Virus Warning - Virus Help Team

VIRUS HELP TEAM
Denmark & Canada



Penetrator Link Virus

.........................  VIRUS HELP DENMARK  ......................

Hi All....                                                 24.06.2001

Today we recived a new virus, and it is very tricky. Jan Erik Olausen
the programmer of VirusExecutor & xvs.library, has decoded the virus,
but the decoded virus is crypted, and very hard to decode, but Jan is
working on  right now.  In other words, there is no problem to make a
recog for the virus, but very hard to make the removal right. As soon
as Jan has 'cracked' this virus,  a new update of xvs.library will be
relased.

At  this time the dropper (installer)  of the virus is unknown to us,
but we are looking for it.

If your system is  infected with this virus, a requester will pop up,
and you can read this in Polish:


  "POWYÚSZA INFORMACJA MA NA CELU ZAZNAJOMIENE
   I OSTRZEÚEME CIË PRZED NIEZWYKLE
   NIEBEZPIECZNYM WIRUSEM!"
  "OSTRZEÚME"

And in English:
---------------
  "This information is just for telling you
   and warn you about extremelly
   dangerous virus!"
  "WARNING!"


There is "NO" cure  for this virus right now.  This virus will infect
everything that is executed. And on my test A1200 over 500 files, was
infected in under 5 minutes.


This is what we know of the virus:

Virus Type.... : Linkvirus
Virus name.... : Penetrator 2001
Virus size.... : 6796 bytes
Virus installer: unknown

If you know or find the installer or this virus, plaese let us know.

Thank to Mr. Duda sending the virus to us, and to Jan Erik Olausen
for the test of the virus.


   Regards....
      __          Jan Andersen          E-Mail..:  vht-dk@post4.tele.dk
 __  ///          ------------             FidoNet.:  2:237/38.100
 \\\///        Virus Help Denmark             AmyNet..: 39:140/127.100
  \XX/            www.vht-dk.dk                  VirNet..: 9:451/247.0




Virus Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht-dk.dk