amiga-news.de - Virus Help Denmark: Hitch-Hiker v5,00 linkvirus found

17.Aug.2001
Jan Andersen (E-Mail) Virus Help Denmark: Hitch-Hiker v5,00 linkvirus found
Virus Help Denmark hat den Installer des neuen Linkvirus ´Hitch-Hiker 5.00´ in einem Archiv namens WBCycle21.lha gefunden. Derzeit gibt es noch keine Möglichkeit, das Virus zu erkennen bzw. zu eliminieren. Das Virus versteckt sich im Speicher und hängt 3732 Bytes an jede greifbare Datei, und es verbreitet sich in Windeseile. Wenn Sie veränderte Dateien finden, ersetzen Sie diese durch die Originaldateien.

Hier die komplette Originalmeldung:

We have found the installer of the new 'Hitch-Hiker 5.00' linkvirus.

There is "NO" cure for this virus right now. You can find infected files, you will have to replace the infected files with new clean files. The 'Hitch-Hiker v5.00' virus will add 3732 bytes to every infected file, and place it self in memory, so you will have to watch out for that as well. This virus will infect anything that it can get into. And on my test A1200 over 400 files, was infected in under 3 minutes.

This virus comes from Poland again, just like the other viruses that we have found in the last 6 month. But why don't you guy's program something usefull, that everyone can enjoy?

In the code (decoded), you can read:

Hitch-Hiker Millenium (5.00)
Featuring the 1's Advanced V8sA Op'miz Code
A welcom user of VRU!
-= 1995-2 =-
-= HAVOC =-

The archive was uploaded to AmiNet, but we stopped the archive before it got on-line for reel. (Thanks Urban).

This is what we know of the virus:

Virus Type.... : Linkvirus
Virus name.... : Hitch-Hiker 5.00 (Millenium)
Virus size.... : 3732 bytes
Archive name.. : WBCycle21.lha
Archive size.. : 25.818 bytes (lha packed)
Installer name : WBCycle
Installer size : 22.756 bytes
Archive info.. : Cycles a single WB colour to pretty up Windows.

This is a fake archive. The programmer of 'WBCycle', Steve Hargreaves has not released an update of WBCycle since v1.0.

There might just be more installers of the 'Hitch-Hiker 5.00' virus out there. If you find anything please send it to us.

The 'xvs.library' (external Virus Scanner library) will be updated as soon as possible. In the mean time, take care...

Thanks to Thomas Klein for sending the archive to us.
(ps)

[Meldung: 17. Aug. 2001, 19:49] [Kommentare: 0]
[Per E-Mail versenden] [Druck-Version] [ASCII-Version]

< Nächste Meldung

Vorige Meldung >