[comp.virus] Bloody/Beijing Virus

padgett%tccslr.dnet@uvs1.orl.mmc.com (Padgett Peterson) (12/13/90)

	Since Mr. Glath neglected to include a signature string in his
VALERT posting, enclosed is a 16 byte id stringthat a user put on
HOMEBASE for use with John's SCAN v71 /ext switch:

   37 55 7b 78 78 73 6e 36 37 5d 62 79 39 37 23 3b

	I have not seen the virus so cannot attest to the string's
validity but at least it is more than nothing. If someone has seen the
virus please confirm/deny this string's effectiveness.

						Padgett

mlbarrow@ATHENA.MIT.EDU (Michael L Barrow) (12/17/90)

padgett%tccslr.dnet@uvs1.orl.mmc.com (Padgett Peterson) writes:

	   Since Mr. Glath neglected to include a signature string in his
   VALERT posting, enclosed is a 16 byte id stringthat a user put on
   HOMEBASE for use with John's SCAN v71 /ext switch:

      37 55 7b 78 78 73 6e 36 37 5d 62 79 39 37 23 3b

	   I have not seen the virus so cannot attest to the string's
   validity but at least it is more than nothing. If someone has seen the
   virus please confirm/deny this string's effectiveness.

						   Padgett

Hello there. I am one of the people at MIT who helped trap the little
bugger (it was just in time for finals, yeah!) and I was looking
around the infected machines that Mr. Glath speaks of with Norton
Utils. I did indeed find occurences of the aforementioned string. In
short, if this string is on your disk, you probably have the virus.

If you have any further questions, feel free to send me email. I
probably won't answer till Tuesday afternoon -- I have a final that
morning.

Happy hunting boys and girls!

- -- Michael B.
- --
=======================================================================
| Michael L Barrow    | "If any of the above offended you, it was     |
| <mlbarrow@mit.edu>  |  my idea to do it -- not MIT's"               |
|---------------------------------------------------------------------|
| Consultant       : MIT Information Services & Project Athena        |
| Member           : Student Information Processing Board (SIPB)      |
| Extra Curricular : MIT Student, Class of 1993 :-)                   |
=======================================================================