The WildList

November 1993

==========================================================================
                 PC Viruses in the Wild - November 1, 1993
============================================================================
   This is a cooperative listing of viruses reported as being in the wild
   by 12 virus information professionals. The basis for these reports are
   virus incidents where a sample was received, and positively identified
   by the participant.  Rumors and unverified reports have been excluded.
   The list should not be considered a list of "currently common" viruses
   however. No provision is made for currency or commonness. Therefore it
   should be viewed only as a report of viruses verified as in-the-wild.
============================================================================
   The section below gives the names of participants, along with their
   organization, antivirus product (if any), and geographic location.
 
   Key  Participant         Organization       Product       Location
============================================================================
   AS   Alan Solomon        S&S Int'l          Toolkit       UK
   DC   Dave Chess          IBM                IBM AntiVirus USA
   EK   Eugene Kaspersky    KAMI               AVP           Russia
   FS   Fridrik Skulason    Frisk Int'l        F-Prot        Iceland
   GJ   Glenn Jordan        Datawatch          VirexPC       USA
   JW   Joe Wells           Symantec           NAV           USA
   PD   Paul Ducklin        CSIR Virus Lab     None          So Africa
   PP   Padgett Peterson    Hobbyist           DiskSecure    USA
   RR   Roger Riordan       CYBEC              VET           Australia
   VB   Vesselin Bontchev   U of Hamburg       None          Germany
   WS   Wolfgang Stiller    Stiller Research   Integ Master  USA
   YR   Yuval Rakavi        BRM                Untouchable   Israel
============================================================================
  The first chart is based on two or more participants reporting a virus. 
  Therefore, these viruses are probably more geographically scattered.   
 
  CARO Name of Virus       AS DC EK FS GJ JW PD PP RR VB WS YR  Alias(s)
============================================================================
 Barrotes.A .............| x  .  .  .  .  .  x  .  .  .  .  . | Barrotos
 Butterfly ..............| .  .  .  .  .  x  .  .  .  x  .  . |
 Cascade.1701.A .........| x  x  .  x  .  .  .  .  .  .  .  . | 1701
 Cascade.1704.A .........| x  x  x  x  .  x  .  .  .  .  .  x | 1704
 Changsha ...............| .  .  .  .  .  x  .  .  x  .  .  . | Centry
 Chinese Fish ...........| x  x  .  x  x  x  x  .  x  .  .  x | Fish Boot
 Dark_Avenger.1800.A ....| x  x  .  x  x  x  .  .  x  .  x  . | Eddie
 Dark_Avenger.2100.SI.A .| x  .  .  .  .  x  .  .  .  .  .  . | V2100
 Datalock.920 ...........| x  x  .  .  .  x  .  .  .  .  .  x | V920
 Den_Zuko.A .............| x  .  .  .  .  x  .  .  .  .  .  . | Den Zuk
 Dir-II.A ...............| x  x  x  x  .  x  x  .  x  x  x  . | CreepingDeath
 Disk_Killer.A ..........| x  .  x  .  .  x  .  x  .  .  .  . | Ogre
 Even_Beeper ............| x  x  .  .  .  .  .  .  .  .  .  . |
 EXE_Bug.A ..............| x  .  .  .  .  x  x  .  .  .  x  . | CMOS
 EXE_Bug.C ..............| .  .  .  .  .  .  x  .  .  .  x  . |
 Fichv.2_1 ..............| x  .  .  x  .  .  .  .  .  .  .  x | 905
 Filler .................| .  .  .  .  x  x  .  .  .  .  .  . |
 Flip.2153.A ............| x  x  .  x  .  x  .  .  .  .  .  . | Omicron
 Flip.2343 ..............| x  .  .  x  .  .  .  .  .  .  .  . | Omicron
 Form ...................| x  x  .  x  x  x  .  x  .  x  x  x |
 Frodo.Frodo.A ..........| x  x  .  x  .  x  .  .  x  .  .  . | 4096,100 Year
 Green Caterpillar ......| x  x  .  x  x  x  .  .  x  .  x  x | Find,1591
 Helloween ..............| x  .  .  .  .  .  .  .  x  .  x  x |
 Jerusalem.1244 .........| x  x  .  .  .  .  .  .  .  .  .  . | 1244
 Jerusalem.1808.Standard.| x  x  .  x  x  x  x  x  .  .  x  . | 1808
 Jerusalem.Anticad.4096 .| x  .  .  x  .  .  .  .  .  .  .  . | Invader
 Jerusalem.Fu_Manchu ....| x  .  .  .  .  x  .  .  .  .  .  . |
 Jerusalem.Mummy.2_1 ....| x  .  .  x  .  .  x  .  .  .  .  . |
 Jerusalem.Zerotime.Austr| x  x  .  .  .  .  .  .  x  .  x  . | Slow
 Joshi.A ................| x  x  .  x  x  x  .  x  x  .  x  . |
 Kampana.3700:Boot ......| x  x  .  x  x  x  .  .  .  .  x  . | Telecom,Drug
 Keypress.1232.A ........| x  x  .  .  .  .  x  .  x  .  x  x | Turku,Twins
 Liberty ................| .  x  .  x  .  x  .  .  .  .  x  x | Mystic,Magic
 Maltese Amoeba .........| x  x  .  x  .  x  .  x  .  .  x  x | Irish
 Music_Bug ..............| .  .  .  x  x  .  .  x  .  .  x  . |
 Necros .................| x  .  .  .  .  x  .  .  .  .  .  . | Gnose,Irish3
 No_Frills.Dudley .......| x  .  .  .  .  .  .  .  x  .  .  . | Oi Dudley
 No_Frills.No_Frills ....| .  .  .  .  .  x  .  .  x  .  .  . |
 Nomenklatura ...........| x  x  .  .  .  .  .  .  .  .  .  . | Nomen
 November_17th.855.A ....| x  x  .  x  .  .  .  .  .  .  .  . | V855
 NPox.963.A .............| .  .  .  x  .  x  .  .  .  .  .  x | Evil Genius
 Parity_Boot.B ..........| x  .  .  .  .  .  x  .  .  x  .  . |
 Ping_Pong.B ............| x  x  .  .  .  .  .  .  .  .  x  . | Italian
 Print_Screen ...........| x  x  .  .  .  x  .  .  .  .  .  x | PrnScn
 Quit.A .................| x  x  .  .  .  .  .  .  .  .  .  . | 555,Dutch
 Quox ...................| .  x  .  x  .  x  .  .  .  .  .  . |
 Screaming_Fist.696 .....| x  x  .  .  x  x  .  .  .  .  x  . | 696
 Stealth.B ..............| .  x  .  .  .  x  .  x  .  .  .  . | STB
 Stoned.16 ..............| x  x  .  .  .  x  .  .  .  .  .  x | Brunswick
 Stoned.Azusa ...........| x  x  .  x  .  x  x  x  x  .  x  . | Hong Kong
 Stoned.Empire.Monkey ...| .  .  .  x  x  x  .  x  x  .  x  . |
 Stoned.June_4th ........| x  .  .  .  x  x  .  .  x  x  x  . | Bloody!
 Stoned.Manitoba ........| .  .  .  x  .  x  .  .  .  .  .  . | Monitoba
 Stoned.Michelangelo ....| x  x  x  x  x  x  x  x  x  x  x  . | March 6
 Stoned.NoINT ...........| x  x  .  x  x  x  x  .  x  .  x  . | Stoned 3
 Stoned.NOP .............| .  .  .  .  .  x  .  .  .  .  x  . |
 Stoned.Standard.B ......| x  .  x  x  x  x  x  x  x  x  x  . | New Zealand
 Stoned.Swedish_Disaster.| x  .  .  .  x  .  .  .  .  .  .  . |
 Stardot.789 ............| .  x  .  .  .  x  .  .  .  .  .  . | 805
 SVC.3103 ...............| x  .  x  .  .  x  .  .  .  .  .  . | SVC 5.0
 Tequila ................| x  x  .  x  .  x  x  .  .  .  x  x |
 Tremor .................| .  .  .  x  .  .  .  .  .  x  x  . |
 V-Sign .................| x  x  .  x  x  .  .  .  x  .  x  . | Cansu,Sigalit
 Vacsina.TP-05 ..........| x  x  .  x  x  x  .  .  .  .  x  . | RCE-1206
 Vacsina.TP-16 ..........| x  x  .  x  .  .  .  .  .  .  .  . | RCE-1339
 Vienna.648.Reboot ......| x  x  x  .  .  .  .  .  .  .  .  . | DOS-62
 Yale ...................| .  x  .  .  .  x  .  .  .  .  .  . | Alameda
 Yankee Doodle.TP-39 ....| x  .  .  x  .  .  .  .  .  .  .  . | RCE-2772
 Yankee Doodle.TP-44.A ..| x  .  x  x  .  x  .  .  .  x  .  x | RCE-2885
 Yankee Doodle.XPEH.4928.| .  .  .  x  .  .  .  .  .  .  .  x | Micropox
 Yeke.1076 ..............| .  x  .  .  .  x  .  .  .  .  .  . |
============================================================================
                        Single Participant Reports
============================================================================
  The second chart is based on a single participant noting more than one 
  infection site and may signify limited regional virus outbreaks.
 
  CARO Name of Virus       AS DC EK FS GJ JW PD PP RR VB WS YR  Aliases
============================================================================
 10_Past_3.748 ..........| .  .  .  .  .  .  x  .  .  .  .  . |
 Brain...................| .  .  .  .  .  .  .  x  .  .  .  . |
 Cascade.1701.G .........| .  .  .  .  .  .  .  .  .  x  .  . | 1701
 Coffeeshop:MtE_090 .....| .  .  .  .  .  .  x  .  .  .  .  . |
 Darth_Vader.3.A ........| .  .  .  .  .  .  .  .  .  .  x  . |
 Datalock.828 ...........| .  .  .  .  .  .  .  .  .  .  .  x |
 DosHunter ..............| .  x  .  .  .  .  .  .  .  .  .  . |
 Emmie.3097 .............| .  .  .  .  .  .  .  .  .  .  .  x |
 EXE_Engine .............| .  .  .  .  .  .  .  .  .  x  .  . |
 Flame ..................| .  .  .  .  .  .  .  .  x  .  .  . | 
 Ginger .................| .  .  .  .  .  .  .  .  x  .  .  . | Gingerbread
 Hafenstrasse ...........| .  .  .  .  .  .  .  .  .  x  .  . | Hafen
 Involuntary.A ..........| .  .  .  .  .  x  .  .  .  .  .  . | Invol
 Jerusalem.1808.CT ......| .  x  .  .  .  .  .  .  .  .  .  . | Capt Trips
 Jerusalem.1808.Null ....| .  x  .  .  .  .  .  .  .  .  .  . |
 Jerusalem.Carfield .....| x  .  .  .  .  .  .  .  .  .  .  . |
 Jerusalem.Moctezuma ....| .  x  .  .  .  .  .  .  .  .  .  . |
 Jerusalem.Mummy.1_2 ....| .  .  .  .  .  .  x  .  .  .  .  . |
 Jerusalem.Sunday.A .....| .  .  .  .  .  .  x  .  .  .  .  . | Sunday
 Jerusalem.Sunday.II ....| .  x  .  .  .  .  .  .  .  .  .  . | Sunday 2
 Joshi.B ................| .  x  .  .  .  .  .  .  .  .  .  . |
 Little Brother.307 .....| .  .  .  x  .  .  .  .  .  .  .  . |
 Lyceum.1788 ............| .  .  x  .  .  .  .  .  .  .  .  . |
 Murphy.Smack.1841 ......| .  .  .  .  .  x  .  .  .  .  .  . | Smack
 NJH-LBC ................| x  .  .  .  .  .  .  .  .  .  .  . | Korea Boot
 Ontario.1024 ...........| .  x  .  .  .  .  .  .  .  .  .  . | SBC,1024
 Parity_Boot.A ..........| .  .  .  .  .  .  .  .  .  .  x  . |
 Sat_Bug ................| .  .  .  .  .  x  .  .  .  .  .  . | Satan Bug
 Sleepwalker ............| .  .  .  .  .  .  .  .  x  .  .  . |
 Stinkfoot ..............| .  .  .  .  .  .  x  .  .  .  .  . |
 Stoned.Bunny.A .........| .  .  .  .  .  .  x  .  .  .  x  . |
 Stoned.Empire.In_Love ..| .  .  .  .  .  x  .  .  .  .  .  . |
 Stoned.Empire.Int_10....| .  .  .  .  .  .  .  x  .  .  .  . |
 Stoned.W-Boot ..........| .  .  .  .  .  .  .  .  x  .  .  . |
 Swiss_Boot .............| .  .  .  x  .  .  .  .  .  .  .  . |
 Swiss_Phoenix ..........| .  .  .  .  .  .  .  .  .  .  .  x |
 Syslock.Syslock.A ......| x  .  .  .  .  .  .  .  .  .  .  . |
 Voronezh.1600 ..........| .  .  x  .  .  .  .  .  .  .  .  . | RCE-1600
============================================================================
  The collation of this material is done by Joe Wells, Virus Specialist at 
  Symantec, Peter Norton Group, who is solely responsible for its contents.
  The material presented is implicitly copyrighted under various laws, but
  may be freely quoted or cited. However, its source and cooperative nature
  should be duly referenced. Other antivirus product developers are invited 
  to participate. If you wish to do so, please contact me.
============================================================================
 The WILDList by Joe Wells -- jwells@symantec.com -- 70750,3457 -- Vol1 #11
============================================================================