The WildList

December 1996

 ============================================================================
                PC Viruses in the Wild - December 22, 1996
 ============================================================================

    This is a cooperative listing of viruses reported as being in the wild
    by 45 virus information professionals. The basis for these reports are
    virus incidents where a sample was received, and positively identified
    by the participant.  Rumors and unverified reports have been excluded.
 
    This report is cumulative. That is, this is not just a report of which
    were seen last month. Monthly data is received from most participants,
    but the new data is added to the old. Participants are expected to let
    me know when I should remove their name from a virus that they haven't 
    seen in a year and a half or so.

    The list should not be considered a list of "the most common viruses",
    however, since no specific provision is made for a commonness factor.

    This data indicates only "which" viruses are in the wild, but viruses
    reported by many (or most) participants are obviously widespread.

    The WildList is current being used as the basis for in-the-wild virus
    testing of antivirus products by Virus Bulletin and the NCSA (National
    Computer Security Association). Additionally, a virus collection based 
    upon the WildList is being used in an effort to standardize the naming
    of common viruses.

        The WildList - (c)1993-1997 by Joe Wells - wildlist@vcnet.com

 ============================================================================
    The section below gives the names of participants, along with their
    geographic region, organization, and antivirus product (if any). The
    locations with an asterisk (*) note that the reports are regional, all
    others being multinational or global.
 
    Key Participant         *Region         Organization      Product
 ============================================================================
    Ac  Alan Candy          *New Zealand    Applied Insight   F-Prot Pro
    Ad  Allan Dyer          *Hong Kong      Yui Kee Co. Ltd.  F-Prot
    Ae  Amir Elbaz          *Israel         EliaShim          ViruSafe
    Bn  Barnabas Nagy       *Slovokia       NaBaware          Dr. Solomon's
    Bq  Blend Qapiti        *Albania        Poly U Tirana     None
    Cb  Carl Bretteville    *Norway         Norman Data       NVC
    Cj  Craig Jackson        USA            Datawatch         VirexPC
    Cr  Charles Renert       USA            Symantec          NAV
    Cs  Christian Schmid    *Austria        DataPROT Linz     F-Prot
    Dc  Dave Chess           USA            IBM               IBM AntiVirus
    Dg  Dmitry Gryaznov      UK             S&S Int'l         Dr. Solomon's
    Do  Donny Gilor         *Israel         Iris Software     AntiVirus Plus
    Ek  Eugene Kaspersky    *Russia         KAMI              AVP
    Ev  Eduardo Velasquez   *Colombia/Vene. SOFTEAM Ltda      VirusCOP
    Ew  Eddy Willems        *Belgium/Lux.   De Vaderlandsche  None
    Fl  Ferenc Leitold      *Hungary        Hunix Ltd.        Virus Buster
    Fs  Fridrik Skulason     Iceland        Frisk Int'l       F-Prot
    Gm  Gerard Mannig       *France         RECIF             None
    Gp  Gabriel Pislaru     *Romania        SoftWin           AVX
    Iw  Ian Whalley         *UK             Virus Bulletin    None
    Jd  Joost de Raeymaeker *Portugal       RSVP              Dr. Solomon's
    Jk  Jimmy Kuo            USA            McAfee            ViruScan
    Jm  Jose Martinez       *Peru           HackSoft S.R.Ltda TH AV
    Kd  K. T. Davies        *India          Pioneer Micro     Vaxine
    Ks  Klas Scholdstrom    *Sweden         QA Informatik     Dr. Solomon's
    Ls  Luca Sambucci       *Italy          I.C.A.R.O.        None
    Mh  Mikko Hypponen      *Finland        Data Fellows      F-Prot Pro
    Ms  Marek Sell          *Poland         APEXIM            MkS_vir
    Nb  Neville Bulsara     *India          N&N Systems       Dr. Solomon's
    Oh  Omar Herrera        *Mexico         Escuadron AV      Aguila AV
    Pb  Pavel Baudis        *Czech Republic Alwil Software    Avast!
    Pd  Paul Ducklin         UK             Sophos Plc.       Sweep
    Ra  Ruben Arias         *Argentina      RALP              Integ Master
    Re  Ralph Tee           *Malaysia       R.E.Solutions     Armour AV
    Rf  Richard Foley       *Ireland        Reflex Magnetics  TBAV
    Rk  Richard Ku          *Taiwan         Trend Micro       PC-cillin
    Rr  Roger Riordan       *Australia      CYBEC             VET
    Rt  Roger Thompson       USA            Thompson Network  Doctor
    Rv  Robert Vibert       *Canada         Sensible Security Dr. Solomon's
    Rz  Righard Zwienenberg *Netherlands    ESaSS BV          ThunderBYTE
    Sg  Sarah Gordon         USA            Command Software  F-Prot Pro Net
    Sm  Seiji Murakami      *Japan          Jade Corp         Scan Vakzin
    Td  Toralv Dirro        *Germany        U of Hamburg      None
    Ws  Wolfgang Stiller     USA            Stiller Research  Integ Master
    Yp  Ywain Penberthy     *So Africa      CSIR Virus Lab    VPS

 ============================================================================
                     Most Frequently Reported Viruses
 ============================================================================
   This section gives the names, types, and aliases of the most frequently
   reported viruses. These viruses have been reported by at least one third
   of the WildList participants. They are sorted with the most frequently
   reported first. A more complete alias list is also provided.

  Freq Caro Name                Type  Aliases
 ============================================================================
   36 |Form.A..................|Boot |Form 18        
   36 |WM.Concept.A............|Macro|Prank Macro
   34 |One_Half.3544...........|Multi|Dis, Free Love
   33 |AntiEXE.A...............|Boot |D3, Newbug, New Bug
   32 |Empire.Monkey.B.........|Boot |Monkey 2       
   30 |Junkie.1027.............|Multi| 
   29 |Parity_Boot.B...........|Boot |Generic 1      
   29 |Ripper..................|Boot |Jack Ripper    
   28 |AntiCMOS.A..............|Boot |Lenart         
   28 |Natas.4744..............|Multi|Satan, Sat_Bug.Natas
   26 |NYB.....................|Boot |B1             
   25 |Die_Hard................|File |DH2, Wix
   24 |Boot-437................|Boot | 
   24 |Sampo...................|Boot |Turbo, Wllop
   23 |Stoned.Angelina.A.......|Boot |Angelina
   22 |Michelangelo.A..........|Boot | 
   21 |Kampana.A...............|Boot |AntiTel, Campana, Telecom, Telefonica
   21 |Stoned.No_INT.A.........|Boot |Stoned         
   21 |WM.Wazzu.A..............|Macro|Wazzu
   19 |Tai-Pan.438.............|File |Whisper        
   19 |WelcomB.................|Boot |Bupt.9146
   18 |Stoned.Standard.A.......|Boot |New Zealand    
   18 |V-Sign..................|Boot |Cansu, Sigalit
   17 |Cascade.1701.A..........|File |1701           
   17 |Dir_II.A................|File |Creeping Death
   17 |EXE_Bug.A...............|Boot |CMOS Killer    
   17 |J&M.....................|Boot |Jimi, Jimmy, Hasita, Nasita
   17 |Jerusalem.1808.Standard.|File |1808, 1813, Israeli
   17 |Tequila.A...............|Multi| 
   16 |Tai-Pan.666.............|File |D2D, Doom2Death
   16 |WM.Npad.A...............|Macro|Jakarta
   16 |Yankee Doodle.TP-44.A...|File |RCE-2885       
   15 |Burglar.1150.A..........|File |GranGrave.1150
   15 |Green_Caterpillar.1575..|File |Find, 1575, 1591
   15 |Stealth_Boot.C..........|Boot |AMSE, NopB2
 ============================================================================
                              The WildList
 ============================================================================
  This main list includes viruses reported by multiple participants, which
  appear to be non-regional in nature. Technically, this first list is "the"
  WildList according to my original specification, which required viruses to
  be verified in the wild by a minimum of two participants. A supplemental
  list follows that contains viruses reported by single participants.
 
  If a virus listed has minor variants, but no specific variant letter is
  attached, the virus meant is the .A variant.

  Please note that all the MS Word macro viruses are grouped under WM.name.

 + Viruses marked with a plus sign (+) are new to the main list this month.

  CARO Name of Virus      [ Alias(es)     ] Reported by:
 ============================================================================
  15_Years................[Espejo, Esto te] AeCrDcDgEvJkJmRtSgSm
  Aircop.Standard.........[...............] OhRk
  Alfons.1344.............[Iutt99.........] AeDoFsGpJkJmKsMsPbRrSg
  Anticad.4096.Mozart.....[Invader........] DgSg
  AntiCMOS.A..............[Lenart.........] AcAdCbCjCrDcDgEvEwFlFsGmIwJdJkJmKd
                                            KsMhMsPdReRtRvSgSmWsY
  AntiCMOS.B..............[LiXi...........] AcAdCbCrDcIwKsMsReRzSgSmTd
  AntiEXE.A...............[D3, Newbug, New] AcAdBqCbCjCrDcDgEvEwFlFsGmGpIwJk
                                            JmKdKsMhMsNbPdRfRkRtRvRzSgSmTdWsYp
  Arianna.3375............[...............] DcDgLs
  Avispa.D................[...............] AeCrDgJkRaRt
  BackFormat.2000.A.......[Backform.......] BnDgFlFsGpJkMs
  Bad_Sectors.3428........[...............] FlGp
 +Barrotes.1303...........[...............] EvJm
  Barrotes.1310.A.........[Barrotos.......] CrDgEvGmJdJkJmPdYp
  Boot-437................[...............] AcBqCbCjCrDcDgFlFsGmGpJkKdKsMsOhPb
                                            PdRkRtRzSgSmWs
  BootEXE.451.............[BFD, BE-451....] FlFsJkMhMsNbRzSg
  Brasil..................[...............] CjCr
  Burglar.1150.A..........[GranGrave.1150.] AcAdCbCrDgFsJkKsMhMsPbRkRzWsYp
  Bye.....................[ByeBye.........] CbDcIwKsMsPdRzTd
  Byway.A.................[Dir2.Byway, Hnd] CrDcDgEvFlFsGmJdJkJmSg
  Byway.B.................[Dir2.Byway, Hnd] DcDgEvJkJm
  Cascade.1701.A..........[1701...........] CbCjCsDgFlFsGmGpKsMhMsPdRtRzSgSmWs
  Cascade.1704.A..........[1704...........] CrCsDgEkFsGpKsRtSg
  Cawber..................[NTU.T4, BacLab.] CrRt
  Chance.B................[Lennon.........] CrDcFsJk
  Changsha.A..............[Centry, Changes] MsRrRt
  Chaos.1241..............[Faust..........] RrSg
  Chill...................[Chill Touch....] CrRt
  Chinese_Fish............[Fish Boot......] CjDgRkRrRt
  Civil_Defence.6672......[CDV 3.3........] DcMsPbSg
  Cordobes.3334...........[...............] CrDoFsJk
  CPW.1527................[Mediera, Mierda] CbCrDgEvFsJkJm
  Crazy_Boot..............[...............] CrDcDgEwFlJkSgTd
  Cruel...................[...............] DoGmGpMhTd
  DA_Boys.................[...............] CjCrDcDgEwFsJkRtSgWs
  Dark_Avenger.1800.A.....[Eddie..........] CjDgFsGpRrSgWs
  Dark_Avenger.2100.SI.A..[V2100..........] DgRf
 +Defo....................[PeterII.Runtime] BqFs
  DelCMOS.B...............[Int7F-E9, Feint] DgFsIwJmPdRz
  Delta.1163..............[...............] CrFs
  DelWin.1759.............[Goblin.1759....] CbDcDgDoGpJkJmKsMsPdRfTd
  Den_Zuko.2.A............[Den Zuk........] DgRtSg
  Desperado.1403.C........[...............] JkKs
  Diablo_Boot.............[...............] CrDcEvFsJmMhPdRa
  Die_Hard................[DH2, Wix.......] AcAdCbCjCrDcDgFlFsJkJmKdKsMsNbReRk
                                            RtRvRzSgSmTdWsYp
  Digi.3547...............[Deliver.Stealth] FsMsPb
  Dir_II.A................[Creeping Death.] BnCrCsDgEkFlFsGmJkKsNbOhRkRrSgWsYp
  Disk_Killer.1_00........[Ogre...........] DgEk
  DR&ET.1710..............[Dret...........] JkMs
  Ear.Leonardo.1207.......[...............] DgMs
  Edwin...................[...............] CrDgGmKs
  Empire.Int_10.B.........[...............] CrRtSg
  Empire.Monkey.A.........[Monkey.........] CrDcGmJkJmKsOhPdRrRtRvSg
  Empire.Monkey.B.........[Monkey 2.......] AcBqCbCjCrDcDgEvEwFsGmIwJdJkJmKdKs
                                            MhMsNbOhPdRkRrRtRvRzSgSmTdWsYp
  EXE_Bug.A...............[CMOS Killer....] CrDgEwFlFsGmIwJdJkKsOhPdRfRtTdWsYp
  EXE_Bug.C...............[...............] CbRtYp
  EXE_Bug.Hooker..........[...............] MhRtYp
  Fairz...................[Khobar.........] DgJkKdMsRf
  Fat_Avenger.............[...............] DcKdRrRvSm
  Fichv.2_1...............[905, CHV 2.1...] DgGmRz
  Filler.A................[DiskFiller.....] CbCjFlKs
  Finnish_Sprayer.........[Aija...........] AdCrFsKsMh
  Flame...................[Stamford.......] CrFlJkRr
  Flip.2153.A.............[Omicron........] DcDgFsGmKsRv
  Flip.2343...............[Omicron 2......] DgDoFsJd
  Form.A..................[Form 18........] AcAdBqCbCjCrCsDcDgEvEwFlFsGmGpIwJd
                                            JkJmKdKsLsMhMsNbPbPdRfRtRvRzSgSmTd
                                            WsYp
  Form.C..................[...............] CsMsTd
  Form.D..................[Form May.......] CrCsDcEvFlFsGmIwKdMsPdRtYp
  Frankenstein............[Frank, Sblank..] DcDgJkKdMs
  Freddy_Krueger..........[Freddy 2.......] CrFsJkWs
  Frodo.Frodo.A...........[4096, 4K, 100 Y] DcDgEwFsGpKsRrSm
  Galicia.................[Telecom........] CrGpJkJmRt
  Ginger.2774.............[Gingerbread....] CrJkRr
  GoldBug.................[...............] DgFlJkMh
  Green_Caterpillar.1575..[Find, 1575, 159] CjCrDgFlFsGmGpJkKdKsOhRrRtSmWs
  Hare.7610...............[...............] AcCrDgFsIwLsMhRzYp
  Hare.7750...............[...............] DoMhMs
  Hare.7786...............[...............] AcDgFsKsMhMsRz
  Helloween.1376.A........[1376...........] CrDcDgFlJkJmPbRrWs
  Hi.460..................[Hi.............] GpMs
  Hidenowt................[...............] AeCrDgGmIwJkJmKdPdSm
  HLLC.Even_Beeper.B......[...............] DgMsRz
  Ibex....................[Bones, Seven Bo] CbCrJkMh
  Int40...................[...............] PbPd
  Istanbul.1349...........[...............] DgMs
  J&M.....................[Jimi, Jimmy, Ha] AdBnCbCjDcDoFlFsGpIwJkKsMhMsPbPdSm
  Jerusalem.1244..........[1244...........] DgLsSg
  Jerusalem.1500..........[Xug.1500.......] CrJk
  Jerusalem.1808.Standard.[1808, 1813, Isr] CbCjCsDcDgFlFsJmKsNbRkRtRzSgSmWsYp
  Jerusalem.Mummy.1364.A..[Mummy 2.1......] DgRtYp
  Jerusalem.Sunday.A......[Sunday.........] RkRtSgYp
  Jerusalem.Zero_Time.Aust[Slow...........] DgJdRrRtSm
  Jos.1000................[Jabb, Jabberwoc] GpMs
  Joshi.A.................[...............] CjCrDcDgFsJkJmRkRrRtSgSmWs
  Jumper.A................[French Boot, 2k] CbCjCrDcDgEwFsGmGpJmMsPdRtSg
  Jumper.B................[SillyBop, 2kb..] CbDgFsJkKsMhMsSgSm
  June_12th.2660..........[Mabuhay........] AdMs
  Junkie.1027.............[...............] AcAdBnCbCrCsDcDgEwFlFsGmGpJkJmKsLs
                                            MhMsPbPdRfRrRtRvRzSgSmTdWs
  Kampana.A...............[AntiTel, Campan] CbCjCrDcDgEwFsGmIwJdJkKsMhMsPbPdRf
                                            RtSgSmTd
  Kaos4.697...............[...............] CrJkMsSgYp
  Karnivali.1971..........[...............] DgJk
  Keypress.1232.A.........[Turku, Twins...] DcDgFlGpJkJmRrRtRzSg
  Laroux..................[XM.............] DgJkSg
  Leandro.................[TimeWarp.......] AeCbCrDcEvFsJkJmMhMsPdRtRzWs
  Lemming.2160............[...............] CrRr
  Liberty.2857.A..........[Mystic, Magic..] DcEvRt
  Little_Red.1465.........[Red Book, Mao..] CjDcDgFsKdMsRtSmTdWsYp
  MacGyver.2803...........[Shoo...........] GmJkMsRkYp
  Major.1644..............[Major BBS......] AeCbCrDgDoFsJkKsMhMsRzSg
  Maltese_Amoeba..........[Amoeba.2367, Gr] CbDgFsGmKsMsRtSgWsYp
  Mange_Tout.1099.........[1099...........] CrDgGmJkMsPbSm
  Manzon.1414.............[...............] CbDcEwFsJkKsMhMsPdRrTd
  Markt.1533..............[Werbe, Media, V] DgFs
  Michelangelo.A..........[...............] AdBnCjCrCsDcDgEkFlFsGmGpOhPbPdRkRr
                                            RtSgSmWsYp
  MIREA.1788..............[Lyceum.1788, Ly] AeEkJm
  Moloch..................[...............] CrDgFs
  Mongolian_Boot..........[Mongol.........] CrDgSm
  Music_Bug...............[...............] CjWs
  Natas.4744..............[Satan, Sat_Bug.] AdCbCrDcDgEvEwFlFsGpJdJkJmKdKsMhMs
                                            NbOhPbPdRkRtRvSgSmTdYp
  Necros.1164.............[Gnose, Irish3..] DgRf
  Neuroquila..............[Havoc, Wedding.] DgJkWs
  Nightfall.4518.B........[N8Fall, Nightfa] CbDgJkPbTd
  No_Frills.Dudley........[Oi Dudley......] DgJkRrRt
  No_Frills.No_Frills.843.[...............] CrJkRr
  Nomenklatura.A..........[Nomen..........] DgMh
  November_17th.800.A.....[Jan1, Int83.800] CrDcFlLs
  November_17th.855.A.....[Int83.855......] CrDcDgFsGmLsMsRt
  NPox.963.A..............[Evil Genius....] CrFs
  NYB.....................[B1.............] AcCjCrDcDgEkEwFlFsIwJkJmKdKsLsMhMs
                                            PdRtRvRzSgSmTdWsYp
  One_Half.3544...........[Dis, Free Love.] AcAdAeBnCbCrCsDcDgEkEvEwFlFsGmGpJk
                                            JmKdKsLsMhMsNbPbRfRkRtRzSgSmTdWsYp
  One_Half.3570...........[...............] DoFsJk
  Ontario.1024............[SBC, 1024......] DcRr
 +Ornate..................[...............] DgSg
  Parity_Boot.A...........[...............] CbGpMhMsTd
  Parity_Boot.B...........[Generic 1......] AdCbCjCrCsDcDgEvEwFlFsGmGpIwJdJkKd
                                            KsLsMhPdRfRtRzSgSmTdWsYp
  Pasta...................[Boot-446.......] CrDgJk
  Pathogen:SMEG.0_1.......[SMEG...........] CrDgWsYp
  Paula_Boot..............[...............] FsRa
  Peter...................[Peter II.......] CbDcFsJdJkLsMhSmYp
  Ph33R.1332..............[...............] EwFsJkMh
  Phx.965.................[PUX.965........] DgJmMsRa
  Pieck.4444..............[Kaczor.4444....] CbMsPbRvYp
  Ping_Pong.B.............[Bouncing-Ball, ] DcDgFsGmYp
  Plagiarist.2051.........[...............] CrDg
  Predator.2448...........[2448...........] CrFsJkKsRv
  QRry....................[Query, Essex...] CrDcEvJk
  Quandary................[Parity_Boot.Enc] AcDgFsIwJkKsMhMsPdRvSmTd
  Quicky.1376.............[Quicksilver, V.] AcCbCrDgFlFsGmJkPdTd
  Quiver..................[Qvr............] EvMh
  Quox.A..................[Stealth 2......] CbCrDcFlFsJkRtSgSm
  Reverse.948.............[Red Spider.....] MsYp
  Ripper..................[Jack Ripper....] AcAdCjCrCsDcDgEwFlFsGmGpIwJkKsMhMs
                                            PbPdRfRkRtRvRzSgSmTdWsYp
  Russian_Flag............[Slydell, Ekater] CrDcDgIwJkRzSmYp
  Sampo...................[Turbo, Wllop...] AcAdCjCrDcDgEwFlFsGmIwJkKdKsMhMsNb
                                            PbPdRtSgSmWsYp
  Sarampo.1371............[...............] DgJdJk
  Sat_Bug.Sat_Bug.........[Satan Bug......] CrEv
  Satria.A................[July 4th.......] JkTd
  Sayha...................[...............] CrJk
  Screaming_Fist.II.696...[Fist 2, Scream ] CjDgJkRtSg
  She_Has.................[Breasts........] CbDgPdRzTd
  Sibylle.................[...............] DcDgFl
  Sleep_Walker.1266.......[Swalker........] CrRr
  Stealth_Boot.B..........[AMSE, NopB.....] CbCjCrDcDgEvFsJkMsPdRtSgSm
  Stealth_Boot.C..........[AMSE, NopB2....] CbCjCrEvFsGmIwJdJkJmPdRtSgSmYp
  Stoned.16.A.............[Brunswick......] CrDcDg
  Stoned.Angelina.A.......[...............] BqCbCrCsDcDgEvFlGmJdJkJmKdMhMsPbPd
                                            RkRvSgSmTdYp
  Stoned.Azusa.A..........[Hong Kong......] CjCrCsDgJkKsRrRtYp
  Stoned.Bravo............[...............] DgMsYp
  Stoned.Bunny.A..........[...............] CrSgWsYp
  Stoned.Daniela..........[...............] CrMsSg
  Stoned.Dinamo...........[...............] CrDcMsRt
  Stoned.June_4th.A.......[Bloody!........] CbCjCrCsDgJkRkRrSmWs
  Stoned.Kiev.............[Epbr...........] CjDcEkMsPdRt
  Stoned.Lzr..............[Lisa2, Whit....] AdCjCrDcEvFsRt
  Stoned.Manitoba.........[Stonehenge.....] CrDcDgFsKsPdRtRvSm
  Stoned.No_INT.A.........[Stoned.........] AcCbCjCrCsDcDgEwFlFsGmJkMhOhPbPdRr
                                            RtSgWsYp
  Stoned.NOP..............[NOP............] DgJkWs
  Stoned.Spirit...........[...............] AeDgFsGmJkMhMsPbRz
  Stoned.Standard.A.......[New Zealand....] CjCrDcDgDoEkEvFsGmGpJkPdRkRrRtSmWs
                                            Yp
  Stoned.Swedish_Disaster.[...............] CjDg
  Stoned.W-Boot...........[Stoned.P, Wonka] AdCrDcEvJkMsPdRrWs
  SVC.3103.A..............[SVC 5.0........] CrDgEkEv
  Swiss_Boot..............[Swiss Army.....] DcFlFsJkKsNbSm
  Tai-Pan.438.............[Whisper........] CbDcDgFlFsGmJkJmKdKsMhMsPbPdRtSgTd
                                            WsYp
  Tai-Pan.666.............[D2D, Doom2Death] AcBnCbCrDcDgEkEwJkMhMsRtSgSmWsYp
  Tanpro.524..............[...............] AdCrJk
  Tentacle.10634..........[Tentacle II, Sh] CrDgDoJkKsMhRv
  Tentacle.1996...........[...............] CrDgEwFsJkKsMhRz
  Tequila.A...............[...............] CrCsDcDgEwFsGmJkPdRfRkRtSgSmTdWsYp
  Three_Tunes.1784........[Flip, PCBB.1784] AeCjCrDcDgEvJkJm
  Trakia.653..............[...............] CrRr
  Tremor.4000.A...........[...............] CbCsDgFlFsJkKsMhMsPbRtSgWsYp
  Trojector.1463..........[Athens.........] DcDgJkKdNbSgSm
  Trojector.1561..........[...............] CrGpKsRz
  TVPO.3873...............[...............] GpRz
  Unashamed...............[...............] CrDoJdJkJmLsMhMsPdYp
  Unsnared.814............[ V.814.........] AeGpRz
  Urkel...................[Nwait..........] CjCrDcFsJkRzSgWs
  V-Sign..................[Cansu, Sigalit.] BnCjCrDcDgFsGmJkKdMhMsPbPdRrRtSgSm
                                            Ws
  Vacsina.TP-05.A.........[RCE-1206.......] CjCrDgFsRt
  Vacsina.TP-16.A.........[RCE-1339.......] DgFs
  Vampiro.................[...............] DgRaWs
  Vienna.648.Reboot.A.....[DOS-62.........] AeDgEkGpRkSg
  Vinchuca................[...............] DgRaWs
  VLamiX..................[Die Lamer......] DgFlJkMsRt
  WelcomB.................[Bupt.9146......] AdCjCrCsDcDgEvFlGmGpJkJmKsMhMsPbPd
                                            RtYp
  Werewolf.1500.B.........[...............] CrDgEwFsGmJkMhMsRzSgSmYp
 +WM.Bandung.A............[Concept.J, Tedi] DcJkRtSg
  WM.Buero.A:De...........[Buro:De........] CrDgJkMhTd
  WM.Colors.A.............[Colours........] CbCjDgJdJkYp
  WM.Concept.A............[Prank Macro....] AcAdBqCbCjCrCsDcDgEwFlFsGmIwJdJkJm
                                            KdKsMhMsNbPbPdReRfRkRrRtRvRzSgSmTd
                                            WsYp
 +WM.Concept.F............[Parasite.A.....] CrFsJkMh
 +WM.Concept.J............[Parisite.B.....] DgJk
  WM.Date.A...............[AntiDMV, Dateii] CrDgJkPb
  WM.Divina.A.............[Infeczione.....] CjCrFs
 +WM.Helper.A.............[...............] DgJkMhRt
  WM.Hot.A................[Hot............] CjCrRv
  WM.Imposter.A...........[Imposter.......] AcCbCjCrDgIwMh
  WM.Irish.A..............[Irish..........] CrJkRt
  WM.MDMA.A...............[StickyKeys.....] AdCjCrDcJkMhRtSgTd
  WM.NOP.A:De.............[Nop............] CrFsJkMhRzTd
  WM.Npad.A...............[Jakarta........] AdCbCjCrDcDgFsIwJkJmMhPbRtRzSgTd
  WM.Nuclear.B............[Nuclear.B......] FlFsYp
 +WM.TWNO.A:Tw............[Taiwan No. 1...] AdJkRk
  WM.Wazzu.A..............[Wazzu..........] AdAeCbCjCrDcDgEwFsGmJdJkJmKsMhRfRk
                                            RtRvSgTd
 +WM.Wazzu.C..............[...............] CjDgJkPbRtSg
 +WM.Wazzu.E..............[...............] CbJk
 +WM.Wazzu.J..............[...............] AdDg
 +WM.Wazzu.P..............[...............] AcRt
  WXYC....................[...............] CjCrJmMsOhSmWs
  Xeram.1664..............[N-Xeram.1664...] JkPd
  Xuxa.1984...............[...............] DgFs
  Yankee Doodle.TP-39.....[RCE-2772.......] DgFs
  Yankee Doodle.TP-44.A...[RCE-2885.......] DgEkEwFlFsGmGpKsMhMsNbPdRtSgSmTd
  Yankee Doodle.XPEH.4928.[Micropox.......] CbFlFs
 ============================================================================
  Total for the WildList: 234 

 ============================================================================
                             Supplemental List
 ============================================================================
  As was noted at the start of the main list, this list is not, technically,
  part of "The WildList" as I have defined it. By design, the WildList is a
  list of viruses verified as being in the wild by a minimum of two WildList
  participants. The viruses listed below do not currently meet that criteria.

  This additional list includes viruses reported by a single participant and
  are often either moving onto the main list, or dropping off of it. 

  Please note especially that this list also tends to be more of a regional 
  reporting mechanism. For example, a virus is often reported as very common
  by one regional participant, but is found nowhere else in the world. 

  Viruses marked with a minus sign (-) dropped off the main list this month.

  CARO Name of Virus      [Alias(es)      ] Reported by:
 ============================================================================
  15_Years.B..............[Espejo.B.......] Jk
  A&A.....................[...............] Dg
  Accept.3773.............[...............] Ra
  Acid....................[...............] Ew
  Alex_II.599.............[Alex-599.......] Do
  Alphabetic.A............[...............] Mh
  Anticad.4096.A..........[Plastique 5.12.] Sg
  AntiCMOS.D..............[AntiCMOS.G.....] Jk
  Arusiek.817.............[...............] Cb
  Avalon..................[...............] Fs
  Baby.962................[_962...........] Ad
  BackFormat.B............[BackForm.B.....] Ms
  Barrotes.1463...........[...............] Rz
  Beer.2473...............[...............] Fl
  Cavaco..................[...............] Jk
  Chameleon...............[...............] Iw
  Cosenza.................[...............] Fs
  Coup.2052...............[...............] Dg
  Dalian.1366.............[...............] Ad
  Danish_Boot.............[...............] Cr
  Datalock.920.A..........[...............] Dg
  Deliver.1771............[Blue Shark.....] Ms
  Dual_Gtm.1643...........[BewareBug.1643.] Jk
  DullBoy.................[...............] Jk
  DuPoem..................[...............] Jk
  Emmie.2823..............[Emmie 3........] Do
  Error_Vir...............[...............] Mh
  Face....................[...............] Jk
  Fighter.5871.APE........[Stealth_Fighter] Ek
  Finnish.357.............[...............] Ks
  Finnpoly................[...............] Mh
  FITW....................[...............] Pd
  Flag3.1901..............[Furtive.1901...] Jk
  Form.B..................[...............] Iw
  Glupak.857..............[...............] Rz
  Gripe.2040..............[...............] Jk
  H-Andromeda.1024........[Axe............] Fl
  Ha!.1224................[Info,Zmaina....] Ms
  Hack_Master.............[...............] Ae
  Halt....................[BM_Birthday....] Jk
  Hi.833..................[Hi.............] Gp
  Hiroshima.830...........[...............] Jk
  HLLO.Novademo...........[Nova...........] Ms
  Horror.1173.............[...............] Td
  Immortal.2190...........[...............] Ms
  Indonga.2197............[...............] Dg
  Infector.1022...........[Alia.1023......] Cr
  Invisible_Man.2926......[...............] Kd
  IR&MJ...................[Diciembre_30_Bo] Jm
  ITV.457.................[...............] Oh
  IVP.264.B...............[...............] Rz
  IVP.674.B...............[...............] Ks
  IVP.Flipper.872.........[...............] Rr
  Japanese_Xmas...........[Xmas in Japan..] Sm
  Jerusalem.AntiScan......[...............] Dg
  Jerusalem.June_13.......[...............] Gp
  Johana_Boot.............[...............] Jm
  K-Hate..................[...............] Iw
  Kmee....................[...............] Fs
  Kysia.1536..............[Kyokushinkai...] Ms
  Kysia.3072..............[Kyokushinkai...] Ms
  Legozz..................[...............] Fl
  Little_Brother.307......[...............] Jk
  LTS.....................[...............] Fs
  Lucho...................[...............] Jm
  Lutil.591...............[...............] Jk
  MacGyver.4112...........[...............] Jk
  Magda...................[Magdzie........] Ms
  Mannequin...............[...............] Gp
  Mario.745...............[...............] Ms
  Matthew.3044............[...............] Ad
  Menem_Tocoto............[...............] Ra
  Mirage..................[...............] Dg
  MISiS...................[Zharinov,NIKA..] Ev
  Natas.4738..............[...............] Dg
  Necropolis.1963.A.......[1963...........] Do
  Nightfall.*.............[N8Fall.........] Td
  NJH2LBC.A...............[Korea Boot.....] Dg
  November_17th.800.B.....[...............] Dc
  NoWin.2576..............[Zielona........] Ms
  Oktubre.1784............[...............] Dg
  Patras.196..............[...............] Gm
  PC_Ogre.................[...............] Jk
  Peligro.1213............[...............] Jm
  Phx.1295................[...............] Ra
  Print_Screen_Boot.A.....[India,PrnSn....] Dg
  PS-MPC.475..............[...............] Cr
  Pysk.2464...............[...............] Dg
  Rhubarb.................[RP.............] Ms
  Scitzo..................[...............] Fl
  Scroll.1532.............[Kato...........] Ms
  Sierra..................[...............] Jk
  SillyCR.409.............[...............] Jk
  Spectre.513.............[...............] Ks
  Stealth_Boot.Alfredo....[...............] Dc
  Stoned.Michelangelo.D...[...............] Fl
  Stoned.Scale............[BootM1.........] Ae
  Suriv_1.Argentina.......[...............] Ra
  Tai-Pan.512.............[...............] Mh
 -Teraz.2717..............[...............] Dg
  Teraz.4004..............[Flaga..........] Ms
  Turner..................[...............] Ek
  Ulate...................[...............] Dg
  Ultra_Violent...........[...............] Jk
  Unkempt.1350............[...............] Jm
  Uvjan.2246..............[...............] Ev
  Uvjan.2262..............[...............] Ev
  V-160...................[SillyRC.160....] Jk
  Valentine.2332..........[...............] Jk
  VCL.541.................[...............] Ks
  VCL.Genocide.839........[...............] Ms
  Vienna.Bua..............[Big Caibua.....] Dg
  Voyage.1134.............[...............] Ws
  Werewolf.684............[Claws..........] Jk
  Werewolf.693............[Fangs..........] Jk
  WM.Alien.A..............[Chandi.........] Jk
  WM.Alliance.A...........[...............] Jk
  WM.Boom.A:De............[...............] Cr
  WM.Colors.B.............[...............] Mh
  WM.Colors.G.............[...............] Mh
  WM.Concept.C............[...............] Dg
  WM.Concept.Q............[...............] Ad
  WM.CountTen.............[Count10........] Jk
  WM.Hassle.A.............[Assistant......] Dg
  WM.Maddog.A.............[...............] Jk
  WM.MDMA.C...............[...............] Jk
  WM.MDMA.D...............[...............] Jk
  WM.MDMA.E...............[...............] Jk
  WM.Niceday.A............[...............] Jk
  WM.Nuclear.A............[...............] Jk
  WM.Rapi.A...............[...............] Jk
  WM.Theatre.A:Tw.........[...............] Jk
  WM.Theatre.B:Tw.........[...............] Jk
  WM.Wazzu.F..............[Bosco..........] Jk
  WM.Wazzu.H..............[Microsloth.....] Td
  WM.Wazzu.O..............[...............] Jk
  WM.Wazzu.X..............[...............] Jk
  WM.Weather.A:Tw.........[Fish...........] Jk
  Xtc.2153................[...............] Jk
  Yesmile.................[...............] Fs
  Zimboot.................[...............] Yp
 ============================================================================
  Total for both lists: 375 

 ============================================================================

  Release notes for the December 15 list:

  The November 1996 WildList was skipped for various reasons.

  This version of the WildList is the result of a concerted effort by myself
  and the participants to indentify exactly which macro viruses are currently
  in the wild. Note that this effort has resulted in more macro virus variants
  (especially Concept and Wazzu variants) to appear on both lists. Special 
  thanks goes to Jimmy Kuo for his assistance in this effort. 

  This release also adds a new feature. A list of most frequently reported
  viruses precedes the main list. This has been requested by many people.

  I am continuously seeking WildList participants, especially for regional 
  reporting in the following countries:

  Bulgaria, Chile, China, Denmark, Greece, Indonesia, Phillipines, Saudi 
  Arabia, Singapore, South Korea, Spain, Thailand, Turkey, and Ukraine.

  Such new participants will need to be in a position where they can monitor 
  and verify virus incidents. People who develop av products are best suited.
  People who represent one or more av products (agents) and provide localized
  support may also be qualified if they actually verify the viruses or 
  forward samples to developers. If you thus qualify, please send your name,
  location, organization, product name, favorite brand of beer, and 
  references (preferably CARO members who know you). Send the information to
  wildlist@vcnet.com. Thanks.

 ============================================================================
  The collation of this list is done by Joe Wells, Editor of the IBM web
  site for virus information, www.av.ibm.com, who is solely responsible for 
  its contents.
 
  The latest WildList is always posted directly by me to the NCSA Security
  forum on Compuserve, in the Virus Info/Tools library. The official archive
  location for the WildList is ftp.ncsa.com in pub/virus/wildlist.

  A complete archive of WildLists is available at the Virus Bulletin web
  site (http://www.virusbtn.com/WildLists/index.html).

  The WildList is copyright material, but may be freely quoted or cited in
  part or in whole. No permission is needed to reprint the list.

  All mail in regard to the WildList should be sent to wildlist@vcnet.com. 

 ============================================================================
  WildList Vol.612 - (c)1993-1997 Joe Wells - 75511,635 - wildlist@vcnet.com
 ============================================================================
  -----BEGIN PGP PUBLIC KEY BLOCK-----
  Version: 2.7

  mQCNAy+wAnYAAAEEAO2alE3YclXZAxkqrSVXkhAuuOsx6NnVfUdKMghYtrBabFuJ
  +zKiIsahmjeakA2J101KZOHtKMhb5iqLG0oCbRyuBFLtuMhJrjk+L9VRCoxoDB/4
  XwFevOGyxRHYfancrIydlMUooe7TZJqbGhhQEROWYm8v6RvkPFtsMpyD+Lb1AAUR
  tCNKb2UgV2VsbHMgPGMxandlbGxzQHdhdHNvbi5pYm0uY29tPg==
  =aKXf
  -----END PGP PUBLIC KEY BLOCK-----
 ============================================================================