The WildList

February 1997

 ============================================================================
                  PC Viruses in the Wild - February, 1997
 ============================================================================

    This is a cooperative listing of viruses reported as being in the wild
    by 46 virus information professionals. The basis for these reports are
    virus incidents where a sample was received, and positively identified
    by the participant.  Rumors and unverified reports have been excluded.
 
    This report is cumulative. That is, this is not just a report of which
    were seen last month. Monthly data is received from most participants,
    but the new data is added to the old. Participants are expected to let
    me know when I should remove their name from a virus that they haven't 
    seen in a year and a half or so.

    The list should not be considered a list of "the most common viruses",
    however, since no specific provision is made for a commonness factor.

    This data indicates only "which" viruses are in the wild, but viruses
    reported by many (or most) participants are obviously widespread.

    The WildList is current being used as the basis for in-the-wild virus
    testing of antivirus products by Virus Bulletin and the NCSA (National
    Computer Security Association). Additionally, a virus collection based 
    upon the WildList is being used in an effort to standardize the naming
    of common viruses.

        The WildList - (c)1993-1997 by Joe Wells - [email protected]

 ============================================================================
    The section below gives the names of participants, along with their
    geographic region, organization, and antivirus product (if any). The
    locations with an asterisk (*) note that the reports are regional, all
    others being multinational or global.
 
    Key Participant         *Region         Organization      Product
 ============================================================================
    Ac  Alan Candy           New Zealand    Applied Insight   F-Prot Pro
    Ad  Allan Dyer           Hong Kong      Yui Kee Co. Ltd.  F-Prot
    Ae  Amir Elbaz           Israel         EliaShim          ViruSafe
    Bn  Barnabas Nagy        Slovokia       NaBaware          Dr. Solomon's
    Bq  Blend Qapiti         Albania        Poly U Tirana     None
    Cb  Carl Bretteville     Norway         Norman Data       NVC
    Cj  Craig Jackson        USA            Datawatch         VirexPC
    Cr  Charles Renert       USA            Symantec          NAV
    Cs  Christian Schmid     Austria        DataPROT Linz     F-Prot
    Dc  Dave Chess           USA            IBM               IBM AntiVirus
    Dg  Dmitry Gryaznov      UK             S&S Int'l         Dr. Solomon's
    Do  Donny Gilor          Israel         Iris Software     AntiVirus Plus
    Ek  Eugene Kaspersky     Russia         KAMI              AVP
    Ev  Eduardo Velasquez    Colombia/Vene. SOFTEAM Ltda      VirusCOP
    Ew  Eddy Willems         Belgium/Lux.   Data Alert Int'l  Dr. Solomon's
    Fl  Ferenc Leitold       Hungary        Hunix Ltd.        Virus Buster
    Fs  Fridrik Skulason     Iceland        Frisk Int'l       F-Prot
    Gm  Gerard Mannig        France         RECIF             None
    Gp  Gabriel Pislaru      Romania        SoftWin           AVX
    Iw  Ian Whalley          UK             Virus Bulletin    None
    Jd  Joost de Raeymaeker  Portugal       RSVP              Dr. Solomon's
    Jk  Jimmy Kuo            USA            McAfee            ViruScan
    Jm  Jose Martinez        Peru           HackSoft S.R.Ltda TH AV
    Kd  K. T. Davies         India          Pioneer Micro     Vaxine
    Ks  Klas Scholdstrom     Sweden         QA                Dr. Solomon's
    Ls  Luca Sambucci        Italy          I.C.A.R.O.        None
    Mh  Mikko Hypponen       Finland        Data Fellows      F-Prot Pro
    Ms  Marek Sell           Poland         Marek Sell, Ltd.  MkS_vir
    Nb  Neville Bulsara      India          N&N Systems       Dr. Solomon's
    Oh  Omar Herrera         Mexico         Escuadron AV      Aguila AV
    Pb  Pavel Baudis         Czech Republic Alwil Software    Avast!
    Pd  Paul Ducklin         UK             Sophos Plc.       Sweep
    Pn  Patrick Nolan        USA            Command Software  F-Prot Pro Net
    Ra  Ruben Arias          Argentina      RALP              Integ Master
    Re  Ralph Tee            Malaysia       R.E.Solutions     Armour AV
    Rf  Richard Foley        Ireland        Reflex Magnetics  TBAV
    Rk  Richard Ku           Taiwan         Trend Micro       PC-cillin
    Rr  Roger Riordan        Australia      CYBEC             VET
    Rt  Roger Thompson       USA            Thompson Network  Doctor
    Rv  Robert Vibert        Canada         Sensible Security Dr. Solomon's
    Rz  Righard Zwienenberg  Netherlands    ESaSS BV          ThunderBYTE
    Sm  Seiji Murakami       Japan          Jade Corp         Scan Vakzin
    Td  Toralv Dirro         Germany        U of Hamburg      Dr. Solomon's
    Ti  Torben Immisch       Denmark        Swanholm Distrib. Dr. Solomon's
    Ws  Wolfgang Stiller     USA            Stiller Research  Integ Master
    Yp  Ywain Penberthy      So Africa      CSIR Virus Lab    VPS
 ============================================================================
                              The WildList
 ============================================================================
  This main list includes viruses reported by multiple participants, which
  appear to be non-regional in nature. Technically, this first list is "the"
  WildList according to my original specification, which required viruses to
  be verified in the wild by a minimum of two participants. A supplemental
  list follows that contains viruses reported by single participants.
 
  If a virus listed has minor variants, but no specific variant letter is
  attached, the virus meant is the .A variant.

  Please note that all the MS Word macro viruses are grouped under WM.name.

 + Viruses marked with a plus sign (+) are new to the main list this month.

  CARO Name of Virus      [ Alias(es)     ] Reported by:
 ============================================================================
  15_Years................[Espejo.........] AeCrDcDgEvJkJmPnRtSm
  Aircop.Standard.........[...............] OhRk
  Alfons.1344.............[Iutt99.........] AeDoFsGpJkJmKsMhMsPbPnRr
  Anticad.4096.Mozart.....[Invader........] DgPn
  AntiCMOS.A..............[Lenart.........] AcAdCbCjCrDcDgEvEwFlFsGmIwJdJkJm
                                            KdKsMhMsPdPnReRrRtRvSmWsYp
  AntiCMOS.B..............[LiXi...........] AcAdCbCrDcKsMsPnReRzSmTdTi
  AntiEXE.A...............[D3, Newbug.....] AcBqCbCjCrDcDgEvEwFlFsGmGpIwJkJm
                                            KdKsLsMhMsNbPdPnRfRkRtRvRzSmTdTi
                                            WsYp
  Arianna.3375............[...............] DcDgLs
  Avispa.D................[...............] AeCrDgJkRaRt
  BackFormat.2000.A.......[Backform.......] BnDgFlFsGpJkMs
  Bad_Sectors.3428........[...............] FlGp
  Barrotes.1303...........[...............] EvJm
  Barrotes.1310.A.........[Barrotos.......] CrDgEvGmJdJkJmKsPdYp
  Boot-437................[...............] AcBqCbCjCrDcDgFlFsGmGpJkKdKsMsOh
                                            PbPdPnRkRtRzSmWs
  BootEXE.451.............[BFD, BE-451....] FlFsJkMhMsNbPnRz
  Brasil..................[...............] CjCr
  Burglar.1150.A..........[GranGrave.1150.] AcAdCbCrDgFsJkKsMhMsPbRkRzTdTiWs
                                            Yp
  Bye.....................[ByeBye.........] CbDcKsLsMsPdRzTdTi
  Byway.A.................[Dir2.Byway.....] CrDcDgEvFlFsGmJdJkJmPn
  Byway.B.................[Dir2.Byway.....] DcDgEvJkJm
  Cascade.1701.A..........[1701...........] CbCjCsDgFlFsGmGpKsMhMsPdPnRtRzSm
                                            Ws
  Cascade.1704.A..........[1704...........] CrCsDgEkFsGpKsPnRt
  Cawber..................[NTU.T4, BacLab.] CrRt
  Chance.B................[Lennon.........] CrDcFsJk
  Changsha.A..............[Centry, Changes] MsRrRt
  Chaos.1241..............[Faust..........] PnRr
  Chill...................[Chill Touch....] CrRt
  Chinese_Fish............[Fish Boot......] CjDgRkRrRt
  Civil_Defence.6672......[CDV 3.3........] DcMsPbPn
  Cordobes.3334...........[...............] CrDoFsJk
  CPW.1527................[Mediera, Mierda] CbCrDgEvFsJkJm
  Crazy_Boot..............[...............] CrDcDgEwFlJkPnTdTi
  Cruel...................[...............] DoGmGpMhMsRzTdTi
  DA_Boys.................[...............] CjCrDcDgEwFsJkPnRtWs
  Dark_Avenger.1800.A.....[Eddie..........] CjDgFsGpMsPnRrWs
  Dark_Avenger.2100.SI.A..[V2100..........] DgRf
  Defo....................[PeterII.Runtime] BqFs
  DelCMOS.B...............[Int7F-E9, Feint] DgFsJmKsMhPdRz
  Delta.1163..............[...............] CrFs
  DelWin.1759.............[Goblin.1759....] CbDcDgDoGpJkJmKsMsPdRfTdTi
  Den_Zuko.2.A............[Den Zuk........] DgPnRt
  Desperado.1403.C........[...............] JkKs
  Diablo_Boot.............[...............] CrDcEvFsJmMhPdRa
  Die_Hard................[DH2, Wix.......] AcAdCbCjCrDcDgFlFsJkJmKdKsMsNbPn
                                            ReRkRtRvRzSmTdTiWsYp
  Digi.3547...............[Deliver.Stealth] FsMsPb
  Dir_II.A................[Creeping Death.] BnCrCsDgEkFlFsGmJkKsNbOhPnRkRrWs
                                            Yp
  Disk_Killer.1_00........[Ogre...........] DgEk
  DR&ET.1710..............[Dret...........] JkMs
  Ear.Leonardo.1207.......[...............] DgMs
  Edwin...................[...............] CrDgGmKs
  Empire.Int_10.B.........[...............] CrPnRt
  Empire.Monkey.A.........[Monkey.........] CrDcGmJkJmKsOhPdPnRrRtRv
  Empire.Monkey.B.........[Monkey 2.......] AcBqCbCjCrDcDgEvEwFsGmIwJdJkJmKd
                                            KsMhMsNbOhPdPnRkRrRtRvRzSmTdTiWs
                                            Yp
  EXE_Bug.A...............[CMOS Killer....] CrDgEwFlFsGmJdJkKsOhPdRfRtTdTiWs
                                            Yp
  EXE_Bug.C...............[...............] CbRtYp
  EXE_Bug.Hooker..........[...............] MhRtYp
  Fairz...................[Khobar.........] DgJkKdMsRf
  Fat_Avenger.............[...............] DcKdRrRvSm
  Fichv.2_1...............[905, CHV 2.1...] DgGmRz
  Filler.A................[DiskFiller.....] CbCjFlKs
  Finnish_Sprayer.........[Aija...........] AdCrFsKsMh
  Flame...................[Stamford.......] CrFlJkRr
  Flip.2153.A.............[Omicron........] DcDgFsGmKsRv
  Flip.2343...............[Omicron 2......] DgDoFsJd
  Form.A..................[Form 18........] AcAdBqCbCjCrCsDcDgEvEwFlFsGmGpIw
                                            JdJkJmKdKsLsMhMsNbPbPdPnRfRtRvRz
                                            SmTdTiWsYp
  Form.C..................[...............] CsMsTdTi
  Form.D..................[Form May.......] CrCsDcEvFlFsGmKdMsPdRtYp
  Frankenstein............[Frank, Sblank..] DcDgJkKdMs
  Freddy_Krueger..........[Freddy 2.......] CrFsJkWs
  Frodo.Frodo.A...........[4096, 100 Year.] DcDgEwFsGpKsRrSm
  Galicia.................[Telecom........] CrGpJkJmPnRt
  Ginger.2774.............[Gingerbread....] CrJkRr
  GoldBug.................[...............] DgFlJkMh
  Green_Caterpillar.1575..[Find, 1575, 159] CjCrDgFlFsGmGpJkKdKsOhRrRtSmWsYp
  Hare.7610...............[...............] AcCrDgFsIwLsMhRzYp
  Hare.7750...............[...............] DoMhMs
  Hare.7786...............[...............] AcDgFsKsMhMsRz
  Helloween.1376.A........[1376...........] CrDcDgFlJkJmPbRrWs
  Hi.460..................[Hi.............] GpMs
  Hidenowt................[...............] AeCrDgGmJkJmKdPdSm
  HLLC.Even_Beeper.B......[...............] DgMsRz
  Ibex....................[Bones, 7 Boot..] CbCrJkMh
  Int40...................[...............] PbPd
  Istanbul.1349...........[...............] DgMs
  J&M.....................[Jimi, Hasita...] AdBnCbCjDcDoFlFsGpIwJkKsMhMsPbPd
                                            Sm
  Jerusalem.1244..........[1244...........] DgLsPn
  Jerusalem.1500..........[Xug.1500.......] CrJk
  Jerusalem.1808.Standard.[1808, 1813.....] CbCjCsDcDgFlFsJmKsNbPnRkRtRzSmWs
                                            Yp
  Jerusalem.Mummy.1364.A..[Mummy 2.1......] DgRtYp
  Jerusalem.Sunday.A......[Sunday.........] PnRkRtYp
  Jerusalem.Zero_Time.Aust[Slow...........] DgJdRrRtSm
  Jos.1000................[Jabb,Jabberwock] GpMs
  Joshi.A.................[...............] CjCrDcDgFsJkJmPnRkRrRtSmWs
  Jumper.A................[French Boot, 2k] CbCjCrDcDgEwFsGmGpJmMsPdPnRt
  Jumper.B................[SillyBop, 2kb..] CbDgFsJkKsMhMsPnSm
  Junkie.1027.............[...............] AcAdBnCbCrCsDcDgEwFlFsGmGpJkJmKs
                                            LsMhMsPbPdPnRfRrRtRvRzSmTdTiWsYp
  Kampana.A...............[AntiTel,Campana] CbCjCrDcDgEwFsGmIwJdJkKsMhMsPbPd
                                            PnRfRtSmTdTi
  Kaos4.697...............[...............] CrJkMsPnYp
  Karnivali.1971..........[...............] DgJk
  Keypress.1232.A.........[Turku, Twins...] DcDgFlGpJkJmPnRrRtRz
  Leandro.................[TimeWarp.......] AeCbCrDcEvFsJkJmMhMsPdRtRzWs
  Lemming.2160............[...............] CrRr
  Liberty.2857.A..........[Mystic, Magic..] DcEvRt
  Little_Red.1465.........[Red Book, Mao..] CjDcDgFsKdMsRtSmTdTiWsYp
  MacGyver.2803...........[Shoo...........] GmJkMsRkYp
  Major.1644..............[Major BBS......] AeCbCrDgDoFsJkKsMhMsPnRvRzTdTi
  Maltese_Amoeba..........[Amoeba.2367....] CbDgFsGmKsMsPnRtWsYp
  Mange_Tout.1099.........[1099...........] CrDgGmJkMsPbSm
  Manzon.1414.............[...............] CbDcEwFsIwJkKsMhMsPdRrTdTi
  Markt.1533..............[Werbe, Media...] DgFs
  Michelangelo.A..........[...............] AdBnCjCrCsDcDgEkFlFsGmGpOhPbPdPn
                                            RkRrRtSmWsYp
  MIREA.1788..............[Lyceum.1788....] AeEkJm
  Moloch..................[...............] CrDgFsMh
  Mongolian_Boot..........[Mongol.........] CrDgSm
  Music_Bug...............[...............] CjLsWs
  Natas.4744..............[Satan, Sat_Bug.] CbCrDcDgEvEwFlFsGpJdJkJmKdKsMhMs
                                            NbOhPbPdPnRkRtRvSmTdTiYp
  Necros.1164.............[Gnose, Irish3..] DgRf
  Neuroquila..............[Havoc, Wedding.] DgJkTdTiWs
  Nightfall.4518.B........[N8Fall.........] CbDgJkPbTdTi
  No_Frills.Dudley........[Oi Dudley......] DgJkRrRt
  No_Frills.No_Frills.843.[...............] CrJkRr
  Nomenklatura.A..........[Nomen..........] DgMh
  November_17th.800.A.....[Jan1, Int83.800] CrDcFlLs
  November_17th.855.A.....[Int83.855......] CrDcDgFsGmLsMsRt
  NPox.963.A..............[Evil Genius....] CrFs
  NYB.....................[B1.............] AcCjCrDcDgEkEwFlFsIwJkJmKdKsLsMh
                                            MsPdPnRtRvRzSmTdTiWsYp
  One_Half.3544...........[Dis, Free Love.] AcAdAeBnCbCrCsDcDgEkEvEwFlFsGmGp
                                            JkJmKdKsLsMhMsNbPbPnRfRkRtRzSmTd
                                            TiWsYp
  One_Half.3570...........[...............] DoFsJk
  Ontario.1024............[SBC, 1024......] DcRr
  Ornate..................[...............] DgJmPn
  Parity_Boot.A...........[...............] CbGpMhMsTdTi
  Parity_Boot.B...........[Generic 1......] AdCbCjCrCsDcDgEvEwFlFsGmGpJdJkKd
                                            KsLsMhPbPdPnRfRtRzSmTdTiWsYp
  Pasta...................[Boot-446.......] CrDgJkRz
  Pathogen:SMEG.0_1.......[SMEG...........] CrDgWsYp
  Paula_Boot..............[...............] FsRa
  Peter...................[Peter II.......] CbDcFsJdJkLsMhSmYp
  Ph33R.1332..............[...............] EwFsJkMh
  Phx.965.................[PUX.965........] DgJmMsRa
  Pieck.4444..............[Kaczor.4444....] CbMsPbRvTdTiYp
  Ping_Pong.B.............[Bouncing-Ball, ] DcDgFsGmYp
  Plagiarist.2051.........[...............] CrDg
  Predator.2448...........[2448...........] CrFsJkKsRv
  QRry....................[Query, Essex...] CrDcEvJk
  Quandary................[Parity_Boot.Enc] AcDgFsJkKsMhMsPdRvSmTdTi
  Quicky.1376.............[Quicksilver....] AcCbCrDgFlFsGmJkPdTdTi
  Quiver..................[Qvr............] EvMh
  Quox.A..................[Stealth 2......] CbCrDcFlFsJkPnRtSm
  Reverse.948.............[Red Spider.....] MsYp
  Ripper..................[Jack Ripper....] AcAdCjCrCsDcDgEwFlFsGmGpIwJkKsMh
                                            MsPbPdPnRfRkRtRvRzSmTdTiWsYp
 +RP......................[Rhubarb, PR.b..] MhMs
  Russian_Flag............[Slydell, Ekater] CrDcDgJkRzSmYp
  Sampo...................[Turbo, Wllop...] AcAdCjCrDcDgEwFlFsGmIwJkKdKsMhMs
                                            NbPbPdPnRtSmWsYp
  Sarampo.1371............[...............] DgJdJk
  Sat_Bug.Sat_Bug.........[Satan Bug......] CrEv
  Satria.A................[July 4th.......] JkTdTi
  Sayha...................[...............] CrJk
 +Scitzo..................[...............] FlTdTi
  Screaming_Fist.II.696...[Fist 2, Scream.] CjDgJkPnRt
  She_Has.................[Breasts........] CbDgPdRzTdTi
  Sibylle.................[...............] DcDgFl
  Sleep_Walker.1266.......[Swalker........] CrRr
  Stealth_Boot.B..........[AMSE, NopB.....] CbCjCrDcDgEvFsJkMsPdPnRtSm
  Stealth_Boot.C..........[AMSE, NopB2....] CbCjCrEvFsGmIwJdJkJmMsPdPnRtSmYp
  Stoned.16.A.............[Brunswick......] CrDcDg
  Stoned.Angelina.A.......[...............] BqCbCrCsDcDgEvFlGmJdJkJmKdMhMsPb
                                            PdPnRkRvSmTdTiYp
  Stoned.Azusa.A..........[Hong Kong......] CjCrCsDgJkKsMsRrRtYp
  Stoned.Bravo............[...............] DgMsYp
  Stoned.Bunny.A..........[...............] CrPnWsYp
  Stoned.Daniela..........[...............] CrMsPn
  Stoned.Dinamo...........[...............] CrDcMsRt
  Stoned.June_4th.A.......[Bloody!........] CbCjCrCsDgJkRkRrSmWs
  Stoned.Kiev.............[Epbr...........] CjDcEkMsPdRt
  Stoned.Lzr..............[Lisa2, Whit....] CjCrDcEvFsRt
  Stoned.Manitoba.........[Stonehenge.....] CrDcDgFsKsPdRtRvSmTdTi
  Stoned.No_INT.A.........[Stoned.........] AcCbCjCrCsDcDgEwFlFsGmJkMhMsOhPb
                                            PdPnRrRtWsYp
  Stoned.NOP..............[NOP............] DgJkWs
  Stoned.Spirit...........[...............] AeDgFsGmIwJkKsMhMsPbRz
  Stoned.Standard.A.......[New Zealand....] CjCrDcDgDoEkEvFsGmGpJkPdRkRrRtSm
                                            WsYp
  Stoned.Swedish_Disaster.[...............] CjDg
  Stoned.W-Boot...........[Stoned.P, Wonka] AdCrDcEvJkMsPdRrWs
  SVC.3103.A..............[SVC 5.0........] CrDgEkEv
  Swiss_Boot..............[Swiss Army.....] DcFlFsJkKsNbSm
  Tai-Pan.438.............[Whisper........] CbDcDgFlFsGmJkJmKdKsMhMsPbPdPnRt
                                            TdTiWsYp
  Tai-Pan.666.............[D2D, Doom2Death] AcBnCbCrDcDgEkEwJkMhMsPnRtSmWsYp
  Tanpro.524..............[...............] AdCrJk
  Tentacle.10634..........[Shell.10634....] CrDgDoJkKsMhRv
  Tentacle.1996...........[...............] CrDgEwFsJkKsMhRz
  Tequila.A...............[...............] CrCsDcDgEwFsGmJkMsPdPnRfRkRtSmTd
                                            TiWsYp
  Three_Tunes.1784........[Flip, PCBB.1784] AeCjCrDcDgEvJkJm
  TPVO.3783...............[TPVO, 3873.....] AdCrGpMhMsRzTdTi
  Trakia.653..............[...............] CrRr
  Tremor.4000.A...........[...............] CbCsDgFlFsJkKsMhMsPbPnRtTdTiWsYp
  Trojector.1463..........[Athens.........] DcDgJkKdNbPnSm
  Trojector.1561..........[...............] CrGpKsRz
  Unashamed...............[...............] CrDoJdJkJmLsMhMsPdYp
  Unsnared.814............[ V.814.........] AeGpRz
  Urkel...................[Nwait..........] CjCrDcFsJkPnRzWs
  V-Sign..................[Cansu, Sigalit.] BnCjCrDcDgFsGmJkKdKsMhMsPbPdPnRr
                                            RtSmWs
  Vacsina.TP-05.A.........[RCE-1206.......] CjCrDgFsRt
  Vacsina.TP-16.A.........[RCE-1339.......] DgFs
  Vampiro.................[...............] DgRaWs
  Vienna.648.Reboot.A.....[DOS-62.........] AeDgEkGpPnRk
  Vinchuca................[...............] DgRaWs
  VLamiX..................[Die Lamer......] DgFlJkMsRt
  WelcomB.................[Bupt.9146......] AdCjCrCsDcDgEvFlGmGpJkJmKsMhMsPb
                                            PdRtTdTiYp
  Werewolf.1500.B.........[...............] CrDgEwFsGmJkMhMsPnRzSmYp
  WM.Bandung.A............[Concept.J......] CrDcJkPnRrRt
 +WM.Boom.A:De............[...............] CsTdTi
  WM.Buero.A:De...........[Buro:De........] CrDgJkMhRzTdTi
  WM.Colors.A.............[Colours........] CbCjDgJdJkLsSmYp
  WM.Concept.A............[Prank Macro....] AcAdBqCbCjCrCsDcDgEwFlFsGmIwJdJk
                                            JmKdKsMhMsNbPbPdPnReRfRkRrRtRvRz
                                            SmTdTiWsYp
  WM.Concept.F............[Parasite.A.....] CrFsJkMh
  WM.Concept.J............[Parisite.B.....] DgJkKs
  WM.Date.A...............[AntiDMV, Dateii] CrDgJkMhPb
  WM.Divina.A.............[Infeczione.....] CjCrFsLs
  WM.Helper.A.............[...............] DgJkMhRt
  WM.Hot.A................[Hot............] CjCrRvRz
  WM.Imposter.A...........[Imposter.......] AcCbCjCrDgIwMh
  WM.Irish.A..............[Irish..........] CrJkMhRt
  WM.MDMA.A...............[StickyKeys.....] AdCjCrDcJkKsMhPnRtTdTi
 +WM.MDMA.D...............[...............] JkKsTdTi
  WM.NOP.A:De.............[Nop............] CrFsJkMhRzTdTi
  WM.Npad.A...............[Jakarta........] AdCbCjCrDcDgEwFsIwJkJmKsMhMsPbPn
                                            RtRvRzTdTi
  WM.Nuclear.B............[Nuclear.B......] FlFsRrYp
 +WM.Rapi.A...............[...............] CrJkTi
  WM.TWNO.A:Tw............[Taiwan No. 1...] AdJkRk
  WM.Wazzu.A..............[Wazzu..........] AdAeCbCjCrDcDgEwFsGmJdJkJmKsMhPn
                                            RfRkRrRtRvTdTi
  WM.Wazzu.C..............[...............] CjCrDgJkKsMhPbPnRt
  WM.Wazzu.E..............[...............] CbJk
 +WM.Wazzu.F..............[Bosco..........] JkKs
  WM.Wazzu.J..............[...............] AdDg
  WM.Wazzu.P..............[...............] AcRt
  WXYC....................[...............] CjCrJmMsOhSmWs
  Xeram.1664..............[N-Xeram.1664...] JkPd
  XM.Laroux...............[...............] DgJdJkMhPbPn
  Xuxa.1984...............[...............] DgFs
  Yankee Doodle.TP-39.....[RCE-2772.......] DgFs
  Yankee Doodle.TP-44.A...[RCE-2885.......] DgEkEwFlFsGmGpKsMhMsNbPdPnRtSmTd
  Yankee Doodle.XPEH.4928.[Micropox.......] CbFlFs
 ============================================================================
  Total for the WildList: 239 

 ============================================================================
                             Supplemental List
 ============================================================================
  As was noted at the start of the main list, this list is not, technically,
  part of "The WildList" as I have defined it. By design, the WildList is a
  list of viruses verified as being in the wild by a minimum of two WildList
  participants. The viruses listed below do not currently meet that criteria.

  This additional list includes viruses reported by a single participant and
  are often either moving onto the main list, or dropping off of it. 

  Please note especially that this list also tends to be more of a regional 
  reporting mechanism. For example, a virus is often reported as very common
  by one regional participant, but is found nowhere else in the world. 

  Viruses marked with a minus sign (-) dropped off the main list this month.

  CARO Name of Virus      [Alias(es)      ] Reported by:
 ============================================================================
  15_Years.B..............[Espejo.B.......] Jk
  A&A.....................[...............] Dg
  Accept.3773.............[...............] Ra
  Acid....................[...............] Ew
  Alex_II.599.............[Alex-599.......] Do
  Alphabetic.A............[...............] Mh
  Anticad.4096.A..........[Plastique 5.12.] Pn
  AntiCMOS.D..............[AntiCMOS.G.....] Jk
  Arusiek.817.............[...............] Cb
  Avalon..................[...............] Fs
  Baby.962................[_962...........] Ad
  BackFormat.B............[BackForm.B.....] Ms
  Barrotes.1463...........[...............] Rz
  Beer.2473...............[...............] Fl
  Cavaco..................[...............] Jk
  Chameleon...............[...............] Iw
  Cosenza.................[...............] Fs
  Coup.2052...............[...............] Dg
  Dalian.1366................[...............] Jk
  WM.Theatre.B:Tw.........[...............] Jk
  WM.Wazzu.H..............[Microsloth.....] Td
  WM.Wazzu.O..............[...............] Jk
  WM.Wazzu.X..............[...............] Jk
  WM.Weather.A:Tw.........[Fish...........] Jk
  Xtc.2153................[...............] Jk
  Yesmile.................[...............] Fs
  Zimboot.................[...............] Yp
 ============================================================================
  Total for both lists: 375 

 ============================================================================

                      WildList Sorted by Frequency
 ============================================================================
   This is not a prevalence table. It does not show how common each virus
   is. Rather it is the WildList sorted by the number of participants that
   report each virus.

   This section gives the names, types, and aliases of the most frequently
   reported viruses. These viruses have been reported by at least one third
   of the WildList participants. They are sorted with the most frequently
   reported first. A more complete alias list is also provided.

  Freq Caro Name                Type  Aliases
 ============================================================================
   36 |Form.A..................|Boot |Form 18        
   36 |WM.Concept.A............|Macro|Prank Macro
   34 |One_Half.3544...........|Multi|Dis, Free Love
   33 |AntiEXE.A...............|Boot |D3, Newbug, New Bug
   32 |Empire.Monkey.B.........|Boot |Monkey 2       
   30 |Junkie.1027.............|Multi| 
   29 |Parity_Boot.B...........|Boot |Generic 1      
   29 |Ripper..................|Boot |Jack Ripper    
   28 |AntiCMOS.A..............|Boot |Lenart         
   28 |Natas.4744..............|Multi|Satan, Sat_Bug.Natas
   26 |NYB.....................|Boot |B1             
   25 |Die_Hard................|File |DH2, Wix
   24 |Boot-437................|Boot | 
   24 |Sampo...................|Boot |Turbo, Wllop
   23 |Stoned.Angelina.A.......|Boot |Angelina
   22 |Michelangelo.A..........|Boot | 
   21 |Kampana.A...............|Boot |AntiTel, Campana, Telecom, Telefonica
   21 |Stoned.No_INT.A.........|Boot |Stoned         
   21 |WM.Wazzu.A..............|Macro|Wazzu
   19 |Tai-Pan.438.............|File |Whisper        
   19 |WelcomB.................|Boot |Bupt.9146
   18 |Stoned.Standard.A.......|Boot |New Zealand    
   18 |V-Sign..................|Boot |Cansu, Sigalit
   17 |Cascade.1701.A..........|File |1701           
   17 |Dir_II.A................|File |Creeping Death
   17 |EXE_Bug.A...............|Boot |CMOS Killer    
   17 |J&M.....................|Boot |Jimi, Jimmy, Hasita, Nasita
   17 |Jerusalem.1808.Standard.|File |1808, 1813, Israeli
   17 |Tequila.A...............|Multi| 
   16 |Tai-Pan.666.............|File |D2D, Doom2Death
   16 |WM.Npad.A...............|Macro|Jakarta
   16 |Yankee Doodle.TP-44.A...|File |RCE-2885       
   15 |Burglar.1150.A..........|File |GranGrave.1150
   15 |Green_Caterpillar.1575..|File |Find, 1575, 1591
   15 |Stealth_Boot.C..........|Boot |AMSE, NopB2
 ============================================================================
  Release notes for the February list:

  The January 1997 WildList was skipped for various reasons. This edition
  of the WildLIst was produced by Joe Wells and Shane Coursen of the 
  WildList Organization.

  We are continuously seeking WildList participants, especially for regional 
  reporting in the following countries:

  Bulgaria, Chile, China, Greece, Indonesia, Phillipines, Saudi Arabia, 
  Singapore, South Korea, Spain, Thailand, Turkey, and Ukraine.

  Such new participants will need to be in a position where they can monitor 
  and verify virus incidents. People who develop av products are best suited.
  People who represent one or more av products (agents) and provide localized
  support may also be qualified if they actually verify the viruses or 
  forward samples to developers. If you thus qualify, please send your name,
  location, organization, product name, favorite brand of beer, and 
  references (preferably CARO members who know you). Send the information to
  [email protected]. Thanks.

 ============================================================================
  The collation of this list is done by Joe Wells, Editor of the IBM web
  site for virus information, www.av.ibm.com, who is solely responsible for 
  its contents.
 
  The latest WildList is always posted directly by me to the NCSA Security
  forum on Compuserve, in the Virus Info/Tools library. The official archive
  location for the WildList is ftp.ncsa.com in pub/virus/wildlist.

  A complete archive of WildLists is available at the Virus Bulletin web
  site (http://www.virusbtn.com/WildLists/index.html).

  The WildList is copyright material, but may be freely quoted or cited in
  part or in whole. No permission is needed to reprint the list.

  All mail in regard to the WildList should be sent to [email protected]. 

 ============================================================================
  WildList Vol.702 - (c) 1993-97 Joe Wells - 75511,635 - [email protected]
 ============================================================================
  -----BEGIN PGP PUBLIC KEY BLOCK-----
  Version: 2.7

  mQCNAy+wAnYAAAEEAO2alE3YclXZAxkqrSVXkhAuuOsx6NnVfUdKMghYtrBabFuJ
  +zKiIsahmjeakA2J101KZOHtKMhb5iqLG0oCbRyuBFLtuMhJrjk+L9VRCoxoDB/4
  XwFevOGyxRHYfancrIydlMUooe7TZJqbGhhQEROWYm8v6RvkPFtsMpyD+Lb1AAUR
  tCNKb2UgV2VsbHMgPGMxandlbGxzQHdhdHNvbi5pYm0uY29tPg==
  =aKXf
  -----END PGP PUBLIC KEY BLOCK-----
 ============================================================================

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.