Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: p1@arkham.wimsey.bc.ca (Rob Slade)
Newsgroups: comp.virus
Subject: denzuko and semlohe viruses (PC)
Message-ID: <0004.9106061535.AA06556@ubu.cert.sei.cmu.edu>
Date: 4 Jun 91 23:05:14 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 28
Approved: krvw@sei.cmu.edu

davidh@garfield.cs.mun.ca (David Hansen) writes:

> Our visiting Indonesian grad students have brought two viruses to our
> campus (Memorial University), they are called denzuko (which has no
> apparent translation into english) and semlohe, which apparently means

I venture that the denzuko is, in fact, the fairly widely known "Den Zuk"
virus.  If so, then it is a boot sector infector which is a fairly close
"knock off" of the original "Brain" virus.

The boot sector will look very similar to a "Brain" infected disk, with
the difference being that the original text about Brain computer services
has been replaced with "DEN ZUK" and an Indonesian Ham license number.

More details can be found in any reasonably complete virus
characteristics list.

(I do remember that when this was being actively discussed on the net
that two alternative translations for "Den Zuk" were "The Sweet" (or "The
Suger") and "The Knife".  The later may be reasonable in view of the fact
that "Den Zuk" erases the original "Brain" infection.)

=============
Vancouver          p1@arkham.wimsey.bc.ca   | "If you do buy a
Institute for      Robert_Slade@mtsg.sfu.ca |  computer, don't
Research into      (SUZY) INtegrity         |  turn it on."
User               Canada V7K 2G6           | Richards' 2nd Law
Security                                    | of Data Security