Article View: aus.archives
Article #32VIRUS ALERT
From: Andrew Turner
Date: Mon, 11 Jan 1993 21:29
Date: Mon, 11 Jan 1993 21:29
63 lines
2687 bytes
2687 bytes
Please be warned that the file ypcbr101.zip recently uploaded and NOW present on archie in oak/pktdrvr IS infected with Dark Avenger(Black Avenger, 1800). This virus when activated formats the hard disk. The virus is in the exe file in the zip file. ftp@archie.au has been advised. Please see the following: From valert-l@lehigh.edu Tue Jan 12 04:22:38 1993 From: Kenneth R. van Wyk <krvw@cert.org> To: Multiple recipients of list <valert-l@lehigh.edu> Subject: (Forwarded) VIRUS found in file ypcbr101.zip on simtel archive (PC) Status: R The attached note was posted to comp.binaries.ibm.pc.archives. FYI, the offending file has been removed from Simtel20. However, if you downloaded it while it was on-line, please read this note carefully and take appropriate actions. Cheers, Ken Kenneth R. van Wyk Moderator VIRUS-L/comp.virus Technical Coordinator, Computer Emergency Response Team Software Engineering Institute Carnegie Mellon University krvw@CERT.ORG (work) ken@THANG.PGH.PA.US (home) (412) 268-7090 (CERT 24 hour hotline) ------- Forwarded Message Newsgroups: comp.binaries.ibm.pc.archives From: johnm@bowen.cc.utas.edu.au (John Miezitis) Subject: #### VIRUS found in file ypcbr101.zip on simtel archive. Organization: University of Tasmania, Australia. Date: Mon, 11 Jan 1993 00:32:42 GMT The zip archive ypcbr101.zip was downloaded from Simtel-20 and the oak mirror on archie.au and both files were found to contain the 1800 variant of Dark Avenger in the executable yapcbr.exe. The file was unzipped and then tested using F-PROT206a which was able to remove the virus. Adminstrators at both these sites will be informed as will the author of the program. - -- _______________________________________________________________________________ John B Miezitis, University of Tasmania, Computing Centre. Ph +61 02 202811 email: John.Miezitis@cc.utas.edu.au | Belgium man Belgium!!! - Z. Beeblebrox _______________________________________________________________________________ ------- End of Forwarded Message -- Renrut Werdna Probable-Possible, my black hen, She lays eggs in the Relative When. She doesn't lay eggs in the Positive Now act@ss.canberra.edu.au Because she's unable to postulate how
Technical Details
Message-ID:
<1993Jan11.212942.1729@csc.canberra.edu.au>Path:
arc1-ca.pugleaf.net!sparky!uunet!munnari.oz.au!manuel.anu.edu.au!csc.canberra.edu.au!newsShow Full Headers
Complete Article Headers
Newsgroups: aus.archives,aus.computers,aus.news Path: arc1-ca.pugleaf.net!sparky!uunet!munnari.oz.au!manuel.anu.edu.au!csc.canberra.edu.au!news From: act@softserver.canberra.edu.au (Andrew Turner) Subject: VIRUS ALERT Message-ID: <1993Jan11.212942.1729@csc.canberra.edu.au> Sender: news@csc.canberra.edu.au Organization: University of Canberra Date: Mon, 11 Jan 93 21:29:42 GMT Lines: 63