--------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E1200062 Date: 12/31/96 From: RICHARD ST. JOHN Time: 09:05am \/To: ALL (Read 3 times) Subj: WildList Dec 1996 [3/6] -*> CONTINUED FROM PREVIOUS MESSAGE <*- Fichv.2_1...............[905, CHV 2.1...] DgGmRz Filler.A................[DiskFiller.....] CbCjFlKs Finnish_Sprayer.........[Aija...........] AdCrFsKsMh Flame...................[Stamford.......] CrFlJkRr Flip.2153.A.............[Omicron........] DcDgFsGmKsRv Flip.2343...............[Omicron 2......] DgDoFsJd Form.A..................[Form 18........] cAdBqCbCjCrCsDcDgEvEwFlFsGmGpIwJd kJmKdKsLsMhMsNbPbPdRfRtRvRzSgSmTd WsYp Form.C..................[...............] CsMsTd Form.D..................[Form May.......] CrCsDcEvFlFsGmIwKdMsPdRtYp Frankenstein............[Frank, Sblank..] DcDgJkKdMs Freddy_Krueger..........[Freddy 2.......] CrFsJkWs Frodo.Frodo.A...........[4096, 4K, 100 Y] DcDgEwFsGpKsRrSm Galicia.................[Telecom........] CrGpJkJmRt Ginger.2774.............[Gingerbread....] CrJkRr GoldBug.................[...............] DgFlJkMh Green_Caterpillar.1575..[Find, 1575, 159] CjCrDgFlFsGmGpJkKdKsOhRrRtSmWs Hare.7610...............[...............] AcCrDgFsIwLsMhRzYp Hare.7750...............[...............] DoMhMs Hare.7786...............[...............] AcDgFsKsMhMsRz Helloween.1376.A........[1376...........] CrDcDgFlJkJmPbRrWs Hi.460..................[Hi.............] GpMs Hidenowt................[...............] AeCrDgGmIwJkJmKdPdSm HLLC.Even_Beeper.B......[...............] DgMsRz Ibex....................[Bones, Seven Bo] CbCrJkMh Int40...................[...............] PbPd Istanbul.1349...........[...............] DgMs J&M.....................[Jimi, Jimmy, Ha] dBnCbCjDcDoFlFsGpIwJkKsMhMsPbPdSm Jerusalem.1244..........[1244...........] DgLsSg Jerusalem.1500..........[Xug.1500.......] CrJk Jerusalem.1808.Standard.[1808, 1813, Isr] bCjCsDcDgFlFsJmKsNbRkRtRzSgSmWsYp Jerusalem.Mummy.1364.A..[Mummy 2.1......] DgRtYp Jerusalem.Sunday.A......[Sunday.........] RkRtSgYp Jerusalem.Zero_Time.Aust[Slow...........] DgJdRrRtSm Jos.1000................[Jabb, Jabberwoc] GpMs Joshi.A.................[...............] CjCrDcDgFsJkJmRkRrRtSgSmWs Jumper.A................[French Boot, 2k] CbCjCrDcDgEwFsGmGpJmMsPdRtSg Jumper.B................[SillyBop, 2kb..] CbDgFsJkKsMhMsSgSm June_12th.2660..........[Mabuhay........] AdMs Junkie.1027.............[...............] cAdBnCbCrCsDcDgEwFlFsGmGpJkJmKsLs MhMsPbPdRfRrRtRvRzSgSmTdWs Kampana.A...............[AntiTel, Campan] bCjCrDcDgEwFsGmIwJdJkKsMhMsPbPdRf RtSgSmTd Kaos4.697...............[...............] CrJkMsSgYp Karnivali.1971..........[...............] DgJk Keypress.1232.A.........[Turku, Twins...] DcDgFlGpJkJmRrRtRzSg Laroux..................[XM.............] DgJkSg Leandro.................[TimeWarp.......] AeCbCrDcEvFsJkJmMhMsPdRtRzWs Lemming.2160............[...............] CrRr Liberty.2857.A..........[Mystic, Magic..] DcEvRt Little_Red.1465.........[Red Book, Mao..] CjDcDgFsKdMsRtSmTdWsYp MacGyver.2803...........[Shoo...........] GmJkMsRkYp Major.1644..............[Major BBS......] AeCbCrDgDoFsJkKsMhMsRzSg Maltese_Amoeba..........[Amoeba.2367, Gr] CbDgFsGmKsMsRtSgWsYp Mange_Tout.1099.........[1099...........] CrDgGmJkMsPbSm Manzon.1414.............[...............] CbDcEwFsJkKsMhMsPdRrTd Markt.1533..............[Werbe, Media, V] DgFs Michelangelo.A..........[...............] dBnCjCrCsDcDgEkFlFsGmGpOhPbPdRkRr RtSgSmWsYp MIREA.1788..............[Lyceum.1788, Ly] AeEkJm Moloch..................[...............] CrDgFs Mongolian_Boot..........[Mongol.........] CrDgSm Music_Bug...............[...............] CjWs Natas.4744..............[Satan, Sat_Bug.] dCbCrDcDgEvEwFlFsGpJdJkJmKdKsMhMs NbOhPbPdRkRtRvSgSmTdYp Necros.1164.............[Gnose, Irish3..] DgRf Neuroquila..............[Havoc, Wedding.] DgJkWs Nightfall.4518.B........[N8Fall, Nightfa] CbDgJkPbTd No_Frills.Dudley........[Oi Dudley......] DgJkRrRt No_Frills.No_Frills.843.[...............] CrJkRr Nomenklatura.A..........[Nomen..........] DgMh November_17th.800.A.....[Jan1, Int83.800] CrDcFlLs November_17th.855.A.....[Int83.855......] CrDcDgFsGmLsMsRt NPox.963.A..............[Evil Genius....] CrFs NYB.....................[B1.............] cCjCrDcDgEkEwFlFsIwJkJmKdKsLsMhMs PdRtRvRzSgSmTdWsYp One_Half.3544...........[Dis, Free Love.] cAdAeBnCbCrCsDcDgEkEvEwFlFsGmGpJk mKdKsLsMhMsNbPbRfRkRtRzSgSmTdWsYp One_Half.3570...........[...............] DoFsJk Ontario.1024............[SBC, 1024......] DcRr +Ornate..................[...............] DgSg Parity_Boot.A...........[...............] CbGpMhMsTd Parity_Boot.B...........[Generic 1......] dCbCjCrCsDcDgEvEwFlFsGmGpIwJdJkKd KsLsMhPdRfRtRzSgSmTdWsYp Pasta...................[Boot-446.......] CrDgJk Pathogen:SMEG.0_1.......[SMEG...........] CrDgWsYp Paula_Boot..............[...............] FsRa Peter...................[Peter II.......] CbDcFsJdJkLsMhSmYp Ph33R.1332..............[...............] EwFsJkMh Phx.965.................[PUX.965........] DgJmMsRa Pieck.4444..............[Kaczor.4444....] CbMsPbRvYp Ping_Pong.B.............[Bouncing-Ball, ] DcDgFsGmYp Plagiarist.2051.........[...............] CrDg Predator.2448...........[2448...........] CrFsJkKsRv QRry....................[Query, Essex...] CrDcEvJk Quandary................[Parity_Boot.Enc] AcDgFsIwJkKsMhMsPdRvSmTd Quicky.1376.............[Quicksilver, V.] AcCbCrDgFlFsGmJkPdTd Quiver..................[Qvr............] EvMh Quox.A..................[Stealth 2......] CbCrDcFlFsJkRtSgSm Reverse.948.............[Red Spider.....] MsYp Ripper..................[Jack Ripper....] cAdCjCrCsDcDgEwFlFsGmGpIwJkKsMhMs PbPdRfRkRtRvRzSgSmTdWsYp Russian_Flag............[Slydell, Ekater] CrDcDgIwJkRzSmYp Sampo...................[Turbo, Wllop...] cAdCjCrDcDgEwFlFsGmIwJkKdKsMhMsNb PbPdRtSgSmWsYp -*> CONTINUED NEXT MESSAGE <*- --- GEcho 1.20/Pro * Origin: Slings & Arrows BBS St. Louis, Mo. (1:100/205.0) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E1200063 Date: 12/31/96 From: RICHARD ST. JOHN Time: 09:05am \/To: ALL (Read 3 times) Subj: WildList Dec 1996 [4/6] -*> CONTINUED FROM PREVIOUS MESSAGE <*- Viruses marked with a minus sign (-) dropped off the main list this month. CARO Name of Virus [Alias(es) ] Reported by: ============================================================================ 15_Years.B..............[Espejo.B.......] Jk A&A.....................[...............] Dg Accept.3773.............[...............] Ra Acid....................[...............] Ew Alex_II.599.............[Alex-599.......] Do Alphabetic.A............[...............] Mh Anticad.4096.A..........[Plastique 5.12.] Sg AntiCMOS.D..............[AntiCMOS.G.....] Jk Arusiek.817.............[...............] Cb Avalon..................[...............] Fs Baby.962................[_962...........] Ad BackFormat.B............[BackForm.B.....] Ms Barrotes.1463...........[...............] Rz Beer.2473...............[...............] Fl Cavaco..................[...............] Jk Chameleon...............[...............] Iw Cosenza.................[...............] Fs Coup.2052...............[...............] Dg Dalian.1366.............[...............] Ad Danish_Boot.............[...............] Cr Datalock.920.A..........[...............] Dg Deliver.1771............[Blue Shark.....] Ms Dual_Gtm.1643...........[BewareBug.1643.] Jk DullBoy.................[...............] Jk DuPoem..................[...............] Jk Emmie.2823..............[Emmie 3........] Do Error_Vir...............[...............] Mh Face....................[...............] Jk Fighter.5871.APE........[Stealth_Fighter] Ek Finnish.357.............[...............] Ks Finnpoly................[...............] Mh FITW....................[...............] Pd Flag3.1901..............[Furtive.1901...] Jk Form.B..................[...............] Iw Glupak.857..............[...............] Rz Gripe.2040..............[...............] Jk H-Andromeda.1024........[Axe............] Fl Ha!.1224................[Info,Zmaina....] Ms Hack_Master.............[...............] Ae Halt....................[BM_Birthday....] Jk Hi.833..................[Hi.............] Gp Hiroshima.830...........[...............] Jk HLLO.Novademo...........[Nova...........] Ms Horror.1173.............[...............] Td Immortal.2190...........[...............] Ms Indonga.2197............[...............] Dg Infector.1022...........[Alia.1023......] Cr Invisible_Man.2926......[...............] Kd IR&MJ...................[Diciembre_30_Bo] Jm ITV.457.................[...............] Oh IVP.264.B...............[...............] Rz IVP.674.B...............[...............] Ks IVP.Flipper.872.........[...............] Rr Japanese_Xmas...........[Xmas in Japan..] Sm Jerusalem.AntiScan......[...............] Dg Jerusalem.June_13.......[...............] Gp Johana_Boot.............[...............] Jm K-Hate..................[...............] Iw Kmee....................[...............] Fs Kysia.1536..............[Kyokushinkai...] Ms Kysia.3072..............[Kyokushinkai...] Ms Legozz..................[...............] Fl Little_Brother.307......[...............] Jk LTS.....................[...............] Fs Lucho...................[...............] Jm Lutil.591...............[...............] Jk MacGyver.4112...........[...............] Jk Magda...................[Magdzie........] Ms Mannequin...............[...............] Gp Mario.745...............[...............] Ms Matthew.3044............[...............] Ad Menem_Tocoto............[...............] Ra Mirage..................[...............] Dg MISiS...................[Zharinov,NIKA..] Ev Natas.4738..............[...............] Dg Necropolis.1963.A.......[1963...........] Do Nightfall.*.............[N8Fall.........] Td NJH2LBC.A...............[Korea Boot.....] Dg November_17th.800.B.....[...............] Dc NoWin.2576..............[Zielona........] Ms Oktubre.1784............[...............] Dg Patras.196..............[...............] Gm PC_Ogre.................[...............] Jk Peligro.1213............[...............] Jm Phx.1295................[...............] Ra Print_Screen_Boot.A.....[India,PrnSn....] Dg PS-MPC.475..............[...............] Cr Pysk.2464...............[...............] Dg Rhubarb.................[RP.............] Ms Scitzo..................[...............] Fl Scroll.1532.............[Kato...........] Ms Sierra..................[...............] Jk SillyCR.409.............[...............] Jk Spectre.513.............[...............] Ks Stealth_Boot.Alfredo....[...............] Dc Stoned.Michelangelo.D...[...............] Fl Stoned.Scale............[BootM1.........] Ae Suriv_1.Argentina.......[...............] Ra Tai-Pan.512.............[...............] Mh -Teraz.2717..............[...............] Dg Teraz.4004..............[Flaga..........] Ms -*> CONTINUED NEXT MESSAGE <*- --- GEcho 1.20/Pro * Origin: Slings & Arrows BBS St. Louis, Mo. (1:100/205.0) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E1200064 Date: 12/31/96 From: RICHARD ST. JOHN Time: 09:06am \/To: ALL (Read 3 times) Subj: WildList Dec 1996 [5/6] -*> CONTINUED FROM PREVIOUS MESSAGE <*- Viruses marked with a minus sign (-) dropped off the main list this month. CARO Name of Virus [Alias(es) ] Reported by: ============================================================================ 15_Years.B..............[Espejo.B.......] Jk A&A.....................[...............] Dg Accept.3773.............[...............] Ra Acid....................[...............] Ew Alex_II.599.............[Alex-599.......] Do Alphabetic.A............[...............] Mh Anticad.4096.A..........[Plastique 5.12.] Sg AntiCMOS.D..............[AntiCMOS.G.....] Jk Arusiek.817.............[...............] Cb Avalon..................[...............] Fs Baby.962................[_962...........] Ad BackFormat.B............[BackForm.B.....] Ms Barrotes.1463...........[...............] Rz Beer.2473...............[...............] Fl Cavaco..................[...............] Jk Chameleon...............[...............] Iw Cosenza.................[...............] Fs Coup.2052...............[...............] Dg Dalian.1366.............[...............] Ad Danish_Boot.............[...............] Cr Datalock.920.A..........[...............] Dg Deliver.1771............[Blue Shark.....] Ms Dual_Gtm.1643...........[BewareBug.1643.] Jk DullBoy.................[...............] Jk DuPoem..................[...............] Jk Emmie.2823..............[Emmie 3........] Do Error_Vir...............[...............] Mh Face....................[...............] Jk Fighter.5871.APE........[Stealth_Fighter] Ek Finnish.357.............[...............] Ks Finnpoly................[...............] Mh FITW....................[...............] Pd Flag3.1901..............[Furtive.1901...] Jk Form.B..................[...............] Iw Glupak.857..............[...............] Rz Gripe.2040..............[...............] Jk H-Andromeda.1024........[Axe............] Fl Ha!.1224................[Info,Zmaina....] Ms Hack_Master.............[...............] Ae Halt....................[BM_Birthday....] Jk Hi.833..................[Hi.............] Gp Hiroshima.830...........[...............] Jk HLLO.Novademo...........[Nova...........] Ms Horror.1173.............[...............] Td Immortal.2190...........[...............] Ms Indonga.2197............[...............] Dg Infector.1022...........[Alia.1023......] Cr Invisible_Man.2926......[...............] Kd IR&MJ...................[Diciembre_30_Bo] Jm ITV.457.................[...............] Oh IVP.264.B...............[...............] Rz IVP.674.B...............[...............] Ks IVP.Flipper.872.........[...............] Rr Japanese_Xmas...........[Xmas in Japan..] Sm Jerusalem.AntiScan......[...............] Dg Jerusalem.June_13.......[...............] Gp Johana_Boot.............[...............] Jm K-Hate..................[...............] Iw Kmee....................[...............] Fs Kysia.1536..............[Kyokushinkai...] Ms Kysia.3072..............[Kyokushinkai...] Ms Legozz..................[...............] Fl Little_Brother.307......[...............] Jk LTS.....................[...............] Fs Lucho...................[...............] Jm Lutil.591...............[...............] Jk MacGyver.4112...........[...............] Jk Magda...................[Magdzie........] Ms Mannequin...............[...............] Gp Mario.745...............[...............] Ms Matthew.3044............[...............] Ad Menem_Tocoto............[...............] Ra Mirage..................[...............] Dg MISiS...................[Zharinov,NIKA..] Ev Natas.4738..............[...............] Dg Necropolis.1963.A.......[1963...........] Do Nightfall.*.............[N8Fall.........] Td NJH2LBC.A...............[Korea Boot.....] Dg November_17th.800.B.....[...............] Dc NoWin.2576..............[Zielona........] Ms Oktubre.1784............[...............] Dg Patras.196..............[...............] Gm PC_Ogre.................[...............] Jk Peligro.1213............[...............] Jm Phx.1295................[...............] Ra Print_Screen_Boot.A.....[India,PrnSn....] Dg PS-MPC.475..............[...............] Cr Pysk.2464...............[...............] Dg Rhubarb.................[RP.............] Ms Scitzo..................[...............] Fl Scroll.1532.............[Kato...........] Ms Sierra..................[...............] Jk SillyCR.409.............[...............] Jk Spectre.513.............[...............] Ks Stealth_Boot.Alfredo....[...............] Dc Stoned.Michelangelo.D...[...............] Fl Stoned.Scale............[BootM1.........] Ae Suriv_1.Argentina.......[...............] Ra Tai-Pan.512.............[...............] Mh -Teraz.2717..............[...............] Dg Teraz.4004..............[Flaga..........] Ms -*> CONTINUED NEXT MESSAGE <*- --- GEcho 1.20/Pro * Origin: Slings & Arrows BBS St. Louis, Mo. (1:100/205.0) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E1200065 Date: 12/31/96 From: RICHARD ST. JOHN Time: 09:06am \/To: ALL (Read 3 times) Subj: WildList Dec 1996 [6/6] -*> CONTINUED FROM PREVIOUS MESSAGE <*- Turner..................[...............] Ek Ulate...................[...............] Dg Ultra_Violent...........[...............] Jk Unkempt.1350............[...............] Jm Uvjan.2246..............[...............] Ev Uvjan.2262..............[...............] Ev V-160...................[SillyRC.160....] Jk Valentine.2332..........[...............] Jk VCL.541.................[...............] Ks VCL.Genocide.839........[...............] Ms Vienna.Bua..............[Big Caibua.....] Dg Voyage.1134.............[...............] Ws Werewolf.684............[Claws..........] Jk Werewolf.693............[Fangs..........] Jk WM.Alien.A..............[Chandi.........] Jk WM.Alliance.A...........[...............] Jk WM.Boom.A:De............[...............] Cr WM.Colors.B.............[...............] Mh WM.Colors.G.............[...............] Mh WM.Concept.C............[...............] Dg WM.Concept.Q............[...............] Ad WM.CountTen.............[Count10........] Jk WM.Hassle.A.............[Assistant......] Dg WM.Maddog.A.............[...............] Jk WM.MDMA.C...............[...............] Jk WM.MDMA.D...............[...............] Jk WM.MDMA.E...............[...............] Jk WM.Niceday.A............[...............] Jk WM.Nuclear.A............[...............] Jk WM.Rapi.A...............[...............] Jk WM.Theatre.A:Tw.........[...............] Jk WM.Theatre.B:Tw.........[...............] Jk WM.Wazzu.F..............[Bosco..........] Jk WM.Wazzu.H..............[Microsloth.....] Td WM.Wazzu.O..............[...............] Jk WM.Wazzu.X..............[...............] Jk WM.Weather.A:Tw.........[Fish...........] Jk Xtc.2153................[...............] Jk Yesmile.................[...............] Fs Zimboot.................[...............] Yp ============================================================================ Total for both lists: 375 ============================================================================ Release notes for the December 15 list: The November 1996 WildList was skipped for various reasons. This version of the WildList is the result of a concerted effort by myself and the participants to indentify exactly which macro viruses are currently in the wild. Note that this effort has resulted in more macro virus ariants (especially Concept and Wazzu variants) to appear on both lists. Special thanks goes to Jimmy Kuo for his assistance in this effort. This release also adds a new feature. A list of most frequently reported viruses precedes the main list. This has been requested by many people. I am continuously seeking WildList participants, especially for regional reporting in the following countries: Bulgaria, Chile, China, Denmark, Greece, Indonesia, Phillipines, Saudi Arabia, Singapore, South Korea, Spain, Thailand, Turkey, and Ukraine. Such new participants will need to be in a position where they can monitor and verify virus incidents. People who develop av products are best suited. People who represent one or more av products (agents) and provide localized support may also be qualified if they actually verify the viruses or forward samples to developers. If you thus qualify, please send your name, location, organization, product name, favorite brand of beer, and references (preferably CARO members who know you). Send the information to wildlist@vcnet.com. Thanks. ============================================================================ The collation of this list is done by Joe Wells, Editor of the IBM web site for virus information, www.av.ibm.com, who is solely responsible for its contents. The latest WildList is always posted directly by me to the NCSA Security forum on Compuserve, in the Virus Info/Tools library. The official archive location for the WildList is ftp.ncsa.com in pub/virus/wildlist. A complete archive of WildLists is available at the Virus Bulletin web site (http://www.virusbtn.com/WildLists/index.html). The WildList is copyright material, but may be freely quoted or cited in part or in whole. No permission is needed to reprint the list. All mail in regard to the WildList should be sent to wildlist@vcnet.com. ============================================================================ WildList Vol.612 - (c)1993-1997 Joe Wells - 75511,635 - wildlist@vcnet.com ============================================================================ -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.7 mQCNAy+wAnYAAAEEAO2alE3YclXZAxkqrSVXkhAuuOsx6NnVfUdKMghYtrBabFuJ +zKiIsahmjeakA2J101KZOHtKMhb5iqLG0oCbRyuBFLtuMhJrjk+L9VRCoxoDB/4 XwFevOGyxRHYfancrIydlMUooe7TZJqbGhhQEROWYm8v6RvkPFtsMpyD+Lb1AAUR tCNKb2UgV2VsbHMgPGMxandlbGxzQHdhdHNvbi5pYm0uY29tPg== =aKXf -----END PGP PUBLIC KEY BLOCK----- ============================================================================ --- GEcho 1.20/Pro * Origin: Slings & Arrows BBS St. Louis, Mo. (1:100/205.0) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E1200066 Date: 12/31/96 From: RICK COLLINS Time: 09:37am \/To: BRIAN DARLEY (Read 3 times) Subj: Good times HOAX -=> Quoting Brian Darley to All <=- -=> FidoMail to 1:163/215, please.-=< BD> I have recieved new information regarding the good times virus Your "new information" was dated April, 1995. Hardly new. TTFN. Rick. Ottawa, ON 31 Dec 9:39 --- Blue Wave/DOS v2.20 * Origin: BitByters BBS, Rockland ON, Can. (613)446-7773 v34, (1:163/215) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E1200067 Date: 12/31/96 From: RICK COLLINS Time: 09:40am \/To: KURT WISMER (Read 3 times) Subj: Macs -=> Quoting Kurt Wismer to Rick Collins <=- -=> FidoMail to 1:163/215, please.-=< KW> arg.... goofed again... i said offset 15... kw> if i'd taken a closer look i would have realised the addresses i kw> was looking at were in hex... i'll bet there aren't many people kw> out there who think in hex by default... i certainly don't... that's OK. i used 21 in one post at 15 in another. :-) TTFN. Rick. Ottawa, ON 31 Dec 9:41 --- Blue Wave/DOS v2.20 * Origin: BitByters BBS, Rockland ON, Can. (613)446-7773 v34, (1:163/215) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E1200068 Date: 12/31/96 From: JASON CONNORS Time: 02:41am \/To: GORDON FREY (Read 3 times) Subj: Re: Anti-exe -=> Quoting Gordon Frey to Jason Connors <=- GF> That an old virus, its a mbr/boot sector virus and most if not all GF> good Anti_Virus programs should be able to clean it. Just GF> remember to check ALL your floppies after disinfection. GF> GF> Gordon GF> GF> PS you should boot from a CLEAN DOS floppy before running the GF> anti-virus scanner. OK, thanks. I'm not sure if they got the problem fixed or not but I will tell. ... I can walk on water, but I stagger on alcohol. ___ Blue Wave/QWK v2.12 --- TriToss (tm) Professional 10.0 - #172 * Origin: The Outer Limits BBS * Tarpon Springs, FL * (1:3619/37.0) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E1200069 Date: 12/31/96 From: JASON CONNORS Time: 11:22pm \/To: RICK COLLINS (Read 3 times) Subj: Re: Anti-exe -=> Quoting Rick Collins to Jason Connors <=- -=> Quoting Jason Connors to All <=- -=> FidoMail to 1:163/215, please.-=< JC> Has anyone heard of a virus called anti-exe ???? My mothers JC> work was hit by this virus along with 2 others, but this one is JC> unkown to me. Any information about this virus will be greatly JC> appricated (sp?). RC> RC> AntiExe is a boot-sector infector that uses stealth techniques to RC> avoid detection. It will infect any floppy put in the floppy drive. RC> It targets a specific EXE file (name unknown) that is a specific RC> size, and will trash that file if it is found. Is there anyway to clean off the disks? My mom does a tape back-up every night at her work and her disks are infected. Right now she's re-typing everything, which will take about a month or two to do. She lost everything between the viruii. RC> ost, if not all, AV programs will detect and clean an ANTIEXE RC> infection. RC> I belive she got her system cleaned already. ... I can walk on water, but I stagger on alcohol. ___ Blue Wave/QWK v2.12 --- TriToss (tm) Professional 10.0 - #172 * Origin: The Outer Limits BBS * Tarpon Springs, FL * (1:3619/37.0) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E1400000 Date: 12/31/96 From: KURT WISMER Time: 01:06pm \/To: JASON CONNORS (Read 3 times) Subj: Re: Anti-exe -=> Mocking Jason to All <=- (Mock, mOck, moCk, mocK) JC> Has anyone heard of a virus called anti-exe ???? My mothers JC> work was hit by this virus along with 2 others, but this one is JC> unkown to me. Any information about this virus will be greatly JC> appricated (sp?). yeah, i've heard of this virus (got a live sample from santa this christmas)... it's a bootsector/mbr infector... it's a stealth virus but fprot can detect it in memory... other than replicating the only thing it does is check for a very specific *.exe file (which it checks for by looking for a specific exe header) and corrupts that exe file when it's accessed... as yet i've heard nothing about which exe file it is targeting, to the best of my knowledge no one knows yet (and it's a rather old virus, the file may not exist anymore)... ... today's mock has been brought to you by the letters p, u, and # pi... --- Maximus 2.02 * Origin: Virus Watch BBS ,[(416)654-3814] (1:250/503) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E1400001 Date: 12/31/96 From: KURT WISMER Time: 01:08pm \/To: GUY GAUTHIER (Read 3 times) Subj: Re: ST Virus -=> Mocking Guy to All <=- (Mock, mOck, moCk, mocK) GG> Hi Too All! GG> i want to know if there are new Atari St Virus on the worlds! new compared to when? there are some (very few) atari st viruses, i doubt if any new ones have been written in the past several months however... possibly not even in the past few years... ... beware of quantum ducks... Quark! Quark! Quark!... --- Maximus 2.02 * Origin: Virus Watch BBS ,[(416)654-3814] (1:250/503)