Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!unmvax!ncar!tank!eecae!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: CHESS@YKTVMV.BITNET (David.M..Chess)
Newsgroups: comp.virus
Subject: re: Known PC Virus List (PC)
Message-ID: <0001.8911211331.AA14221@ge.sei.cmu.edu>
Date: 20 Nov 89 00:00:00 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Lines: 25
Approved: krvw@sei.cmu.edu

Quite welcome for the format, and thanks for the acknowledgement!
A few small notes/questions:

   - I notice the "Missouri" and "Nichols" viruses aren't
     listed.   Did they turn out not to really exist, or
     to be viruses that are known under some other name?

   - For completeness, you might want to include the 1704-C,
     as well as the 1701, 1704, 1704-B and 1704-format?
     (The 1704-C has the same in-clear section as the
     1704-format, but doesn't have the disk-formatting
     code.)   I know you have a sample!  *8)

   - Suspect you didn't mean to mark "Self-Encryption" for
     the 1168 and 1280 viruses?  They don't do it in the same
     sense that the DataCrime II, the Syslock, or the 17xx
     series do; the only thing that's "encrypted" in the
     1168/1280 is the logo string, and that's just stored
     XORed with hex 55.  That's not the -interesting- kind of
     self-garbling: the kind that makes the invariant part of
     the virus smaller.

Nice list!

DC