Path: utzoo!attcan!uunet!know!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: J2YC@UNB.CA (DBILLINGSLEY)
Newsgroups: comp.virus
Subject: The 1559 Virus (PC)
Message-ID: <0003.9009171151.AA09647@ubu.cert.sei.cmu.edu>
Date: 14 Sep 90 12:21:11 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 22
Approved: krvw@sei.cmu.edu

Last year, I believe, the 1559 virus was sent out over VALERT by
accident. I was wondering if anyone has had any problems because of
it. I have found out that it activates on September 1st of the year
and therefore the damage would only be noticed now.

(This may have been already discussed in full, if so please do not
include this letter:)

Damage noticed by the 1559 Virus:

On exe files, file size is increased roughly by 1559 bytes.  Com files
don't seem to have their file size changed however they also get
infected (As does command.com)

The Virus' incubation period continues past september first, however,
on that date and beyond all sequential text files written (Or any file
written to) will be severely damaged....

SCANV66B was what I used to detect the virus however no safe cure is
out there (Or none that I am aware of)

Derek Billingsley