The WildList

August 1999

 ============================================================================
                   PC Viruses in the Wild - August, 1999
 ============================================================================

   This is a cooperative listing of viruses reported as being in the wild
   by 55 virus information professionals. The basis for these reports are
   virus incidents where a sample was received, and positively identified
   by the participant.  Rumors and unverified reports have been excluded.

   Some hostile programs included in this list may fall outside the
   traditional definition of a computer virus. However, such programs
   are spreading throughout diverse user populations, are a threat to
   users and are therefore included in this list.

   This report is cumulative. That is, this is not just a report of
   which viruses were seen last month. Monthly data is received from
   most participants, but the new data is added to the old. Participants
   are expected to let us know when to remove their name from a virus.

   The list should not be considered a list of "the most common viruses",
   however, since no specific provision is made for a commonness factor.

   This data indicates only "which" viruses are in the wild, but viruses
   reported by many (or most) participants are obviously widespread.

   The WildList is currently being used as the basis for in-the-wild
   virus testing and certification of anti-virus products by the ICSA,
   Virus Bulletin and Secure Computing. Additionally, a virus collection
   based upon the WildList is being used in an effort to standardize the
   naming of common viruses.

        The WildList - (c)1993-1999 by Joe Wells - [email protected]
 ============================================================================
  Key Participant          Region         Organization         Product
 ============================================================================
  Aa  Asaf Achitoov        Israel         iRiS Software        AntiVirus Plus
  Ac  Alan Candy           New Zealand    Applied Insight      -
  Ad  Allan Dyer           Hong Kong      Yui Kee Co. Ltd.     F-Prot
  Ae  Amir Elbaz           Israel         EliaShim             ViruSafe
  Ak  Ahmad Y. Kashoor     Syria          CompuKashoor         Dr Solomon's
  Bh  Bruce Hughes         USA            ICSA                 -
  Cb  Carl Bretteville     Norway         Norman ASA           NVC
  Cr  Costin RAIU          Romania        GeCAD                RAV
  Cs  Christian Schmid     Austria        DataPROT Linz        F-Prot
  Dc  Dave Chess           USA            IBM                  NAV
  Dg  Dmitry Gryaznov      UK             McAfee (US)          VirusScan
  Dp  David Phillips       UK             Open University      -
  Ei  Eddy Willems         EU             EICAR                -
  Ek  Eugene Kaspersky     Russia         KAMI                 AVP
  Ev  Eduardo Velasquez    Colombia/Vene. SOFTEAM Ltda         VirusCOP
  Ew  Eddy Willems         Belgium/Lux.   Data Alert Int'l     VirusScan
  Fh  Fraser Howard        UK             Virus Bulletin       -
  Fl  Ferenc Leitold       Hungary        Hunix Ltd.           Virus Buster
  Fp  Francois Paget       France         McAfee (France)      VirusScan
  Gb  Gerald Batten        Canada         Sensible Security    -
  Gm  Gerard Mannig        France         RECIF                -
  Ic  Ieta Chi             Taiwan         Trend Micro          PC-cillin
  Jd  Joost de Raeymaeker  Portugal       RSVP                 VirusScan
  Jk  Jimmy Kuo            USA            McAfee (Independent) -
  Jm  Jose Martinez        Peru           HackSoft S.R.Ltda    TH AV
  Jr  Joon Radley          So Africa      CSIR Virus Lab       VPS
  Kb  Kenneth Bechtel      USA            Team Anti-Virus      -
  Kd  K. T. Davies         India          Pioneer Micro        Vaxine
  Ks  Klas Scholdstrom     Sweden         McAfee (Sweden)      VirusScan
  Ls  Luca Sambucci        Italy          Itaweb               -
  Ml  Mickey Loh           Malaysia       R.E.Solutions        Armour AV
  Ms  Marek Sell           Poland         Marek Sell, Ltd.     MkS_vir
  Mt  Miroslav Trnka       Slovakia       ESET Ltd             NOD-ICE
  Oz  Jakub Kaminski       Australia      CYBEC                VET
  Pb  Pavel Baudis         Czech Republic ALWIL Software       Avast!
  Pn  Patrick Nolan        USA            McAfee (US)          VirusScan
  Ps  Peter Szor           USA            Symantec             NAV
  Pt  Peter Theobald       India          IT Secure Software   VirusScan
  Ra  Ruben Arias          Argentina      RALP                 Integ Master
  Rf  Richard Foley        Ireland        Reflex Magnetics     TBAV
  Rp  Ronnie Pineda        Philippines    Mannasoft Corp.      VirusScan
  Rv  Robert Vibert        Canada         Independent          -
  Rz  Righard Zwienenberg  Netherlands    Norman Data Defense  NVC
  Sb  Sherra Buzzell       USA            Symantec             NAV
  Sh  Sha-Li Hsieh         USA            Computer Associates  Inoculate IT
  Sm  Seiji Murakami       Japan          JCSR                 -
  So  Simon Borduas        Canada         HYPERTEC Security    F-Prot Pro
  Sr  Subramanya Rao       India          Proland Software     Protector Plus
  St  Stuart Taylor        UK             Sophos Plc.          Sweep
  Tc  Tzvetan Chaliavski   USA            Command Software     F-Prot Pro
  Td  Toralv Dirro         Germany        U of Hamburg         VirusScan
  Ti  Torben Immisch       Denmark        Swanholm Distrib.    NAV
  Ws  Wolfgang Stiller     USA            Stiller Research     Integ Master
  Xc  Xabier Cazalis       Spain          Panda Software       Panda
  Za  Corporate #1         Western USA    -                    -
 ============================================================================
                              The WildList
 ============================================================================
  This main list includes viruses reported by multiple participants, which
  appear to be non-regional in nature. Technically, this first list is "the"
  WildList according to original specification, which required viruses to
  be verified in the wild by a minimum of two participants. A supplemental
  list follows that contains viruses reported by single participants.

 + Viruses marked with a plus sign (+) are new to the main list this month.

                                            List  Reported
  Name of Virus           [Alias(es)      ] Date  by:
 ============================================================================
  AntiCMOS.A..............[Lenart.........]  1/95 AcAkCbCsEwFhFpIcJdJrKsMlMs
                                                  OzPbPsSbSmStWs
  AntiCMOS.B..............[LiXi...........] 10/95 CbKsMsRzSbTd
  AntiEXE.A...............[D3.............]  9/94 AaAkCbCsEkEwFhFpGbJmKsMsOz
                                                  PbPsRzSmStTdTcWsXc
  Boot-437.A..............[Bath...........]  3/94 CbMsPbWs
  Burglar.1150.A..........[GranGrave.1150.]  2/96 CbEkMsPbPsRzWs
  Byway.A.................[Dir2.Byway.....]  9/95 JdJmSb
  Cascade.1701.A..........[1701...........]  9/93 CbCsKsPsRzSm
  Cascade.1704.A..........[1704...........]  7/93 CsEw
  Cruel.A.................[...............]  2/98 MsPsRz
  DelWin.mp.1759.A........[Goblin.1759....]  6/95 CbMsTi
  Die_Hard.4000.A.........[DH2, Wix.......]  1/95 AkCbCrIcJrPnRzTdWs
  Eco.B...................[Eco.B, Sevilla.]  3/98 FpJmXc
  Empire.Monkey.A.........[Monkey.........]  7/94 FpIcKsOzSb
  Empire.Monkey.B.........[Monkey 2.......]  7/94 CbEwFhFpGbIcJdJrKsPsSbSmSt
                                                  TdWsXc
  EXE_Bug.A...............[CMOS Killer....]  9/93 EwJdWs
  Flip.mp.2153.A..........[Omicron........]  7/93 FpXc
  Form.A..................[Form 18........]  7/94 CbCsEwFpJmJrKsMlMsPbPsRzSb
                                                  SmTdTiWsXc
  Form.D..................[Form May.......]  7/94 CsFpSbSt
  J&M.A...................[Jimi,Hasita....]  6/95 CbMtPbSm
  Jerusalem.1808.Standard.[Israeli........]  7/93 CbFpWs
  Jumper.B................[...............]  4/99 AkFp
  Junkie.mp.1027.A........[DrWhite.1027...]  7/94 CbCsEwFpKsLsMsOzPbPsSbStTi
                                                  WsXc
  Kampana.mp.A............[AntiTel........]  7/93 CbJd
  Major.1644.A............[Major BBS......]  6/96 CbEkMsPbPs
  Manzon.1426.............[...............]  5/96 CbKsMsPs
  Michelangelo.A..........[...............]  7/93 CsSbWs
  Natas.mp.4774...........[Satan..........] 10/95 CbIcJdJmJrMsPbPsSbTdXc
  Nightfall.4518..........[N8Fal..........]  2/96 CbPb
  NYB.A...................[B1.............]  7/94 AaAcEwFhJrKsMsPsSbSmSrTdWs
                                                  Xc
  O97M/Jerk.B.............[O97M/AllNet....]  5/99 AaEwKsPn
  O97M/Tristate.C.........[O97/Crown.B....]  4/99 CrDgEiEwFpKbKsLsOzPbPnPsPt
                                                  SmStTcXc
  One_Half.mp.3544.A......[Dis, Free Love.] 10/95 AaAkCbCrEkEwFpIcKsMsMtPbPs
                                                  RzTdWsXc
  One_Half.mp.3577........[...............]  2/99 CrMt
  Parity_Boot.B...........[Generic 1......]  9/93 CbCsEwFpJdJrKsPbPsSmStTiWs
                                                  Xc
  Pieck.mp.4444.A.........[Kaczor.4444....]  6/96 CbEkJrMsMtPbXc
  Quandary................[Parity_Boot.Enc]  3/96 AkPs
  Ripper..................[Jack Ripper....]  3/94 AcAkCsEwFhFpKsMsPbPsSmStTd
                                                  TcWsXc
  RP.A....................[Rhubarb, PR.b..]  2/97 CrMsPs
  Sampo...................[Turbo, Wllop...]  1/95 EwJrMsPbPsSmStWs
  Spanska.4250.A..........[...............] 11/97 CrFhFpJmPsRzSbTi
  Stealth_Boot.C..........[AMSE, NopB2....]  9/94 AkCbEwFhJd
  Stoned.Angelina.........[...............]  5/95 CbCsJdJrMlMsPbPsSmTd
  Stoned.June_4th.A.......[Bloody!........]  7/93 CbIcSm
  Stoned.No_INT.A.........[Stoned.........]  9/94 CbEwPbWs
  Stoned.Spirit...........[...............]  6/96 FpJrMsMtPbXc
  Stoned.Standard.B.......[New Zealand....]  3/93 CrPbWsXc
  Tai-Pan.438.A...........[Whisper........]  1/95 CbEkKsMsPb
  Tequila.mp.2468.A.......[...............]  7/93 CsWs
  TMC_Level-69............[TMC.5454.......]  2/98 MtPb
  TPVO.mp.3783.A..........[TVPO, 3873.....] 10/96 AdIcMlPsSb
  Tremor.4000.A...........[...............]  7/93 CbCsPbWs
  V-Sign..................[Cansu, Sigalit.]  7/93 MsPbPsWs
  W32/Beast.41472.A.......[(W32, W97M)....]  5/99 AaPnPsTc
  W32/ExploreZip..........[Worm.ExploreZip]  6/99 AdBhEwFhFpGbIcJmKbKsLsMlMt
                                                  OzPbPnPtRfRpSbShSmSrStTdXc
  W32/PrettyPark.A........[...............]  6/99 EwFhFpKsPnPsSt
  W32/Ska.A...............[HAPPY99........]  3/99 AcAdAkBhCbCrCsEiEkEwFhFpGb
                                                  GmIcJkJmJrKbKsLsMlMtOzPbPn
                                                  PsRpShSmSoSrTcTiXc
  W95/Anxiety.1358........[Poppy..........] 11/97 FpPs
  W95/Anxiety.1823........[W95/Anxiety.B..]  4/98 CbFpPbPs
  W95/CIH.1003............[*Chernobyl.....]  8/98 AaAdAkBhCbCrCsEwFhFpGbIcJd
                                                  JmJrKbKsLsMlMsMtOzPbPnPsRp
                                                  ShSmSoSrStTcTiXc
  W95/CIH.1019.A..........[CIH.C..........]  7/98 AaCrCsEkEwFhMlMsPsSbXc
  W95/Fono................[W95/El_Inca.mp.] 12/98 CbFhMtPbPnXc
  W95/K32.3030............[W95/Hazlo......]  5/99 GbSbTc
  W95/Kenston.1895........[...............]  5/99 AaPbPnPs
  W95/Marburg.8590........[W95/Marburg.A..]  7/98 CbDgEwFhIcKsOzPsRpSbSm
  W95/Padania.............[...............]  5/99 PsSb
  W97M/Appder.A...........[...............]  7/97 CbJm
  W97M/Brenda.A...........[...............]  1/99 FhRz
  W97M/Chack.H............[...............]  7/99 JmSm
  W97M/Class.B............[...............]  2/99 AaAcCrFpKbPnPsSo
  W97M/Class.D............[...............] 12/98 AcCbCrEiEwFhFpGmIcJdKsMlOz
                                                  PnPsRzShSoStTiXc
  W97M/Class.Q............[...............] 12/98 AcAdCbCrOzPnPsRzShSoStXc
  W97M/ColdApe.A..........[...............] 12/98 AaFhFpGbKsPnSmTc
  W97M/ColdApe.B..........[...............]  3/99 FhFpKbOzPs
  W97M/Ethan.A............[...............]  2/99 AaAcBhCbCrEiEwFhFpGbIcJdJk
                                                  JmJrKbKsLsMtOzPbPnPsSbShSm
                                                  SoSrStTcTiXc
 +W97M/Ethan.B............[...............]  8/99 OzSh
  W97M/Groov.A............[...............]  7/98 DgFhJrKbPsSbSmTi
  W97M/Marker.C...........[W97M/Spooky.C..]  4/99 AaEiEwFhFpIcJdJmJrKbKsMtOz
                                                  PnPsShSoSrStTcZa
  W97M/Marker.D...........[...............]  5/99 BhGbOzSmTiXc
 +W97M/Marker.O...........[W97M/Shankar...]  8/99 PtSrSt
  W97M/Melissa.A..........[Maillissa......]  4/99 AaAcCbCrDgEiEwFhFpGbIcJdKb
                                                  KsMlMtOzPnPsPtRzSbShSmStTc
                                                  TiXcZa
  W97M/Melissa.I..........[...............]  7/99 AaOzPnStTc
  W97M/Nono.A.............[Nono...........]  2/99 JkKbOzPsSmSt
  W97M/Nottice.A..........[...............]  4/99 JmKb
  W97M/Nottice.D..........[...............]  5/99 MtXc
 +W97M/Opey.C.............[...............]  8/99 KsRp
  W97M/Pri.A..............[...............]  6/99 BhOzPnPsShSt
  W97M/Pri.B..............[...............]  3/99 GbOzPsSbShSm
  W97M/Proteced.A.........[...............]  5/99 OzSm
 +W97M/Story.A............[W97M_Jack_Box..]  8/99 IcSt
 +W97M/VMPCK1.BY..........[...............]  8/99 EwJdShSt
  W97M/Walker.E...........[...............]  6/99 SbStTc
  W97M/Walker.F...........[...............]  6/99 FhPs
  WelcomB.................[Bupt...........]  6/95 JrKsMsPsSb
  Win/Tentacle.1944.......[...............]  5/96 KsRz
  WM/Appder.A.............[ntthnta........]  5/97 EwMsOzPs
  WM/CAP.A................[...............]  5/97 AaAcAdAkCbCrCsEkEwFhFpGbIc
                                                  JdJmJrKbKsLsMlMsMtOzPbPsRp
                                                  ShSmSrStTdTiXc
  WM/Colors.A.............[Colours........] 10/96 CbJdSm
  WM/Concept.A............[Prank Macro....] 12/96 AcAkBhCbCsEkEwGbIcJdJmJrKb
                                                  KsMlOzPsSbSmStTdTiWs
  WM/CopyCap.A............[...............]  7/98 CbDgEwFhGbKsOzSt
  WM/Demon.A..............[...............]  2/99 EkJmKb
  WM/Divina.A.............[Infeczione.....] 12/96 CbEwLs
  WM/Helper.B.............[...............]  7/97 CbXc
  WM/Johnny.A.............[Go Johnny......]  5/96 AkCbIcJd
  WM/Johnny.B.............[...............] 12/98 CrJm
  WM/MDMA.A...............[StickyKeys.....] 12/96 FpSbTdXc
  WM/Niknat.A.............[...............] 12/98 JmSm
  WM/Nottice.A............[...............]  2/99 JmSm
  WM/Npad.A...............[Jakarta........] 10/96 AkCbCsEwFpGbJdJrKsMsOzPsRp
                                                  SbSmTdXc
  WM/ShowOff.A............[...............]  9/97 EwJr
  WM/TWNO.AC..............[...............]  8/98 DgFpKs
  WM/Wazzu.A..............[Wazzu..........] 12/96 BhCbCrEwFpGbJdJmJrKsOzSbSm
                                                  TdWs
  WM/Wazzu.C..............[...............] 12/96 BhCbKbXc
  WM/Wazzu.DO.............[...............]  4/98 EwFpXc
  X97M/Extras.A...........[...............] 12/98 AaDgMl
  X97M/Extras.B...........[...............] 10/98 MlSbSm
  X97M/Laroux.A...........[...............]  7/97 AaCbCrEwGbIcJrKbKsMlPbPtSt
                                                  Td
  X97M/Laroux.BP..........[...............] 10/98 DgKs
  X97M/Laroux.CF..........[...............]  7/99 GbKbPt
  X97M/Laroux.D...........[...............] 12/98 CrDg
  X97M/Laroux.DO..........[...............]  6/99 JrKb
  X97M/Laroux.DX..........[...............] 12/98 AkEwIcJdKbKsPnPtRp
  X97M/Laroux.E...........[...............] 12/98 CrDgKbRpSh
  X97M/Laroux.FC..........[...............]  6/99 JmSt
  X97M/Laroux.HJ..........[Bayantel.......]  5/99 KsRpSt
  X97M/Laroux.HO..........[...............]  5/99 KbKsPn
  X97M/VCX.A..............[...............]  4/99 KbRz
  XF/Paix.A...............[...............] 12/98 AdFpPnPsSm
  XF/Sic.A................[...............]  4/99 KbPnPsXc
  XM/Compat.A.............[...............] 12/98 EwIcSb
  XM/Extras.A.............[...............]  7/98 AaDgEwIcKbMlSm
  XM/Laroux.A.............[...............]  2/97 AaCrCsEkEwFpIcJdJmJrKbMlMs
                                                  PbPsSmTd
  XM/Laroux.CF............[...............]  6/99 KbOz
  XM/Laroux.D.............[...............]  9/97 CrJd
  XM/Laroux.E.............[...............] 10/97 CrKbPn
  XM/Laroux.IC............[...............]  7/99 PnPt
  Yankee_Doodle.2881.A....[Yankee.2C.A....]  9/93 EkEwPsSm
 ============================================================================
  Total for the WildList: 136

 ============================================================================
                            Supplemental List
 ============================================================================
  As was noted at the start of the main list, this list is not technically
  part of "The WildList", as originally defined. By design, the WildList
  is a list of viruses verified as being in the wild by a minimum of two
  WildList participants. The viruses listed below do not currently meet
  that criteria.

  This additional list includes viruses reported by a single participant
  and are often either moving onto the main list, or dropping off of it.

  Please note especially that this list also tends to be more of a
  regional reporting mechanism. For example, a virus is often reported
  as very common by one regional participant, but is found nowhere else
  in the world.

  Viruses marked with a minus sign (-) dropped from the main list this
  month. Viruses marked with a plus sign (+) are new to the supplemental
  list this month.
                                            List  Reported
  Name of Virus           [ Alias(es)     ] Date  by:
 ============================================================================
  Ale.1911................[Sul.1911.A.....] 10/98 Rz
  Alfons.1344.............[Iutt99.........]  1/99 Mt
  Barrotes.1310.A.........[Barrotos.......]  1/99 Fp
  Beah....................[...............]  2/98 Xc
  Bleah.C.................[...............]  3/98 Fp
  Bye.....................[ByeBye.........]  1/99 Ls
  ChaosTraveler.1200......[DMR.1200.......] 10/98 Rz
  Chimp.A.................[...............]  6/99 Ps
  CLL.947.................[...............]  4/99 Ak
  Crazy_Boot..............[...............]  5/95 Sb
  DelCMOS.B...............[Int7F-E9, Feint]  1/99 Jm
  Dir-II.A................[Creeping Death.]  7/93 Ws
 +DNA.1206................[...............]  8/99 St
  Dodgy...................[...............] 10/97 Cr
  Edwin...................[...............] 10/96 Cb
  Equinox.855.............[Galileo.GR.....] 11/98 Cr
  EXE_Bug.C...............[...............]  9/93 Cb
  Frodo.4096.A............[4096...........]  7/93 Ew
  Getto.2000..............[...............]  3/98 Rz
  Green_Caterpillar.1575.A[Find, 1575.....]  7/93 Ws
  Helloween.1376.A........[1376...........]  7/93 Ws
  HLLP.11712..............[...............] 10/98 Rz
  HLLP.5850.D.............[Weed...........]  7/99 Fh
  J&M.B...................[...............]  2/99 Mt
  Keyb.865................[...............]  5/99 Ps
  Kiev.1942...............[KVS.1942.......]  2/99 Ak
  Krueger.2271............[Freddy_Krueger.]  1/99 Ws
  Live_Long.791...........[...............] 10/98 Rz
  Maltese_Amoeba.2365.....[Grain of Sand..]  7/93 Ws
  Multiani................[...............]  3/98 Cr
  Neuroquila.mp.4544.A....[Havoc, Wedding.]  1/99 Ws
  O97M/HalfCross.A........[...............]  7/99 Ic
  O97M/Tristate.A.........[...............]  5/99 Sr
  O97M/Tristate.AA........[...............]  6/99 Oz
  O97M/Tristate.AB........[...............]  7/99 Cr
  O97M/Tristate.D.........[...............]  4/99 Pn
  O97M/Tristate.F.........[...............]  4/99 Jd
  O97M/Tristate.Y.........[...............]  6/99 Oz
  Parity_Boot.A...........[...............]  9/93 Cb
  Peter...................[Peter II.......]  7/94 Cb
  Pojer.1919..............[Brain-1919.....] 10/97 Pb
  Pojer.4028..............[Brain-4028.....]  2/98 Pb
  Quicky.1376.............[QuickSilver....]  7/96 Cb
  Quox.A..................[Stealth 2......]  7/93 Cb
  Raadioga.1000...........[Nilz.1000.B....]  4/98 Ps
  Spanska.1500............[...............]  7/97 Ps
  Stealth_Boot.B..........[AMSE, NopB.....]  8/94 Sb
  Stoned.W-Boot...........[Wonka..........] 12/93 Ws
  SubSeven.backdoor.v18...[...............]  7/99 So
  SysIntended.960.........[CS.960.........] 11/98 Cr
  Tai-Pan.666.A...........[D2D............]  1/95 Cb
  Tanpro.524..............[...............]  4/99 Ak
  TMC_Level-42............[TMC.????.......]  2/99 Mt
  Unashamed.B.............[...............] 10/95 Jr
  Ungame.544..............[Omed.544.......] 11/98 Cr
  Urkel...................[Nwait..........]  1/99 Ws
  VrapExe.3730............[XRF.3730, 3730.]  3/98 Fp
  W32/HLLP.DeTroie.A......[W32/Cheval.TCV.] 11/98 Fp
  W32/Maya................[W32/Maya.4153..]  5/99 Gb
  W32/Semisoft.F..........[...............]  5/99 Ps
  W95/CIH.1024............[...............]  3/99 Jm
  W95/Heathen.12288.A.....[(W95, W97M)....]  7/99 Ic
  W95/HPS.5124............[WIN95/HPS......] 11/98 Fp
  W95/Lord................[...............]  6/99 Xc
  W95/Lorez.1766..........[...............] 12/98 Sm
  W95/Spaces.1245.........[...............]  5/99 Ps
 +W97M.Syndicate.A........[...............]  8/99 Bh
  W97M/Argh.A.............[...............]  5/99 Sb
  W97M/Argh.B.............[...............]  5/99 Ps
 +W97M/Astia.A............[...............]  8/99 Bh
  W97M/Astia.B............[...............]  6/99 Pn
  W97M/Astia.L............[W97M/Mamm.A....]  6/99 Pn
  W97M/Caligula.A.........[...............]  4/99 Fp
  W97M/Chack.I............[...............]  2/99 Ks
  W97M/Chack.L............[...............]  3/99 Ad
 +W97M/Class.BZ...........[...............]  8/99 St
  W97M/Class.CN...........[...............]  4/99 Ic
  W97M/Class.CP...........[W97M/BlackviruZ]  7/99 Jm
  W97M/Class.DC...........[...............]  6/99 Oz
  W97M/ColdApe.H..........[...............]  6/99 Oz
  W97M/ColdApe.I..........[...............]  6/99 Oz
 +W97M/Ded.A..............[...............]  7/99 St
  W97M/Ded.C..............[...............]  7/99 Rz
  W97M/Disco.D............[...............]  4/99 Kb
  W97M/Disco.E............[...............]  4/99 Kb
  W97M/Diva...............[...............]  2/99 Ks
  W97M/DVD.A..............[...............]  4/99 Pn
 +W97M/Ephan.A............[W97M/Bagabs....]  8/99 St
  W97M/Ethan.D............[...............]  6/99 Pn
  W97M/Ethan.G............[...............]  6/99 Oz
  W97M/Ethan.J............[...............]  7/99 Cr
  W97M/Ethan.L............[...............]  6/99 Oz
 +W97M/Ethan.Q............[...............]  7/99 St
  W97M/Footer.C...........[...............]  1/99 Ks
  W97M/Footer.E...........[...............]  6/99 St
 +W97M/Footer.G...........[...............]  8/99 St
  W97M/Groov.B............[...............]  8/98 Sb
 +W97M/Groov.D............[...............]  7/99 St
  W97M/Groov.I............[...............]  6/99 Oz
 +W97M/Hark.E.............[...............]  7/99 St
 +W97M/IIS.D..............[...............]  8/99 Ic
  W97M/IIS.I..............[...............]  5/99 Ps
  W97M/Jedi.I.............[...............]  6/99 Oz
 +W97M/Locale.A...........[...............]  8/99 Sh
 +W97M/Marker.N...........[...............]  7/99 St
 +W97M/Marker.P...........[...............]  8/99 Sh
 +W97M/Marker.Q...........[...............]  7/99 St
  W97M/MDMA.D.............[...............]  1/99 Jm
  W97M/Melissa.B..........[...............]  6/99 Oz
  W97M/Opey.A.............[...............]  5/99 Rp
  W97M/Opey.D.............[...............]  4/99 Rp
 +W97M/Pri.E..............[...............]  7/99 St
  W97M/Sad.A..............[...............]  4/99 Pn
  W97M/Shiver.C...........[...............]  3/99 Sm
  W97M/Tie.T..............[...............]  5/99 Aa
 +W97M/Trigram.A..........[...............]  7/99 St
  W97M/TWNO.AC............[...............]  6/98 Fp
  W97M/Vp.A...............[...............]  7/99 Jm
  W97M/Wazzu.A............[...............]  5/97 Cs
 +WM/Cap.AT...............[...............]  7/99 St
  WM/Cap.HB...............[...............] 10/98 Rz
  WM/Concept.BB...........[...............]  5/99 Ps
  WM/DZT.A................[...............]  2/99 Ak
  WM/Geni.A...............[...............]  8/98 Ks
  WM/Imposter.E...........[...............]  4/99 Kb
  WM/Inexist.A:Fr.........[WM/Warning.....]  2/99 Fp
  WM/Irish.A..............[Irish..........] 10/96 Cb
  WM/Johnny.X.............[...............] 10/98 Rz
  WM/Lunch.B..............[...............]  7/97 Cb
  WM/NiceDay.A............[...............]  5/97 Cb
  WM/Niceday.N............[...............] 12/98 Kb
  WM/No_va.B..............[...............] 11/98 Jm
  WM/Npad.C...............[...............] 11/98 Cb
  WM/Npad.FN..............[...............] 11/98 Cr
  WM/Nuclear.AD...........[...............] 10/98 Rz
  WM/Pesan.B..............[...............] 10/97 Jd
  WM/Rapi.A...............[...............]  1/99 Cb
  WM/ShowOff.C............[...............]  7/97 Cb
  WM/Showoff.DF...........[...............]  7/98 Rz
  WM/Stall.A..............[...............] 11/98 Fp
  WM/Switcher.A...........[...............] 12/97 Ew
  WM/Swlabs.B.............[...............] 10/97 Jm
  WM/Swlabs.G.............[...............] 12/97 Fp
  WM/Temple.R.............[...............]  7/98 Rz
  WM/TWNO.A:Tw............[Taiwan No. 1...] 12/96 Ic
  WM/Veneno.D:Es..........[WM/Cap.GV......] 10/98 Rz
  WM/Wazzu.DV.............[...............]  4/98 Fp
  WM/Wazzu.EC.............[...............]  4/98 Fp
  WM/Wazzu.F..............[Bosco..........]  2/97 Cb
  WM/Wazzu.P..............[...............] 12/96 Ms
  WM/Wazzu.X..............[...............]  2/99 Kb
  WPC_Bats.3199...........[WPCB.3207......] 11/98 Cr
 +X97M/Friend.B...........[...............]  7/99 St
  X97M/Laroux.AA..........[...............]  6/99 Oz
 +X97M/Laroux.AN..........[...............]  8/99 St
  X97M/Laroux.CG..........[...............] 11/98 Xc
  X97M/Laroux.CN..........[Meralco........]  5/99 Rp
  X97M/Laroux.CX..........[...............]  5/99 Ps
  X97M/Laroux.DI..........[...............]  7/98 Rz
  X97M/Laroux.DK..........[...............]  6/99 Xc
  X97M/Laroux.DW..........[...............] 11/98 Cr
  X97M/Laroux.EE..........[...............]  3/99 Cb
  X97M/Laroux.EI..........[...............]  5/99 Mt
  X97M/Laroux.EL..........[X97M/Massage...]  7/99 Aa
  X97M/Laroux.GI..........[...............]  4/99 Kb
  X97M/Laroux.GJ..........[...............]  4/99 Kb
  X97M/Laroux.GV..........[...............]  5/99 Kb
  X97M/Laroux.GW..........[...............]  6/99 St
 +X97M/Laroux.HZ..........[...............]  7/99 St
 +X97M/Laroux.JH..........[...............]  8/99 St
  X97M/Papa.B.............[...............]  5/99 Ps
 +X97M/Smack.A............[...............]  7/99 St
  XM.Laroux.GI............[...............]  4/99 Kb
  XM/Extras.B.............[...............]  9/98 Ew
  XM/Laroux.AN............[...............]  3/99 Ad
  XM/Laroux.DO............[...............]  5/99 Gb
  XM/Laroux.DW............[...............] 11/98 Cr
  XM/Laroux.DX............[...............]  6/99 Ti
  XM/Laroux.EO............[...............]  4/99 Jd
 -XM/Laroux.FC............[...............] 12/98 Ew
  XM/Laroux.HO............[...............]  4/99 Kb
 +XM/Laroux.JO............[...............]  8/99 St
  XM/UEDASAN.A............[...............]  4/99 Pn
  XM/UEDASAN.B............[...............]  4/99 Pn
  XM/UEDASAN.C............[...............]  4/99 Pn
  XM/VCX.A................[...............]  1/99 Sm
 ============================================================================
  Total for both lists: 322 

 ============================================================================
                      WildList Sorted by Frequency
 ============================================================================
   This is not a prevalence table. It does not show how common each virus
   is. Rather it is the WildList sorted by the number of participants that
   report each virus.

   This section gives the names, types, and aliases of the most frequently
   reported viruses. These viruses have been reported by at least one third
   of WildList participants. They are sorted with the most frequently
   reported first. A more complete alias list is also provided.

  Freq  Name                       Type   Aliases
 ============================================================================
  35  | W32/Ska.A............... | File  |HAPPY99
  34  | W95/CIH.1003............ | File  |Spacefiller, *Chernobyl
  33  | WM/CAP.A................ | Macro |
  32  | W97M/Ethan.A............ | Macro |
  29  | W97M/Melissa.A.......... | Macro |Maillissa
  26  | W32/ExploreZip.......... | File  |Worm.ExploreZip
  23  | WM/Concept.A............ | Macro |Prank Macro
  22  | AntiEXE.A............... | Boot  |D3
  21  | W97M/Class.D............ | Macro |
  21  | W97M/Marker.C........... | Macro |W97M/Spooky.C
  20  | AntiCMOS.A.............. | Boot  |Lenart
  18  | Form.A.................. | Boot  |Form 18
  17  | O97M/Tristate.C......... | Macro |O97/Crown.B
  17  | One_Half.mp.3544.A...... | Multi |Dis, Free Love
  17  | WM/Npad.A............... | Macro |Jakarta
  17  | XM/Laroux.A............. | Macro |
  16  | Empire.Monkey.B......... | Boot  |Monkey 2
  16  | Ripper.................. | Boot  |Jack Ripper
  15  | Junkie.mp.1027.A........ | Multi |DrWhite.1027
  15  | WM/Wazzu.A.............. | Macro |Wazzu
 ============================================================================
  Release notes for the August WildList:

  WLO welcomes Bruce Hughes of ICSA -- International Computer Security
  Association.  Bruce steps in for Jonathan Wheat.
  
  WLO welcomes EICAR and -- once again -- Eddy Willems.  Eddy recently
  accepted a dual role in WLO by reporting for both Data Alert International
  and now EICAR -- European Institue for Computer Anti-Virus Research.

  WLO welcomes Gerald Batten of Sensible Security Solutions (SSS). Gerald
  steps in for Robert Vibert.  Robert continues on as a reporter to WLO,
  however, providing virus incident reports independent of SSS.

  WLO welcomes Sha-Li Hsieh of Computer Associates.  Sha-Li will report
  virus incidents occuring in the US and abroad as discovered by
  Inoculate IT.

  WLO welcomes Tzvetan 'Ceco' Chaliavski of Command Software.  Ceco will
  report virus incidents occuring in the US and abroad as discovered by
  F-Prot Pro.
  

  The following viruses -- originally on the supplemental list -- fell
  completely from the August '99 WildList:

        Creed.5209                      WM/Johnny.V
        Little_Red.1465.A               WM/KMT.A
        Moloch                          WM/MDMA.D
        Prosp.1712.A                    WM/Npad.HL
        W2KM/Ethan.A                    WM/Paycheck.L
        W32/Coke.22231.A                X97M/Laroux.HK
        W97M/Class.S                    XM/Laroux.HJ
        WM/CAP.GG


  * REGARDING W95/CIH.1003 (mistakenly referred to as the Chernobyl virus)
  "Chernobyl" is a name popularized by the press.  No product uses this
  name.  The name Chernobyl is viewed as "incorrect" by AV vendors.

 ============================================================================
  The WildList is collated by board members of WildList Organization
  International.

  A complete archive of WildLists is available at the WildList
  Organization web site (http://www.wildlist.org/WildList/wildlist.html)

  The WildList and all material contained on this web site is the
  copyright of The Wildlist Organization International unless otherwise
  stated in the material itself. The WildList Organization International
  permits quotation and citation of the WildList either in whole or in
  part providing WildList Organization is identified as the source of
  the material. The WildList may not be altered or misrepresented in any
  way and only fair usage is permitted. Beyond these limited rights all
  rights are reserved.

  The WildList Organization International and WildList reporters make a
  diligent effort to ensure the accuracy of the data presented in the
  WildList. However, The WildList Organization makes no warranty against
  the accuracy of the information presented herein. The WildList
  Organization and WildList reporters cannot be held liable for any
  loss, or damages incurred from the use of WildList information.

  Press, print media & other queries about WildList Organization
  International should be sent to Sarah Ford, WildList Organization's
  primary media contact, at [email protected].

 ============================================================================
   WildList Vol.908    -    (c) 1993-99 Joe Wells    -    [email protected]
 ============================================================================

  -----BEGIN PGP PUBLIC KEY BLOCK-----
  Version: 2.7

  mQCNAy+wAnYAAAEEAO2alE3YclXZAxkqrSVXkhAuuOsx6NnVfUdKMghYtrBabFuJ
  +zKiIsahmjeakA2J101KZOHtKMhb5iqLG0oCbRyuBFLtuMhJrjk+L9VRCoxoDB/4
  XwFevOGyxRHYfancrIydlMUooe7TZJqbGhhQEROWYm8v6RvkPFtsMpyD+Lb1AAUR
  tCNKb2UgV2VsbHMgPGMxandlbGxzQHdhdHNvbi5pYm0uY29tPg==
  =aKXf
  -----END PGP PUBLIC KEY BLOCK-----
 ============================================================================

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.