The WildList

October 1997

 ============================================================================
                   PC Viruses in the Wild - October, 1997
 ============================================================================

    This is a cooperative listing of viruses reported as being in the wild
    by 46 virus information professionals. The basis for these reports are
    virus incidents where a sample was received, and positively identified
    by the participant.  Rumors and unverified reports have been excluded.

    This report is cumulative. That is, this is not just a report of which
    were seen last month. Monthly data is received from most participants,
    but the new data is added to the old. Participants are expected to let
    me know when I should remove their name from a virus that they haven't
    seen in a year and a half or so.

    The list should not be considered a list of "the most common viruses",
    however, since no specific provision is made for a commonness factor.

    This data indicates only "which" viruses are in the wild, but viruses
    reported by many (or most) participants are obviously widespread.

    The WildList is currently being used as the basis for in-the-wild
    virus testing of antivirus products by Virus Bulletin and the NCSA
    (National Computer Security Association.) Additionally, a virus
    collection based upon the WildList is being used in an effort to
    standardize the naming of common viruses.

        The WildList - (c)1993-1997 by Joe Wells - [email protected]

 ============================================================================
    The section below gives the names of participants, along with their
    geographic region, organization, and antivirus product (if any.) The
    locations with an asterisk (*) note that the reports are regional, all
    others being multinational or global.

    Key Participant         *Region         Organization      Product
 ============================================================================

    Aa  Asaf Achitoov        Israel         Iris Software     AntiVirus Plus
    Ac  Alan Candy           New Zealand    Applied Insight   F-Prot Pro
    Ad  Allan Dyer           Hong Kong      Yui Kee Co. Ltd.  F-Prot
    Ae  Amir Elbaz           Israel         EliaShim          ViruSafe
    Bn  Barnabas Nagy        Slovokia       NaBaware          Dr. Solomon's
    Bq  Blend Qapiti         Albania        Poly U Tirana     None
    Cb  Carl Bretteville     Norway         Norman Data       NVC
    Cj  Craig Jackson        USA            Datawatch         VirexPC
    Cs  Christian Schmid     Austria        DataPROT Linz     F-Prot
    Dc  Dave Chess           USA            IBM               IBM AntiVirus
    Dg  Dmitry Gryaznov      UK             S&S Int'l         Dr. Solomon's
    Ek  Eugene Kaspersky     Russia         KAMI              AVP
    Ev  Eduardo Velasquez    Colombia/Vene. SOFTEAM Ltda      VirusCOP
    Ew  Eddy Willems         Belgium/Lux.   Data Alert Int'l  Dr. Solomon's
    Fl  Ferenc Leitold       Hungary        Hunix Ltd.        Virus Buster
    Gm  Gerard Mannig        France         RECIF             None
    Gp  Gabriel Pislaru      Romania        SoftWin           AVX
    Jd  Joost de Raeymaeker  Portugal       RSVP              Dr. Solomon's
    Jk  Jimmy Kuo            USA            McAfee            ViruScan
    Jm  Jose Martinez        Peru           HackSoft S.R.Ltda TH AV
    Kd  K. T. Davies         India          Pioneer Micro     Vaxine
    Ks  Klas Scholdstrom     Sweden         QA                Dr. Solomon's
    Ls  Luca Sambucci        Italy          I.C.A.R.O.        None
    Mh  Mikko Hypponen       Finland        Data Fellows      F-Prot Pro
    Ms  Marek Sell           Poland         Marek Sell, Ltd.  MkS_vir
    Nb  Neville Bulsara      India          N&N Systems       Dr. Solomon's
    Nf  Nick FitzGerald      UK             Virus Bulletin    None
    Pb  Pavel Baudis         Czech Republic Alwil Software    Avast!
    Pd  Paul Ducklin         UK             Sophos Plc.       Sweep
    Pn  Patrick Nolan        USA            Command Software  F-Prot Pro Net
    Ra  Ruben Arias          Argentina      RALP              Integ Master
    Re  Ralph Tee            Malaysia       R.E.Solutions     Armour AV
    Rf  Richard Foley        Ireland        Reflex Magnetics  TBAV
    Rk  Richard Ku           Taiwan         Trend Micro       PC-cillin
    Rr  Roger Riordan        Australia      CYBEC             VET
    Rt  Roger Thompson       USA            NCSA              None
    Rv  Robert Vibert        Canada         Sensible Security Dr. Solomon's
    Rz  Righard Zwienenberg  Netherlands    ESaSS BV          ThunderBYTE
    Sb  Sherra Buzzell       USA            Symantec          NAV
    Sm  Seiji Murakami       Japan          JCSR              None
    Td  Toralv Dirro         Germany        U of Hamburg      Dr. Solomon's
    Ti  Torben Immisch       Denmark        Swanholm Distrib  Dr. Solomon's
    Vb  Vesselin Bontchev    Iceland        Frisk Int'l       F-Prot
    Ws  Wolfgang Stiller     USA            Stiller Research  Integ Master
    Xc  Xabier Cazalis       Spain          Panda Software    Panda
    Yp  Ywain Penberthy      So Africa      CSIR Virus Lab    VPS

 ============================================================================
                              The WildList
 ============================================================================
  This main list includes viruses reported by multiple participants, which
  appear to be non-regional in nature. Technically, this first list is "the"
  WildList according to my original specification, which required viruses to
  be verified in the wild by a minimum of two participants. A supplemental
  list follows that contains viruses reported by single participants.

  If a virus listed has minor variants, but no specific variant letter is
  attached, the virus meant is the .A variant.

  Please note that all the MS Word macro viruses are grouped under WM.name.

 + Viruses marked with a plus sign (+) are new to the main list this month.

  CARO Name of Virus      [ Alias(es)     ] Reported by:
 ============================================================================
  15_Years................[Espejo.........] AeBnDgEvJkJmPnRtSmWs
  ABCD....................[...............] AdCjDg
  Aircop.Standard.........[...............] DgOhRk
  Alfons.1344.............[Iutt99.........] AaAeDgGpJkJmMhMsPbPnRrVb
  Anticad.4096.Mozart.....[Invader........] DgPn
  AntiCMOS.A..............[Lenart.........] AcAdCbCjDcDgEvEwFlGmJdJkJmKdKsMh
                                            MsNfPbPdPnRrRtRvSbSmVbWsXcYp
  AntiCMOS.B..............[LiXi...........] AcCbKsMsPnReRvRzSbSmTd
  AntiEXE.A...............[D3, Newbug.....] AcAdBqCbCjDcDgEvEwFlGmGpJkJmKdKs
                                            LsMhMsNbNfPbPdPnRfRkRtRvRzSbSmTd
                                            WsXcYp
  Arianna.3375............[...............] DgLs
  Avispa.D................[...............] AeDgJkRaRt
  BackFormat.2000.A.......[Backform.......] BnDgFlGpJkMsVb
  Bad_Sectors.3428........[...............] FlGp
  Barrotes.1303...........[...............] EvJm
  Barrotes.1310.A.........[Barrotos.......] DgEvJdJkJmPdTdXcYp
  Boot-437................[...............] AcBqCbCjDgFlGpJkKdMsOhPbPdPnRkRt
                                            RzSmTdVbWsYp
  BootEXE.451.............[BFD, BE-451....] FlJkMhMsNbPnRzVbYp
  Burglar.1150.A..........[GranGrave.1150.] AcAdCbDgJkKsMhMsPbRkRzTdVbWsYp
  Bye.....................[ByeBye.........] AdCbKsLsMsPdRzTd
  Byway.A.................[Dir2.Byway, Hnd] DgEvFlGmJdJkJmPnSbVbXcYp
  Byway.B.................[Dir2.Byway, Hnd] DgEvJkJm
  Cascade.1701.A..........[1701...........] CbCjCsDgFlGpKsMhMsPdPnRtRzSmTdVb
                                            Ws
  Cascade.1704.A..........[1704...........] CsDgEkEwGpKsPnRtVb
  Cavaco.1470.............[...............] DgJkYp
  Chance.B................[Lennon.........] JkVb
  Changsha.A..............[Centry, Changes] MsRrRt
  Chaos.1241..............[Faust..........] PnRr
  Chinese_Fish............[Fish Boot......] CjDgRkRrRt
  Civil_Defence.6672......[CDV 3.3........] MsPbPnYp
  Cordobes.3334...........[...............] AaJkVb
  Countdown.1300..........[...............] DgKs
  CPW.1527................[Mediera, Mierda] CbDgEvJkJmVbXc
  Crazy_Boot..............[...............] DgEwFlJkPnSbTd
  Cruel...................[...............] AaGmGpMhMsRzTd
  DA_Boys.................[...............] CjDgEwJkPnRtVbWs
  Dark_Avenger.1800.A.....[Eddie..........] CjDgGpMsPnRrVbWs
  Dark_Avenger.2100.SI.A..[V2100..........] DgRf
  Defo....................[PeterII.Runtime] BqMhVb
  DelCMOS.B...............[Int7F-E9, Feint] DgJmKsMhMsPdRzVb
  Delta.1163..............[...............] SbVb
  DelWin.1759.............[Goblin.1759....] AaCbDgGpJkJmKsMsPdRfTdTi
  Den_Zuko.2.A............[Den Zuk........] DgPnRfRt
  Diablo_Boot.............[...............] EvJmMhPdRaVbYp
  Die_Hard................[DH2, Wix.......] AcAdCbCjDgFlJkJmKdKsMsNbPnRkRtRv
                                            RzSbSmTdVbWsYp
  Digi.3547...............[Deliver.Stealth] MsPbVb
  Dir_II.A................[Creeping Death.] BnCsDgEkFlJkNbOhPnRkRrVbWsYp
  Disk_Killer.1_00........[Ogre...........] DgEk
  Ear.Leonardo.1207.......[...............] DgMs
  Edwin...................[...............] CbDgGmJkKs
  Empire.Int_10.B.........[...............] PnRt
  Empire.Monkey.A.........[Monkey.........] DcGmJkJmKsMsOhPdPnRfRkRrRtRvSb
  Empire.Monkey.B.........[Monkey 2.......] AcBqCbCjDcDgEvEwGmJdJkJmKdKsMhMs
                                            NbNfOhPdPnRkRrRtRvRzSbSmTdTiVbWs
                                            XcYp
  EXE_Bug.A...............[CMOS Killer....] DgEwFlGmJdJkKsOhPdRfRtSmTdVbWsYp
  EXE_Bug.C...............[...............] CbRtYp
  EXE_Bug.Hooker..........[...............] MhRtYp
  Fairz...................[Khobar.........] DgKdMsRf
  Fat_Avenger.............[...............] KdRrRvSm
  Fichv.2_1...............[905, CHV 2.1...] DgRz
  Filler.A................[DiskFiller.....] CbCjFl
  Finnish_Sprayer.........[Aija...........] AdKsMhVb
  Flame...................[Stamford.......] FlJkRr
  Flip.2153.A.............[Omicron........] DgGmRvVbXc
  Flip.2343...............[Omicron 2......] AaDgJdVb
  Form.A..................[Form 18........] AcAdBqCbCjCsDcDgEvEwFlGmGpJdJkJm
                                            KdKsLsMhMsNbNfPbPdPnRfRtRvRzSbSm
                                            TdTiVbWsXcYp
  Form.C..................[...............] CsMsTdXc
  Form.D..................[Form May.......] CsEvFlGmKdMsPdRtSbVbYp
  Frankenstein............[Frank, Sblank..] DgJkMs
  Freddy_Krueger..........[Freddy 2.......] JkSbVbWs
  Frodo.Frodo.A...........[4096,100 Year..] DgEwGpRrSmVb
  Galicia.................[Telecom........] GpJkJmPnRt
  Ginger.2774.............[Gingerbread....] DgJkRr
  GoldBug.................[...............] DgFlMh
  Green_Caterpillar.1575..[Find, 1575,1591] CjDgFlGpJkKsOhRrRtVbWsYp
  Hare.7610...............[...............] AcDgLsMhNfRzSbVbYp
  Hare.7750...............[...............] AaMhMs
  Hare.7786...............[...............] AcDgMhMsRzVb
  Helloween.1376.A........[1376...........] DgFlJkJmPbRrWs
  Hi.460..................[Hi.............] GpMs
  Hidenowt................[...............] AeDgJkJmKdPd
  HLLC.Even_Beeper.B......[...............] DgMsRz
  HLLP.5850.C.............[Weed...........] DgJk
  HLLP.5850.D.............[...............] DgJk
  Ibex....................[Bones, Seven...] CbJkMh
  Int40...................[INTC...........] PbPd
  Istanbul.1349...........[...............] DgMs
  J&M.....................[Jimi, Jimmy....] AaAdBnCbCjFlGpJkKsMhMsNfPbPdSmVb
  Jerusalem.1244..........[1244...........] DgLsPn
  Jerusalem.1808.Standard.[1808, 1813.....] CbCjCsDgFlJmNbPnRkRtRzVbWsYp
  Jerusalem.Mummy.1364.A..[Mummy 2.1......] DgRtYp
  Jerusalem.Sunday.A......[Sunday.........] PnRkRtYp
  Jerusalem.Zero_Time.Aust[Slow...........] DgJdRrRt
  Jos.1000................[Jabb,Jabberwock] GpMs
  Joshi.A.................[...............] CjDgJkPnRkRrRtSbVb
  Jumper.A................[French Boot, 2k] CbCjDcDgEwGmGpJmMsPdPnRtVb
  Jumper.B................[SillyBop, 2kb..] CbDgJkKsMhMsPnSmVb
  Junkie.1027.............[...............] AcAdBnCbCsDcDgEwFlGmGpJkJmKsLsMh
                                            MsPbPdPnRfRrRtRvRzSbSmTdTiVbWsXc
                                            Yp
  Kampana.A...............[AntiTel,Campana] CbCjDgEwGmJdJkKsMhMsNfPbPdPnRfRt
                                            SmTdVbXc
  Kaos4.697...............[...............] JkMsPnYp
  Karnivali.1971..........[Patras.........] DgJkRv
  Keypress.1232.A.........[Turku, Twins...] DgFlGpJkJmMsPnRrRtRz
  Leandro.................[TimeWarp.......] AeCbEvJmMhMsPdRtRzVbWs
  Liberty.2857.A..........[Mystic, Magic..] EvRt
  Little_Red.1465.........[Red Book, Mao..] CjDgKdMsRtSmVbWsYp
  MacGyver.2803...........[Shoo...........] JkMsRkYp
  Major.1644..............[Major BBS......] AaAeCbDgJkKsMhMsPnRvRzSbTdVb
  Maltese_Amoeba..........[Amoeba.2367....] CbDgGmKsMsPnRtVbWsYp
  Mange_Tout.1099.........[1099...........] DgJkMsPbSm
  Manzon.1414.............[...............] CbEwJkKsMhMsNfPdRrTdTiVb
  Markt.1533..............[Werbe, Media...] DgVb
  Michelangelo.A..........[...............] AdBnCjCsDgEkFlGmGpOhPbPdPnRkRrRt
                                            SbSmVbWsYp
  MIREA.1788..............[Lyceum.1788....] AeEkJm
  MISiS...................[Zharinov, NIKA.] EvPn
  Moloch..................[...............] DgMhSbVb
  Music_Bug...............[...............] CjWs
  Natas.4744..............[Satan, Sat_Bug.] CbDcDgEvEwFlGpJdJkJmKdKsMhMsNbOh
                                            PbPdPnRfRkRtRvSbSmTdVbXcYp
  Necros.1164.............[Gnose, Irish3..] DgRf
  Neuroquila.A............[Havoc, Wedding.] DgJkPnTdWs
  Nightfall.4518.B........[N8Fall.........] CbDgJkPbTd
  No_Frills.Dudley........[Oi Dudley......] DgJkRrRt
  No_Frills.No_Frills.843.[...............] JkRr
  Nomenklatura.A..........[Nomen..........] DgMh
  November_17th.800.A.....[Jan1, Int83.800] FlLs
  November_17th.855.A.....[Int83.855......] DgLsMsRtVb
  NYB.....................[B1.............] AcAdCjDcDgEkEwFlJkJmKdKsLsMhMsNf
                                            PdPnRtRvRzSbSmTdVbWsXcYp
  One_Half.3544...........[Dis, Free Love.] AcAdAeBnCbCsDgEkEvEwFlGmGpJkJmKd
                                            KsLsMhMsNbPbPnRfRkRtRvRzSmTdTiVb
                                            WsXcYp
  One_Half.3570...........[...............] AaJkVb
  Ornate..................[...............] DgJmKsPn
  Parity_Boot.A...........[...............] CbGpMhMsTd
  Parity_Boot.B...........[Generic 1......] AdCbCjCsDcDgEvEwFlGmGpJdJkKdKsLs
                                            MhPbPdPnRfRtRzSmTdTiVbWsXcYp
  Pasta...................[Boot-446.......] DgJkRz
  Pathogen:SMEG.0_1.......[SMEG...........] DgWsYp
  Paula_Boot..............[...............] RaVb
  Peter...................[Peter II.......] CbDcJkLsSmVbYp
  Ph33R.1332..............[...............] EwJkMhVb
  Phx.965.................[PUX.965........] DgJmMsRa
  Pieck.4444..............[Kaczor.4444....] CbDgJkMsPbRvSmTdXcYp
  Ping_Pong.B.............[Bouncing-Ball, ] DgVbYp
  Predator.2448...........[2448...........] JkKsRvVb
  QRry....................[Query, Essex...] EvJk
  Quandary................[Parity_Boot.Enc] AcDgJkKsMhMsPdRvSmTdVb
  Quicky.1376.............[Quicksilver, V.] AcCbDgFlJkPdTdVb
  Quiver..................[Qvr............] EvMh
  Quox.A..................[Stealth 2......] CbFlJkPnRtSmVb
  Reverse.948.............[Red Spider.....] MsYp
  Ripper..................[Jack Ripper....] AcCjCsDcDgEwFlGmGpJkKsMhMsNfPbPd
                                            PnRfRkRtRvRzSmTdVbWsXcYp
  RP......................[Rhubarb, PR.b..] MhMs
  Russian_Flag............[Slydell, Ekater] DcDgJkRzSbSmYp
  Sampo...................[Turbo, Wllop...] AcAdCjDcDgEwFlGmJkKdKsMhMsNbNfPb
                                            PdPnRfRtSbSmTdVbWsYp
  Sarampo.1371............[...............] DgJdJk
  Satria.A................[July 4th.......] JkTd
  Screaming_Fist.II.696...[Fist 2, Scream ] CjDgJkPnRt
  She_Has.................[Breasts........] CbDgPdRz
  Sibylle.................[...............] DgFl
  Spanska.1120............[...............] DgJk
  Spanska.1500............[...............] DgMhRz
  Stealth_Boot.B..........[AMSE, NopB.....] CbCjDcDgEvJkMsPdPnRtSbSmVb
  Stealth_Boot.C..........[AMSE, NopB2....] CbCjEvEwGmJdJkJmMsNfPdPnRtSmVbYp
  Stoned.Angelina.A.......[...............] BqCbCsDcDgEvFlJdJkJmKdMhMsPbPdPn
                                            RkRvSmTdYp
  Stoned.Azusa.A..........[Hong Kong......] CjCsDgJkMsRrRtYp
  Stoned.Bravo............[...............] DgMsYp
  Stoned.Bunny.A..........[...............] PnWsYp
  Stoned.Daniela..........[...............] MsPn
  Stoned.Dinamo...........[...............] MsRt
  Stoned.June_4th.A.......[Bloody!........] CbCjCsDgJkRkRrSmWs
  Stoned.Kiev.............[Epbr...........] CjEkMsPdRt
  Stoned.Lzr..............[Lisa2, Whit....] CjEvRtVb
  Stoned.Manitoba.........[Stonehenge.....] DgKsPdRtRvSmTdVb
  Stoned.No_INT.A.........[Stoned.........] AcCbCjCsDcDgEwFlGmJkMhMsOhPbPdPn
                                            RrRtVbWsYp
  Stoned.NOP..............[NOP............] DgJkWs
  Stoned.Spirit...........[...............] AeDcDgGmJkKsMhMsNfPbRzTdTiVbXc
  Stoned.Standard.A.......[New Zealand....] AaCjDgEkEvGmGpJkPbPdPnRkRrRtSmVb
                                            WsXcYp
  Stoned.Swedish_Disaster.[...............] CjDg
  Stoned.W-Boot...........[Stoned.P, Wonka] EvJkMsPdRrWs
  SVC.3103.A..............[SVC 5.0........] DgEkEv
  Swiss_Boot..............[Swiss Army.....] FlJkKsNbSmVb
  Tai-Pan.438.............[Whisper........] CbDgFlJkJmKdKsMhMsPbPdPnRtTdVbWs
                                            Yp
  Tai-Pan.666.............[D2D, Doom2Death] AcBnCbDgEkEwJkKsMhMsPnRtSmWsYp
  Tanpro.524..............[...............] DgJk
  Tentacle.10634..........[Tentacle II....] AaBqDgJkKsRvSbTd
  Tentacle.1996...........[...............] DgEwJkKsRzSbTdVb
  Tequila.A...............[...............] CsDcDgEwGmJkMsPdPnRfRkRtSbSmTdVb
                                            WsYp
  Three_Tunes.1784........[Flip, PCBB.1784] AeCjDgEvJkJm
  TPVO.3783...............[TVPO, 3873.....] AdGpKsMhMsReRkRzSbTd
  Tremor.4000.A...........[...............] CbCsDgFlJkKsMhMsPbPnRtTdVbWsYp
  Trojector.1463..........[Athens.........] DgJkKdNbPn
  Trojector.1561..........[...............] GpKsRz
  Unashamed...............[...............] AaDcJdJkJmLsMhMsPdPnSmYp
  Unsnared.814............[ V.814.........] AeGpRz
  Urkel...................[Nwait..........] CjDcJkPnRzVbWs
  V-Sign..................[Cansu, Sigalit.] BnBqCjDcDgGmJkKdKsMhMsPbPdPnRrRt
                                            SmVbWs
  Vacsina.TP-05.A.........[RCE-1206.......] CjDgRtVb
  Vacsina.TP-16.A.........[RCE-1339.......] DgVb
  Vampiro.................[...............] DgRaWs
  Vienna.648.Reboot.A.....[DOS-62.........] AeDgEkGpPnRkXc
  Vinchuca................[...............] DgRaWs
  VLamiX..................[Die Lamer......] DgFlJkMsRt
  W97M.Appder.A...........[...............] CbDgJmKsMhSbTi
  W97M.Kompu.A............[...............] DgTdTi
  W97M.Wazzu.A............[...............] DgJkTdYp
  W97M.Wazzu.C............[...............] AcDgJk
  WelcomB.................[Bupt.9146......] AdCjCsDcDgEvFlGpJkJmKsMhMsPbPdPn
                                            RkRtSbTdYp
  Werewolf.1500.B.........[...............] DgEwJkMhMsPnRzSbSmVbYp
  WM.Alien.A..............[...............] AcJkKdSb
  WM.Appder.A.............[ntthnta........] EwJkJmKsMhMsPnSbTi
  WM.Appder.B.............[...............] DgTd
  WM.Appder.I.............[...............] AcSbTd
  WM.Bandung.A............[Tedious........] DcDgJkPnRrRtSb
  WM.Bandung.O............[...............] AcAd
  WM.Boom.A:De............[...............] CbCsPnTd
  WM.Buero.A:De...........[Buro:De........] DgJkMhRzTd
  WM.CAP.A................[...............] AcAdCbDcDgEwJdJkJmKdKsMhMsPbRvTd
                                            TiXcYp
  WM.Colors.A.............[Colours........] CbCjDgJdJkKdLsSmYp
  WM.Colors.B.............[...............] DcMh
  WM.Concept.A............[Prank Macro....] AcAdBqCbCjCsDcDgEwFlGmJdJkJmKdKs
                                            MhMsNbNfPbPdPnReRfRkRrRtRvRzSbSm
                                            TdTiVbWsYp
  WM.Concept.F............[Parasite.A.....] JkMhPnSbVb
  WM.Concept.J............[Parisite.B.....] DgJkKs
  WM.Concept.Z............[...............] DgJkKsTd
  WM.Date.A...............[AntiDMV, Dateii] DgJkMhPbSb
  WM.Divina.A.............[Infeczione.....] CbCjDgLsVb
  WM.DZT.A................[...............] DgJdJkKdRkTdTi
  WM.Goldfish.A...........[...............] AcJm
  WM.Helper.A.............[...............] DcDgJkMhRtTi
  WM.Helper.B.............[...............] AdCbJkJmXc
  WM.HIAC.A...............[...............] AcAdDgJk
  WM.Hot.A................[Hot............] CjRvRz
  WM.Hybrid.A.............[...............] AcAdDgReTd
  WM.Imposter.A...........[Imposter.......] AcCbCjDgMhNfSbYp
  WM.Irish.A..............[Irish..........] CbJkKdMhRtRvSb
  WM.Johnny.A.............[Go Jonny.......] CbDgJdKsMhPnRkTi
  WM.Johnny.A1............[...............] AcMh
  WM.Kompu.A..............[...............] DgEwKsMhTd
  WM.Lunch.B..............[...............] CbDcJkMhTd
  WM.MDMA.A...............[StickyKeys.....] AcAdBqCjDcDgJkJmKdKsMhPnRtSbSmTd
                                            TiXc
  WM.MDMA.D...............[...............] JkKsTd
  WM.NF.A.................[...............] MhTd
  WM.NiceDay.A............[...............] AdAeCbDgJkKdTd
  WM.NOP.A:De.............[Nop............] CbDcJkMhRzTdVb
  WM.NOP.F:De.............[...............] DgJkTd
  WM.Npad.A...............[Jakarta........] AcAdCbCjDcDgEwJdJkJmKdKsMhMsNfPb
                                            PnRtRvRzSbTdTiVbXcYp
  WM.Npad.D...............[...............] AcJmTd
  WM.Nuclear.B............[Nuclear.B......] DcFlRrVbYp
  WM.Paycheck.A...........[...............] DgJk
  WM.Pesan.B..............[...............] JdKs
  WM.Rapi.A...............[...............] CbJkPnSbTi
  WM.Safwan.A.............[...............] DgKsMh
 +WM.Schumann.C...........[...............] SbTd
  WM.Sharefun.A...........[...............] JkPnTi
  WM.ShowOff.A............[...............] DcKd
  WM.ShowOff.C............[...............] AcAdCbKsMhTd
  WM.Surabaya.A...........[...............] DgJkKsMh
  WM.TWNO.A:Tw............[Taiwan No. 1...] AdJkRk
  WM.Wazzu.A..............[Wazzu..........] AdAeBqCbCjDcDgEwGmJdJkJmKdKsMhPn
                                            RfRkRrRtRvSbTdVbWsYp
  WM.Wazzu.C..............[...............] AcCbCjDcDgJkKsMhPbPnRtSbTd
  WM.Wazzu.E..............[...............] CbJk
  WM.Wazzu.F..............[Bosco..........] CbDcJkKs
  WM.Wazzu.J..............[...............] AdDg
  WM.Wazzu.P..............[...............] AcRtTd
  WM.Wazzu.X..............[...............] CbJkRa
  WXYC....................[...............] CjJmMsOhSbWs
  X97M.Laroux.A...........[...............] CbDcDgEwKsPbReRvTd
  Xeram.1664..............[N-Xeram.1664...] JkPd
  XM.Laroux.A.............[...............] DgEwJdJkJmMhMsPbPnRfRkSmTd
  XM.Laroux.D.............[...............] JdKsTd
 +XM.Laroux.E.............[...............] AcSb
  Xuxa.1984...............[...............] DgVb
  Yankee Doodle.TP-39.A...[RCE-2772.......] DgVb
  Yankee Doodle.TP-44.A...[RCE-2885.......] DgEkEwFlGpKsMhMsNbPdPnRtSmTdVb
  Yankee Doodle.XPEH.4928.[Micropox.......] CbFlVb
 ============================================================================
  Total for the WildList: 267

 ============================================================================
                             Supplemental List
 ============================================================================
  As was noted at the start of the main list, this list is not, technically,
  part of "The WildList" as we have defined it. By design, the WildList is a
  list of viruses verified as being in the wild by a minimum of two WildList
  participants. The viruses listed below do not currently meet that criteria.

  This additional list includes viruses reported by a single participant and
  are often either moving onto the main list, or dropping off of it.

  Please note especially that this list also tends to be more of a regional
  reporting mechanism. For example, a virus is often reported as very common
  by one regional participant, but is found nowhere else in the world.

  Viruses marked with a minus sign (-) dropped off the main list this month.

  CARO Name of Virus      [Alias(es)      ] Reported by:
 ============================================================================
  15_Years.B..............[Espejo.B.......] Jk
 -A&A.....................[...............] Dg
  Accept.3773.............[...............] Ra
  Alex_II.599.............[Alex-599.......] Aa
  Anticad.4096.A..........[Plastique 5.12.] Pn
  AntiCMOS.C..............[...............] Ac
  AntiCMOS.D..............[AntiCMOS.G.....] Jk
  AntiEXE.B...............[...............] Cb
  Arusiek.817.............[...............] Cb
  Avalon..................[...............] Vb
  Baby.962................[_962...........] Ad
  BackFormat.B............[BackForm.B.....] Ms
  Barrotes.1463...........[...............] Rz
  Beavis.B................[...............] Ms
  Beer.2473...............[...............] Fl
  Bleah...................[Eco............] Jm
  Brasil..................[...............] Cj
  Cawber..................[...............] Rt
  Chameleon...............[...............] Nf
  Chill...................[...............] Rt
  Cosenza.................[...............] Vb
  CountDown.1363..........[...............] Dg
  Coup.2052...............[...............] Dg
  Dalian.1366.............[...............] Ad
  Danish_Boot.............[...............] Sb
  Datalock.920.A..........[...............] Dg
  Deliver.1771............[Blue Shark.....] Ms
  Desperado.1403.C........[...............] Jk
  Dodgy...................[...............] Rz
  DR&ET...................[Dret...........] Ms
  Dual_Gtm.1643...........[BewareBug.1643.] Jk
  DullBoy.................[...............] Jk
  DuPoem..................[...............] Jk
  Emmie.2823..............[Emmie 3........] Aa
  Facade..................[...............] Rz
  Fighter.5871.APE........[Stealth_Fighter] Ek
  Finnish.357.............[...............] Ks
  Finnpoly................[...............] Mh
  FITW....................[...............] Pd
  Form.B..................[...............] Iw
  Glupak.857..............[...............] Rz
  Gripe.2040..............[...............] Jk
  H-Andromeda.1024........[Axe............] Fl
  Ha!.1224................[Info,Zmaina....] Ms
  Hack_Master.............[...............] Ae
  Halt....................[BM_Birthday....] Jk
  HDKiller................[Coruna.........] Jm
  Hi.833..................[Hi.............] Gp
  Hippie..................[...............] Ks
  Hiroshima.830...........[...............] Jk
  HLLO.Novademo...........[Nova...........] Ms
  HLLP.Petra.7956.........[...............] Pb
  Horror.1173.............[...............] Td
  Immortal.2190...........[...............] Ms
  Indonga.2197............[...............] Dg
  Infector.1022...........[Alia.1023......] Sb
  Int12...................[...............] Rz
  Invisible_Man.2926......[...............] Kd
  IR&MJ...................[Diciembre_30...] Jm
  IVP.264.B...............[...............] Rz
  IVP.674.B...............[...............] Ks
  IVP.Flipper.872.........[...............] Rr
  Japanese_Xmas...........[Xmas in Japan..] Sm
  Jerusalem.1500..........[Xug.1500.......] Jk
  Jerusalem.AntiScan......[...............] Dg
  Jerusalem.June_13.......[...............] Gp
  Johana_Boot.............[...............] Jm
  June_12th...............[Mabuhay........] Ms
  K-Hate..................[...............] Nf
  Kmee....................[...............] Vb
  Kysia.1536..............[Kyokushinkai...] Ms
  Kysia.3072..............[Kyokushinkai...] Ms
  Legozz..................[...............] Fl
  Lemming.2160............[...............] Rr
  Little_Brother.307......[...............] Jk
  LTS.....................[...............] Vb
  Lucho...................[...............] Jm
  Lutil.591...............[...............] Jk
  MacGyver.4112...........[...............] Jk
  Magda...................[Magdzie........] Ms
  Mannequin...............[...............] Gp
  Mario.745...............[...............] Ms
  Matthew.3044............[...............] Ad
  Menem_Tocoto............[...............] Ra
  Ming.CLME.1528..........[...............] Ad
  Mirage..................[...............] Dg
  Mongolian_Boot..........[Mongol.........] Dg
  Natas.4738..............[...............] Dg
  Necropolis.1963.A.......[1963...........] Aa
  Neuroquila.B............[...............] Td
  NJH2LBC.A...............[Korea Boot.....] Dg
  Noiembrie.610...........[...............] Rz
  NoWin.2576..............[Zielona........] Ms
 -NPox.963.A..............[Evil Genius....] Vb
  Oktubre.1784............[...............] Dg
  Ontario.1024............[...............] Rr
  Pac Man Ghost...........[...............] Rk
  Peligro.1213............[...............] Jm
  Phx.1295................[...............] Ra
  Plagiarist.2051.........[...............] Dg
  Pojer.1919..............[...............] Pb
  Print_Screen_Boot.A.....[India,PrnSn....] Dg
  PS-MPC.475..............[...............] Sb
  Pysk.2464...............[...............] Dg
  Sat_Bug.Sat_Bug.........[Satan_Bug......] Ev
  Satria.E................[...............] Ad
  Sayha...................[...............] Jk
  Scitzo.1329.............[...............] Fl
  Scroll.1532.............[Kato...........] Ms
  Sierra..................[...............] Jk
  SillyCR.409.............[...............] Jk
  Sleep_Walker.1266.......[...............] Rr
  Spanska.4250............[...............] Rz
  Spectre.513.............[...............] Ks
  Stoned.16.A.............[...............] Dg
  Stoned.Michelangelo.D...[...............] Fl
  Stoned.Scale............[BootM1.........] Ae
  Suriv_1.Argentina.......[...............] Ra
  Teraz.2717..............[...............] Dg
  Teraz.4004..............[Flaga..........] Ms
  Trakia.653..............[...............] Rr
  Turner..................[...............] Ek
  Ulate...................[...............] Dg
  Ultra_Violent...........[...............] Jk
  Unkempt.1350............[...............] Jm
  Uvjan.2246..............[...............] Ev
  Uvjan.2262..............[...............] Ev
  V-160...................[SillyRC.160....] Jk
  Valentine.2332..........[...............] Jk
  VCL.541.................[...............] Ks
  VCL.Genocide.839........[...............] Ms
  Vienna.Bua..............[Big Caibua.....] Dg
  Voyage.1134.............[...............] Ws
  W97M.Boom.A.............[...............] Td
  W97M.Kompu.A............[...............] Td
  W97M.MDMA.D.............[...............] Jm
  W97M.Wazzu.X............[...............] Dg
  Werewolf.684............[Claws..........] Jk
  Werewolf.693............[Fangs..........] Jk
  WM.Alliance.A...........[...............] Jk
  WM.Bandung.AX...........[...............] Rz
  WM.Bandung.AY...........[...............] Rz
  WM.Bandung.L............[...............] Ad
  WM.Clock.A:De...........[...............] Td
  WM.Colors.AB............[...............] Mh
  WM.Colors.G.............[...............] Mh
  WM.Concept.B............[...............] Yp
  WM.Concept.bb...........[...............] Ti
  WM.Concept.BC...........[...............] Sb
  WM.Concept.C............[...............] Dg
  WM.Concept.K............[...............] Rz
  WM.Concept.O:Tw.........[...............] Ad
  WM.Concept.Q............[...............] Ad
  WM.CountTen.............[Count10........] Jk
  WM.Date.B:De............[...............] Ks
  WM.Demon.A..............[...............] Ks
  WM.Divina.D.............[...............] Td
  WM.DMV.E................[...............] Ac
  WM.DZT.B................[...............] Td
  WM.Epidem.A:Tw..........[Epidemic.......] Rk
  WM.Goodnight.C..........[...............] Sb
  WM.Guess.A:Tw...........[Look...........] Rk
  WM.Hassle.A.............[Assistant......] Dg
  WM.Jonny.B..............[...............] Jm
  WM.Lunch.A..............[...............] Dc
  WM.Maddog.A.............[...............] Jk
  WM.MDMA.C...............[...............] Jk
  WM.MDMA.E...............[...............] Jk
  WM.MDMA.F...............[...............] Jk
  WM.NiceDay.B............[...............] Dg
  WM.Npad.DP..............[...............] Rz
  WM.Nuclear.A............[...............] Jk
  WM.Schumann.A...........[...............] Td
  WM.Schumann.C...........[...............] Td
  WM.Setmd.A:Tw...........[...............] Ad
  WM.Setmd.B:Tw...........[...............] Ad
  WM.Showoff.CB...........[...............] Rz
  WM.Showoff.CG...........[...............] Rz
  WM.Switcher.A...........[...............] Ew
  WM.Swlabs.B.............[...............] Jm
  WM.Tao.A................[...............] Dg
  WM.Temple.A.............[...............] Dg
  WM.Theatre.A:Tw.........[...............] Jk
  WM.Theatre.B:Tw.........[...............] Jk
  WM.Toten.A..............[...............] Td
  WM.Toten.B..............[...............] Td
  WM.Vicinity.A...........[...............] Td
  WM.Vicinity.C...........[...............] Td
  WM.Wazzu.AV.............[...............] Jk
  WM.Wazzu.Aw.............[...............] Jk
  WM.Wazzu.CL.............[...............] Ad
  WM.Wazzu.H..............[Microsloth.....] Td
  WM.Wazzu.O..............[...............] Jk
  WM.Wazzu.Q..............[...............] Dc
  WM.Weather.A:Tw.........[Fish...........] Jk
  WM.ZMB.A:De.............[...............] Sb
  XM.Laroux.E.............[...............] Ac
  Xtc.2153................[...............] Jk
  Yesmile.................[...............] Vb
  Zimboot.................[...............] Yp
 ============================================================================
  Total for both lists: 467

 ============================================================================

                      WildList Sorted by Frequency
 ============================================================================
   This is not a prevalence table. It does not show how common each virus
   is. Rather it is the WildList sorted by the number of participants that
   report each virus.

   This section gives the names, types, and aliases of the most frequently
   reported viruses. These viruses have been reported by at least one third
   of the WildList participants. They are sorted with the most frequently
   reported first. A more complete alias list is also provided.

  Freq  Caro Name                 Type   Aliases
 ============================================================================
  38  | Form.A..................| Boot | Form 18
  37  | WM.Concept.A............| Macro| Prank Macro
  35  | AntiEXE.A...............| Boot | D3, Newbug, New Bug
  35  | One_Half.3544...........| Multi| Dis, Free Love
  34  | Empire.Monkey.B.........| Boot | Monkey 2
  33  | Junkie.1027.............| Multi|
  30  | AntiCMOS.A..............| Boot | Lenart
  30  | Parity_Boot.B...........| Boot | Generic 1
  29  | Natas.4744..............| Multi| Satan, Sat_Bug.Natas
  28  | NYB.....................| Boot | B1
  28  | Ripper..................| Boot | Jack Ripper
  26  | Sampo...................| Boot | Turbo, Wllop
  26  | WM.Npad.A...............| Macro| Jakarta
  26  | WM.Wazzu.A..............| Macro| Wazzu
  23  | Die_Hard................| File | DH2, Wix
  22  | Boot-437................| Boot |
  21  | Michelangelo.A..........| Boot |
  21  | Stoned.Angelina.A.......| Boot |
  21  | Stoned.No_INT.A.........| Boot | Stoned
  21  | WelcomB.................| Boot | Bupt.9146
  20  | Kampana.A...............| Boot | AntiTel, Campana,Telecom, Telefonica
  19  | Stoned.Standard.A.......| Boot | New Zealand
  19  | V-Sign..................| Boot | Cansu, Sigalit
  19  | WM.CAP.A................| Macro|
  18  | Tequila.A...............| Multi|
  18  | WM.MDMA.A...............| Macro| StickyKeys
  17  | Cascade.1701.A..........| File | 1701
  17  | Tai-Pan.438.............| File | Whisper
  16  | EXE_Bug.A...............| Boot | CMOS Killer
  16  | J&M.....................| Boot | Jimi, Jimmy, Hasita
  16  | Stealth_Boot.C..........| Boot | AMSE, NopB2
  15  | Burglar.1150.A..........| File | GranGrave.1150
  15  | Empire.Monkey.A.........| Boot | Monkey
  15  | Stoned.Spirit...........| Boot |
  15  | Tai-Pan.666.............| File | D2D, Doom2Death
  15  | Tremor.4000.A...........| File |
  15  | Yankee Doodle.TP-44.A...| File | RCE-2885
 ============================================================================

  We are continuously seeking WildList participants, especially for regional
  reporting in the following countries:

  Bulgaria, Chile, China, Greece, Indonesia, Phillipines, Saudi Arabia,
  Singapore, South Korea, Thailand, Turkey, and Ukraine.

  Such new participants will need to be in a position where they can monitor
  and verify virus incidents. People who develop av products are best suited.
  People who represent one or more av products (agents) and provide localized
  support may also be qualified if they actually verify the viruses or
  forward samples to developers. If you thus qualify, please send your name,
  location, organization, product name, favorite brand of beer, and
  references (preferably CARO members who know you.) Send the information to
  [email protected]. Thanks.

 ============================================================================
  The collation of this list is done by the WildList Orginanization Int'l,
  which is solely responsible for its contents.

  A complete archive of WildLists is available at the Virus Bulletin web
  site (http://www.virusbtn.com/WildLists/index.html.)

  The WildList is copyright material, but may be freely quoted or cited in
  part or in whole. No permission is needed to reprint the list.

  All queries about the WildList should be sent to [email protected].

 ============================================================================
   WildList Vol.710    -    (c) 1993-97 Joe Wells    -    [email protected]
 ============================================================================
  -----BEGIN PGP PUBLIC KEY BLOCK-----
  Version: 2.7

  mQCNAy+wAnYAAAEEAO2alE3YclXZAxkqrSVXkhAuuOsx6NnVfUdKMghYtrBabFuJ
  +zKiIsahmjeakA2J101KZOHtKMhb5iqLG0oCbRyuBFLtuMhJrjk+L9VRCoxoDB/4
  XwFevOGyxRHYfancrIydlMUooe7TZJqbGhhQEROWYm8v6RvkPFtsMpyD+Lb1AAUR
  tCNKb2UgV2VsbHMgPGMxandlbGxzQHdhdHNvbi5pYm0uY29tPg==
  =aKXf
  -----END PGP PUBLIC KEY BLOCK-----
 ============================================================================