The WildList

January 2000

 ============================================================================
                  PC Viruses in the Wild - January, 2000
 ============================================================================

   This is a cooperative listing of viruses reported as being in the wild
   by 59 virus information professionals. The basis for these reports are
   virus incidents where a sample was received, and positively identified
   by the participant.  Rumors and unverified reports have been excluded.

   Some programs included in this list may fall outside the traditional
   definition of a computer virus. However, such programs are spreading
   throughout diverse user populations, are a threat to users and are
   therefore included in this list.

   This report is cumulative. That is, this is not just a report of
   which viruses were seen last month. Monthly data is received from
   most participants, but the new data is added to the old. Participants
   are expected to let us know when to remove their name from a virus.

   The list should not be considered a list of "the most common viruses",
   however, since no specific provision is made for a commonness factor.

   This data indicates only "which" viruses are in the wild, but viruses
   reported by many (or most) participants are obviously widespread.

   The WildList is currently being used as the basis for in-the-wild
   virus testing and certification of anti-virus products by the ICSA,
   Virus Bulletin and Secure Computing. Additionally, a virus collection
   based upon the WildList is being used in an effort to standardize the
   naming of common viruses.

        The WildList - (c)1993-2000 by Joe Wells - [email protected]
 ============================================================================
  Key Participant          Region         Organization          Product
 ============================================================================
  Aa  Asaf Achitoov        Israel         iRiS Software         AntiVirus Plus
  Ac  Alan Candy           New Zealand    Applied Insight       -
  Ad  Allan Dyer           Hong Kong      Yui Kee Co. Ltd.      F-Prot
  Ae  Amir Elbaz           Israel         Aladdin               eSafe Protect
  Ak  Ahmad Y. Kashoor     Syria          CompuKashoor          Dr Solomon's
  Am  Andreas Marx         Germany        Univ. of Magdeburg    -
  As  Alex Shipp           UK             StarLabs              StarScan
  Bh  Bruce Hughes         USA            ICSA                  -
  Cb  Carl Bretteville     Norway         Norman ASA            NVC
  Cr  Costin RAIU          Romania        GeCAD                 RAV
  Cs  Christian Schmid     Austria        DataPROT Linz         F-Prot
  Dc  Dave Chess           USA            IBM                   NAV
  Dg  Dmitry Gryaznov      UK             McAfee (UK)           VirusScan
  Dp  David Phillips       UK             Open University       -
  Ei  Eddy Willems         EU             EICAR                 -
  Ek  Eugene Kaspersky     Russia         KAMI                  AVP
  Ew  Eddy Willems         Belgium/Lux.   Data Alert Int'l      VirusScan
  Fh  Fraser Howard        UK             Virus Bulletin        -
  Fl  Ferenc Leitold       Hungary        Hunix Ltd.            Virus Buster
  Fp  Francois Paget       France         McAfee (France)       VirusScan
  Gb  Gerald Batten        Canada         Sensible Security     -
  Gm  Gerard Mannig        France         Independent           -
  Ic  Ieta Chi             Taiwan         Trend Micro           PC-cillin
  Jd  Joost de Raeymaeker  Portugal       RSVP                  -
  Jh  Joe Hartmann         USA            Trend Micro           PC-cillin
  Jk  Jimmy Kuo            USA            McAfee (Independent)  -
  Jm  Jose Martinez        Peru           HackSoft S.R.Ltda     TH AV
  Jr  Joon Radley          South Africa   VPS                   VPS
  Kb  Kenneth Bechtel      USA            Team Anti-Virus       -
  Kd  K. T. Davies         India          Pioneer Micro         Vaxine
  Ls  Luca Sambucci        Italy          Itaweb                -
  Mh  Mikko Hypponen       Finland        Data Fellows          F-Prot Pro
  Ml  Mickey Loh           Malaysia       R.E.Solutions         Armour AV
  Ms  Marek Sell           Poland         Marek Sell, Ltd.      MkS_vir
  Mt  Miroslav Trnka       Slovakia       ESET Ltd              NOD-ICE
  Oz  Jakub Kaminski       Australia      Computer Associates   VET
  Pb  Pavel Baudis         Czech Republic ALWIL Software        Avast!
  Pn  Patrick Nolan        USA            McAfee (US)           VirusScan
  Pt  Peter Theobald       India          IT Secure Software    VirusScan
  Ra  Ruben Arias          Argentina      RALP                  Integ Master
  Rf  Richard Foley        Ireland        Reflex Magnetics      TBAV
  Rp  Ronnie Pineda        Philippines    Mannasoft Corp.       VirusScan
  Rv  Robert Vibert        Canada         Independent           -
  Rz  Righard Zwienenberg  Netherlands    Norman Data Defense   NVC
  Sb  Sherra Buzzell       USA            Symantec              NAV
  Sh  Sha-Li Hsieh         USA            Computer Associates   Inoculate IT
  Sk  Seok-Chul Kwon       Korea          HAURI                 ViRobot
  Sm  Seiji Murakami       Japan          JCSR                  -
  So  Simon Borduas        Canada         HYPERTEC Security     F-Prot Pro
  Sr  Subramanya Rao       India          Proland Software      Protector Plus
  St  Stuart Taylor        UK             Sophos Plc.           Sweep
  Tc  Tzvetan Chaliavski   USA            Command Software      F-Prot Pro
  Td  Toralv Dirro         Germany        U of Hamburg          VirusScan
  Ti  Torben Immisch       Denmark        Swanholm Distrib.     NAV
  Wl  WLO                  -              WLO                   -
  Ws  Wolfgang Stiller     USA            Stiller Research      Integ Master
  Xc  Xabier Cazalis       Spain          Panda Software        Panda
  Za  Corporate #1         Western USA    -                     -
  Zb  Corporate #2         Eastern USA    -                     -
 ============================================================================
                              The WildList
 ============================================================================
  This main list includes viruses reported by multiple participants, which
  appear to be non-regional in nature. Technically, this first list is "the"
  WildList according to original specification, which required viruses to
  be verified in the wild by a minimum of two participants. A supplemental
  list follows that contains viruses reported by single participants.

 + Viruses marked with a plus sign (+) are new to the main list this month.

                                            List  Reported
  Name of Virus           [Alias(es)      ] Date  by:
 ============================================================================
  AntiCMOS.A..............[Lenart.........]  1/95 AcAkAmCbEwFhFpIcJdJhJrMhMl
                                                  OzPbSbShSmStWs
  AntiCMOS.B..............[LiXi...........] 10/95 AmRzSbTd
  AntiEXE.A...............[D3.............]  9/94 AaAkAmCbCsEkEwFhFpGbJmMhOz
                                                  PbRzSmStTdWsXc
  Boot-437.A..............[Bath...........]  3/94 PbWs
  Burglar.1150.A..........[GranGrave.1150.]  2/96 EkPbRzWs
  Byway.A.................[Dir2.Byway.....]  9/95 JdJmSb
  Cascade.1701.A..........[1701...........]  9/93 CsRzSm
  Cascade.1704.A..........[1704...........]  7/93 CsEw
  Die_Hard.4000.A.........[DH2, Wix.......]  1/95 AkCrIcJrPnRzShTdWs
  Eco.B...................[Eco.B, Sevilla.]  3/98 FpJmXc
  Empire.Monkey.A.........[Monkey.........]  7/94 FpIcOzSb
  Empire.Monkey.B.........[Monkey 2.......]  7/94 EwFhFpGbIcJdSbSmStTdWsXc
  EXE_Bug.A...............[CMOS Killer....]  9/93 EwJdWs
  Flip.mp.2153.A..........[Omicron........]  7/93 FpXc
  Form.A..................[Form 18........]  7/94 CbCsEwFpJhJmJrMhMlPbRzSbSm
                                                  TdTiWsXc
  Form.D..................[Form May.......]  7/94 CsFpSbSt
  HLLP.Toadie.7800.A......[Termite.7800...]  9/99 BhPnSbShSt
  HLLP.Toadie.7800.B......[Termite.7800.B.]  9/99 JdPn
  J&M.A...................[Jimi,Hasita....]  6/95 MtPbSm
  Jerusalem.1808.Standard.[Israeli........]  7/93 FpWs
  Jumper.B................[...............]  4/99 AkFp
  Junkie.mp.1027.A........[DrWhite.1027...]  7/94 AkCsEwFpLsMhOzPbSbStTiWsXc
  Major.1644.A............[Major BBS......]  6/96 EkPb
  Michelangelo.A..........[...............]  7/93 CsSbWs
  Natas.mp.4774...........[Satan..........] 10/95 IcJdJmJrSbTdXc
  NYB.A...................[B1.............]  7/94 AaAcAkEwFhJrMhSbSmSrTdWsXc
  O97M/HalfCross.A........[...............] 11/99 AsIcSrZb
  O97M/Jerk.B.............[O97M/AllNet....]  5/99 AsEwPnSoZb
  O97M/Tristate.C.........[O97/Crown.B....]  4/99 AcAdAsBhCrDgEiEwFhFpJhKbKd
                                                  LsMhOzPbPnPtShSkSmStTcXcZb
  One_Half.mp.3544.A......[Dis, Free Love.] 10/95 AaAkCbCrEkEwFpIcMtPbRzSkTd
                                                  WsXc
  One_Half.mp.3577........[...............]  2/99 CrMt
  Parity_Boot.B...........[Generic 1......]  9/93 AkAmCbCsEwFpJdJrMhShSmStTi
                                                  Xc
  Pieck.mp.4444.A.........[Kaczor.4444....]  6/96 CrEkJrMtPbXc
  Ripper..................[Jack Ripper....]  3/94 AcAkCsEwFhFpMhMtPbSmStTdWs
                                                  Xc
  Sampo...................[Turbo, Wllop...]  1/95 EwJrSmStWs
  Spanska.4250.A..........[...............] 11/97 CrFhFpJmRzSbTi
  Stealth_Boot.C..........[AMSE, NopB2....]  9/94 AkEwFhJd
  Stoned.Angelina.........[...............]  5/95 CsJdJrMlPbSmTd
  Stoned.June_4th.A.......[Bloody!........]  7/93 IcSm
  Stoned.No_INT.A.........[Stoned.........]  9/94 AkCbEwWs
  Stoned.Spirit...........[...............]  6/96 FpJrMtXc
  Stoned.Standard.B.......[New Zealand....]  3/93 CrWsXc
  Tai-Pan.438.A...........[Whisper........]  1/95 CbEkPb
  Tequila.mp.2468.A.......[...............]  7/93 CsWs
  TMC_Level-69............[TMC.5454.......]  2/98 MtPb
  TPVO.mp.3783.A..........[TVPO, 3873.....] 10/96 AdIcMlSb
  Tremor.4000.A...........[...............]  7/93 CsWs
  VBS/BubbleBoy.A.........[VBS/BubbleBoy_1] 12/99 JhSbSh
  VBS/Freelink............[...............] 10/99 AsBhEiEwFhJhJmKbPnSbShStTi
                                                  Zb
  W32/Babylonia...........[.11036.........] 12/99 AaAeFpJrOzPnSbSr
  W32/Beast.A.............[(W32, W97M)....]  5/99 AaAsPnShTcZb
  W32/ExploreZip..........[Worm.ExploreZip]  6/99 AaAcAdAsEwFhFpGbIcJhJmKbKd
                                                  LsMlMtOzPbPnPtRfRpSbShSkSm
                                                  SrStTdTiXcZb
  W32/ExploreZip.pak......[...............] 12/99 AmAsEiEwJdJhKbMtOzPbPnRzSb
                                                  ShSkStZb
  W32/Funlove.4099........[...............] 12/99 JhOzPn
 +W32/Kriz.4029...........[...............]  1/00 SkXc
  W32/Mypics.worm.........[...............] 12/99 JhPnSbSh
 +W32/NewApt.A............[...............]  1/00 AsJhShSk
  W32/Oporto..............[Totilix.3075...] 12/99 JdPn
  W32/PrettyPark.A........[...............]  6/99 AaAdAsCrDpEwFhFpJdJhJmJrKb
                                                  KdMhPbPnRaShSkSmStTiXcZb
  W32/Ska.A...............[HAPPY99........]  3/99 AcAdAkAmAsBhCbCrCsDpEiEkEw
                                                  FhFpGbGmIcJdJhJkJmJrKbKdLs
                                                  MhMlMtOzPbPnRaRpShSmSoSrSt
                                                  TcTiXcZb
  W95/CIH.1003............[Spacefiller....]  8/98 AaAcAdAkAmAsCbCrCsEwFhFpGb
                                                  IcJdJhJmJrKbKdLsMhMlMtOzPb
                                                  PnRpShSkSmSoSrStTiWlXcZb
  W95/CIH.1019.A..........[.1019, CIH.C...]  7/98 AaCsEkEwFhMhMlSbXc
  W95/Fono................[W95/El_Inca.mp.] 12/98 FhMtPbPnXc
  W95/K32.3030............[W95/Hazlo......]  5/99 GbSb
  W95/Kenston.1895........[...............]  5/99 AaMhPbPn
  W95/Marburg.8590........[W95/Marburg.A..]  7/98 AsCbEwIcOzRpSbSm
  W97M/Appder.A...........[...............]  7/97 CbJm
 +W97M/Bablas.A...........[...............]  1/00 AsPn
  W97M/Brenda.A...........[...............]  1/99 AsFhRzZb
  W97M/Chack.H............[...............]  7/99 JmSm
  W97M/Class.B............[...............]  2/99 AaAcCrFpKbMhPnShSo
  W97M/Class.BV...........[W97M/Insert....] 11/99 AsTc
  W97M/Class.D............[...............] 12/98 AcBhCbCrDpEiEwFhFpGmIcJdKd
                                                  MhMlOzPnRaRzShSoStTiXcZb
  W97M/Class.Q............[...............] 12/98 AcAdAkAmAsCbCrJhMhOzPnRzSh
                                                  SoStXc
  W97M/ColdApe.A..........[...............] 12/98 AaAcAsFhFpGbPnShSmSoTcZb
  W97M/ColdApe.B..........[...............]  3/99 AdFhFpKbMhOzPnZb
  W97M/Cont.A.............[...............] 11/99 AsSt
  W97M/Ded.A..............[...............] 10/99 AsKbSoSt
 +W97M/Ded.B..............[...............]  1/00 AsSh
  W97M/Ethan.A............[...............]  2/99 AcAmBhCbCrDpEiEwFhFpGbIcJd
                                                  JhJkJmJrKbLsMhMtOzPbPnRaSb
                                                  ShSmSoSrStTcTiXcZb
  W97M/Ethan.AT...........[...............] 10/99 AsPnStZb
  W97M/Ethan.AW...........[...............] 11/99 PnShStZb
  W97M/Ethan.B............[...............]  8/99 AcAeOzSh
  W97M/Ethan.Q............[...............]  9/99 PnStZb
  W97M/Footer.A...........[...............] 12/99 AsPn
  W97M/Groov.A............[...............]  7/98 FhJhJrKbKdPnSbSmTi
  W97M/Groov.B............[...............] 10/99 PnSb
  W97M/Groov.C............[...............] 11/99 AsPt
  W97M/Heathen.12288.A....[...............] 10/99 IcXc
  W97M/Hubad.A............[...............] 12/99 FpJd
  W97M/Locale.A...........[...............]  9/99 AaAsPnShStZb
  W97M/Locale.B...........[...............] 10/99 PnSt
  W97M/Marker.AE..........[...............]  9/99 ShSt
  W97M/Marker.AQ..........[W97M/Marker.AJ.] 10/99 ShSt
  W97M/Marker.AR..........[...............] 10/99 ShSt
  W97M/Marker.C...........[W97M/Spooky.C..]  4/99 AaAcAeAmCrDpEiEwFhFpIcJdJm
                                                  JrKbMhMtOzPnPtShSoSrStTcXc
                                                  ZaZb
  W97M/Marker.D...........[...............]  5/99 AkAsBhDpGbKdOzShSmTiXcZb
  W97M/Marker.O...........[...............]  8/99 JmPnPtShSrStZb
  W97M/Marker.P...........[...............] 11/99 ShStZb
  W97M/Marker.Q...........[...............]  9/99 JdShStZb
  W97M/Marker.X...........[...............]  9/99 PnStZb
  W97M/Melissa.A-mm.......[Maillissa......]  4/99 AaAcAsCbCrDgEiEwFhFpGbIcJd
                                                  JhJkJrKbKdLsMhMlMtOzPnPtRz
                                                  SbShSkSmStTcTiXcZaZb
  W97M/Melissa.AA-mm......[...............] 12/99 OzPnSb
  W97M/Melissa.AB-mm......[...............] 12/99 JmSb
  W97M/Melissa.I-mm.......[...............]  7/99 AaAcOzPnSt
  W97M/Melissa.M-mm.......[...............] 12/99 DpPn
  W97M/Melissa.U-mm.......[...............] 11/99 FpPnShSo
 +W97M/Myna.B.............[...............]  1/00 AsDpZb
  W97M/Nono.A.............[Nono...........]  2/99 AsJhJkKbOzShSmStZb
  W97M/Nottice.A..........[...............]  4/99 JmKbZb
  W97M/Nottice.D..........[...............]  5/99 MtXc
  W97M/Opey.C.............[...............] 11/99 RpSm
  W97M/Ozwer.F............[...............]  9/99 IcSt
  W97M/Panther.A..........[...............] 11/99 PnShSoSt
  W97M/Pri.A..............[...............]  6/99 AkBhJkOzPnShSt
  W97M/Pri.B..............[...............]  3/99 AcAsDpGbMhOzSbShSm
  W97M/Pri.Q-mm...........[W97M/Prilissa.A] 11/99 AsFpJhPnSbSt
  W97M/Proteced.A.........[...............]  5/99 OzSm
  W97M/Story.A............[W97M_Jack_Box..]  8/99 AsDpIcJmKbPnShStTiZb
  W97M/Thus.A.............[W97M/Thursday.A]  9/99 AaAmAsCrDpEiIcJdJmPbPnRzSh
                                                  StXcZb
  W97M/Turn.A.............[...............] 12/99 AsJmPnSh
 +W97M/Verlor.A...........[...............]  1/00 AsStZb
  W97M/VMPCK1.BY..........[...............]  8/99 AsDpEwJdStZb
  W97M/Walker.D...........[...............]  6/99 FhZb
  W97M/Walker.E...........[...............]  6/99 AsDpSbShStTiZb
  WelcomB.................[Bupt...........]  6/95 JrSb
  WM/Appder.A.............[ntthnta........]  5/97 EwOz
  WM/CAP.A................[...............]  5/97 AaAcAkAmAsCbCrCsDpEkEwFhFp
                                                  GbIcJdJmJrKbLsMhMlMtOzPbPn
                                                  RpShSmSrStTdTiXcZb
  WM/Colors.A.............[Colours........] 10/96 AsJdSm
  WM/Concept.A............[Prank Macro....] 12/96 AcAkAsBhCsDpEkEwGbIcJdJmJr
                                                  KbKdMlOzSbSmStTdTiWsZb
  WM/CopyCap.A............[...............]  7/98 AmCbEwGbKbOzStZb
  WM/Demon.A..............[...............]  2/99 EkJmKb
  WM/Divina.A.............[Infeczione.....] 12/96 EwLs
  WM/Johnny.A.............[Go Johnny......]  5/96 AkIcJd
  WM/MDMA.A...............[StickyKeys.....] 12/96 AsFpSbTdXcZb
  WM/Niknat.A.............[...............] 12/98 JmSm
  WM/Nottice.A............[...............]  2/99 JmSm
  WM/Npad.A...............[Jakarta........] 10/96 AkAsCsEwFpGbJdOzRpSbSmTdXc
                                                  Zb
  WM/ShowOff.A............[...............]  9/97 EwKdZb
  WM/Wazzu.A..............[Wazzu..........] 12/96 BhEwFpGbJdJhJmJrOzSbSmTdWs
                                                  Zb
  WM/Wazzu.C..............[...............] 12/96 BhCbKbXc
  WM/Wazzu.DO.............[...............]  4/98 EwFpXc
  X97M/Clonar.A...........[X97M/Diablo.B..] 11/99 OzPnSh
  X97M/Divi.A.............[...............] 12/99 CrMtPnSh
  X97M/Extras.A...........[...............] 12/98 AaMlSk
  X97M/Extras.B...........[...............] 10/98 SbSm
  X97M/Laroux.A...........[...............]  7/97 AaAmAsCbEwGbIcJhJrKbMlPbPn
                                                  PtSkStTdZb
  X97M/Laroux.CF..........[...............]  7/99 GbKbKdPnPtSh
  X97M/Laroux.CN..........[...............]  9/99 KdRpZb
  X97M/Laroux.DO..........[...............]  6/99 JrKbKd
  X97M/Laroux.DX..........[...............] 12/98 AkEwIcJdKbKdPnPtRpShStTiZb
  X97M/Laroux.E...........[...............] 12/98 CrKbPnRpShZb
  X97M/Laroux.EI..........[...............]  9/99 MtShZb
  X97M/Laroux.FC..........[...............]  6/99 JmSt
  X97M/Laroux.HJ..........[Bayantel.......]  5/99 RpSt
  X97M/Laroux.HO..........[...............]  5/99 KbPn
  X97M/Laroux.JP..........[...............] 10/99 ShSt
  X97M/Laroux.JX..........[...............] 10/99 PnSt
  X97M/Manalo.E...........[...............] 12/99 FhPn
  X97M/PTH.D..............[...............] 11/99 KbSt
  X97M/VCX.A..............[...............]  4/99 KdPnRzSk
  XF/Paix.A...............[...............] 12/98 FpMhPnSmSt
  XF/Sic.A................[...............]  4/99 KbMhPnShXc
  XM/Compat.A.............[...............] 12/98 AaEwIcSbZb
  XM/Extras.A.............[...............]  7/98 EwIcKbMlSmZb
  XM/Laroux.A.............[...............]  2/97 AaAmAsCrCsEkEwFpIcJdJmJrKb
                                                  MlPbSmTdZb
  XM/Laroux.AN............[...............]  9/99 AdKd
  XM/Laroux.CF............[...............]  6/99 KbOz
  XM/Laroux.DO............[...............] 10/99 GbKb
  XM/Laroux.DX............[...............] 10/99 KbShZb
  XM/Laroux.E.............[...............] 10/97 KbPnZb
  XM/Laroux.HO............[...............] 12/99 KbKd
  XM/Laroux.IC............[...............]  7/99 PnPt
 +XM/Laroux.JO............[...............]  1/00 StTc
  Yankee_Doodle.2881.A....[Yankee.2C.A....]  9/93 EkEwSm
 ============================================================================
  Total for the WildList: 175

 ============================================================================
                            Supplemental List
 ============================================================================
  As was noted at the start of the main list, this list is not technically
  part of "The WildList", as originally defined. By design, the WildList
  is a list of viruses verified as being in the wild by a minimum of two
  WildList participants. The viruses listed below do not currently meet
  that criteria.

  This additional list includes viruses reported by a single participant
  and are often either moving onto the main list, or dropping off of it.

  Please note especially that this list also tends to be more of a
  regional reporting mechanism. For example, a virus is often reported
  as very common by one regional participant, but is found nowhere else
  in the world.

  Viruses marked with a minus sign (-) dropped from the main list this
  month. Viruses marked with a plus sign (+) are new to the supplemental
  list this month.

                                            List  Reported      See Release
  Name of Virus           [ Alias(es)     ] Date  by:           Notes
 ============================================================================
  Barrotes.1310.A.........[Barrotos.......]  1/99 Fp
  Beah....................[...............]  2/98 Xc
  Bleah.C.................[...............]  3/98 Fp
  Bye.....................[ByeBye.........]  1/99 Ls
  Chimp.A.................[...............] 11/99 Ew
  CLL.947.................[...............]  4/99 Ak
  Clonewar.cmp.923........[...............] 12/99 Sh
  Crazy_Boot..............[...............]  5/95 Sb
  Cruel.A.................[...............]  2/98 Rz
  DelCMOS.B...............[Int7F-E9, Feint]  1/99 Jm
  DelWin.mp.1759.A........[Goblin.1759....]  6/95 Ti
  Dir-II.A................[Creeping Death.]  7/93 Ws
  DNA.1206................[...............]  8/99 St
  Dodgy...................[...............] 10/97 Cr
  Frodo.4096.A............[4096...........]  7/93 Ew
  Getto.2000..............[...............] 11/99 Sh            *
  Ghost_II.792............[...............]  9/99 Sh
  Helloween.1376.A........[1376...........]  7/93 Ws
  Helloween.1839.A........[...............]  9/99 Kd
  HLLP.5850.D.............[Weed...........]  7/99 Fh
  HLLP.5864...............[...............] 11/99 Sh            *
  HLLP.7776...............[...............] 11/99 Sh
  HLLP.Toadie.9100........[...............] 12/99 Pn
  Invader.2164............[TPE 1.4........]  9/99 Sh
  J&M.B...................[...............]  2/99 Mt
  Jerusalem.1364.A........[Mummy.1364.....]  9/99 Sh
  Kampana.mp.A............[AntiTel........]  7/93 Jd
  Kiev.1942...............[KVS.1942.......]  2/99 Ak
  Leandro.................[TimeWarp.......]  9/99 Kd
  Little_Red.1465.A.......[...............] 10/99 Sh
  Maltese_Amoeba.2365.....[Grain of Sand..]  7/93 Ws
  Neuroquila.mp.4544.A....[Havoc, Wedding.]  1/99 Ws
  Nightfall.4518..........[N8Fal..........]  2/96 Pb
 +NRLG.700.A..............[...............]  1/00 Jh
  O97M/HalfCross.C........[...............] 12/99 Rz
 +O97M/Hopper.R...........[...............]  1/00 As
  O97M/Tristate.A.........[...............]  5/99 Sr
  O97M/Tristate.AA........[...............]  6/99 Oz
  O97M/Tristate.AB........[...............]  7/99 Cr
  O97M/Tristate.B.........[...............] 11/99 Fh
  O97M/Tristate.BJ........[...............] 12/99 Ae
  O97M/Tristate.BR........[...............] 11/99 Sh
 +O97M/Tristate.BU........[...............]  1/00 Rz
  O97M/Tristate.D.........[...............]  4/99 Pn
  O97M/Tristate.F.........[...............]  4/99 Jd
  O97M/Tristate.Y.........[...............]  6/99 Oz
  Persefone...............[Pers...........]  9/99 Ra
  Pojer.1919..............[Brain-1919.....] 10/97 Pb
  Pojer.4028..............[Brain-4028.....]  2/98 Pb
  Quandary................[Parity_Boot.Enc]  3/96 Ak
  Quox.A..................[Stealth 2......]  9/99 Kd
  RP.A....................[Rhubarb, PR.b..]  2/97 Cr
  Stealth_Boot.B..........[AMSE, NopB.....]  8/94 Sb
  Stoned.W-Boot...........[Wonka..........] 12/93 Ws
  Tanpro.524..............[...............]  4/99 Ak
  TMC_Level-42............[...............]  2/99 Mt
  Unashamed.B.............[...............] 10/95 Jr
  Urkel...................[Nwait..........]  1/99 Ws
  V-Sign..................[Cansu, Sigalit.]  7/93 Pb
  VBS/BubbleBoy.B.........[VBS/BubbleBoy_2] 12/99 Jh
  VBS/Happy...............[...............] 10/99 Sh
 +VBS/Tune.A..............[...............]  1/00 Jh
  VrapExe.3730............[XRF.3730, 3730.]  3/98 Fp
  W32/Badby...............[...............]  9/99 Pn
  W32/Beast.B.............[(W97M, W32)....] 10/99 Sh
  W32/Bolzano.3223........[Bolzano.L......]  1/00 Pb
 +W32/Crypto..............[...............]  1/00 Jh
  W32/HLLP.DeTroie.A......[W32/Cheval.TCV.] 11/98 Fp
  W32/Kriz.3863.A.........[...............]  9/99 Pn
  W32/Kriz.4050...........[...............] 12/99 Pn
  W32/Kriz.4092...........[...............] 12/99 Pn
  W32/Maya................[W32/Maya.4153..]  5/99 Gb
  W95/Anxiety.1358........[Poppy..........] 11/97 Fp
  W95/Anxiety.1823........[W95/Anxiety.B..]  4/98 Fp
  W95/CIH.1024............[...............]  3/99 Jm
  W95/HPS.5124............[WIN95/HPS......] 11/98 Fp
  W95/Lizard.2381.........[...............] 11/99 Sh
  W95/Lord................[...............]  6/99 Xc
  W95/MiniR3.431..........[W32/Gift.worm.b] 12/99 Sh
  W95/Padania.............[...............]  5/99 Sb
  W95/Spaces.1245.........[...............]  5/99 Mh
  W95/Tip.2475............[W95/Tip.A......] 12/99 Cr
  W97M/Antimarc.A.........[...............] 11/99 As
 +W97M/Appder.Q...........[...............]  1/00 As
  W97M/Appder.W...........[...............]  9/99 Ak
  W97M/Arbeit.A...........[...............]  9/99 Pn
  W97M/Argh.A.............[...............]  5/99 Sb
  W97M/Argh.B.............[...............]  5/99 Mh
 +W97M/Armagidon.A........[...............]  1/00 Aa
 +W97M/Assilem.A..........[...............]  1/00 As
  W97M/Astia.B............[...............]  6/99 Pn
 +W97M/Astia.C............[...............]  1/00 As
  W97M/Astia.L............[W97M/Mamm.A....]  6/99 Pn
  W97M/Astia.Y............[W97M/BMH.......] 12/99 Ae
 +W97M/Backhand.A.........[...............]  1/00 Jh
  W97M/Caligula.A.........[...............]  4/99 Fp
  W97M/Candle.A...........[...............] 11/99 Sb
  W97M/Chack.AL...........[W97M/Jiuster.A.] 12/99 Jm
  W97M/Chack.B............[...............] 11/99 As
 +W97M/Chack.BD...........[...............]  1/00 Rz
 +W97M/Chantal.B..........[...............]  1/00 Aa
  W97M/Class.A............[...............] 12/99 Jh
  W97M/Class.AY...........[...............] 10/99 Sh
  W97M/Class.BZ...........[...............]  8/99 St
  W97M/Class.CN...........[...............]  4/99 Ic
  W97M/Class.CO...........[...............] 10/99 Sh
  W97M/Class.CP...........[W97M/BlackviruZ]  7/99 Jm
  W97M/Class.DC...........[...............]  6/99 Oz
  W97M/Class.DZ...........[W97M/Claet.A...] 12/99 Rz
  W97M/Class.EE...........[W97M/Mixture.A.] 12/99 Rz
 +W97M/Class.EH...........[...............]  1/00 Rz
 +W97M/Class.EI...........[...............]  1/00 Rz
  W97M/ColdApe.H..........[...............]  6/99 Oz
  W97M/ColdApe.I..........[...............]  6/99 Oz
  W97M/ColdApe.O..........[...............] 10/99 St
  W97M/Ded.C..............[...............]  7/99 Rz
  W97M/Disco.D............[...............]  4/99 Kb
  W97M/Disco.E............[...............]  4/99 Kb
  W97M/DVD.A..............[...............]  4/99 Pn
  W97M/Ephan.A............[...............]  8/99 St
 +W97M/Ephan.B............[...............]  1/00 Rz
  W97M/Ethan.AB...........[...............]  9/99 St
  W97M/Ethan.AC...........[...............] 11/99 Tc
  W97M/Ethan.AK...........[...............]  9/99 St
  W97M/Ethan.AL...........[...............]  9/99 St
  W97M/Ethan.BB...........[...............] 11/99 So
 +W97M/Ethan.BN...........[...............]  1/00 Rz
  W97M/Ethan.D............[...............]  6/99 Pn
  W97M/Ethan.G............[...............]  6/99 Oz
  W97M/Ethan.J............[...............]  7/99 Cr
  W97M/Ethan.L............[...............]  6/99 Oz
  W97M/Ethan.P............[...............]  9/99 St
  W97M/Ethan.U............[...............] 10/99 As
  W97M/FF.A...............[W97M/Lys.H.....] 11/99 As
  W97M/Footer.E...........[...............]  6/99 St
  W97M/Footer.G...........[...............]  8/99 St
 +W97M/Footer.N...........[...............]  1/00 Rz
  W97M/Gamlet.A...........[...............]  9/99 St
  W97M/Groov.D............[...............]  7/99 St
  W97M/Groov.I............[...............]  6/99 Oz
  W97M/Hope.A.............[...............] 10/99 St
  W97M/Idea.A.............[...............]  9/99 Jm
  W97M/IIS.D..............[...............]  8/99 Ic
 +W97M/Iseng.A............[...............]  1/00 As
  W97M/JB.................[W97M/JB.A......] 10/99 Pn
  W97M/Jedi.I.............[...............]  6/99 Oz            *
  W97M/Jerk.A.............[...............] 11/99 Tc
  W97M/Locale.C...........[...............] 11/99 St
 +W97M/Lucia.A-mm.........[...............]  1/00 Kb
 +W97M/Lulung.F...........[...............]  1/00 As
  W97M/Marker.A...........[...............] 12/99 Jh
  W97M/Marker.AL..........[...............]  9/99 Rz
  W97M/Marker.AN..........[...............] 11/99 St
  W97M/Marker.AV..........[...............] 11/99 St
  W97M/Marker.AW..........[...............] 11/99 St
  W97M/Marker.AX..........[...............] 11/99 St
 +W97M/Marker.AZ..........[...............]  1/00 St
  W97M/Marker.BA..........[...............] 12/99 Sh
 +W97M/Marker.BG..........[...............]  1/00 St
 +W97M/Marker.BP..........[...............]  1/00 Rz
 +W97M/Marker.BQ..........[...............]  1/00 Rz
  W97M/Marker.N...........[...............]  7/99 St
  W97M/Marker.W...........[...............] 11/99 Tc
  W97M/MDMA.D.............[...............]  1/99 Jm
  W97M/Melissa.B-mm.......[...............]  6/99 Oz
  W97M/Melissa.V-mm.......[...............] 10/99 Pn
  W97M/Nottice.AA.........[W97M/Hark.E....]  7/99 St
  W97M/Nottice.I..........[...............] 11/99 Sh
  W97M/Odious.A...........[...............]  9/99 Pn
  W97M/Odious.B...........[...............] 12/99 Kb
  W97M/Opey.A.............[...............]  5/99 Rp
  W97M/Opey.D.............[...............]  4/99 Rp
  W97M/Opey.G.............[...............] 11/99 As
  W97M/Opey.H.............[...............] 10/99 St
  W97M/Osm.A..............[...............]  9/99 Ac
  W97M/Ozwer.B............[...............]  9/99 St
  W97M/PassBox.E..........[...............] 12/99 Ae
 +W97M/Passbox.I..........[...............]  1/00 As
  W97M/Pri.E..............[...............]  7/99 St
  W97M/Proteced.G.........[...............] 12/99 Oz
  W97M/Sad.A..............[...............]  4/99 Pn
  W97M/Shiver.C...........[...............]  3/99 Sm
 +W97M/Solafish.A.........[...............]  1/00 As
  W97M/Story.B............[...............]  9/99 Rz
 +W97M/Surround.A.........[...............]  1/00 St
 +W97M/Temple.A...........[...............]  1/00 As
  W97M/Tie.T..............[...............]  5/99 Aa
 +W97M/Titch.A............[...............]  1/00 As
  W97M/Tooth.A............[...............] 12/99 Ae            *
  W97M/Trigram.A..........[...............]  7/99 St
  W97M/TWNO.AC............[...............]  6/98 Fp
  W97M/Uka.D..............[...............]  9/99 Jm
  W97M/Venus.A-mm.........[...............] 12/99 Rz
  W97M/VMPCK1.BG..........[...............] 12/99 Ae
 +W97M/VMPCK1.DD..........[...............]  1/00 St
  W97M/Vp.A...............[...............]  7/99 Jm
  W97M/Wazzu.A............[...............]  5/97 Cs
  Win/Tentacle.1944.......[...............]  5/96 Rz
  WM/Cap.AT...............[...............]  7/99 St
  WM/Concept.BB...........[...............]  9/99 Sh
  WM/DZT.A................[...............]  2/99 Ak
  WM/Helper.B.............[...............]  7/97 Xc
  WM/Imposter.E...........[...............]  4/99 Kb
  WM/Inexist.A:Fr.........[WM/Warning.....]  2/99 Fp
  WM/Johnny.B.............[...............] 12/98 Jm
  WM/Mental.A.............[...............] 12/99 Kb
 +WM/Muck.R...............[...............]  1/00 Kb
  WM/Niceday.N............[...............] 12/98 Kb
  WM/Pesan.B..............[...............] 10/97 Jd
  WM/ShowOff.C............[...............]  9/99 Sh
  WM/Stall.A..............[...............] 11/98 Fp
  WM/Stall.C..............[...............] 12/99 Ae
  WM/Switcher.A...........[...............] 12/97 Ew
  WM/Swlabs.B.............[...............] 10/97 Jm
  WM/Swlabs.G.............[...............] 12/97 Fp
  WM/Temple.R.............[...............]  7/98 Rz
  WM/TWNO.A:Tw............[Taiwan No. 1...] 12/96 Ic
  WM/TWNO.AC..............[...............]  8/98 Fp
  WM/Veneno.D:Es..........[WM/Cap.GV......] 10/98 Rz
  WM/Wazzu.DV.............[...............]  4/98 Fp
  WM/Wazzu.EC.............[...............]  4/98 Fp
  WM/Wazzu.X..............[...............]  2/99 Kb
  X97M/Beliers.A..........[...............] 12/99 Kb
  X97M/Button.A...........[...............] 11/99 St
 +X97M/Extras.M...........[...............]  1/00 As
  X97M/Friend.B...........[...............]  7/99 St
  X97M/Laroux.AA..........[...............]  6/99 Oz
  X97M/Laroux.AJ..........[...............] 11/99 Tc
  X97M/Laroux.AL..........[...............] 11/99 Aa            *
  X97M/Laroux.AN..........[...............]  8/99 St
  X97M/Laroux.CG..........[...............] 11/98 Xc
  X97M/Laroux.D...........[...............] 12/98 Cr
  X97M/Laroux.DI..........[...............]  7/98 Rz
  X97M/Laroux.DK..........[...............]  6/99 Xc
  X97M/Laroux.EE..........[...............]  3/99 Cb
  X97M/Laroux.EL..........[X97M/Massage...]  7/99 Aa
  X97M/Laroux.FE..........[...............] 10/99 St
  X97M/Laroux.GJ..........[...............]  4/99 Kb
  X97M/Laroux.GV..........[...............]  5/99 Kb
  X97M/Laroux.GW..........[...............]  6/99 St
  X97M/Laroux.HZ..........[...............]  7/99 St
  X97M/Laroux.IC..........[...............] 12/99 Kd
  X97M/Laroux.JH..........[...............]  8/99 St
  X97M/Laroux.JM..........[...............]  9/99 St
  X97M/Laroux.KS..........[X97M/Laroux.CS.]  9/99 Sh
 +X97M/Laroux.LN..........[...............]  1/00 St
  X97M/Manalo.D...........[...............] 10/99 Pn
  X97M/PTH.F..............[...............] 11/99 St
  X97M/Smack.A............[...............]  7/99 St
  X97M/VCX.B..............[...............]  9/99 St
  X97M/VCX.G..............[...............]  9/99 Rz
  XM/Extras.B.............[...............]  9/98 Ew
  XM/Laroux.D.............[...............]  9/97 Jd
  XM/Laroux.EO............[...............]  4/99 Jd
  XM/Laroux.FC............[...............] 12/98 Ew
  XM/Laroux.JM............[...............]  9/99 Pt
  XM/Laroux.JP............[...............] 10/99 Sh
  XM/Laroux.KS............[XM/Laroux.CS...]  9/99 Sh
  XM/Manalo.E.............[...............] 11/99 St
  XM/PTH.F................[...............] 11/99 Sb
  XM/UEDASAN.A............[...............]  4/99 Pn
  XM/UEDASAN.B............[...............]  4/99 Pn
  XM/UEDASAN.C............[...............]  4/99 Pn
  XM/VCX.A................[...............]  1/99 Sm
 ============================================================================
  Total for both lists: 440

 ============================================================================
                                  Other
 ============================================================================
  The WildList is a list of viruses that have been reported as spreading
  In the Wild. Sometimes WLO receives reports of programs which, according
  to the various reporters, may not fit strictly into the viral category,
  but which have been brought to their attention by concerned users.  The
  following programs fall into that category

                                            List  Reported
  Name of Virus           [ Alias(es)     ] Date  by:
 ============================================================================
  BackOrifice_2000........[...............] 11/99 EkPnSkStXc
  Badass.Worm.............[Naughty_Donkey.] 11/99 PnSh
  DUNpws.W.Trojan.........[Kuang.C........]  9/99 AkTc
  ICQ2000.Worm............[ICQ2K..........] 11/99 Sh
  Goaway.Worm.............[Dmsetup.worm...] 11/99 ShSk
  MAC/AutoStart.Worm......[...............] 11/99 GbEwSm
  Stealth.Backdoor........[...............] 10/99 Ek
  SubSeven.Backdoor.......[Backdoor-G.....]  7/99 AcAsPnSkSoTc
  W32/Fix2001.Worm........[W32/Admin......] 10/99 AsFhkBJmPnShXcZb
  W32/HLLP.Backdoor-Yai...[...............] 11/99 AaSh
 ============================================================================

 ============================================================================
                      WildList Sorted by Frequency
 ============================================================================
   This is not a prevalence table. It does not show how common each virus
   is. Rather it is the WildList sorted by the number of participants that
   report each virus.

   This section gives the names, types, and aliases of the most frequently
   reported viruses. These viruses have been reported by at least 15
   WildList participants. They are sorted with the most frequently
   reported first.

  Freq  Name                       Type   Aliases
 ============================================================================
  43  | W32/Ska.A............... | File  |HAPPY99
  38  | W95/CIH.1003............ | File  |Spacefiller
  36  | W97M/Melissa.A-mm....... | Macro |Maillissa
  35  | W97M/Ethan.A............ | Macro |
  35  | WM/CAP.A................ | Macro |
  32  | W32/ExploreZip.......... | File  |Worm.ExploreZip
  28  | W97M/Marker.C........... | Macro |W97M/Spooky.C
  26  | O97M/Tristate.C......... | Macro |O97/Crown.B
  25  | W32/PrettyPark.A........ | File  |
  25  | W97M/Class.D............ | Macro |
  24  | WM/Concept.A............ | Macro |Prank Macro
  20  | AntiCMOS.A.............. | Boot  |Lenart
  20  | AntiEXE.A............... | Boot  |D3
  18  | X97M/Laroux.A........... | Macro |
  18  | XM/Laroux.A............. | Macro |
  17  | Form.A.................. | Boot  |Form 18
  17  | W32/ExploreZip.pak...... | File  |
  16  | W97M/Class.Q............ | Macro |
  16  | W97M/Thus.A............. | Macro |W97M/Thursday.A
  15  | One_Half.mp.3544.A...... | Multi |Dis, Free Love
 ============================================================================

  Release notes for the January WildList:

  It has been brought to the attention of WLO that the "@mm" modifier
  resolves to an email address when viewed with certain email readers
  and internet browsers.  To alleviate the confusion this may cause,
  "@mm" is now replaced with the modifier "-mm".


  Upon further examination of the submitted samples, the following
  viruses have been renamed:
  
        W97M/Stall.C    -> WM/Stall.C
        X97M/Candle.A   -> W97M/Candle.A
        XM/Laroux.AJ    -> X97M/Laroux.AJ


  * Upon further examination, these viruses were found to be
  non-replicative or intended.  They are scheduled for removal in the
  February WildList.  Reporting Participants are encouraged to submit
  a viable sample sometime before Feb 10, 2000.

 ============================================================================
  The WildList is collated by board members of WildList Organization
  International.

  A complete archive of WildLists is available at the WildList
  Organization web site (http://www.wildlist.org/WildList/wildlist.html)

  The WildList and all material contained on this web site is the
  copyright of The Wildlist Organization International unless otherwise
  stated in the material itself. The WildList Organization International
  permits quotation and citation of the WildList either in whole or in
  part providing WildList Organization is identified as the source of
  the material. The WildList may not be altered or misrepresented in any
  way and only fair usage is permitted. Beyond these limited rights all
  rights are reserved.

  The WildList Organization International and WildList reporters make a
  diligent effort to ensure the accuracy of the data presented in the
  WildList. However, The WildList Organization makes no warranty against
  the accuracy of the information presented herein. The WildList
  Organization and WildList reporters cannot be held liable for any
  loss, or damages incurred from the use of WildList information.

  Press, print media & other queries about WildList Organization
  International should be sent to Sarah Gordon, WildList Organization's
  primary media contact, at [email protected].
 ============================================================================
   WildList Vol.A01    -    (c) 1993-2000 Joe Wells    -  [email protected]
 ============================================================================
  -----BEGIN PGP PUBLIC KEY BLOCK-----
  Version: 2.7

  mQCNAy+wAnYAAAEEAO2alE3YclXZAxkqrSVXkhAuuOsx6NnVfUdKMghYtrBabFuJ
  +zKiIsahmjeakA2J101KZOHtKMhb5iqLG0oCbRyuBFLtuMhJrjk+L9VRCoxoDB/4
  XwFevOGyxRHYfancrIydlMUooe7TZJqbGhhQEROWYm8v6RvkPFtsMpyD+Lb1AAUR
  tCNKb2UgV2VsbHMgPGMxandlbGxzQHdhdHNvbi5pYm0uY29tPg==
  =aKXf
  -----END PGP PUBLIC KEY BLOCK-----
 ============================================================================

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.