🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: aus.archives
Article #32

VIRUS ALERT

#32
From: Andrew Turner
Date: Mon, 11 Jan 1993 21:29
63 lines
2687 bytes
Please be warned that the file ypcbr101.zip recently uploaded and NOW present
on archie in oak/pktdrvr IS infected with Dark Avenger(Black Avenger, 1800).
This virus when activated formats the hard disk.  The virus is in the exe
file in the zip file.

ftp@archie.au has been advised.

Please see the following:

From valert-l@lehigh.edu Tue Jan 12 04:22:38 1993
From: Kenneth R. van Wyk <krvw@cert.org>
To: Multiple recipients of list <valert-l@lehigh.edu>
Subject: (Forwarded) VIRUS found in file ypcbr101.zip on simtel archive (PC)
Status: R

The attached note was posted to comp.binaries.ibm.pc.archives.  FYI,
the offending file has been removed from Simtel20.  However, if you
downloaded it while it was on-line, please read this note carefully
and take appropriate actions.

Cheers,

Ken

Kenneth R. van Wyk
Moderator VIRUS-L/comp.virus
Technical Coordinator, Computer Emergency Response Team
Software Engineering Institute
Carnegie Mellon University
krvw@CERT.ORG       (work)
ken@THANG.PGH.PA.US (home)
(412) 268-7090  (CERT 24 hour hotline)

------- Forwarded Message

Newsgroups: comp.binaries.ibm.pc.archives
From: johnm@bowen.cc.utas.edu.au (John Miezitis)
Subject: #### VIRUS found in file ypcbr101.zip on simtel archive.
Organization: University of Tasmania, Australia.
Date: Mon, 11 Jan 1993 00:32:42 GMT

The zip archive ypcbr101.zip was downloaded from Simtel-20 and the oak
mirror on archie.au and both files were found to contain the 1800
variant of Dark Avenger in the executable yapcbr.exe. The file was
unzipped and then tested using F-PROT206a which was able to remove the
virus.

Adminstrators at both these sites will be informed as will the author
of the program.

- --
_______________________________________________________________________________
John B Miezitis, University of Tasmania, Computing Centre. Ph +61 02 202811
email: John.Miezitis@cc.utas.edu.au | Belgium man Belgium!!! - Z. Beeblebrox
_______________________________________________________________________________

------- End of Forwarded Message

-- 
Renrut Werdna			Probable-Possible, my black hen,
				She lays eggs in the Relative When.
				She doesn't lay eggs in the Positive Now
act@ss.canberra.edu.au		Because she's unable to postulate how
Technical Details
Message-ID: <1993Jan11.212942.1729@csc.canberra.edu.au>
Path: arc1-ca.pugleaf.net!sparky!uunet!munnari.oz.au!manuel.anu.edu.au!csc.canberra.edu.au!news

Show Full Headers
Complete Article Headers
Newsgroups: aus.archives,aus.computers,aus.news
Path: arc1-ca.pugleaf.net!sparky!uunet!munnari.oz.au!manuel.anu.edu.au!csc.canberra.edu.au!news
From: act@softserver.canberra.edu.au (Andrew Turner)
Subject: VIRUS ALERT 
Message-ID: <1993Jan11.212942.1729@csc.canberra.edu.au>
Sender: news@csc.canberra.edu.au
Organization: University of Canberra
Date: Mon, 11 Jan 93 21:29:42 GMT
Lines: 63