Path: utzoo!utgpu!utstat!jarvis.csri.toronto.edu!rutgers!tut.cis.ohio-state.edu!gem.mps.ohio-state.edu!uwm.edu!ux1.cso.uiuc.edu!tank!eecae!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: MARKZ@UIUCVMD.BITNET (Mark S. Zinzow)
Newsgroups: comp.virus
Subject: Ping Pong virus (PC) at UIUC
Message-ID: <0011.8911101233.AA16030@ge.sei.cmu.edu>
Date: 9 Nov 89 19:56:05 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Lines: 58
Approved: krvw@sei.cmu.edu

This is a slightly edited copy of our local warning.

Today (Thursday, November 9, 1989) the Ping Pong B virus was found
on an XT in Newmark hall here at the University of Illinois at
Urbana-Champaign.  This is the third virus to infect IBM PC's here.
The previous PC viruses were Brain and Jerusalem.

This virus is a boot sector infector and also goes by the names
Bouncing Ball, Italian, VERA CRUZ, and VERA CRUZ B.

Please use scanv48.arc (anonymous ftp'able from uxe.cso.uiuc.edu
in the directory pc/virus) to search systems for infection, and
unvir6.arc (from the same place) to remove the virus from infected
systems.  VIRUSCAN, the name for the package of programs in
scanv48.arc, is a shareware product.  Just this week CSO has
purchased a site license for the U. of I. so you may ignore the
request for a $25 registration if you are using this software here.

SCAN.EXE (in scanv48.arc) will report two versions of Ping Pong when
it is found.  This is a bug, the B version also triggers the message
for the non-B version.  So far, we think we only have one version
of this virus floating around.

The program IMMUNE by Yuval Ratavy in unvir6.arc will make your
system immune to the Ping Pong, Jerusalem, and several other
viruses.

Please call me (244-1289 or email markz@vmd.cso.uiuc.edu) if you
find a copy of PING PONG as I'm trying to figure out the extent and
locations where this virus has spread.

In the local versions of this announcement, excerpts from the following
VIRUS-L Digests were included:

VIRUS-L Digest            Wednesday, 18 Jan 1989        Volume 2 : Issue 18
 Subject:     Re: The Ping-Pong virus (PC)

VIRUS-L Digest             Thursday, 9 Mar 1989         Volume 2 : Issue 61
Subject:     Re: Bouncing ball virus (PC)

VIRUS-L Digest              Friday, 10 Mar 1989         Volume 2 : Issue 62
Subject:  bouncing ball virus (PC)

VIRUS-L Digest            Wednesday, 10 May 1989       Volume 2 : Issue 112
Subject: Yet more on SYS (PC)

VIRUS-L Digest              Friday, 12 May 1989        Volume 2 : Issue 114
Subject : 1 byte can save us from the Ping Pong virus (PC)

- -------Electronic Mail---------------U.S. Mail---
ARPA: markz@vmd.cso.uiuc.edu         Mark S. Zinzow, Research Programmer
BITNET: MARKZ@UIUCVMD.BITNET         University of Illinois at Urbana-Champaign
CSNET: markz%uiucvmd@uiuc.csnet      Computing Services Office
 "Oh drat these computers, they are  150 Digital Computer Laboratory
   so naughty and complex I could    1304 West Springfield Ave.
  just pinch them!"  Marvin Martian  Urbana, IL 61801-2987
USENET/uucp: {uunet,convex,att}!uiucuxc!uiucuxe!zinzow
Phone: (217) 244-1289  Office: CSOB 110 \markz%uiucvmd