Article View: comp.virus
Article #4233New virus (PC)
From: ESSMAN
Date: Tue, 17 Nov 1992 17:57
Date: Tue, 17 Nov 1992 17:57
34 lines
1805 bytes
1805 bytes
Source: Northeastern US
Found on two BBSs with the file name LARRY5.ZIP
Type: COM and EXE infector with variable size
increases from 1024 to 2048 bytes that will infect files
over 3K when they are opened for any reason. File
size changes not seen while in memory.
Symptoms: Left CTRL key disabled when in memory, message displayed.
File allocation errors on CHKDSK.
Trigger Date: Third Friday of any month (after 1992).
Message Displayed: VSUM VIRUS - your PC is now infected
(c) 1992 P/S, Inc.
Other Text (memory only): For that dumb c***
Igor was here
C:\COMMAND.COM
Identification: No HEX detection string available since virus is
slightly polymorphic. Algorithm needed for detection.
Please avoid all files with the name LARRY
or LEISURE SUIT LARRY in the descriptions.
Eric J. Essman
PC/LAN Implementations Group
Information Center
Union Bank of Switzerland
North American Region
CIS: 74656,557
Internet: 74656,557@compuserve.com
Technical Details
Message-ID:
<0016.9211171913.AA17490@barnabas.cert.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!sgiblab!zaphod.mps.ohio-state.edu!malgudi.oar.net!caen!umeecs!hela.iti.org!cs.widener.edu!dsinc!netnews.upenn.edu!netnews.cc.lehigh.edu!newsShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!sgiblab!zaphod.mps.ohio-state.edu!malgudi.oar.net!caen!umeecs!hela.iti.org!cs.widener.edu!dsinc!netnews.upenn.edu!netnews.cc.lehigh.edu!news From: 74656.557@CompuServe.COM (ESSMAN) Newsgroups: comp.virus Subject: New virus (PC) Message-ID: <0016.9211171913.AA17490@barnabas.cert.org> Date: 17 Nov 92 17:57:24 GMT Sender: virus-l@lehigh.edu Lines: 34 Approved: news@netnews.cc.lehigh.edu