User`s guide

VIRUS BULLETIN ©1991 Virus Bulletin Ltd, 21 The Quadrant, Abingdon Science Park, Oxon, OX14 3YS, England. Tel [phone].
/90/$0.00+2.50 This bulletin is available only to qualified subscribers. No part of this publication may be reproduced, stored in a retrieval system, or transmitted
by any form or by any means, electronic, magnetic, optical or photocopying, without the prior written permission of the publishers.
VIRUS BULLETINPage 28 August 1991
VIRUS BULLETIN
Subscription price for 1 year (12 issues) including first-class/airmail delivery:
UK £195, Europe £225, International £245 (US$395)
Editorial enquiries, subscription enquiries, orders and payments:
Virus Bulletin Ltd, 21 The Quadrant, Abingdon Science Park, Abingdon,
OX14 3YS, England
Tel [phone], International Tel [phone]
Fax [phone], International Fax [phone]
US subscriptions only:
June Jordan, Virus Bulletin, 590 Danbury Road, Ridgefield, CT 06877, USA
Tel [phone], Fax [phone]
No responsibility is assumed by the Publisher for any injury and/or damage to persons or property as a matter of
products liability, negligence or otherwise, or from any use or operation of any methods, products, instructions or ideas
contained in the material herein.
This publication has been registered with the Copyright Clearance Centre Ltd. Consent is given for copying of articles
for personal or internal use, or for personal use of specific clients. The consent is given on the condition that the copier
pays through the Centre the per-copy fee stated in the code on each page.
END-NOTES & NEWS
(IBM VIRUSES (UPDATE)
Spanz - CN: Infects files in current directory and on PATH (first file found when run). Six months after all suitable files have been infected, the volume
label changed to ‘INFECTED!’ if run in first second of any minute. Virus ends with text ‘* SPANZ *’. Considers files infected if seconds field set to
0,16,32 or 48. Infective length is 639 bytes.
Spanz 8D9C 7D03 0683 BC76 0300 7415 8B84 7403
Witcode - ER: A 966 byte virus awaiting analysis.
Witcode 83FB 0473 088C C048 8EC0 83C3 1026 8B77
HLD Publishing Company of Los Angeles, USA, is advertising computer virus code for sale. The company’s advertisement in the Microtimes
computer magazine offers a fully-functioning Jerusalem virus for US$29.99. Meanwhile, Michigan based publishing house Abacus has released
Computer Viruses and Data Security by Ralf Burger despite written warnings that the publication of source code in Burger’s previous book
Computer Viruses: A High Tech Disease is directly responsible for the appearance of numerous computer viruses. Abacus also distributes
Burger’s Virus Secure for Windows software. Computer Viruses and Data Security was released in the US on July 12th. VB intends to review the
book in September. Information from Abacus, 5370 52nd Street SE, Grand Rapids, MI 49512, USA. Tel [phone], Fax [phone].
The UK IT Security Evaluation & Certification Scheme released UK Certified Product List issue 1.1 (UKSP 06) on June 1st 1991. Three anti-
virus products have now been certified to UK Level 1: Eliminator (v1.17) from PC Security Ltd., Norton Anti-Virus 1.0.0 from Symantec UK
Ltd., and Vaccine version 4.08 from Sophos Ltd. Information from Rm 2/0609, CESG, Fiddlers Green Lane, Cheltenham GL52 5AJ.
Virus Bulletin Conference, Hotel de France, Jersey, September 12-13th 1991. Contact Petra Duffield. Tel [phone].
IBM UK is running two one-day Virus ‘Master Classes’. The dates are September 16th (Manchester) and September 18th (London). Informa-
tion from IBM Customer Education. Tel [phone].
EICAR (European Institute for Computer Anti-Virus Research) is holding a two day Virus Seminar in Brussels, Belgium, September 24-25th.
Tel Guenther Musstopf [phone] or Dirk Giroulle [phone].
Sophos Ltd. is holding a one day seminar on Anti-Virus Strategy for Software Producers in London, November 19th 1991. Tel [phone].