
             SAFE HEX INTERNATIONAL VIRUS WARNING 03-03-94


Please take care for the new blasted Eleni clock virus, which is worldwide
spreaden  just  now.  Please spread this text file to your favorite BBS'es
and  write  a  letter  to  all  the  users to tell, that this text file is
named VirWarn0994.lha.  In that way you can help a lot of people.

Thank you very much for your help!  


:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::


HERE YOU HAVE SOME FACTS ABOUT THIS NEW VERY NASTY BOOT VIRUS:


ELENI CLOCK VIRUS 


                     Well....here you have the first virus which affect the
                     internal clock in your Amiga.

                     Rumors  have been heard in several years about a clock
                     virus in the meaning a virus, which could live in your
                     internal  clock and survive living by current from the
                     battery in this clock.  Of course this isn't possible.

                     Even if you have some few possible byte in the memory,
                     this  memory is all too little for a virus to survive.

                     The  Eleni virus is an ordinary bootvirus, but a quite
                     new nasty type,  which have several new features which
                     have not been seen before:



                     WHAT IS HAPPEN
                   - The  first time you are booting with an Eleni infected
                     disk,  your  second  disk drive will start running and
                     the  lamp  will be active a while.  (Of course only if
                     you  have a second drive).  This virus does not infect
                     if you have kickstart 1.2 or 1.3.

                   - The  5.th  time  you boot-up with an infected disk you
                     will  get  the  following  screen message in the upper
                     left corner: 

                     "*Eleni* *Eleni* *Eleni* *Eleni*"


                   - Between  the  1.st and  the  9.th boot-up the internal
                     clock  is  changed  and is set and saved to a new date
                     for  every  boot-up with an infected disk (A test have
                     given  different  dates  from  the years 1924 to 2014.

                   - The  9.th  time  you boot-up with an infected disk the
                     clock set and saved to the date to-day + 20 years.

                   - At  the  same  time  all disk drives will start to run
                     periodic and the infected disk(s) will not be execute-
                     able.  (Before  you  clear  the  virus in the memory).

                   - This  very  special  bootvirus  don't  overwrites  the
                     bootblock,  but replace the original bootblock on some
                     other  tracks.  When  the  Eleni  virus is removed you
                     will  get  the  original  bootblock automatic replaced
                     again??? ....What do you mean surprised?

                   - This  virus can even infect a track loader disk (Demos
                     and like). Maybe surprised again?


                     DAMAGE
                     After  the  9.th  boot-up you will get pseudo checksum
                     errors in all files on your disk. But all these errors
                     will  disappear again,  when  you install (remove) the
                     Eleni virus from the bootblock again.


                     ATTENTION!
                     This  Eleni  virus  can  infect  your harddisk too, so
                     please be very careful in the future! 

                     BootX  recog  1.96  knows as the only viruskiller this 
                     very nasty virus!!!

          
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::


 

 03-03-94   THE LAST VERIFIED VIRUS KILLER UPDATES:
            --------------------------------------

            Of cause you are using one of these excellent killers and not
            an old out of date one ?


            VT 2.61                   20-02-94.   157.340 bytes unpacked.

            VirusChecker 6.34         30-01-94     44.508 bytes unpacked.

            BootX 5.23b               20.06-93     79.912 bytes unpacked.

         *1 BootX recog  1.96         11-02-94     32.484 bytes unpacked.

            VirusZ II 1.05            02-02-94     66.116 bytes unpacked.

            Virus Interceptor 1.15    19-10-93     14.332 bytes unpacked.
            
            AntiCicloVir V2.0         01-05-93     53.628 bytes unpacked.

            VirusWorkshop 3.2         29-02-94    105.016 bytes unpacked.         

            
         *1 REMARK within a few days the BootX recog 2.03 will be released.
            with the following new viruses:

                            
                                     Sentinel
                                     Antichrist
                                     Fuck Device
                                     Mongo
                                     Dark Avenger
                                     Telecom
                                     Interlamer

                                               
         *2 Warning  VirusZ II 1.03 (67076 bytes) and 1.04 is fake versions 
            don't use these versions.                              


:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
    


A NEW KILLER SPECIAL FOR BULLETIN BOARDS
Look  out for our new SHI special BBS Killer named "Xtruder", which will be
released within a few months and PLEASE........ HELP US TO GET MORE VIRUSES 
for the update of this quite new kind of automatic BBS virus killer. 


SHI REGIONAL VIRUS CENTERS WORLDWIDE
A  very  EASY.....way  is  to send the viruses to your regional center, who
will then send them along to me.

    
IF YOU HAVE MODEM 
Send then.. the viruses to the Safe Hex International, a special restricted 
virus area (ONLY FOR UPLOADS):




SAFE HEX INTERNATIONAL - REGIONALE VIRUS CENTER TEAM DENMARK
------------------------------------------------------------

BBS Phone (+45) 3672 6867  -  modem 14.400 v32 bis  open 00:00-24:00



::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::



    PLEASE.....UPLOAD ALLE NEW VIRA TO US, SO THAT WE ALWAYS CAN KEEP THE

                        SHI VIRUSKILLERS UP TO DATE.


::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

                             GOOD VIRUS HUNTING

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::


                     
      *   *   *   AND THANK YOU VERY, .. MUCH FOR YOUR HELP   *   *   *




                                     KIND REGARDS YOUR AMIGA FRIEND

                                        Erik Loevendahl Soerensen        
                                        Snaphanevej 10                  
                                        DK-4720 Praestoe 
                                        Denmark

                                        Phone: +45 55 992512
                                        Fax  : +45 55 993498

                                        SAFE HEX INTERNATIONAL


:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::



