Path: utzoo!utgpu!news-server.csri.toronto.edu!mailrus!uunet!philmtl!philabs!briar!rfc From: rfc@briar.Philips.Com (Robert Casey) Newsgroups: comp.sys.ibm.pc Subject: virus from Japan Message-ID: <94376@philabs.Philips.Com> Date: 6 May 90 05:12:08 GMT Sender: news@philabs.Philips.Com Lines: 44 E radio packet: Msg# TSF Size #Rd Date/Time MsgID From To 25681 BF 3274 0 0503/1054 13249_NA2B N2IXL VIRUS@NYNET () Sb: Virus in Japanese Software ------------------------------ RELAYED BY N2IXL, FROM BITNET (VIRUS-L DIGEST): From: Yoshio Oyanagi Subject: Virus found in Japanese game software (Sharp) VIRUS FOUND IN A JAPANESE GAME SOFTWARE ON THE MARKET Yoshio Oyanagi University of Tsukuba, Japan Newspapers reported on April 24 that a virus was found in a simulation game software "FAR SIDE MOON" (9500 yen) for Sharp personal computer X68000. It has been sold by Artdink Inc. since April 13 in Japan. The virus was detected by Computer Virus Institute (Takao Yamamoto, director) of Federation of Japanese Computer Clubs. According to Yamamoto, this virus is programmed so that it keeps inactive until July and after that data on floppy or in the computer will automatically be erased whenever one switches on the computer. So far 3000 sets have been sold, among which half are contaminated. It is conjectured that the computers in Artdink Inc. are invaded by the virus while developping the game software. Today (May 2) Asahi Shinbun (one of the major daily newspaper in Japan) disclosed that it succeeded in making contact with one of the virus makers. According to the report, the maker is a high school boy of age 17, who lives in Kagawa prefecture. Forty people collaborated in making the virus and got several tens of thousand yen (several hundred dollars) for each from the client, who ordered through PC network for hackers. The virus program was completed in three months and distributed secretly since last September. Federation of Japanese Computer Clubs told that there have been two viruses (viri?) for X68000, named "Namba I" and "Namba II". "Namba I" becomes active on July 4 this year and it deletes data on the computer or foppy disks. If the computer is contaminated with both "Namba I" and "Namba II", some X68000 do not accept any floppy after 0:00 May 2. The federation has developped a vaccine and distributing it among PC shops and users. If, however, a computer is contaminated with both viruses, it does not even accept the floppy disk of the vaccine. In this case, user should bring the computer to the maker and ask to change the parts. 1332z, 757 msgs, #25693 last @KD6TH-4 MailBox>