🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.virus
Article #4206

Re: Is this a virus? (PC)

#4206
From: Tim Martin; FSO; Soil Sciences
Date: Fri, 13 Nov 1992 23:17
37 lines
1953 bytes
tck@bend.ucsd.edu (Kevin Marcus) writes:

>Well, it depends.  See, not ALL computers get 655360 bytes free.  For
>example, genuine IBM's are 1K under the 640K barrier.  It is possible
>you have an unknown virus, though I can't think of one which is 1K
>exactly; most MBR infectors take at least 2K.

Vesselin also mentioned that MBR infectors that only use 1k are 
rare, in his response to the same query.  This is a bit of a 
concern, given that another notice mentioned that the Monkey
virus is a problem at a location in Ottawa.

Most of the Empire family, including Monkey, take only 1k of
memory from the "top of memory".  While these viruses are 
rare, so far, worldwide, they are common in the Edmonton area,
and I have heard of reports in Ottawa, and several locations
in the USA. 

I have a request.  If anyone has seen any of the Empire variants
(including Monkey) anywhere outside Edmonton, or on Vx BBSs, please
send me a note.  I suspect some of these viruses will be common
pests worldwide, in the future.

Second request: Vesselin, Frisk, Dave Chess, others in the anti-virus
(research) business: have you had reports of Empire viruses being
seen outside Edmonton?

Thanks,
 
Tim.

 -------------------------------------------------------------
  Tim Martin                   *
  Spatial Information Systems  *   These opinions are my own:
  University of Alberta        *      My employer has none!
  martin@cs.ualberta.ca        *
 -------------------------------------------------------------
Technical Details
Message-ID: <0007.9211161950.AA15221@barnabas.cert.org>
Path: arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!ames!sun-barr!rutgers!netnews.upenn.edu!netnews.cc.lehigh.edu!news

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!ames!sun-barr!rutgers!netnews.upenn.edu!netnews.cc.lehigh.edu!news
From: martin@cs.ualberta.ca (Tim Martin; FSO; Soil Sciences)
Newsgroups: comp.virus
Subject: Re: Is this a virus? (PC)
Message-ID: <0007.9211161950.AA15221@barnabas.cert.org>
Date: 13 Nov 92 23:17:16 GMT
Sender: virus-l@lehigh.edu
Lines: 37
Approved: news@netnews.cc.lehigh.edu