IA96%PACE.BITNET@VMA.CC.CMU.EDU (IA96000) (11/14/89)
Over the weekend a file named EAGLE.EXE was uploaded to my BBS.
My system run extensive tests on ALL new files before they are
released for general use and downloading. I checked the log and
NO reports of anything you may consider improper were found after
checking the uploads.
EAGLE.EXE is said to produce a VGA animation of an EAGLE flying
in the sky. For those interested in VGA animations it would appear
to be of interest.
I ran EAGLE.EXE and all that happened is the program produced the
following line on the screen:
Kiss an Eagle Today!
Being of suspicious nature, I immediately started to check the file
using SCANV48 and other utilities. No indication of a virus was
detected or reported.
HOWEVER,running certain files after running EAGLE.EXE caused them to
grow in size. Okay, cold booted and ran SCAN and other utilities again.
Same result, no report of infection. But as soon as you run EAGLE.EXE
again, files start to get larger.
There has been NO apparent FAT TABLE damage, and no files have
suddenly disappeared. Other than files growing in size, there appears
to be nothing else happening yet!
The file EAGLE.EXE probably has been or will be uploaded to Homebase
by the time you read this message. If not, it will transfered tonight
as soon as we can get through.
NOTE: SOURCER reveals code similar to other viruses in existance,
but I will defer to experts and let them decide what exactly is
contained in the EAGLE.EXE file. In all likelihood this IS NOT a
new virus, just a modification on an old one, however again I will
defer to the experts!
SUSPECT FILE NAME: EAGLE.EXE
DESCRIPTION : Supposedly a VGA animation of an EAGLE.
DISCLAIMER:
This virus (or whatever you want to call it) HAS NOT affected
any computers or files at this University. It was discovered on a BBS
run by a student who attends this University.