Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: ddavidso@mqccsunc.mqcc.mq.oz.au (Dean Davidson)
Newsgroups: comp.virus
Subject: 1022 (Fellowship) virus (PC)
Message-ID: <0003.9007251734.AA25443@ubu.cert.sei.cmu.edu>
Date: 25 Jul 90 13:24:00 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 15
Approved: krvw@sei.cmu.edu

RZOTTO@DKNKURZ1.BITNET (Otto Stolz) writes:
>> Only infects .EXE files, adding 1022 bytes to them
>
>Is this figure accurate?
>
>I think that EXE files can only grow by multiples of 16.
>Am I mistaken?

I just checked - sometimes it adds 1021 bytes, sometimes 1022 but
definitely not 1024 if it added in multiples of 16

BTW I sent Frisk a copy of the 1022 virus.  He reported to me that it
is identical to a virus he knows called the "fellowship"

Dean