____________________________________________________________________
              THE COMPUTER INCIDENT ADVISORY CAPABILITY

                                CIAC

                       INFORMATION BULLETIN
____________________________________________________________________

                                              June 5, 1989


The Computer Incident Advisory Capability (CIAC) has been helping
several sites deal with a new strain of the Jerusalem/Israeli/
Friday the 13th virus which infects IBM PC's and PC clones.  This 
new strain, the "Little Black Box" virus, causes a small black box
to appear in the lower left quadrant of the scrren.  The virus adds
1808 bytes to an .exe file every time an application is executed 
until the executable image is too large to fit into memory or disk
space is exhausted.  This causes poor system performance.  This
virus will also add 1813 byes to .com files, one at a time.  This 
causes parity errors which disrupt EGA and CGA screen.

This "Little Black Box" virus does not destroy files.  It does,
however, spread quickly.  The most common way viruses are spread 
is through exchanging removable media.  Please advise personnel at 
your site to follow your procedures which prevent virus infections.
 
CIAC now has immunization, detection, and eradication programs for
the "Little Black Box" virus.  To obtain a copy, contact:

  Gene Schultz, CIAC Manager
  Lawrence Livermore National Laboratory
  P.O. Box 808, L-195
  Livermore, CA  94550
  (415) 422-8193 or (FTS) 532-8193
  gschultz%nsspa@icdc.llnl.gov