The WildList

February 2000

 ============================================================================
                  PC Viruses in the Wild - February, 2000
 ============================================================================

   This is a cooperative listing of viruses reported as being in the wild
   by 61 virus information professionals. The basis for these reports are
   virus incidents where a sample was received, and positively identified
   by the participant.  Rumors and unverified reports have been excluded.

   Some programs included in this list may fall outside the traditional
   definition of a computer virus. However, such programs are spreading
   throughout diverse user populations, are a threat to users and are
   therefore included in this list.

   This report is cumulative. That is, this is not just a report of
   which viruses were seen last month. Monthly data is received from
   most participants, but the new data is added to the old. Participants
   are expected to let us know when to remove their name from a virus.

   The list should not be considered a list of "the most common viruses",
   however, since no specific provision is made for a commonness factor.

   This data indicates only "which" viruses are in the wild, but viruses
   reported by many (or most) participants are obviously widespread.

   The WildList is currently being used as the basis for in-the-wild
   virus testing and certification of anti-virus products by the ICSA,
   Virus Bulletin and Secure Computing. Additionally, a virus collection
   based upon the WildList is being used in an effort to standardize the
   naming of common viruses.

        The WildList - (c)1993-2000 by Joe Wells - [email protected]
 ============================================================================
  Key Participant          Region         Organization          Product
 ============================================================================
  Aa  Asaf Achitoov        Israel         iRiS Software         AntiVirus Plus
  Ac  Alan Candy           New Zealand    Applied Insight       -
  Ad  Allan Dyer           Hong Kong      Yui Kee Co. Ltd.      F-Prot
  Ae  Amir Elbaz           Israel         Aladdin               eSafe Protect
  Ak  Ahmad Y. Kashoor     Syria          CompuKashoor          Dr Solomon's
  Am  Andreas Marx         Germany        Univ. of Magdeburg    -
  As  Alex Shipp           UK             StarLabs              StarScan
  Bh  Bruce Hughes         USA            ICSA                  -
  Cb  Carl Bretteville     Norway         Norman ASA            NVC
  Cr  Costin RAIU          Romania        GeCAD                 RAV
  Cs  Christian Schmid     Austria        DataPROT Linz         F-Prot
  Dc  Dave Chess           USA            IBM                   NAV
  Dg  Dmitry Gryaznov      UK             McAfee (UK)           VirusScan
  Dp  David Phillips       UK             Open University       -
  Ei  Eddy Willems         EU             EICAR                 -
  Ek  Eugene Kaspersky     Russia         KAMI                  AVP
  Ew  Eddy Willems         Belgium/Lux.   Data Alert Int'l      VirusScan
  Fh  Fraser Howard        UK             Virus Bulletin        -
  Fl  Ferenc Leitold       Hungary        Hunix Ltd.            Virus Buster
  Fp  Francois Paget       France         McAfee (France)       VirusScan
  Gb  Gerald Batten        Canada         Sensible Security     -
  Gm  Gerard Mannig        France         Independent           -
  Ic  Ieta Chi             Taiwan         Trend Micro           PC-cillin
  Jd  Joost de Raeymaeker  Portugal       RSVP                  -
  Jh  Joe Hartmann         USA            Trend Micro           PC-cillin
  Jk  Jimmy Kuo            USA            McAfee (Independent)  -
  Jm  Jose Martinez        Peru           HackSoft S.R.Ltda     TH AV
  Jr  Joon Radley          South Africa   VPS                   VPS
  Kb  Kenneth Bechtel      USA            Team Anti-Virus       -
  Kd  K. T. Davies         India          Pioneer Micro         Vaxine
  Ls  Luca Sambucci        Italy          Itaweb                -
  Mh  Mikko Hypponen       Finland        Data Fellows          F-Prot Pro
  Ml  Mickey Loh           Malaysia       R.E.Solutions         Armour AV
  Ms  Marek Sell           Poland         Marek Sell, Ltd.      MkS_vir
  Mt  Miroslav Trnka       Slovakia       ESET Ltd              NOD-ICE
  Oz  Jakub Kaminski       Australia      Computer Associates   VET
  Pb  Pavel Baudis         Czech Republic ALWIL Software        Avast!
  Pn  Patrick Nolan        USA            McAfee (US)           VirusScan
  Pt  Peter Theobald       India          IT Secure Software    VirusScan
  Ra  Ruben Arias          Argentina      RALP                  Integ Master
  Rf  Richard Foley        Ireland        Reflex Magnetics      TBAV
  Rg  Ray Glath, Sr.       USA            Tavisco Ltd.          Vi-Spy
  Rp  Ronnie Pineda        Philippines    Mannasoft Corp.       VirusScan
  Rv  Robert Vibert        Canada         Independent           -
  Rz  Righard Zwienenberg  Netherlands    Norman Data Defense   NVC
  Sb  Sherra Buzzell       USA            Symantec              NAV
  Sh  Sha-Li Hsieh         USA            Computer Associates   Inoculate IT
  Sk  Seok-Chul Kwon       Korea          HAURI                 ViRobot
  Sm  Seiji Murakami       Japan          JCSR                  -
  So  Simon Borduas        Canada         HYPERTEC Security     F-Prot Pro
  Sr  Subramanya Rao       India          Proland Software      Protector Plus
  St  Stuart Taylor        UK             Sophos Plc.           Sweep
  Ta  Tjark Auerbach       Germany        H+BEDV GmbH           AntiVir
  Tc  Tzvetan Chaliavski   USA            Command Software      F-Prot Pro
  Td  Toralv Dirro         Germany        U of Hamburg          VirusScan
  Ti  Torben Immisch       Denmark        Swanholm Distrib.     NAV
  Wl  WLO                  -              WLO                   -
  Ws  Wolfgang Stiller     USA            Stiller Research      Integ Master
  Xc  Xabier Cazalis       Spain          Panda Software        Panda
  Za  Corporate #1         Western USA    -                     -
  Zb  Corporate #2         Eastern USA    -                     -
 ============================================================================
                              The WildList
 ============================================================================
  This main list includes viruses reported by multiple participants, which
  appear to be non-regional in nature. Technically, this first list is "the"
  WildList according to original specification, which required viruses to
  be verified in the wild by a minimum of two participants. A supplemental
  list follows that contains viruses reported by single participants.

 + Viruses marked with a plus sign (+) are new to the main list this month.

                                            List  Reported
  Name of Virus           [Alias(es)      ] Date  by:
 ============================================================================
  AntiCMOS.A..............[Lenart.........]  1/95 AcAkAmCbEwFhFpIcJdJhJrMhMl
                                                  OzPbSbShSmStWs
  AntiCMOS.B..............[LiXi...........] 10/95 AmRzSbTd
  AntiEXE.A...............[D3.............]  9/94 AaAkAmCbCsEkEwFhFpJmMhOzPb
                                                  RzSmStTdWs
  Boot-437.A..............[Bath...........]  3/94 PbWs
  Burglar.1150.A..........[GranGrave.1150.]  2/96 EkPbRzWs
  Byway.A.................[Dir2.Byway.....]  9/95 JdJmSb
  Cascade.1701.A..........[1701...........]  9/93 CsRzSm
  Cascade.1704.A..........[1704...........]  7/93 CsEw
  Die_Hard.4000.A.........[DH2, Wix.......]  1/95 AkCrIcJrPnRzShTdWs
  Eco.B...................[Eco.B, Sevilla.]  3/98 FpJmXc
  Empire.Monkey.A.........[Monkey.........]  7/94 FpIcOzSb
  Empire.Monkey.B.........[Monkey 2.......]  7/94 EwFhFpIcJdSbSmStTdWsXc
  EXE_Bug.A...............[CMOS Killer....]  9/93 EwJdWs
  Form.A..................[Form 18........]  7/94 CbCsEwFlFpJhJmJrMhMlPbRzSb
                                                  SmTdTiWsXc
  Form.D..................[Form May.......]  7/94 CsFpSbSt
  HLLP.Toadie.7800.A......[Termite.7800...]  9/99 BhPnSbShSt
  HLLP.Toadie.7800.B......[Termite.7800.B.]  9/99 JdPn
  J&M.A...................[Jimi,Hasita....]  6/95 MtPbSm
  Jerusalem.1808.Standard.[Israeli........]  7/93 FpWs
 +JS/Kak.worm.............[...............]  2/00 AsFpPn
  Jumper.B................[...............]  4/99 AkFp
  Junkie.mp.1027.A........[DrWhite.1027...]  7/94 AkCsEwFpMhOzPbSbStTiWsXc
  Major.1644.A............[Major BBS......]  6/96 EkPb
  Michelangelo.A..........[...............]  7/93 CsFlSbWs
  Natas.mp.4774...........[Satan..........] 10/95 IcJdJmJrSbTdXc
  NYB.A...................[B1.............]  7/94 AaAcAkEwFhJrMhSbSmSrTdWsXc
  O97M/HalfCross.A........[...............] 11/99 AsIcSrZb
 +O97M/Jerk.A.............[...............]  2/00 PnTc
  O97M/Jerk.B.............[O97M/AllNet....]  5/99 AsEwPnSoZb
  O97M/Tristate.C.........[O97/Crown.B....]  4/99 AcAdAsBhCrDgEiEwFhFpJhKbKd
                                                  LsMhOzPbPnPtShSkSmStTcXcZb
  One_Half.mp.3544.A......[Dis, Free Love.] 10/95 AaAkCrEkEwFlFpIcMtPbRzSkTd
                                                  WsXc
  One_Half.mp.3577........[...............]  2/99 CrMt
  Parity_Boot.B...........[Generic 1......]  9/93 AkAmCsEwFpJdJrMhShSmStTiXc
  Pieck.mp.4444.A.........[Kaczor.4444....]  6/96 CrEkJrMtPbXc
  Ripper..................[Jack Ripper....]  3/94 AcAkCsEwFhFlFpMhMtPbSmStTd
                                                  Ws
  Sampo...................[Turbo, Wllop...]  1/95 EwJrSmStWs
  Spanska.4250.A..........[...............] 11/97 CrFhFpJmRzSbTi
  Stealth_Boot.C..........[AMSE, NopB2....]  9/94 AkEwFhJd
  Stoned.Angelina.........[...............]  5/95 AaCsJdJrMlPbShSmTd
  Stoned.June_4th.A.......[Bloody!........]  7/93 IcSm
  Stoned.No_INT.A.........[Stoned.........]  9/94 AkCbEwWs
  Stoned.Spirit...........[...............]  6/96 FpJrMtXc
  Stoned.Standard.B.......[New Zealand....]  3/93 CrWsXc
  Tai-Pan.438.A...........[Whisper........]  1/95 CbEkPb
  Tequila.mp.2468.A.......[...............]  7/93 CsWs
  TMC_Level-69............[TMC.5454.......]  2/98 MtPb
  TPVO.mp.3783.A..........[TVPO, 3873.....] 10/96 IcMl
  Tremor.4000.A...........[...............]  7/93 CsWs
  VBS/BubbleBoy.A.........[VBS/BubbleBoy_1] 12/99 JhSbSh
  VBS/Freelink............[...............] 10/99 AsBhEiEwFhGbJhJkJmKbPnSbSh
                                                  SmStTiZb
  W32/Babylonia...........[.11036.........] 12/99 AaAeFpJrOzPnSbSr
  W32/Beast.A.............[(W32, W97M)....]  5/99 AaAsPnShTcZb
  W32/ExploreZip..........[Worm.ExploreZip]  6/99 AaAcAdAsEwFhFpGbIcJhJmKbKd
                                                  LsMlMtOzPbPnPtRfRpSbShSkSm
                                                  SrStTdTiXcZb
  W32/ExploreZip.pak......[...............] 12/99 AmAsEiEwFpJdJhKbMtOzPbPnRz
                                                  SbShSkStZb
 +W32/Fix2001.worm........[...............]  2/00 AsFhFpGbJhJmKbPnShXcZb
  W32/Funlove.4099........[...............] 12/99 JhOzPn
  W32/Kriz.4029...........[...............]  1/00 SkXc
  W32/Mypics.worm.........[...............] 12/99 JhPnSbSh
  W32/NewApt.A............[...............]  1/00 AsJhShSk
 +W32/NewApt.C............[...............]  2/00 AsSb
 +W32/NewApt.D............[...............]  2/00 JhKbSh
  W32/Oporto..............[Totilix.3075...] 12/99 JdPn
  W32/PrettyPark.A........[...............]  6/99 AaAdAsCrDpEiEwFhFpGbJdJhJm
                                                  JrKbKdMhMtPbPnRaShSkSmStTi
                                                  XcZb
  W32/Ska.A...............[HAPPY99........]  3/99 AcAdAkAmAsBhCbCrCsDpEiEkEw
                                                  FhFpGbGmIcJdJhJkJmJrKbKdLs
                                                  MhMlMtOzPbPnRaRpShSmSoSrSt
                                                  TcTiXcZb
 +W32/Winext.worm.........[TryIt..........]  2/00 AsFpShZb
  W95/CIH.1003............[Spacefiller....]  8/98 AaAcAdAkAmAsCbCrCsEwFhFlFp
                                                  GbIcJdJhJmJrKbKdLsMhMlMtOz
                                                  PbPnRpShSkSmSoSrStTiWlXcZb
  W95/CIH.1019.A..........[.1019, CIH.C...]  7/98 AaCsEkEwFhMhMlSbXc
  W95/Fono................[W95/El_Inca.mp.] 12/98 FhMtPbPnXc
  W95/Kenston.1895........[...............]  5/99 AaMhPb
  W95/Marburg.8590........[W95/Marburg.A..]  7/98 AsEwIcOzRpSbSm
  W97M/Appder.A...........[...............]  7/97 CbJm
  W97M/Bablas.A...........[...............]  1/00 AsPn
  W97M/Brenda.A...........[...............]  1/99 AsFhRzZb
  W97M/Chack.H............[...............]  7/99 JmSm
  W97M/Class.B............[...............]  2/99 AaAcAsCrFpKbMhPnShSo
  W97M/Class.BV...........[W97M/Insert....] 11/99 AsTc
  W97M/Class.D............[...............] 12/98 AcAsBhCbCrDpEiEwFhFpGmIcJd
                                                  JhKdMhMlOzPnRaRzShSoStTiXc
                                                  Zb
 +W97M/Class.ED...........[...............]  2/00 AsPn
  W97M/Class.Q............[...............] 12/98 AcAkAmAsCrJhMhOzPnRzShSoSt
                                                  Xc
  W97M/ColdApe.A..........[...............] 12/98 AaAcAsFhFpGbPnShSmSoTcZb
  W97M/ColdApe.B..........[...............]  3/99 AdFhFpKbMhOzPnZb
  W97M/Cont.A.............[...............] 11/99 AsSt
  W97M/Ded.A..............[...............] 10/99 AsKbSoSt
  W97M/Ded.B..............[...............]  1/00 AsOzSh
  W97M/Ethan.A............[...............]  2/99 AcAmAsBhCbCrDpEiEwFhFpGbIc
                                                  JdJhJkJmJrKbLsMhMtOzPbPnRa
                                                  SbShSmSoSrStTcTiXcZb
  W97M/Ethan.AT...........[...............] 10/99 AsPnStZb
  W97M/Ethan.AW...........[...............] 11/99 AsPnShStZb
  W97M/Ethan.B............[...............]  8/99 AcAeCrJhOzSh
  W97M/Ethan.Q............[...............]  9/99 AsJhPnStZb
  W97M/Footer.A...........[...............] 12/99 AsPn
  W97M/Groov.A............[...............]  7/98 FhJhJrKbKdPnSmTi
  W97M/Groov.B............[...............] 10/99 AsPn
  W97M/Groov.C............[...............] 11/99 AsPt
  W97M/Heathen.12288.A....[...............] 10/99 IcXc
  W97M/Hubad.A............[...............] 12/99 FpJd
  W97M/Locale.A...........[...............]  9/99 AaAsPnShStZb
  W97M/Locale.B...........[...............] 10/99 PnSt
  W97M/Marker.AE..........[...............]  9/99 ShSt
  W97M/Marker.AQ..........[...............] 10/99 PnShSt
  W97M/Marker.AR..........[...............] 10/99 ShSt
 +W97M/Marker.BO..........[...............]  2/00 AdAs
  W97M/Marker.C...........[W97M/Spooky.C..]  4/99 AaAcAeAmAsCrDpEiEwFhFpIcJd
                                                  JhJmJrKbMhMtOzPnPtShSoSrSt
                                                  TcXcZaZb
  W97M/Marker.D...........[...............]  5/99 AkAsBhDpGbJhKdOzShSmTiXcZb
  W97M/Marker.O...........[...............]  8/99 AsJmPnPtShSrStZb
  W97M/Marker.P...........[...............] 11/99 ShStZb
  W97M/Marker.Q...........[...............]  9/99 AsJdShStZb
  W97M/Marker.X...........[...............]  9/99 PnStZb
  W97M/Melissa.A-mm.......[Maillissa......]  4/99 AaAcAsCbCrDgEiEwFhFlFpGbIc
                                                  JdJhJkJrKbKdLsMhMlMtOzPnPt
                                                  RzSbShSkSmStTcTiXcZaZb
  W97M/Melissa.AA-mm......[...............] 12/99 OzPnSb
  W97M/Melissa.AB-mm......[...............] 12/99 JmSb
  W97M/Melissa.I-mm.......[...............]  7/99 AaAcOzPnShSt
  W97M/Melissa.M-mm.......[...............] 12/99 DpPn
 +W97M/Melissa.O-mm.......[...............]  2/00 AsPn
  W97M/Melissa.U-mm.......[...............] 11/99 FpPnShSo
  W97M/Myna.B.............[...............]  1/00 AsDpZb
  W97M/Nono.A.............[Nono...........]  2/99 AsJhJkKbOzShSmStZb
  W97M/Nottice.A..........[...............]  4/99 AsJmKbZb
  W97M/Nottice.D..........[...............]  5/99 MtXc
 +W97M/Odious.A...........[...............]  2/00 AsPn
  W97M/Opey.C.............[...............] 11/99 RpSm
  W97M/Ozwer.F............[...............]  9/99 IcSt
  W97M/Panther.A..........[...............] 11/99 PnShSoSt
  W97M/Pri.A..............[...............]  6/99 AkAsBhJkOzPnRgShSt
  W97M/Pri.B..............[...............]  3/99 AcAsDpGbMhOzShSm
  W97M/Pri.Q-mm...........[W97M/Prilissa.A] 11/99 AsEwFlFpJhPnSbSmSt
  W97M/Proteced.A.........[...............]  5/99 OzSm
  W97M/Story.A............[W97M_Jack_Box..]  8/99 AsCrDpIcJmKbPnShSmStTiZb
  W97M/Thus.A.............[W97M/Thursday.A]  9/99 AaAmAsCrDpEiFpGbIcJdJmPbPn
                                                  RzShStXcZb
  W97M/Turn.A.............[...............] 12/99 AsJmPnSh
  W97M/Verlor.A...........[...............]  1/00 AsStZb
  W97M/VMPCK1.BY..........[...............]  8/99 AsDpEwJdJmStZb
  W97M/Walker.D...........[...............]  6/99 FhZb
  W97M/Walker.E...........[...............]  6/99 AsDpShStTiZb
 +W97M/Wrench.C...........[...............]  2/00 PnRz
  WelcomB.................[Bupt...........]  6/95 FlJrSb
  WM/Appder.A.............[ntthnta........]  5/97 EwOz
  WM/CAP.A................[...............]  5/97 AaAcAkAmAsCbCrCsDpEkEwFhFl
                                                  FpIcJdJhJmJrKbLsMhMlMtOzPb
                                                  PnRpShSmSrStTdTiXcZb
  WM/Colors.A.............[Colours........] 10/96 AsJdSm
  WM/Concept.A............[Prank Macro....] 12/96 AcAkAsBhCsDpEkEwFlIcJdJmJr
                                                  KbKdMlOzSmStTdTiWsZb
  WM/CopyCap.A............[...............]  7/98 AmCbEwKbOzStZb
  WM/Demon.A..............[...............]  2/99 EkJmKb
  WM/Divina.A.............[Infeczione.....] 12/96 EwLs
  WM/Johnny.A.............[Go Johnny......]  5/96 AkIcJd
  WM/MDMA.A...............[StickyKeys.....] 12/96 AsFpSbTdXcZb
  WM/Niknat.A.............[...............] 12/98 JmSm
  WM/Nottice.A............[...............]  2/99 JmSm
  WM/Npad.A...............[Jakarta........] 10/96 AkAsCsEwFpGbJdOzRpSmTdXcZb
  WM/ShowOff.A............[...............]  9/97 EwKdZb
  WM/Wazzu.A..............[Wazzu..........] 12/96 BhEwFlFpJdJhJmJrOzSmTdWsZb
  WM/Wazzu.C..............[...............] 12/96 BhCbKbXc
  WM/Wazzu.DO.............[...............]  4/98 EwFpXc
  X97M/Clonar.A...........[X97M/Diablo.B..] 11/99 OzPnSh
  X97M/Divi.A.............[...............] 12/99 CrMtPnShSt
  X97M/Extras.A...........[...............] 12/98 AaSk
  X97M/Extras.B...........[...............] 10/98 SbSm
  X97M/Laroux.A...........[...............]  7/97 AaAmAsCbEwFlGbIcJhJrKbMlPb
                                                  PnPtSkStTdZb
  X97M/Laroux.CF..........[...............]  7/99 KbKdPnPtSh
  X97M/Laroux.CN..........[...............]  9/99 KdRpZb
  X97M/Laroux.DO..........[...............]  6/99 JrKbKd
  X97M/Laroux.DX..........[...............] 12/98 AkEwIcJdKbKdPnPtRpShStTiZb
  X97M/Laroux.E...........[...............] 12/98 CrKbPnRpShZb
  X97M/Laroux.EI..........[...............]  9/99 MtShZb
  X97M/Laroux.FC..........[...............]  6/99 JmShSt
  X97M/Laroux.HJ..........[Bayantel.......]  5/99 RpSt
  X97M/Laroux.HO..........[...............]  5/99 KbPn
  X97M/Laroux.JP..........[...............] 10/99 ShSt
  X97M/Laroux.JX..........[...............] 10/99 PnSt
  X97M/Manalo.E...........[...............] 12/99 FhPn
  X97M/PTH.D..............[...............] 11/99 KbSt
  X97M/VCX.A..............[...............]  4/99 KdPnRzSk
  XF/Paix.A...............[...............] 12/98 FpMhPnSmSt
  XF/Sic.A................[...............]  4/99 KbMhPnShXc
  XM/Compat.A.............[...............] 12/98 AaEwIcZb
  XM/Extras.A.............[...............]  7/98 EwIcKbMlSmZb
  XM/Laroux.A.............[...............]  2/97 AaAmAsCrCsEkEwFpIcJdJmJrKb
                                                  MlPbSmTdZb
  XM/Laroux.CF............[...............]  6/99 KbOz
  XM/Laroux.DX............[...............] 10/99 KbShZb
  XM/Laroux.E.............[...............] 10/97 KbPnZb
  XM/Laroux.HO............[...............] 12/99 KbKd
  XM/Laroux.IC............[...............]  7/99 PnPt
  XM/Laroux.JO............[...............]  1/00 StTc
  Yankee_Doodle.2881.A....[Yankee.2C.A....]  9/93 EkEwSm
 ============================================================================
  Total for the WildList: 182 

 ============================================================================
                            Supplemental List
 ============================================================================
  As was noted at the start of the main list, this list is not technically
  part of "The WildList", as originally defined. By design, the WildList
  is a list of viruses verified as being in the wild by a minimum of two
  WildList participants. The viruses listed below do not currently meet
  that criteria.

  This additional list includes viruses reported by a single participant
  and are often either moving onto the main list, or dropping off of it.

  Please note especially that this list also tends to be more of a
  regional reporting mechanism. For example, a virus is often reported
  as very common by one regional participant, but is found nowhere else
  in the world.

  Viruses marked with a minus sign (-) dropped from the main list this
  month. Viruses marked with a plus sign (+) are new to the supplemental
  list this month.

                                            List  Reported
  Name of Virus           [ Alias(es)     ] Date  by:
 ============================================================================
 +Badass.Worm.............[Naughty_Donkey.] 11/99 Sh
  Barrotes.1310.A.........[Barrotos.......]  1/99 Fp
  Bleah.C.................[...............]  3/98 Fp
  Bye.....................[ByeBye.........]  1/99 Ls
  Chimp.A.................[...............] 11/99 Ew
  CLL.947.................[...............]  4/99 Ak
  Clonewar.cmp.923........[...............] 12/99 Sh
  Crazy_Boot..............[...............]  5/95 Sb
  Cruel.A.................[...............]  2/98 Rz
  DelCMOS.B...............[Int7F-E9, Feint]  1/99 Jm
  DelWin.mp.1759.A........[Goblin.1759....]  6/95 Ti
  Dir-II.A................[Creeping Death.]  7/93 Ws
  DNA.1206................[...............]  8/99 St
  Dodgy...................[...............] 10/97 Cr
 -Flip.mp.2153.A..........[Omicron........]  7/93 Fp
  Frodo.4096.A............[4096...........]  7/93 Ew
  Ghost_II.792............[...............]  9/99 Sh
  Helloween.1376.A........[1376...........]  7/93 Ws
  Helloween.1839.A........[...............]  9/99 Kd
  HLLP.5850.D.............[Weed...........]  7/99 Fh
  HLLP.7776...............[...............] 11/99 Sh
  HLLP.Toadie.9100........[...............] 12/99 Pn
 +HLLW.DMSetup............[...............] 12/99 Sh
  Invader.2164............[TPE 1.4........]  9/99 Sh
  J&M.B...................[...............]  2/99 Mt
  Jerusalem.1364.A........[Mummy.1364.....]  9/99 Sh
  Kampana.mp.A............[AntiTel........]  7/93 Jd
  Kiev.1942...............[KVS.1942.......]  2/99 Ak
  Leandro.................[TimeWarp.......]  9/99 Kd
  Little_Red.1465.A.......[...............] 10/99 Sh
 +Lokky.336...............[LadyJ..........]  2/00 Sh
  Maltese_Amoeba.2365.....[Grain of Sand..]  7/93 Ws
  Neuroquila.mp.4544.A....[Havoc, Wedding.]  1/99 Ws
  Nightfall.4518..........[N8Fal..........]  2/96 Pb
  NRLG.700.A..............[...............]  1/00 Jh
  O97M/HalfCross.C........[...............] 12/99 Rz
  O97M/Hopper.R...........[...............]  1/00 As
  O97M/Tristate.A.........[...............]  5/99 Sr
  O97M/Tristate.AA........[...............]  6/99 Oz
  O97M/Tristate.AB........[...............]  7/99 Cr
  O97M/Tristate.B.........[...............] 11/99 Fh
  O97M/Tristate.BJ........[...............] 12/99 Ae
  O97M/Tristate.BR........[...............] 11/99 Sh
  O97M/Tristate.BU........[...............]  1/00 Rz
  O97M/Tristate.D.........[...............]  4/99 Pn
  O97M/Tristate.F.........[...............]  4/99 Jd
  O97M/Tristate.Y.........[...............]  6/99 Oz
  Persefone...............[Pers...........]  9/99 Ra
  Pojer.1919..............[Brain-1919.....] 10/97 Pb
  Pojer.4028..............[Brain-4028.....]  2/98 Pb
  Quandary................[Parity_Boot.Enc]  3/96 Ak
  Quox.A..................[Stealth 2......]  9/99 Kd
  RP.A....................[Rhubarb, PR.b..]  2/97 Cr
  Stoned.W-Boot...........[Wonka..........] 12/93 Ws
  Tanpro.524..............[...............]  4/99 Ak
  TMC_Level-42............[...............]  2/99 Mt
  Unashamed.B.............[...............] 10/95 Jr
  Urkel...................[Nwait..........]  1/99 Ws
  V-Sign..................[Cansu, Sigalit.]  7/93 Pb
 +VBS/Bhong.worm..........[...............]  2/00 Pn
  VBS/BubbleBoy.B.........[VBS/BubbleBoy_2] 12/99 Jh
 +VBS/Fool................[...............]  2/00 Pn
  VBS/Happy...............[...............] 10/99 Sh
  VBS/Tune.A..............[...............]  1/00 Jh
  VrapExe.3730............[XRF.3730, 3730.]  3/98 Fp
  W32/Badby...............[...............]  9/99 Pn
  W32/Beast.B.............[(W97M, W32)....] 10/99 Sh
  W32/Bolzano.3223........[Bolzano.L......]  1/00 Pb
  W32/Crypto..............[...............]  1/00 Jh
 +W32/HLLP.Backdoor-Yai...[...............]  1/00 Aa
  W32/HLLP.DeTroie.A......[W32/Cheval.TCV.] 11/98 Fp
  W32/Kriz.3863.A.........[...............]  9/99 Pn
  W32/Kriz.4050...........[...............] 12/99 Pn
  W32/Kriz.4092...........[...............] 12/99 Pn
  W32/Maya................[W32/Maya.4153..]  5/99 Gb
  W95/Anxiety.1358........[Poppy..........] 11/97 Fp
  W95/Anxiety.1823........[W95/Anxiety.B..]  4/98 Fp
  W95/CIH.1024............[...............]  3/99 Jm
  W95/HPS.5124............[WIN95/HPS......] 11/98 Fp
  W95/K32.3030............[W95/Hazlo......]  5/99 Sb
  W95/Lizard.2381.........[...............] 11/99 Sh
  W95/Lord................[...............]  6/99 Xc
 +W95/Lovesong.998........[...............]  2/00 Sm
  W95/MiniR3.431..........[W32/Gift.worm.b] 12/99 Sh
  W95/Padania.............[...............]  2/00 As
  W95/Spaces.1245.........[...............]  5/99 Mh
  W95/Tip.2475............[W95/Tip.A......] 12/99 Cr
  W97M/Antimarc.A.........[...............] 11/99 As
  W97M/Appder.Q...........[...............]  1/00 As
  W97M/Appder.W...........[...............]  9/99 Ak
  W97M/Arbeit.A...........[...............]  9/99 Pn
  W97M/Argh.B.............[...............]  5/99 Mh
  W97M/Armagidon.A........[...............]  1/00 Aa
  W97M/Assilem.A..........[...............]  1/00 As
  W97M/Astia.A............[...............]  1/00 Sm
  W97M/Astia.B............[...............]  6/99 Pn
  W97M/Astia.C............[...............]  1/00 As
  W97M/Astia.L............[W97M/Mamm.A....]  6/99 Pn
  W97M/Astia.Y............[W97M/BMH.......] 12/99 Ae
  W97M/Backhand.A.........[...............]  1/00 Jh
 +W97M/Bribagi.A..........[...............]  2/00 Sm
  W97M/Caligula.A.........[...............]  4/99 Fp
  W97M/Chack.AL...........[W97M/Jiuster.A.] 12/99 Jm
  W97M/Chack.B............[...............] 11/99 As
  W97M/Chack.BD...........[...............]  1/00 Rz
  W97M/Chantal.B..........[...............]  1/00 Aa
  W97M/Class.A............[...............] 12/99 Jh
  W97M/Class.AY...........[...............] 10/99 Sh
  W97M/Class.BZ...........[...............]  8/99 St
  W97M/Class.CN...........[...............]  4/99 Ic
  W97M/Class.CO...........[...............] 10/99 Sh
  W97M/Class.CP...........[W97M/BlackviruZ]  7/99 Jm
  W97M/Class.DQ...........[W97M/Trigram...]  7/99 St
  W97M/Class.DZ...........[W97M/Claet.A...] 12/99 Rz
  W97M/Class.EE...........[W97M/Mixture.A.] 12/99 Rz
  W97M/Class.EH...........[...............]  1/00 Rz
  W97M/Class.EI...........[...............]  1/00 Rz
  W97M/ColdApe.H..........[...............]  6/99 Oz
  W97M/ColdApe.I..........[...............]  6/99 Oz
  W97M/ColdApe.O..........[...............] 10/99 St
  W97M/Ded.C..............[...............]  7/99 Rz
  W97M/Disco.D............[...............]  4/99 Kb
  W97M/Disco.E............[...............]  4/99 Kb
  W97M/DVD.A..............[...............]  4/99 Pn
 +W97M/Eight941.D.........[...............]  2/00 Pn
  W97M/Ephan.A............[...............]  8/99 St
  W97M/Ephan.B............[...............]  1/00 Rz
  W97M/Ethan.AB...........[...............]  9/99 St
  W97M/Ethan.AC...........[...............] 11/99 Tc
 +W97M/Ethan.AK...........[...............]  2/00 As
  W97M/Ethan.AL...........[...............]  9/99 St
 +W97M/Ethan.BA...........[...............]  2/00 St
  W97M/Ethan.BB...........[...............] 11/99 So
 +W97M/Ethan.BE...........[...............]  2/00 Jm
 +W97M/Ethan.BI...........[...............]  2/00 Jm
  W97M/Ethan.BN...........[...............]  1/00 Rz
 +W97M/Ethan.BR...........[...............]  2/00 As
 +W97M/Ethan.BW...........[...............]  2/00 As
  W97M/Ethan.D............[...............]  6/99 Pn
  W97M/Ethan.G............[...............]  6/99 Oz
  W97M/Ethan.J............[...............]  7/99 Cr
  W97M/Ethan.L............[...............]  6/99 Oz
 +W97M/Ethan.P............[...............]  2/00 As
  W97M/Ethan.U............[...............] 10/99 As
 +W97M/Evolution.B........[...............]  2/00 Pn
  W97M/FF.A...............[W97M/Lys.H.....] 11/99 As
  W97M/Footer.E...........[...............]  6/99 St
  W97M/Footer.G...........[...............]  8/99 St
  W97M/Footer.N...........[...............]  1/00 Rz
  W97M/Gamlet.A...........[...............]  9/99 St
  W97M/Groov.D............[...............]  7/99 St
  W97M/Groov.I............[...............]  6/99 Oz
  W97M/Hope.A.............[...............]  2/00 As
  W97M/Idea.A.............[...............]  9/99 Jm
  W97M/IIS.D..............[...............]  8/99 Ic
 +W97M/IIS.L..............[...............]  2/00 As
  W97M/Iseng.A............[...............]  1/00 As
  W97M/JB.................[W97M/JB.A......] 10/99 Pn
  W97M/Locale.C...........[...............] 11/99 St
  W97M/Lucia.A-mm.........[...............]  1/00 Kb
  W97M/Lulung.F...........[...............]  1/00 As
  W97M/Marker.A...........[...............] 12/99 Jh
 +W97M/Marker.AF..........[...............]  2/00 St
  W97M/Marker.AL..........[...............]  9/99 Rz
  W97M/Marker.AN..........[...............] 11/99 St
  W97M/Marker.AV..........[...............] 11/99 St
  W97M/Marker.AW..........[...............] 11/99 St
  W97M/Marker.AX..........[...............] 11/99 St
 +W97M/Marker.AZ..........[...............]  2/00 As
  W97M/Marker.BA..........[...............] 12/99 Sh
  W97M/Marker.BG..........[...............]  1/00 St
 +W97M/Marker.BJ..........[...............]  2/00 St
 +W97M/Marker.BN..........[...............]  2/00 Pn
  W97M/Marker.BP..........[...............]  1/00 Rz
  W97M/Marker.BQ..........[...............]  1/00 Rz
 +W97M/Marker.BU..........[...............]  2/00 St
 +W97M/Marker.CC..........[...............]  2/00 Rz
 +W97M/Marker.CD..........[...............]  2/00 Rz
 +W97M/Marker.N...........[...............]  2/00 As
  W97M/Marker.W...........[...............] 11/99 Tc
  W97M/MDMA.D.............[...............]  1/99 Jm
 +W97M/Melissa.AD-mm......[...............]  2/00 Pn
 +W97M/Melissa.AK-mm......[...............]  2/00 As
  W97M/Melissa.B-mm.......[...............]  6/99 Oz
  W97M/Melissa.V-mm.......[...............] 10/99 Pn
 +W97M/Model.A............[...............]  2/00 As
 +W97M/Myna.C.............[...............]  2/00 Pn
 +W97M/Myna.D.............[...............]  2/00 Jh
  W97M/Nottice.AA.........[W97M/Hark.E....]  7/99 St
  W97M/Nottice.I..........[...............] 11/99 Sh
  W97M/Odious.B...........[...............] 12/99 Kb
  W97M/Opey.A.............[...............]  5/99 Rp
  W97M/Opey.D.............[...............]  4/99 Rp
  W97M/Opey.G.............[...............] 11/99 As
  W97M/Opey.H.............[...............] 10/99 St
 +W97M/Opey.N.............[...............]  2/00 Pn
  W97M/Osm.A..............[...............]  9/99 Ac
  W97M/Ozwer.B............[...............]  9/99 St
 +W97M/Panther.D..........[...............]  2/00 St
 +W97M/PassBox.B..........[...............]  2/00 Pn
  W97M/PassBox.E..........[...............] 12/99 Ae
  W97M/Passbox.I..........[...............]  1/00 As
  W97M/Pri.E..............[...............]  7/99 St
  W97M/Proteced.G.........[...............] 12/99 Oz
 +W97M/RV.A...............[...............]  2/00 St
  W97M/Sad.A..............[...............]  4/99 Pn
 +W97M/Seqnum.A...........[...............]  2/00 Pn
  W97M/Shiver.C...........[...............]  3/99 Sm
  W97M/Solafish.A.........[...............]  1/00 As
  W97M/Story.B............[...............]  9/99 Rz
 +W97M/Stun.A.............[...............]  2/00 As
  W97M/Surround.A.........[...............]  1/00 St
  W97M/Temple.A...........[...............]  1/00 As
  W97M/Tie.T..............[...............]  5/99 Aa
  W97M/Titch.A............[...............]  1/00 As
  W97M/TWNO.AC............[...............]  6/98 Fp
  W97M/Uka.D..............[...............]  9/99 Jm
 +W97M/Vale.A-mm..........[...............]  2/00 Pn
  W97M/Venus.A-mm.........[...............] 12/99 Rz
 +W97M/Visor.A............[...............]  2/00 Cr
  W97M/VMPCK1.BG..........[...............] 12/99 Ae
 +W97M/VMPCK1.DD..........[...............]  2/00 As
  W97M/Vp.A...............[...............]  7/99 Jm
  W97M/Wazzu.A............[...............]  5/97 Cs
  Win/Tentacle.1944.......[...............]  5/96 Rz
  WM/Cap.AT...............[...............]  7/99 St
  WM/Concept.BB...........[...............]  9/99 Sh
  WM/DZT.A................[...............]  2/99 Ak
  WM/Helper.B.............[...............]  7/97 Xc
  WM/Imposter.E...........[...............]  4/99 Kb
  WM/Inexist.A:Fr.........[WM/Warning.....]  2/99 Fp
  WM/Johnny.B.............[...............] 12/98 Jm
  WM/Mental.A.............[...............] 12/99 Kb
  WM/Muck.R...............[...............]  1/00 Kb
  WM/Niceday.N............[...............] 12/98 Kb
  WM/Pesan.B..............[...............] 10/97 Jd
  WM/ShowOff.C............[...............]  9/99 Sh
  WM/Stall.A..............[...............] 11/98 Fp
  WM/Stall.C..............[...............] 12/99 Ae
  WM/Switcher.A...........[...............] 12/97 Ew
  WM/Swlabs.B.............[...............] 10/97 Jm
  WM/Swlabs.G.............[...............] 12/97 Fp
  WM/Temple.R.............[...............]  7/98 Rz
  WM/TWNO.A:Tw............[Taiwan_No. 1...] 12/96 Ic
  WM/TWNO.AC..............[...............]  8/98 Fp
  WM/Veneno.D:Es..........[WM/Cap.GV......] 10/98 Rz
  WM/Wazzu.DV.............[...............]  4/98 Fp
  WM/Wazzu.EC.............[...............]  4/98 Fp
  WM/Wazzu.X..............[...............]  2/99 Kb
  X97M/Beliers.A..........[...............] 12/99 Kb
  X97M/Button.A...........[...............] 11/99 St
  X97M/Extras.M...........[...............]  1/00 As
  X97M/Friend.B...........[...............]  7/99 St
 +X97M/Hongo.C............[...............]  2/00 Pn
  X97M/Laroux.AA..........[...............]  6/99 Oz
  X97M/Laroux.AN..........[...............]  8/99 St
  X97M/Laroux.CG..........[...............] 11/98 Xc
  X97M/Laroux.D...........[...............] 12/98 Cr
  X97M/Laroux.DI..........[...............]  7/98 Rz
  X97M/Laroux.DK..........[...............]  6/99 Xc
  X97M/Laroux.EE..........[...............]  3/99 Cb
  X97M/Laroux.EL..........[X97M/Massage...]  7/99 Aa
  X97M/Laroux.FE..........[...............] 10/99 St
  X97M/Laroux.GJ..........[...............]  4/99 Kb
  X97M/Laroux.GV..........[...............]  5/99 Kb
  X97M/Laroux.GW..........[...............]  6/99 St
  X97M/Laroux.HZ..........[...............]  7/99 St
  X97M/Laroux.IC..........[...............] 12/99 Kd
  X97M/Laroux.JH..........[...............]  8/99 St
  X97M/Laroux.JM..........[...............]  9/99 St
 +X97M/Laroux.JY..........[...............]  2/00 St
  X97M/Laroux.KS..........[X97M/Laroux.CS.]  9/99 Sh
  X97M/Laroux.LN..........[...............]  1/00 St
 +X97M/Laroux.LX..........[...............]  2/00 St
  X97M/Manalo.D...........[...............] 10/99 Pn
  X97M/PTH.F..............[...............]  2/00 As
  X97M/Smack.A............[...............]  7/99 St
  X97M/VCX.B..............[...............]  9/99 St
  X97M/VCX.G..............[...............]  9/99 Rz
  XM/Extras.B.............[...............]  9/98 Ew
  XM/Laroux.AJ............[...............] 11/99 Tc
 -XM/Laroux.AN............[...............]  9/99 Kd
  XM/Laroux.D.............[...............]  9/97 Jd
 -XM/Laroux.DO............[...............] 10/99 Kb
  XM/Laroux.EO............[...............]  4/99 Jd
  XM/Laroux.FC............[...............] 12/98 Ew
  XM/Laroux.JM............[...............]  9/99 Pt
  XM/Laroux.JP............[...............] 10/99 Sh
  XM/Laroux.KS............[XM/Laroux.CS...]  9/99 Sh
  XM/Manalo.E.............[...............] 11/99 St
  XM/PTH.F................[...............] 11/99 Sb
  XM/VCX.A................[...............]  1/99 Sm
 ============================================================================
  Total for both lists: 474

 ============================================================================
                                  Other
 ============================================================================
  The WildList is a list of viruses that have been reported as spreading
  In the Wild. Sometimes WLO receives reports of programs which, according
  to the various reporters, may not fit strictly into the viral category,
  but which have been brought to their attention by concerned users.  The
  following programs fall into that category

                                            List  Reported
  Name of Virus           [ Alias(es)     ] Date  by:
 ============================================================================
  BackOrifice_2000........[...............] 11/99 EkPnSkStXc
  DUNpws.W.Trojan.........[Kuang.C, Winskc]  9/99 AkTc
  ICQ2000.RAS.Trojan......[ICQ2K..........] 11/99 Sh
  MAC/AutoStart.Worm......[...............] 11/99 GbEwSm
  Stealth.Backdoor........[...............] 10/99 Ek
  SubSeven.Backdoor.......[Backdoor-G.....]  7/99 AcAsJhPnSkSoTc

 ============================================================================

 ============================================================================
                      WildList Sorted by Frequency
 ============================================================================
   This is not a prevalence table. It does not show how common each virus
   is. Rather it is the WildList sorted by the number of participants that
   report each virus.

   This section gives the names, types, and aliases of the most frequently
   reported viruses. These viruses have been reported by at least 15
   WildList participants. They are sorted with the most frequently
   reported first.

  Freq  Name                       Type   Aliases
 ============================================================================
  43  | W32/Ska.A............... | File  |HAPPY99
  39  | W95/CIH.1003............ | File  |Spacefiller
  37  | W97M/Melissa.A-mm....... | Macro |Maillissa
  36  | W97M/Ethan.A............ | Macro |
  36  | WM/CAP.A................ | Macro |
  32  | W32/ExploreZip.......... | File  |Worm.ExploreZip
  30  | W97M/Marker.C........... | Macro |W97M/Spooky.C
  28  | W32/PrettyPark.A........ | File  |
  27  | W97M/Class.D............ | Macro |
  26  | O97M/Tristate.C......... | Macro |O97/Crown.B
  23  | WM/Concept.A............ | Macro |Prank Macro
  20  | AntiCMOS.A.............. | Boot  |Lenart
  19  | X97M/Laroux.A........... | Macro |
  18  | AntiEXE.A............... | Boot  |D3
  18  | Form.A.................. | Boot  |Form 18
  18  | W32/ExploreZip.pak...... | File  |
  18  | W97M/Thus.A............. | Macro |W97M/Thursday.A
  18  | XM/Laroux.A............. | Macro |
  17  | VBS/Freelink............ | VBS   |
  15  | One_Half.mp.3544.A...... | Multi |Dis, Free Love
 ============================================================================

  Release notes for the February WildList:

  WLO welcomes Ray Glath of Tavisco Ltd.  Ray will report virus incidents
  verified by Tavisco in the USA.

  WLO also welcomes Tjark Auerbach of H+BEDV GmbH.  Tjark will report
  virus incidents verified by H+BEDV GmbH in Germany.


  Note that all  worms previously listed in the Other section have moved
  either to the supplemental or top list, accordingly.  Original
  reported-on dates have been preserved.

  Upon further examination of the submitted sample, the following
  viruse has been renamed:
  
        W97M/Trigram.A   ->  W97M/Class.DQ

  The following viruses -- originally on the supplemental list -- fell
  completely from the February 2000 WildList:

        Getto.2000                      W97M/Jedi.I
        HLLP.5864                       W97M/Tooth.A
        Stealth_Boot.B                  X97M/Laroux.AL
        W97M/Argh.A                     XM/UEDASAN.A
        W97M/Candle.A                   XM/UEDASAN.B
        W97M/Class.DC                   XM/UEDASAN.C

 ============================================================================
  The WildList is collated by board members of WildList Organization
  International.

  A complete archive of WildLists is available at the WildList
  Organization web site (http://www.wildlist.org/WildList/wildlist.html)

  The WildList and all material contained on this web site is the
  copyright of The Wildlist Organization International unless otherwise
  stated in the material itself. The WildList Organization International
  permits quotation and citation of the WildList either in whole or in
  part providing WildList Organization is identified as the source of
  the material. The WildList may not be altered or misrepresented in any
  way and only fair usage is permitted. Beyond these limited rights all
  rights are reserved.

  The WildList Organization International and WildList reporters make a
  diligent effort to ensure the accuracy of the data presented in the
  WildList. However, The WildList Organization makes no warranty against
  the accuracy of the information presented herein. The WildList
  Organization and WildList reporters cannot be held liable for any
  loss, or damages incurred from the use of WildList information.

  Press, print media & other queries about WildList Organization
  International should be sent to Sarah Gordon, WildList Organization's
  primary media contact, at [email protected].
 ============================================================================
   WildList Vol.A02    -    (c) 1993-2000 Joe Wells    -  [email protected]
 ============================================================================
  -----BEGIN PGP PUBLIC KEY BLOCK-----
  Version: 2.7

  mQCNAy+wAnYAAAEEAO2alE3YclXZAxkqrSVXkhAuuOsx6NnVfUdKMghYtrBabFuJ
  +zKiIsahmjeakA2J101KZOHtKMhb5iqLG0oCbRyuBFLtuMhJrjk+L9VRCoxoDB/4
  XwFevOGyxRHYfancrIydlMUooe7TZJqbGhhQEROWYm8v6RvkPFtsMpyD+Lb1AAUR
  tCNKb2UgV2VsbHMgPGMxandlbGxzQHdhdHNvbi5pYm0uY29tPg==
  =aKXf
  -----END PGP PUBLIC KEY BLOCK-----
 ============================================================================

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.