🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: bit.listserv.labmgr
Article #691

Natas virus -Reply

#691
From: Brandon Winbush
Date: Thu, 15 Feb 1996 00:00
41 lines
1840 bytes
----------------------------Original message----------------------------
Create a bootable diskette, put F-Prot on it, Write protect the diskette,
reboot the computer with the bootable diskette.
Run F-prot with the /nomem parameter.

Try cleaning the virus!

>>> SAM <RUTLEDGE@LUB002.LAMAR.EDU> 02/14/96 05:11pm >>>
----------------------------Original message----------------------------
Today we found the Natas virus both in the boot sector and executable
files.
Mcafee can not clean it from the boot sector. We have version 229.

We have formatted, fdisked, wipeinfo with Nortons. When the computer
boots right before the starting MSDOS line there is a short line of
garbage.

Right now I am using NU (norton's unerase hex editor) to






Right now I am using NU (norton's unerase hex editor) to search for the
characters in the line of garbage (actually 3 characters next to each
other)

So far it has found nothing.

Our tech shorted out the cmos. Still get the line of garbage and McAfees
says the drive is still infected.

Any ideas?  Help! Help!

If we boot to a floppy we don't get the message so evidentally it is not in
the cmos but on the drive somewhere.

Sammie Rutledge
Microcomputer Specialist
Lamar University
Technical Details
Message-ID: <s1235e42.089@wpgate.shs.ilstu.edu>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fc881,1af695b87889639c,start
X-Google-Attributes: gidfc881,public
From: Brandon Winbush <BKWINBU@wpgate.shs.ilstu.edu>
Subject: Natas virus -Reply
Date: 1996/02/15
Message-ID: <s1235e42.089@wpgate.shs.ilstu.edu>
X-Deja-AN: 139536331
sender: Computer Lab Managers <LABMGR@UKCC.UKY.EDU>
comments: ********************************************************
approved-by: List Moderator <LSTOWN@UKCC.UKY.EDU>
newsgroups: bit.listserv.labmgr
resent-subject: Natas virus -Reply
x-mailer: MailBook 95.01.000