Article View: alt.comp.virus
Article #47Re: Stoned Virus
From: Mitch
Date: Thu, 11 Jun 1998 00:00
Date: Thu, 11 Jun 1998 00:00
38 lines
2195 bytes
2195 bytes
In article duck@sophos.com says... > > >> So Stoned copying the original MBR to 0,0,7 should be safe, right? > >*Should* be. > >If you believe in "benign viruses", you'll believe that Stoned (or any >other MBR virus which overwrites one of the sectors in Track 0 Head 0, >usually unused) is benign. No such thing. > >Example: back in the days when Stoned was common, there were *lots* of >of Olivetti M24s around -- they shipped with a version of Olivetti DOS >which started the C: drive at Track 0, Head 0, Sector 2. So 0.0.7 was >very much in use (part of the FAT!) on those machines. Olivetti DOS 3.30 was quickly damaged for this reason. However, the way some virus "experts" in this thread clearly demonstrate their lack of expertise, is the total ignorance displayed with regard to Stone's fatal affect on numerous backup & security software packages (example: FastBack ) which caused a huge amount of data to be lost. As I previously stated, the original Stone virus _still_ has the ability to cause problems. Even the printing of the standard ibm character set lined message of the original can pull down the latest version of Windows (98 b3.) and (albeit indirectly) cause file damage! Is that a modern enough o/s for you guys ? :) >How wrong you can be when you rely on "should be" :-) > >No such thing as a "benign virus". So there... Agreed!! Mitch.
Technical Details
Message-ID:
<6lnihm$ik7$1@llama.teragen.com.au>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<356AA597.1F258B7D@nettrek.com.au> <356c2214.8549609@news.zeta.org.au> <356C5C6F.ECA04AEB@ran.es> <6kllle$rbd$1@llama.teragen.com.au> <35706B97.E4458643@ran.es> <6l1d0k$ej1$1@elrond.sophos.com> <357703db.2906395@news.demon.co.uk>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10d683,70a58627a995bf35 X-Google-Attributes: gid10d683,public X-Google-Thread: fcd68,70a58627a995bf35 X-Google-Attributes: gidfcd68,public From: mitch@aardvark.apana.org.au (Mitch) Subject: Re: Stoned Virus Date: 1998/06/11 Message-ID: <6lnihm$ik7$1@llama.teragen.com.au> X-Deja-AN: 361969759 References: <356AA597.1F258B7D@nettrek.com.au> <356c2214.8549609@news.zeta.org.au> <356C5C6F.ECA04AEB@ran.es> <6kllle$rbd$1@llama.teragen.com.au> <35706B97.E4458643@ran.es> <6l1d0k$ej1$1@elrond.sophos.com> <357703db.2906395@news.demon.co.uk> Content-Type: Text/Plain; charset=US-ASCII Organization: Teragen Internet Solutions - Melbourne Australia Mime-Version: 1.0 Newsgroups: alt.comp.virus,aus.computers.ibm-pc