The WildList

December 1993

 ============================================================================
                  PC Viruses in the Wild - December 1, 1993
 ============================================================================
    This is a cooperative listing of viruses reported as being in the wild
    by 14 virus information professionals. The basis for these reports are
    virus incidents where a sample was received, and positively identified
    by the participant.  Rumors and unverified reports have been excluded.
    The list should not be considered a list of "currently common" viruses
    however. No provision is made for currency or commonness. Therefore it
    should be viewed only as a report of viruses verified as in-the-wild.
 ============================================================================
    This list adds information provided from EliaShim and Virus Bulletin.
    A companion list includes frequency information from some participants.
 ============================================================================
    The section below gives the names of participants, along with their
    organization, antivirus product (if any), and geographic location.
  
    Key Participant          Organization       Product       Location  
 ============================================================================
    As  Alan Solomon         S&S Int'l          Toolkit       UK
    Dc  Dave Chess           IBM                IBM AntiVirus USA
    Ek  Eugene Kaspersky     KAMI               AVP           Russia
    Fs  Fridrik Skulason     Frisk Int'l        F-Prot        Iceland
    Gj  Glenn Jordan         Datawatch          VirexPC       USA
    Jw  Joe Wells            Symantec           NAV           USA
    Pd  Paul Ducklin         CSIR Virus Lab     None          So Africa
    Pp  Padgett Peterson     Hobbyist           DiskSecure    USA
    Rf  Richard Ford         Virus Bulletin     None          UK
    Rr  Roger Riordan        CYBEC              VET           Australia
    Sg  Shimon Gruper        EliaShim           ViruSafe      Israel
    Vb  Vesselin Bontchev    U of Hamburg       None          Germany
    Ws  Wolfgang Stiller     Stiller Research   Integ Master  USA
    Yr  Yuval Rakavi         BRM                Untouchable   Israel
 ============================================================================
   The first chart is based on two or more participants reporting a virus. 
   Therefore, these viruses are probably more geographically scattered.   
  
   CARO Name of Virus            AsDcEkFsGjJwPdPpRfRrSgVbWsYr  Alias(es)
 ============================================================================
  AntiEXE......................| . . . . . x . . . . . x . . |
  Barrotes.A...................| x . . . . x x . . . . . . . | Barrotos
  Brasil.......................| . . . . . x . x . . . . . . |
  Butterfly....................| . . . . . x . . . . . x . . |
  Cascade.1701.A...............| x x . x . . . . x . x x . . | 1701
  Cascade.1704.A...............| x x x x . x . . . . x . . x | 1704
  Changsha.....................| . . . . . x . . . x . . . . | Centry
  Chinese Fish.................| x x . x x x x . . x . . . x | Fish Boot
  Dark_Avenger.1800.A..........| x x . x x x . . x x . . x . | Eddie
  Dark_Avenger.2100.SI.A.......| x . . . . x . . . . . . . . | V2100
  Datalock.920.................| x x . . . x . . . . x . . x | V920
  Dir-II.A.....................| x x x x . x x . x x x x x . | Creeping Death
  Disk_Killer.A................| x . x . . x . x x . x . . . | Ogre
  Even_Beeper..................| x x . . . . . . . . . . . . |
  EXE_Bug.A....................| x . . . . x x . x . x . x . | CMOS Killer
  EXE_Bug.C....................| . . . . . . x . . . x . x . |
  Fichv.2_1....................| x . . x . . . . . . x . . x | 905,CHV 2.1
  Filler.......................| . . . . x x . . . . . . . . |
  Flip.2153.A..................| x x . x . x . . x . x . . . | Omicron 1
  Flip.2343....................| x . . x . . . . . . . . . . | Omicron 2
  Form.........................| x x . x x x . x x . x x x x |
  Frodo.Frodo.A................| x x . x . x . . . x x . . . | 4096,100 Year
  Green Caterpillar............| x x . x x x . . x x x . x x | Find,1591,1575
  Helloween.1376...............| x . . . . x . . x x . . x x | Hell-1182
  Jerusalem.1244...............| x x . . . . . . . . . . . . | 1244
  Jerusalem.1808.Standard......| x x . x x x x x x . x . x . | 1813,Israeli
  Jerusalem.Anticad.4096.B.....| x . . x . . . . . . x . . . | Invader,Mozart
  Jerusalem.Fu_Manchu..........| x . . . . x . . . . x . . . | 2080,2086
  Jerusalem.Mummy.2_1..........| x . . x . . x . . . x . . . | PC Mummy
  Jerusalem.Zerotime.Australia.| x x . . . . . . . x x . x . | Slow
  Joshi.A......................| x x . x x x . x x x x . x . |
  Kampana.3700:Boot............| x x . x x x . . x . . . x . | Telecom,Drug
  Keypress.1232.A..............| x x . . . . x . x x x . x x | Turku,Twins
  Liberty......................| . x . x . x . . x . . . x x | Mystic,Magic
  Maltese Amoeba...............| x x . x . x . x x . x . x x | Grain of Sand
  Music_Bug....................| . . . x x . . x . . . . x . |
  Necros.......................| x . . . . x . . . . . . . . | Gnose,Irish3
  No_Frills.Dudley.............| x . . . . . . . . x . . . . | Oi Dudley
  No_Frills.No_Frills..........| . . . . . x . . . x . . . . |
  Nomenklatura.................| x x . . . . . . . . . . . . | Nomen
  November_17th.855.A..........| x x . x . x . . . . . . . . | V855
  NPox.963.A...................| . . . x . x . . . . . . . x | Evil Genius
  Ontario.1024.................| . x . . . . . . . x x . . . | SBC,1024
  Parity_Boot.B................| x . . . . x x . x . . x . . | Generic 1
  Ping_Pong.B..................| x x . . . . . . x . x . x . | Italian
  Print_Screen.................| x x . . . x . . . . . . . x | India,PrtSc
  Quit.A.......................| x x . . . . . . . . . . . . | 555,Dutch
  Quox.........................| . x . x . x . . . . . . . . | Stealth
  Screaming_Fist.696...........| x x . . x x . . . . . . x . | Fist 2,Scream 2
  Stealth.B....................| . x . . . x . x . . . . . . | NOPS,STB
  Stoned.16....................| x x . . . x . . . . . . . x | Brunswick,Stoned 3
  Stoned.Azusa.................| x x . x . x x x . x x . x . | Hong Kong
  Stoned.Empire.Monkey.........| . . . x x x . x . x . x x . | Monkey
  Stoned.Flame.................| . . . . . x . . . x . x . . | Stoned(3C)
  Stoned.June_4th..............| x . . . x x . . . x . x x . | Bloody!
  Stoned.Manitoba..............| . . . x . x . . . . . . . . | Stonehenge
  Stoned.Michelangelo..........| x x x x x x x x x x x x x . | March 6
  Stoned.NoINT.................| x x . x x x x . x x . . x . | 
  Stoned.NOP...................| . . . . . x . . . . . . x . | NOP
  Stoned.Standard.B............| x . x x x x x x x x x x x . | New Zealand
  Stoned.Swedish_Disaster......| x . . . x . . . . . . . . . |
  Stoned.W-Boot................| . . . . . x . . . x . . . x | W-Boot
  Stardot.789..................| . x . . . x . . . . . . . . | 805,Dot-789
  SVC.3103.....................| x . x . . x . . . . x . . . | SVC 5.0
  Swiss_Phoenix................| . . . . . x . . . . . . . x |
  Tequila......................| x x . x . x x . x . x x x x |
  Tremor.......................| . . . x . . . . x . . x x . |
  V-Sign.......................| x x . x x x . . x x x . x . | Cansu,Sigalit
  Vacsina.TP-05................| x x . x x x . . x . . . x . | RCE-1206
  Vacsina.TP-16................| x x . x . . . . . . . . . . | TP16VIR
  Vienna.648.Reboot............| x x x . . . . . . . . . . . | DOS-62
  WXYC.........................| . x . . . x . . . . . . . . |
  Yankee Doodle.TP-39..........| x . . x . . . . . . . . . . | RCE-2772
  Yankee Doodle.TP-44.A........| x . x x . x . . x . . x . x | RCE-2885
  Yankee Doodle.XPEH.4928......| . . . x . . . . . . . . . x | Micropox
  Yeke.1076....................| . x . . . x . . . . . . . . |
 ============================================================================
   The second chart is based on a single participant noting more than one 
   infection site and may signify limited regional virus outbreaks.
                              
   CARO Name of Virus            AsDcEkFsGjJwPdPpRfRrSgVbWsYr Alias(es)
 ============================================================================
  10_Past_3.748................| . . . . . . x . . . . . . . |
  Athens.......................| . . . . . x . . . . . . . . |
  BootEXE......................| . . . . . x . . x . . . . . | BFD-451
  Brain........................| . . . . . . . x . . . . . . | Pakistani
  Cascade.1701.G...............| . . . . . . . . . . . x . . | 1701
  Chile........................| . . . . . x . . . . . . . . | VIVA,Meirda
  Coffeeshop:MtE_090...........| . . . . . . x . . . . . . . |
  Darth_Vader.3.A..............| . . . . . . . . . . . . x . |
  Datalock.828.................| . . . . . . . . . . . . . x |
  Den_Zuko.A...................| x . . . . . . . . . . . . . | Den Zuk
  DosHunter....................| . x . . . . . . . . . . . . |
  Emmie.3097...................| . . . . . . . . . . . . . x |
  EXE_Engine...................| . . . . . . . . . . . x . . |
  Freddy.......................| . . . . . x . . . . . . . . |
  Ginger.......................| . . . . . . . . . x . . . . | Gingerbread
  Grower.......................| . . . . . x . . . . . . . . | V270x,268+
  Hafenstrasse.................| . . . . . . . . . . . x . . | Hafen
  Involuntary.A................| . . . . . x . . . . . . . . | Invol
  Jerusalem.1808.CT............| . x . . . . . . . . . . . . | Capt Trips
  Jerusalem.1808.Null..........| . x . . . . . . . . . . . . |
  Jerusalem.Carfield...........| x . . . . . . . . . . . . . |
  Jerusalem.Moctezuma..........| . x . . . . . . . . . . . . |
  Jerusalem.Mummy.1_2..........| . . . . . . x . . . . . . . |
  Jerusalem.Sunday.A...........| . . . . . . x . . . . . . . | Sunday
  Jerusalem.Sunday.II..........| . x . . . . . . . . . . . . | Sunday 2
  Joshi.B......................| . x . . . . . . . . . . . . |
  Kampana.Galicia:Boot.........| . . . . . x . . . . . . . . | Telecom,Drug
  Keypress.1744................| . . . . . . . . . . . . . x |
  Little Brother.307...........| . . . x . . . . . . . . . . |
  Lyceum.1788..................| . . x . . . . . . . . . . . | Lycee
  Murphy.Smack.1841............| . . . . . x . . . . . . . . | Smack
  NJH-LBC......................| x . . . . . . . . . . . . . | Korea Boot
  Parity_Boot.A................| . . . . . . . . . . . . x . |
  Sat_Bug......................| . . . . . x . . . . . . . . | Satan Bug
  Screaming_Fist.NuWay.........| . . . . . x . . . . . . . . | Sticky
  Sleepwalker..................| . . . . . . . . . x . . . . |
  Stinkfoot....................| . . . . . . x . . . . . . . |
  Stoned.Bunny.A...............| . . . . . . x . . . . . x . |
  Stoned.Empire.In_Love........| . . . . . x . . . . . . . . |
  SVC.2936.....................| . . . . . x . . . . . . . . | 
  Stoned.Empire.Int_10.........| . . . . . . . x . . . . . . |
  Swiss_Boot...................| . . . x . . . . . . . . . . | Swiss Army
  Syslock.Syslock.A............| x . . . . . . . . . . . . . |
  Voronezh.1600................| . . x . . . . . . . . . . . | RCE-1600
  Yale.........................| . x . . . . . . . . . . . . | Alameda
 ============================================================================
   The collation of this material is done by Joe Wells, Virus Specialist at 
   Symantec, Peter Norton Group, who is solely responsible for its contents.
   The material presented is implicitly copyrighted under various laws, but
   may be freely quoted or cited. However, its source and cooperative nature
   should be duly referenced. Other antivirus product developers are invited 
   to participate. If you wish to do so, please contact me.
 ============================================================================
  The WILDList by Joe Wells -- jwells@symantec.com -- 70750,3457 -- Vol1.12a
 ============================================================================