Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!sol.ctr.columbia.edu!lll-winken!iggy.GW.Vitalink.COM!widener!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: frisk@rhi.hi.is (Fridrik Skulason)
Newsgroups: comp.virus
Subject: Washburn (Was: Re: TSR Virus Detector (PC))
Message-ID: <0004.9105101443.AA06343@ubu.cert.sei.cmu.edu>
Date: 10 May 91 08:41:32 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 13
Approved: krvw@sei.cmu.edu

RADAI@HUJIVMS.BITNET (Y. Radai) writes:
>V2P1 (better known as the 1260) was distributed publicly, and while it
>is not itself destructive, someone evidently used its disassembly as
>the basis for the Casper virus, which is quite destructive.

The source to Casper is in circulation and it is obviously not based
on a disassembly, but rather the original source of V2P1, which
somebody must have obtained from Washburn.

- -frisk

Fridrik Skulason                 Technical Editor of the Virus Bulletin (UK)
(author of F-PROT)               E-Mail: frisk@rhi.hi.is    Fax: 354-1-28801