Virus Warnings from 2001 (Jan 01 - Dec 31, 2000)
   ______________________________________________________________


   Amiga

    08 December 2001 - VHT-DK Warning: New 'Bobek-3 linkvirus' Found
   Virus Help Demark says a new linkvirus has been found a few days ago,
   we are not sure if this virus is in the wild. It was send to directly
   to Zbigniew Trzcionkowski (The programmer of Safe). Zbigniew received
   one infected file. This new virus, is a clone of the "Bobek-2" linkvirus,
   and is named "Bobek-3". This is able to disable the antivirus programs,
   We do not know if this virus was released in any way, so if you get a
   requester poping up, telling you that something is trying to disable
   the xvs.library, please let us know.
   This is what we know of the virus:
   Virus name: Bobek-3
   Virus Type: Linkvirus
   Virus size: about 2.000 bytes (Uses polmorphic engine)
   Follow the above link for viruswarning - file is named vht-dk112.lha.
   * Click here for VHT-DK Virus Warning vht-dk112 Readme
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

    08 December 2001 - VHT-DK Warning: Two Trojan's Found On Aminet
   This is an update to the December 6th warning from Aminets MOTD.
   Virus Help Demark says two archives found on Aminet contains a new
   trojan. It is said to be AGA demos, but if you run these demo's on a PC
   using 'WinUAE', your system will be deleted. These 'trojan demos' comes
   from a Polish demo group. Why they would program something like this, I
   don't know.
   This is some info about the two archives:
   Trojan name... : AME-DSD Trojan (Name might be changed later)
   Trojan name... : PSL-KMJ Trojan (Name might be change later)
   ------------ Code start -----------------------
   Warning!!! UAE System for lamers detected!!!
   -  System will reboot after mouse button...
   run c:delete s:startup-sequence force quiet >NIL:
   ------------ Code end -------------------------
   Follow the above link for viruswarning - file is named vht-dk113.lha.
   * Click here for VHT-DK Virus Warning vht-dk113 Readme
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

    06 December 2001 - Aminet: Virus Alerts on Two Files
   Aminet Amiga software archive has this 'Message of the day:'
   * VIRUS ALERT. demo/aga/AME-DSD.lha and demo/aga/PSL-KMJ.lha delete
     everything on SYS: if used in UAE.

    18 November 2001 - MUI Security Bug-Fix (update)
   Since the time of the original release of Jörg Strohmayer, having come
   up with a fix for all MUI programs, there has been a few public posts
   by other interested parties. David 'zapek' Gerber, of Vapor, has quite
   a few comments that are well worth reading by any Amiga MUI user. Either
   finger zapek@vapor.com or visit http://v3.vapor.com/?finger=zapek by
   following the above link.  My personal decision after reading Zapek's
   comments, was to remove the newly installed muilowlevel.library done
   by Jörg Strohmayer.

    10 November 2001 - Major Escape Sequence Exploit In MUI
   The Internet News section of Amiga.org has this posted by Wayne Martin:
   Warning: A major exploit in MUI internet software has been found, The
   exploit would allow commands to be executed on your machine. Everything
   from STRICQ to YAM is effected, although a fix for YAM is coming soon.
   So far Vapor has confirmed its applications such as AmIRC etc are not
   succeptable to this exploit. To help prevent the use of this exploit on
   your system, make sure PIPE: and similar PIPE devices are not mounted
   on your system. You may also wish to rename or password protect your
   important system commands such as delete, format and so forth.
   * abraxis Security Advisory 2001-08-11 Escape Sequence Exploit

    28 October 2001 - VHT-DK Warning: New 'Harrier A linkvirus' Found
   Virus Help Demark says a new virus is found. As far as we know, it has
   not been spread in the wild. This new virus, named "Harrier A" was able
   to disable the antivirus programs, but with  the new xvs.library v33.36,
   this in no longer possible, due to the new security stuff in the
   xvs.library code.
   Follow the above link for viruswarning - file is named vht-dk111.lha.
   * Click here for VHT-DK Virus Warning vht-dk111 Readme
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

    14 October 2001 - Warning: Bobek 3 Virus On It's Way
   Jan Erik Olausen, anti-virus programmer of VE, says "There will soon be a
   Bobek 3 virus out, so be at alert... If the Bobek 3 also hides in a
   Installer script, VirusExecutor (2.22) will say so..."
   * Click here for VirusExecutor v2.22
   * VirusExecutor Homepage at Virus Help Team Canada
     Has links to all files required and recommended to run VE2.22

    11 October 2001 - VHT-DK Warning: New Installer Of Bobek2 Found
   Virus Help Demark says the trojan will install the known 'Bobek 2'
   linkvirus. It has been on Aminet for about 4 month, but is has been
   removed now. So if you have installed the archive CoolBall.lha, it is
   a very good idea to check your system with an updated antivirus program
   and also the newest update of the 'xvs.library'.
   Follow the above link for viruswarning - file is named vht-dk110.lha.
   * Click here for VHT-DK Virus Warning vht-dk110 Readme
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

    10 October 2001 - Discovered New Installer Of Old BOBEK2 Linkvirus!
   Zeeball sent this warning with his new Safe Anti-virus program:
   There has been discovered new installer of old BOBEK2 linkvirus! It has
   been on Aminet for quite long time, and as I heard it even reached Exec
   cover CD. The archive containing the dropper of this virus is called:
   Name: CoolBall.lha
   By:   Patrz Podnogi (accoriding to funny readme in very poor english)
   File: Ball/Install - installs BOBEK2 linkvirus in memory
   This archive is said to be cool backdrop for WB, but the included
   installer is mixed with dropper of BOBEK2. Same technique has already
   been used with Bastard linkvirus.
   Please check your systems with recent AV software as this virus is quite
   buggy at all! The installer script recognition will be included
   in next xvs.library release.
   Thanks to Marcin Lewandowski for reporting.
   Thanks to Jan Andersen for the archive.

    19 August 2001 - VHT-DK Warning: Trojan in Aminet file Muahaha.lha
   Virus Help Denmark says a new trojan has been found today. The trojan
   will delete every file that has the "key" in the name of the file. This
   trojan is just like the one that has found of the 15'th of August, named
   MZ-Makey trojan. But this trojan was found on Aminet, but removed now.
   The xvs.library package will be released very soon.
   Follow the above link for viruswarning - file is named vht-dk109.lha.
   * Click here for VHT-DK Virus Warning vht-dk109 Readme
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

    18 August 2001 - VHT-DK Warning: Hitch-Hiker v5.00 For Third Time
   Virus Help Denmark says here we go again, the 3rd installer of
   Hitch-Hiker has been found this weekend. The archive was uploaded to
   AmiNet, but it has been removed now. Again, there is "NO" cure for
   this virus right now.
   Follow the above link for viruswarning - file is named vht-dk108.lha.
   * Click here for VHT-DK Virus Warning vht-dk108 Readme
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

    17 August 2001 - VHT-DK Warning: Hitch-Hiker v5.00 UPDATE
   Virus Help Denmark says there might just be more installers of the
   'Hitch-Hiker 5.00' virus out there. The 'xvs.library' (external Virus
   Scanner library) will be updated as soon as possible. In the mean time,
   take care...
   Follow the above link for viruswarning - file is named vht-dk107.lha.
   * Click here for VHT-DK Virus Warning vht-dk107 Readme
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

    17 August 2001 - VHT-DK Warning: Hitch-Hiker v5.00 Virus Found
   Virus Help Denmark reports they have found the installer of the new
   'Hitch-Hiker 5.00' linkvirus. There is NO cure for this virus right now
   Follow the above link for viruswarning - file is named vht-dk106.lha.
   * Click here for VHT-DK Virus Warning vht-dk106 Readme
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

    15 August 2001 - VHT-DK Warning: New Trojan Found
   Virus Help Denmark reports a new trojan has been found today. This trojan
   says that it will make a key-file that will work with over 250 programs.
   Well, I guess that there are someone that will fall for this kind of
   program. The trojan will delete every file that has the "key" in the name
   of the file, in your S:, Libs:, Devs: and L:.
   Follow the above link for viruswarning - file is named vht-dk105.lha. 
   * Click here for VHT-DK Virus Warning vht-dk105 Readme
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

    01 August 2001 - VHT-DK Warning: Installer of SMEG 2 Virus Found
   Virus Help Denmark reports the installer of the new linkvirus SMEG 2a &
   SMEG 2b has been found. Follow the above link for viruswarning - file is
   named vht-dk104.lha. 
   * Click here for VHT-DK Virus Warning vht-dk104 Readme
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

   Date: July 01, 2001
   Platform: Amiga
   Update About:  Bobek2 Infected Archive Found
   Report From:   Virus Help Team Denmark (VHT-DK)
   * Release Note: Virus Help Denmark reports another archive that is
     infected with the 'Bobek2' linkvirus has been found. It was on Aminet
     for a short time, but is has been removed now. But there just might be
     a few more archives our there, so take care.. Use VirusExecutor, VirusZ
     & VirusChecker, with (and this is very important) the xvs.library
     v33.26 to remove the virused from Devoprefs file.
   * Click here for VHT-DK Virus Warning vht-dk103 Read Me
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

   Date: June 24, 2001
   Platform: Amiga
   Alert About:   Linkvirus Found (no name yet)
   Report From:   Virus Help Team Denmark (VHT-DK)
   * Release Note: Virus Help Denmark reports they received a new virus, and
     it is very tricky. Jan Erik Olausen, the programmer of VirusExecutor &
     xvs.library, has decoded the virus, and is working on it right now.
     There is "NO" cure for this virus right now.
   * Click here for VHT-DK Virus Warning vht-dk102
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

   Date: June 10, 2001
   Platform: Amiga
   Update About:  Bobek-2 Linkvirus Found
   Report From:   Virus Help Team Denmark (VHT-DK)
   * Release Note: Virus Help Denmark reports "What we think is the
     installer of the new linkvirus 'Bobek2' has been found. It was on
     Aminet but has been removed now. But there just might be a few more
     installers our there, so take care. Right now that is no cure for the
     'Bobek2' virus."
   * Click here for VHT-DK Virus Warning vht-dk101 Read Me
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

   Date: April 25, 2001
   Platform: Amiga
   Update About:  Installer Of Linkvirus BOBEK Found
   Report From:   Virus Help Team Denmark (VHT-DK)
   * Release Note: Virus Help Denmark reports the archive (OozeAGA.lha) was
     on Aminet for a very short time, but it has been removed now.
   * Click here for VHT-DK Virus Warning vht-dk99
   * VirusExecutor v2.15 finds and removes BOBEK link-virus
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

   Date: April 24, 2001
   Platform: Amiga
   Warning About: "BOBEK" Link-virus Found
   Report From:   Virus Help Team Denmark (VHT-DK)
   * Release Note: a new link-virus has been found, the installer
   is still unknown, we are looking for it. This new virus will add 460
   bytes to every file that is opened or executet. That also means that
   even an antivirus program (that the virus is unknown to), will infect
   every file it checks for virus. The new virus patches dos.library ExNext
   function to spread it self. The new virus has been given the name
   "BOBEK", this is the text you can read in the end of every infected tile.
   At this time there is no cure to this virus, but we hope to have an
   update of VirusExecutor ready later today, to fix this virus.
   Since the time of the vht-dk alert, VE had been updated to v2.14.
   * Click here for VHT-DK Virus Warning vht-dk98
   * VirusExecutor v2.14 updated for BOBEK link-virus
   * Subscribe online to the VHT-DK Virus Warnings Announcement list.

   Date: April 14, 2001
   Platform: Amiga
   Warning About: HitchHiker Infected Archive Found
   Report From:   Virus Help Denmark (VHT-DK)
   * Release Note: Another infected archive has been found. The archive
     is infected with "Hitch-Hiker 4.11". All the big antivirus programs
     can find HitchHiker 4.11 linkvirus, so there is no problem there.
   * Click here for VHT-DK Virus Warning vht-dk97

   Date: April 10, 2001
   Platform: Amiga
   Warning About: New Linkvirus Found
   Report From:   Virus Help Team Denmark (VHT-DK)
   * Release Note: A new link virus has been found. The virus is polymorphic
     and hacks VirusCheckerII in memory to make it infect all files you
     check. The virus is very well coded as for the things we see these
     days. Be sure to get Safe v15.1 SE which can find this virus.
   * Click here for VHT-DK Virus Warning vht-dk96
   * Click here for Latest Safe v15.1 SE

   Date: April 10, 2001  * Updated to Include Safe v14.10
   Platform: Amiga
   Warning About: TCP Trojans Inside Aminet Files
   Report From:   Virus Help Team Denmark (VHT-DK)
   * Release Note: Four archives with TCP trojan's has been found on Aminet
     today. The four archives reported at vht-dk are:
       o fblit.lha       - v 3.84 - 142.086 bytes
       o Safe.lha        - v14.10 -  20.737 bytes
       o stackattack.lha - v 1.2b -  69.229 bytes
       o BlazeWCP.lha    - v 1.8  -  32.862 bytes
     If you have installed one or more of these archives, then delete the
     files you have installed. All of these archives has a new TCP trojan
     inside, and the trojan will send an e-mail to Haage & Partner, with a
     stupid text. Virus Help Denmark hopes to have a cure for these trojan
     later tody, so please check back here or at VHT-Denmark Amiga News.
     Virus Help Denmark have been able to get some clean versions of the fake
     archives, so if if you have installed one or more of the fake archives
     you can download the clean archives by following the links on their
     Amiga News page above. Aminet says that as a protest against this abuse
     of Aminet, they will shut down their services on "us.aminet.net" and
     "de.aminet.net" until Friday.
   * Click here for VHT-DK Virus Warning vht-dk95

   Date: April 09, 2001
   Platform: Amiga
   Warning About: BlazeWCP.lha, FBlit.lha, and StackAttack.lha
                  and possibly others
   Report From:   Amiga.org and Subscriber to VirusChecker2 Mail List
   * Release Note: If you downloaded said files, please do not install
     them. Virus Help Denmark should have a fix shortly.
   * Click here for Amiga.org Post on Aminet Virus warning

   Date: January 27, 2001
   Platform: Amiga
   Warning About: NO Virus/Trojan In The "CK-Bombfire" File
   Report From:   Virus Help Denmark
   * Release Note: There is NO virus/trojan in the "CK-Bombfire" file, as
     users can read on tour warning page, it is a bug in xvs.library. Alex
     will release a new update of xvs this weekend  (I hope)......
   * Click here for Latest Amiga xvs.library

   Date: January 26, 2001
   Platform: Amiga
   Warning About: Amiga TCP Trojan Has Been Found
   Report From:   Virus Help Team Denmark (VHT-DK)
   * Release Note: At this time only Safe v14.7 (file name Safe147.lha), can
     detect the trojan and remove the tojan from memory, and within a few
     days, by the "xvs.library".
   * Click here for VHT-DK Virus Warning vht-dk94
   * Click here for Safe v14.7 Program

   Date: January 23, 2001  * See Update dated Jan 27th
   Platform: Amiga
   Warning About: DKG-Blum Virus on Amiga Active CD 17
   Report From:   Amiga.org
   * Release Note: There is a virus on Amiga Active CD 17. The file
     AACD17:AACD/Demos/Spoletium3/Demo/2.CamelKaos-Bombfire/CK-Bombfire.exe
     is infected with the DKG-Blum virus. This virus is detected with version
     33.24 of xvs.library, but that library wasn't released until two days
     after AACD17 was mastered.
   * Click here for Amiga Active's Statement on Amiga Active CD 17
   * Click here for Amiga.org Posts on Amiga Active CD 17 has a virus
   * Click here for Latest Amiga xvs.library

   Top of Page

   Back to the Virus Archives page

Virus Help Team Canada Site (c)2000-2012 by Charlene
VHT-CAN and our webhoster disclaimes any responsibility for software obtained through this site. All copyrights and trademarks are acknowledged
Contact VHT-Canada

Last Updated: January 27, 2004