...........................  VIRUS HELP DENMARK  ..........................

 Hi All....

 A new link-virus has been spread the last days. At this time no viruskiller
 is abel to find  and kill this sucker.  The virus has been send to all  the
 major  AntiVirus programmers,  so it is only  a matter of  time, before the
 viruskillers can find and remove this 'sucker'.

 There is no known program or archive that spreads this new virus.  All that
 we know of this  new virus,  is that it will add 1260 bytes to all programs
 that is executed.  And with in these 1260 bytes that  is added you can read
 "TRSi".

 Well, I don't think that TRSi has anything to do with this.

 As soon as a killer is released  that will kill this virus, we will let you
 know so check your contacts or our homepage.

 Heiner Schneegold,  programmer of VT  has made a quick test of this sucker,
 and here is what he found out:

 ZIB-Virus
 verbogener Vektor: Loadseg
 LastAlert: "TRSi"
 Eigener Process: ZIB
 Fileverlaengerung: #1260 Bytes
 Link hinter 1.Hunk
 RTS wird in bra.s umgewandelt
 falls bsdsocket.lib vorhanden, Veraenderungen


 Well, this is all we know for now.

 After we wrote the warning, a few killers has been updated so the they will
 be abel to find and kill this "ZIB" virus.

 VT v3.01              (30.11.97) - Heiner Schneegold
 FastVirusKiller v1.12 (29.11.97) - By Dave Jones
 AntiBeol v1.34a       (29.11.97) - By Gideon Zenz
 KillAnother v1.00     (29.11.97) - By Harry Sintonen

 You can download these killers from our homepage or support BBS.

 Thanx to Dave Jones, Harry Sintonen and Jakob Anderson for sending this new
 virus to us. It is on it's way to all major antivirus programmers.


   Regards....
      __           Jan Andersen         E-Mail..:  jan@vht-dk.dk
 __  ///          --------------           FidoNet.:  2:237/38.100
 \\\///       Virus Help Team Denmark         AmyNet..: 39:140/127.100
  \XX/         http://www.vht-dk.dk              VirNet..: 9:451/247.0

[Go back]