w8sdz@WSMR-SIMTEL20.ARMY.MIL (Keith Petersen) (10/03/89)
The VGA2CGA program was indeed infected with a virus. Here are the preliminary results. Again I wish to stress that this program was NOT in the SIMTEL20 archives. It was downloaded from a BBS in California by a Detroit area BBS user. --Keith ---forwarded message--- Date: Monday, 2 October 1989 22:45-MDT From: portal!cup.portal.com!Alan_J_Roberts%SUN.COM at pucc.PRINCETON.EDU To: Virus Alert List <VALERT-L%LEHIIBM1 at pucc.PRINCETON.EDU> Re: New PC Virus (AIDS Virus) A new PC virus was submitted to the CVIA from Keith Peterson (who maintains the SIMTEL20 MSDOS archives). This virus replicates in COM files and has the unusual capability of infecting generic COM files internally - without changing the real size of the file (unlike the zero-bug virus which maintains an "apparent" constant infected file size). Small COM files are infected externally, and the files sizes, for all files under 10K, changes to 13952 bytes - another unusual characteristic. The virus displays a full screen graphic with the the word "AIDS" occupying the bottom half of the screen. The top half contains a long rambling message from the author informing the user of how stupid he has been for using public domain software. SCANV40 has been updated to identify the virus. It is not yet known how destructive the virus may be (all tests have been done with a disabled hard disk). More info forthcoming. ViruScan identifies the virus as the AIDS Virus. Thanks to Keith Peterson for his quick identification of the virus and for his timely response. Alan
wew@naucse.UUCP (Bill Wilson) (10/07/89)
There is a new virus in Arizona that may be spreading. It is called COMPUTER OGRE. The virus attaches itself to the boot track and makes a few new bad blocks to put the bulk of its code into. Because it operates at such a low level it is hard to detect. The only known way to find it, is to use something like Norton Utilities to look for the string COMPUTER OGRE on your disk. Has anyone else heard of or seen this one? -- Let sleeping dragons lie........ | The Bit Chaser ---------------------------------------------------------------- Bill Wilson (Bitnet: ucc2wew@nauvm | wilson@nauvax) Northern AZ Univ Flagstaff, AZ 86011