🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.virus
Article #4233

New virus (PC)

#4233
From: ESSMAN
Date: Tue, 17 Nov 1992 17:57
34 lines
1805 bytes
Source: Northeastern US
        Found on two BBSs with the file name LARRY5.ZIP

Type:   COM and EXE infector with variable size
        increases from 1024 to 2048 bytes that will infect files
        over 3K when they are opened for any reason. File
        size changes not seen while in memory.

Symptoms: Left CTRL key disabled when in memory, message displayed.
          File allocation errors on CHKDSK.

Trigger Date: Third Friday of any month (after 1992).

Message Displayed:  VSUM VIRUS - your PC is now infected
                    (c) 1992 P/S, Inc.

Other Text (memory only):  For that dumb c***
                           Igor was here
                           C:\COMMAND.COM

Identification: No HEX detection string available since virus is
                slightly polymorphic.  Algorithm needed for detection.

                           Please avoid all files with the name LARRY
                           or LEISURE SUIT LARRY in the descriptions.

                           Eric J. Essman
                           PC/LAN Implementations Group
                           Information Center
                           Union Bank of Switzerland
                           North American Region

                           CIS: 74656,557
                           Internet: 74656,557@compuserve.com
Technical Details
Message-ID: <0016.9211171913.AA17490@barnabas.cert.org>
Path: arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!sgiblab!zaphod.mps.ohio-state.edu!malgudi.oar.net!caen!umeecs!hela.iti.org!cs.widener.edu!dsinc!netnews.upenn.edu!netnews.cc.lehigh.edu!news

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!sgiblab!zaphod.mps.ohio-state.edu!malgudi.oar.net!caen!umeecs!hela.iti.org!cs.widener.edu!dsinc!netnews.upenn.edu!netnews.cc.lehigh.edu!news
From: 74656.557@CompuServe.COM (ESSMAN)
Newsgroups: comp.virus
Subject: New virus (PC)
Message-ID: <0016.9211171913.AA17490@barnabas.cert.org>
Date: 17 Nov 92 17:57:24 GMT
Sender: virus-l@lehigh.edu
Lines: 34
Approved: news@netnews.cc.lehigh.edu