[comp.virus] 4096 mutant?

S89406316@HSEPM1.HSE.NL (12/06/90)

few days ago, I received a message from Martin Ederveen, one of our
system administrators:

>This morning a student came to me with a floppy on which there was a virus.
>He said he had only copied a small program from TUE [Technische Universiteit
>Eindhoven, the Eindhoven University - our neighbour] and the virus
>was obviously in that program.

>The virus was not found by our McAfee version 67. It behaves like a 4096,
>but extends files with a random number of bytes. The new file length is not
>visible to DOS. It contaminates both EXE and COM files, and changes the
>system date now and then.

I asked him which program it was in, but he didn't remember. He said he
thought it was PD software, though. And he told me that PC tools showed the
real file length of infected files.

Though I know quite a bit about the innards of the PC, I am not familiar with
viruses. I guess I'm with the "lucky" few who haven't been infected by a
computer virus ever. But since I'm subscribed to VIRUS-L and VALERT-L, I
thought you would like to know. Is it false alarm? (guess not).

Jac Goudsmit
(S89406316@HSEPM1.HSE.NL)
Hogeschool Eindhoven, Netherlands