____________________________________________________________________ THE COMPUTER INCIDENT ADVISORY CAPABILITY CIAC INFORMATION BULLETIN ____________________________________________________________________ June 5, 1989 The Computer Incident Advisory Capability (CIAC) has been helping several sites deal with a new strain of the Jerusalem/Israeli/ Friday the 13th virus which infects IBM PC's and PC clones. This new strain, the "Little Black Box" virus, causes a small black box to appear in the lower left quadrant of the scrren. The virus adds 1808 bytes to an .exe file every time an application is executed until the executable image is too large to fit into memory or disk space is exhausted. This causes poor system performance. This virus will also add 1813 byes to .com files, one at a time. This causes parity errors which disrupt EGA and CGA screen. This "Little Black Box" virus does not destroy files. It does, however, spread quickly. The most common way viruses are spread is through exchanging removable media. Please advise personnel at your site to follow your procedures which prevent virus infections. CIAC now has immunization, detection, and eradication programs for the "Little Black Box" virus. To obtain a copy, contact: Gene Schultz, CIAC Manager Lawrence Livermore National Laboratory P.O. Box 808, L-195 Livermore, CA 94550 (415) 422-8193 or (FTS) 532-8193 gschultz%nsspa@icdc.llnl.gov