new linkvirus has been found a few days ago, but not in the wild. It was send to directly to Georg Hoermann (programmer of xvs.library) by the virus-programmer. Georg recived the hole source code. This new virus, named "Harrier A" was able to disable the antivirus programs, but with the new xvs.library v33.36, this in no longer possible, due to the new security stuff in the xvs.library code. And maybe that is the reason why the virus-programmer send the code to Georg Hoermann. We do not know if this virus was released in any way, so if you get a requester poping up, telling you that something is trying to disable the xvs.library, please let us know. This is what we know of the virus: Virus name.... : Harrier A Virus Type.... : Linkvirus Virus size.... : 4.800 bytes (Uses polmorphic engine) Infects....... : 020+ machines In the decoded virus you can read: .[ Harrier .A 1.02 virus, (c) by xxxxxxxxxxx..xxx ] .Markus! Come back!Hç..,z (xxxxxxx = Programmers name, removed by Virus Help Denmark) The xvs.library package will be released very soon..... Thanks to 'Georg Hoermann' for sending the archive, and to Zeeball for the first test. Regards.... __ Jan Andersen E-Mail..: vht-dk@post4.tele.dk __ /// ------------ FidoNet.: 2:237/38.100 \\\/// Virus Help Denmark AmyNet..: 39:140/127.100 \XX/ www.vht-dk.dk VirNet..: 9:451/247.0 ... Did you know, that the newest version of xvs.library is v33.36 !! - ------------------------------------------------------- Archive has been checked and a .sig file has been added so you can verify there was no tampering with the file after placed on the server. MD5SUMS and Readme PGP signed by: Charlene e-mail: ml-clm@mailandnews.com md5sum: ftp.vapor.com/pub/3rdparty/ [Start md5sum checksum file]----------------------- a182fc47ed625682143287fc5a864ee1 *file_id.diz cdf9d0b70bfae0c3dd60558c48f740b8 *vht-dk_111.txt [End md5sum checksum file]----------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3 Charset: noconv Comment: Signed by Charlene, using PGPAmiga iQCVAwUBO9yU6vrh//oWbqdVAQGi5AP9HOFy4+6mYG0GeiX+WsS0zY88d97QVUsi ZNSXmpoj2Kjh8sP+HjB9H7EQx7WXOh3hrMrGVP501YYQHHZQdlYQrC4ndPrTpGd3 0S1+EgaynUyJXx1PcJj6fHPd+Pv99RMUM667iv6jMA9K+FnwNHmmV9kcIgLAik7p BB7878UUD+A= =JvgG -----END PGP SIGNATURE-----