-----BEGIN PGP SIGNED MESSAGE----- ......................... VIRUS HELP DENMARK ...................... -------------------- 24 June 2001 Hi All.... Today we recived a new virus, and it is very tricky. Jan Erik Olausen the programmer of VirusExecutor & xvs.library, has decoded the virus, but the decoded virus is crypted, and very hard to decode, but Jan is working on right now. In other words, there is no problem to make a recog for the virus, but very hard to make the removal right. As soon as Jan has 'cracked' this virus, a new update of xvs.library will be relased. At this time the dropper (installer) of the virus is unknown to us, but we are looking for it. If your system is infected with this virus, a requester will pop up, and you can read this in Polish: "POWYÚSZA INFORMACJA MA NA CELU ZAZNAJOMIENE I OSTRZEÚEME CIË PRZED NIEZWYKLE NIEBEZPIECZNYM WIRUSEM!" "OSTRZEÚME" And in English: - --------------- "This information is just for telling you and warn you about extremelly dangerous virus!" "WARNING!" There is "NO" cure for this virus right now. This virus will infect everything that is executed. And on my test A1200 over 500 files, was infected in under 5 minutes. Thnis is what we know of the virus: Virus Type.... : Linkvirus Virus name.... : (no name yet) Virus size.... : 6796 bytes Virus installer: unknown If you know or find the installer od this virus, plaese let us know. Thank to Mr. Duda sending the virus to us, and to Jan Erik Olausen for the test of the virus. Regards.... __ Jan Andersen E-Mail..: vht-dk@post4.tele.dk __ /// ------------ FidoNet.: 2:237/38.100 \\\/// Virus Help Denmark AmyNet..: 39:140/127.100 \XX/ www.vht-dk.dk VirNet..: 9:451/247.0 ... Did you know, that the newest version of xvs.library is v33.26 !! - ------------------------------------------------------- Archive has been checked and a .sig file has been added so you can verify there was no tampering with the file after placed on the server. MD5SUMS and Readme PGP signed by: Charlene e-mail: ml-clm@mailandnews.com md5sum: ftp.vapor.com/pub/3rdparty/ [Start md5sum checksum file]----------------------- 1cb0daa3593d8559b09f06a08ce3c6ee *file_id.diz df6aa9a00da16e2a445709a514f37248 *vht-dk_102.txt [End md5sum checksum file]----------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3 Charset: noconv Comment: Signed by Charlene, using PGPAmiga iQCVAwUBOzbmcPrh//oWbqdVAQGeqQQAnszNjhjWshoXA98Ptf44AzHxvwxiu525 EqGi0SFNVpBIXA6h1JXS9+oK+31tbviFHvnzMJfOPeE2GDuo2V92jBMHkhjdPYLg kyvYEn3YlaRBXLK8kjoh1xXfN6jAXINxDa/3LCyiGWCQxkGJhUPdbU1kPmr4sGT+ tN7gaQwF9wg= =Rq9y -----END PGP SIGNATURE-----