Article View: comp.virus
Article #4206Re: Is this a virus? (PC)
From: Tim Martin; FSO; Soil Sciences
Date: Fri, 13 Nov 1992 23:17
Date: Fri, 13 Nov 1992 23:17
37 lines
1953 bytes
1953 bytes
tck@bend.ucsd.edu (Kevin Marcus) writes: >Well, it depends. See, not ALL computers get 655360 bytes free. For >example, genuine IBM's are 1K under the 640K barrier. It is possible >you have an unknown virus, though I can't think of one which is 1K >exactly; most MBR infectors take at least 2K. Vesselin also mentioned that MBR infectors that only use 1k are rare, in his response to the same query. This is a bit of a concern, given that another notice mentioned that the Monkey virus is a problem at a location in Ottawa. Most of the Empire family, including Monkey, take only 1k of memory from the "top of memory". While these viruses are rare, so far, worldwide, they are common in the Edmonton area, and I have heard of reports in Ottawa, and several locations in the USA. I have a request. If anyone has seen any of the Empire variants (including Monkey) anywhere outside Edmonton, or on Vx BBSs, please send me a note. I suspect some of these viruses will be common pests worldwide, in the future. Second request: Vesselin, Frisk, Dave Chess, others in the anti-virus (research) business: have you had reports of Empire viruses being seen outside Edmonton? Thanks, Tim. ------------------------------------------------------------- Tim Martin * Spatial Information Systems * These opinions are my own: University of Alberta * My employer has none! martin@cs.ualberta.ca * -------------------------------------------------------------
Technical Details
Message-ID:
<0007.9211161950.AA15221@barnabas.cert.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!ames!sun-barr!rutgers!netnews.upenn.edu!netnews.cc.lehigh.edu!newsShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!ames!sun-barr!rutgers!netnews.upenn.edu!netnews.cc.lehigh.edu!news From: martin@cs.ualberta.ca (Tim Martin; FSO; Soil Sciences) Newsgroups: comp.virus Subject: Re: Is this a virus? (PC) Message-ID: <0007.9211161950.AA15221@barnabas.cert.org> Date: 13 Nov 92 23:17:16 GMT Sender: virus-l@lehigh.edu Lines: 37 Approved: news@netnews.cc.lehigh.edu