New virus (PC)

Thread View: comp.virus

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by ESSMAN Tue, 17 Nov 1992 17:57

#4233

Author: ESSMAN
Date: Tue, 17 Nov 1992 17:57

34 lines
1805 bytes

Source: Northeastern US
        Found on two BBSs with the file name LARRY5.ZIP

Type:   COM and EXE infector with variable size
        increases from 1024 to 2048 bytes that will infect files
        over 3K when they are opened for any reason. File
        size changes not seen while in memory.

Symptoms: Left CTRL key disabled when in memory, message displayed.
          File allocation errors on CHKDSK.

Trigger Date: Third Friday of any month (after 1992).

Message Displayed:  VSUM VIRUS - your PC is now infected
                    (c) 1992 P/S, Inc.

Other Text (memory only):  For that dumb c***
                           Igor was here
                           C:\COMMAND.COM

Identification: No HEX detection string available since virus is
                slightly polymorphic.  Algorithm needed for detection.

                           Please avoid all files with the name LARRY
                           or LEISURE SUIT LARRY in the descriptions.

                           Eric J. Essman
                           PC/LAN Implementations Group
                           Information Center
                           Union Bank of Switzerland
                           North American Region

                           CIS: 74656,557
                           Internet: 74656,557@compuserve.com

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads