home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!charon.amdahl.com!pacbell.com!ames!sun-barr!rutgers!netnews.upenn.edu!netnews.cc.lehigh.edu!news
- From: martin@cs.ualberta.ca (Tim Martin; FSO; Soil Sciences)
- Newsgroups: comp.virus
- Subject: Re: Is this a virus? (PC)
- Message-ID: <0007.9211161950.AA15221@barnabas.cert.org>
- Date: 13 Nov 92 23:17:16 GMT
- Sender: virus-l@lehigh.edu
- Lines: 37
- Approved: news@netnews.cc.lehigh.edu
-
- tck@bend.ucsd.edu (Kevin Marcus) writes:
-
- >Well, it depends. See, not ALL computers get 655360 bytes free. For
- >example, genuine IBM's are 1K under the 640K barrier. It is possible
- >you have an unknown virus, though I can't think of one which is 1K
- >exactly; most MBR infectors take at least 2K.
-
- Vesselin also mentioned that MBR infectors that only use 1k are
- rare, in his response to the same query. This is a bit of a
- concern, given that another notice mentioned that the Monkey
- virus is a problem at a location in Ottawa.
-
- Most of the Empire family, including Monkey, take only 1k of
- memory from the "top of memory". While these viruses are
- rare, so far, worldwide, they are common in the Edmonton area,
- and I have heard of reports in Ottawa, and several locations
- in the USA.
-
- I have a request. If anyone has seen any of the Empire variants
- (including Monkey) anywhere outside Edmonton, or on Vx BBSs, please
- send me a note. I suspect some of these viruses will be common
- pests worldwide, in the future.
-
- Second request: Vesselin, Frisk, Dave Chess, others in the anti-virus
- (research) business: have you had reports of Empire viruses being
- seen outside Edmonton?
-
- Thanks,
-
- Tim.
-
- -------------------------------------------------------------
- Tim Martin *
- Spatial Information Systems * These opinions are my own:
- University of Alberta * My employer has none!
- martin@cs.ualberta.ca *
- -------------------------------------------------------------
-