[comp.virus] Virus Query

GOODWIN@SMCVAX.BITNET (Dave Goodwin) (11/06/90)

We've recently picked up the DARK AVENGER virus on some of our
systems, and I'd like to see if anyone can detail the activity this
one engages in.  It seems to be easily eradicated, and not too
vicious, but I'd appreciate a description of how it works and what
it's intended to do.

==========================================================================
Dave Goodwin                                  |
Asst Dir., Academic Computing                 | To err is human.
VAX System Manager                            | To really foul things up,
- ----------------------------------------------| You need a computer.
BitNet/CREN : Goodwin@Smcvax                  |
Ma Bell     : (802)655-2000 X2220             |
Pony Express: Saint Michael's College         |           -Who Knows?
              Department of Computer Services |
              Winooski Park                   |
              Colchester, VT 05439            |
Ham Radio   : N1HRO                           |
==========================================================================

CHESS@YKTVMV.BITNET (David.M.Chess) (11/08/90)

Dave Goodwin <GOODWIN@SMCVAX.BITNET> asks about side-effects of the
Dark Avenger virus.  It's a potentially rather nasty one; on something
like every 16th execution of an infected program, a more-or-less
random sector on the disk is overwritten with 512 bytes of garbage
beginning with the string "Eddie lives".  You might want to use some
sector-string-search program to look for that string...  DC

murray@lsuc (Murray S. Kucherawy) (01/26/91)

Has anyone heard of the MURPHY virus for the Mac?  Rumor has it that
it's out there, and it has already hit several sites in this area.

=============================== Murray S. Kucherawy ==========================
Motorola Canada, Ltd.     Communications Division, Toronto      [on work term]
University of Waterloo, Ontario, Canada               2B Math/Computer Science
Internet: murray@motto.UUCP (work)       mskucherawy@watmath.UWaterloo.ca (UW)
UUCP:     uunet!utai!lsuc!motto!murray   uunet!watmath!mskucherawy