Path: utzoo!attcan!uunet!aplcen!samsung!think!ames!ncar!tank!eecae!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: munnari!stcns3.stc.oz.AU!dave@uunet.UU.NET (Dave Horsfall)
Newsgroups: comp.virus
Subject: Re: Ohio vs. Den Zuk (PC)
Message-ID: <0004.8911221545.AA12086@hl.sei.cmu.edu>
Date: 22 Nov 89 00:36:26 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Lines: 26
Approved: krvw@sei.cmu.edu

frisk@rhi.hi.is (Fridrik Skulason) writes:

| As I have mentioned before, the "Ohio" virus contains the signature of
| the "Den Zuk", but it also contains some interesting text strings:
|
|                       V  I  R  U  S
|                            b y
|                        The Hackers
|                        Y C 1 E R P
|                       D E N Z U K O
|                       Bandung 40254
|                         Indonesia
|
|                 (C) 1988, The Hackers Team....
|
| Remember that Den Zuk puts the volume label Y.C.1.E.R.P on
| Brain-infected diskettes, when it removes the infection.

Just a long shot, but "YC1ERP" happens to be a legitimate Amateur
Radio (ham radio) callsign allocated to Indonesia...

I don't have access to an International Callbook just now.
Perhaps someone would like to check this out!

Dave Horsfall (VK2KFU),  Alcatel STC Australia,  dave@stcns3.stc.oz.AU
dave%stcns3.stc.oz.AU@uunet.UU.NET,  ...munnari!stcns3.stc.oz.AU!dave