Virus Warnings from October 2001 ______________________________________________________________ [Jump to Amiga] [Jump to Windows] [Jump to Mac] [Jump to Linux] [Jump to Misc] ______________________________________________________________ Amiga 28 October 2001 - VHT-DK Warning: New 'Harrier A linkvirus' Found Virus Help Demark says a new virus is found. As far as we know, it has not been spread in the wild. This new virus, named "Harrier A" was able to disable the antivirus programs, but with the new xvs.library v33.36, this in no longer possible, due to the new security stuff in the xvs.library code. Follow the above link for viruswarning - file is named vht-dk111.lha. * Click here for VHT-DK Virus Warning vht-dk111 Readme * Subscribe online to the VHT-DK Virus Warnings Announcement list. 14 October 2001 - Warning: Bobek 3 Virus On It's Way Jan Erik Olausen, anti-virus programmer of VE, says "There will soon be a Bobek 3 virus out, so be at alert... If the Bobek 3 also hides in a Installer script, VirusExecutor (2.22) will say so..." * Click here for VirusExecutor v2.22 * VirusExecutor Homepage at Virus Help Team Canada Has links to all files required and recommended to run VE2.22 11 October 2001 - VHT-DK Warning: New Installer Of Bobek2 Found Virus Help Demark says the trojan will install the known 'Bobek 2' linkvirus. It has been on Aminet for about 4 month, but is has been removed now. So if you have installed the archive CoolBall.lha, it is a very good idea to check your system with an updated antivirus program and also the newest update of the 'xvs.library'. Follow the above link for viruswarning - file is named vht-dk110.lha. * Click here for VHT-DK Virus Warning vht-dk110 Readme * Subscribe online to the VHT-DK Virus Warnings Announcement list. 10 October 2001 - Discovered New Installer Of Old BOBEK2 Linkvirus! Zeeball sent this warning with his new Safe Anti-virus program: There has been discovered new installer of old BOBEK2 linkvirus! It has been on Aminet for quite long time, and as I heard it even reached Exec cover CD. The archive containing the dropper of this virus is called: Name: CoolBall.lha By: Patrz Podnogi (accoriding to funny readme in very poor english) File: Ball/Install - installs BOBEK2 linkvirus in memory This archive is said to be cool backdrop for WB, but the included installer is mixed with dropper of BOBEK2. Same technique has already been used with Bastard linkvirus. Please check your systems with recent AV software as this virus is quite buggy at all! The installer script recognition will be included in next xvs.library release. Thanks to Marcin Lewandowski for reporting. Thanks to Jan Andersen for the archive. Top of Page Windows No warnings for October 2001 Top of Page Macintosh No warnings for October 2001 Top of Page Linux 27 September 2001 - Latest Virus Descriptions Warning About: StrangeBrew * Click here for F-Secure Virus Report Aliases: Java virus, MPFS02 Release Note: Found in August 1998, StrangeBrew was the first virus to infect Java files. Being Java based virus the StrangeBrew is capable of executing in almost any platform that has Java runtime environment installed. The virus is capable of executing on Windows and Linux platforms and in PDA devices which have Java runtime installed. StrangeBrew does not do anything else except spread. As such, it can not be considered a realistic threat. It has not been found in the wild. Top of Page Miscellaneous 18 October 2001 - An Outbreak of Anthrax on the Internet? Is this just the beginning? Kaspersky Labs reports that two new Internet worms are making the rounds, trying to spread under the guise of important information about the anthrax virus. 18 October 2001 - WebMoney Users Once Again in a "High-Risk" Group The latest Trojan program goes after WebMoney purses. Kaspersky Labs, announces the detection of the new Trojan, KWM, which allows malefactors imperceptibly to control infected computers and gain access to the personal payment accounts of WebMoney users. 18 October 2001 - October 16: The Apocalypse is Postponed SirCams destructive function is not triggered on October 16, which is just like any other day. According to announcements made by a number of media sources, on October 16, a new wave of incidences connected with the widespread, destructive, malicious Internet worm SirCam was supposed to splash across the world. Kaspersky Labs moved to refute these claims (posted by KLabs on Oct 15), and announce that, according to what currently is known, modifications of the SirCam virus contain a bug, which results in the worm not being capable of destroying any data on this date. Top of Page Back to the Virus Archives page