INFORMATION BULLETIN

CIAC-04: Jerusalem/Isaeli/Friday the 13th Virus

June 5, 1989

The Computer Incident Advisory Capability (CIAC) has been helping
several sites deal with a new strain of the Jerusalem/Israeli/
Friday the 13th virus which infects IBM PC's and PC clones.  This 
new strain, the "Little Black Box" virus, causes a small black box
to appear in the lower left quadrant of the scrren.  The virus adds
1808 bytes to an .exe file every time an application is executed 
until the executable image is too large to fit into memory or disk
space is exhausted.  This causes poor system performance.  This
virus will also add 1813 byes to .com files, one at a time.  This 
causes parity errors which disrupt EGA and CGA screen.

This "Little Black Box" virus does not destroy files.  It does,
however, spread quickly.  The most common way viruses are spread 
is through exchanging removable media.  Please advise personnel at 
your site to follow your procedures which prevent virus infections.
 
CIAC now has immunization, detection, and eradication programs for
the "Little Black Box" virus.  To obtain a copy, contact:

	CIAC
	Lawrence Livermore National Laboratory
	P.O. Box 808, L-303
	Livermore, CA  94550
	(925) 422-8193 or (FTS) 532-8193
	ciac@llnl.gov

CIAC services are available to DOE, DOE Contractors, and the NIH. CIAC can be contacted at:

    Voice:          +1 925-422-8193 (7 x 24)
    FAX:            +1 925-423-8002
    STU-III:        +1 925-423-2604
    E-mail:          ciac@ciac.org
    World Wide Web:  http://www.ciac.org/
    Anonymous FTP:   ftp.ciac.org

This document was prepared as an account of work sponsored by an agency of the United States Government. Neither the United States Government nor the University of California nor any of their employees, makes any warranty, express or implied, or assumes any legal liability or responsibility for the accuracy, completeness, or usefulness of any information, apparatus, product, or process disclosed, or represents that its use would not infringe privately owned rights. Reference herein to any specific commercial products, process, or service by trade name, trademark, manufacturer, or otherwise, does not necessarily constitute or imply its endorsement, recommendation or favoring by the United States Government or the University of California. The views and opinions of authors expressed herein do not necessarily state or reflect those of the United States Government or the University of California, and shall not be used for advertising or product endorsement purposes.

UCRL-MI-119788
[Privacy and Legal Notice]