home *** CD-ROM | disk | FTP | other *** search
/ NetNews Usenet Archive 1992 #27 / NN_1992_27.iso / spool / comp / virus / 4339 < prev    next >
Encoding:
Internet Message Format  |  1992-11-17  |  1.7 KB
  1. Path: sparky!uunet!charon.amdahl.com!pacbell.com!sgiblab!zaphod.mps.ohio-state.edu!malgudi.oar.net!caen!umeecs!hela.iti.org!cs.widener.edu!dsinc!netnews.upenn.edu!netnews.cc.lehigh.edu!news
  2. From: 74656.557@CompuServe.COM (ESSMAN)
  3. Newsgroups: comp.virus
  4. Subject: New virus (PC)
  5. Message-ID: <0016.9211171913.AA17490@barnabas.cert.org>
  6. Date: 17 Nov 92 17:57:24 GMT
  7. Sender: virus-l@lehigh.edu
  8. Lines: 34
  9. Approved: news@netnews.cc.lehigh.edu
  10.  
  11. Source: Northeastern US
  12.         Found on two BBSs with the file name LARRY5.ZIP
  13.  
  14. Type:   COM and EXE infector with variable size
  15.         increases from 1024 to 2048 bytes that will infect files
  16.         over 3K when they are opened for any reason. File
  17.         size changes not seen while in memory.
  18.  
  19. Symptoms: Left CTRL key disabled when in memory, message displayed.
  20.           File allocation errors on CHKDSK.
  21.  
  22. Trigger Date: Third Friday of any month (after 1992).
  23.  
  24. Message Displayed:  VSUM VIRUS - your PC is now infected
  25.                     (c) 1992 P/S, Inc.
  26.  
  27. Other Text (memory only):  For that dumb c***
  28.                            Igor was here
  29.                            C:\COMMAND.COM
  30.  
  31. Identification: No HEX detection string available since virus is
  32.                 slightly polymorphic.  Algorithm needed for detection.
  33.  
  34.                            Please avoid all files with the name LARRY
  35.                            or LEISURE SUIT LARRY in the descriptions.
  36.  
  37.                            Eric J. Essman
  38.                            PC/LAN Implementations Group
  39.                            Information Center
  40.                            Union Bank of Switzerland
  41.                            North American Region
  42.  
  43.                            CIS: 74656,557
  44.                            Internet: 74656,557@compuserve.com
  45.