🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.virus
Article #4410

In the past year... (PC)

#4410
From: David.M.Chess
Date: Wed, 29 May 1991 18:59
56 lines
2348 bytes
Below is a list, in roughly descending order, of the PC-DOS viruses
that we've actually seen in real-life incidents in the past year (to
eliminate "one-off"s, and try to get just the important ones, I've
only listed the ones that we've seen and verified in at least three
incidents over the past year; this technique of data-reduction is open
to modification!).

I'd be very interested in similar lists from other folks, especially
if there are significant differences.  The population that we see
reports from, as we've said before, is heavily weighted towards
Fortune-500 companies and suchlike, but has some of everything.  I've
only counted incidents in which we were able to get a sample and
verify (by hand, or with a CRC-based automatic verifier) that it
really was that virus; I'm not counting "I've heard that Wuga is
widespread in the Arctic" or "my cousin ran a virus-scanner, and it
said he had the GaBooo virus, so he formatted his hard disk" sorts of
reports.  (I'd appreciate it if other folks who are kind enough to
make their lists available would indicate whether they're using
similar standards for what to count.)

Here are ours.  28 different viruses (I've folded together the 1813
and one tiny variant of it, that we call 1813-00).  Note that the
slope is very steep here; the Bouncing Ball accounts for fewer than
one-third as many incidents as the 1813.

   Stoned (Marijuana)
   1813 (Jerusalem)
   Bouncing Ball (Ping-Pong)
   JOSHI
   Yankee Doodle-2885 (TP44VIR)
   1701
   4096 (Frodo)
   1704
   Sunday
   Dark Avenger
   Vacsina (TP05VIR)
   TP16VIR
   Slow
   Form
   Brain
   Keypress
   Flip-2153
   Plastique (Anti-CAD)
   Disk Killer
   1575
   Microbe
   Liberty
   Yankee Doodle-2772 (TP39VIR)
   5120 (VBASIC)
   Ohio
   Anarkia
   1381 (Internal Error)

Is everyone else seeing similar things?

DC
Technical Details
Message-ID: <0007.9105301427.AA10625@ubu.cert.sei.cmu.edu>
Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!think.com!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!think.com!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: CHESS@YKTVMV.BITNET (David.M.Chess)
Newsgroups: comp.virus
Subject: In the past year... (PC)
Message-ID: <0007.9105301427.AA10625@ubu.cert.sei.cmu.edu>
Date: 29 May 91 18:59:55 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 56
Approved: krvw@sei.cmu.edu