From:	MERC::"uunet!ax.asc-yf.wpafb.af.mil!nielandt" 11-JAN-1993 13:20:32.71
To:	everhart, feb@tntech.edu, gaudette@decus.org, west@decus.org
CC:	
Subj:	(Forwarded) VIRUS found in file ypcbr101.zip on simtel archi

FYI --- Ted


The attached note was posted to comp.binaries.ibm.pc.archives.  FYI,
the offending file has been removed from Simtel20.  However, if you
downloaded it while it was on-line, please read this note carefully
and take appropriate actions.

Cheers,

Ken

Kenneth R. van Wyk
Moderator VIRUS-L/comp.virus
Technical Coordinator, Computer Emergency Response Team
Software Engineering Institute
Carnegie Mellon University
krvw@CERT.ORG       (work)
ken@THANG.PGH.PA.US (home)
(412) 268-7090  (CERT 24 hour hotline)

------- Forwarded Message

Newsgroups: comp.binaries.ibm.pc.archives
From: johnm@bowen.cc.utas.edu.au (John Miezitis)
Subject: #### VIRUS found in file ypcbr101.zip on simtel archive.
Organization: University of Tasmania, Australia.
Date: Mon, 11 Jan 1993 00:32:42 GMT

The zip archive ypcbr101.zip was downloaded from Simtel-20 and the oak
mirror on archie.au and both files were found to contain the 1800
variant of Dark Avenger in the executable yapcbr.exe. The file was
unzipped and then tested using F-PROT206a which was able to remove the
virus.

Adminstrators at both these sites will be informed as will the author
of the program.

- --
_______________________________________________________________________________
John B Miezitis, University of Tasmania, Computing Centre. Ph +61 02 202811
email: John.Miezitis@cc.utas.edu.au | Belgium man Belgium!!! - Z. Beeblebrox
_______________________________________________________________________________

------- End of Forwarded Message