-----BEGIN PGP SIGNED MESSAGE----- ......................... VIRUS HELP DENMARK ..................... -------------------- 24 April 2001 Hi All.... A new link-virus has been found, the installer is still unknown, we are looking for it. This new virus will add 460 bytes to every file that is opened or executet. That also means that even an antivirus program (that the virus is unknown to), will infect every file it checks for virus. The new virus patches dos.library ExNext function to spread it self. The new virus has been given the name "BOBEK", this is the text you can read in the end of every infected tile. Okay, here is what we know so far: Archive name : ? Archive size : ? Virus name : BOBEK Virus size : 460 bytes Infection : dos.library ExNext At this time no antivirus program can find this new virus, so take big care out there. We are right now testing a beta version of the antivirus program VirusExecutor,that will be abel to find the virus and to remove it from memory. Thanks to Ingo Foerster for sending the infected files... Regards.... __ Jan Andersen E-Mail..: vht-dk@post4.tele.dk __ /// ------------ FidoNet.: 2:237/38.100 \\\/// Virus Help Denmark AmyNet..: 39:140/127.100 \XX/ www.vht-dk.dk VirNet..: 9:451/247.0 ... Did you know, that the newest version of VirusExecutor is v2.13 - ------------------------------------------------------- Archive has been checked and a .sig file has been added so you can verify there was no tampering with the file after placed on the server. MD5SUMS and Readme PGP signed by: Charlene e-mail: ml-clm@mailandnews.com md5sum: ftp.vapor.com/pub/3rdparty/ [Start md5sum checksum file]----------------------- f40c7c03b5a85286dd83d20ff342f755 *file_id.diz 049c4afd282487dd231eb366638aa72d *VHT-DK.txt 9180faadb8cd190d4876c44360181fd7 *VHT-DK98.TXT [End md5sum checksum file]----------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3 Charset: noconv Comment: Signed by Charlene, using PGPAmiga iQCVAwUBOuX45vrh//oWbqdVAQG9UQQAkrOb1c00DCPO/r8UaIxag3wpLObd5Njr QQVATl8LXv3dJiTVZcGOujxgqDa+izkYaLmes9BHPehHAafa6tMcRllY//8vJSZT Iz5UOPulN3M5cA3R5BcuWFpXw8I9s2vcYiBw7Lm38304hs2R/cvuccl0mc928L5d +7yITPsk/2A= =RTgM -----END PGP SIGNATURE-----