Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!swrinde!zaphod.mps.ohio-state.edu!mips!pacbell.com!iggy.GW.Vitalink.COM!widener!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: JIMS@SERVAX.BITNET (Jim Schenk)
Newsgroups: comp.virus
Subject: Yankee Doodle virus (PC)
Message-ID: <0017.9104161744.AA06733@ubu.cert.sei.cmu.edu>
Date: 12 Apr 91 09:39:00 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 27
Approved: krvw@sei.cmu.edu

Hello,

Does anyone out there have information on the Yankee Doodle virus?  F-PROT
1.14 reports some files infected with "Yankee (TP-44)".  I would like to
know:

   1.  What does the TP-44 mean?

   2.  How does it spread?  I know it is memory resident, but once
in memory, does it attack .EXE and .COM files when they are executed, or
search the disk and randomly attach itself to executable files?

   3.  What are the symptoms?  (Note: this particular strain does NOT play
Yankee Doodle on the speaker when I set the system clock to 5:00, nor when
I reboot, as some Y.D. strains are reported to do.)

F-PROT has been quite effective in getting rid of the virus, but I would
like to know more about it.

Thanks,

Jim Schenk
University Computer Services
Florida International University

Bitnet:         jims@servax
Internet:       jims@servax.fiu.edu