🚀 go-pugleaf

m4tangla@student.business.uwo.ca (Michael Tanglao) writes:

> I am currently having problems getting rid of the "FORM" virus from our LAN 
> sys. 

Form is a boot sector virus, therefore it cannot spread accross LANs.

> Does anyone know anything about this virus?  Norton Anti-Virus does not 

There are detailled descriptions of it in Patricia Hoffman's VSUM and
VTC-Hamburg's Computer Virus Catalog. Both are available for anonymous
ftp; the first as garbo.uwasa.fi:/pc/virus/vsumx210.zip and the second
as ftp.informatik.uni-hamburg.de:/pub/virus/texts/catalog/msdosvir.zip.

> seem to eliminate it, although F-prot does.  I am using F-prot on all the 
> stations, so I thought I had taken care of it.  Unfortunately, some bizarre 

Be careful to use version 2.06a of F-Prot. The previous versions have a
bug which prevents them from removing the virus from large partitions
(larger than 255 tracks). Nothing is damaged; they just refuse to
remove the virus.

> Does anyone know anything about what this virus does?  Are there Norton virus 

In short: infects the DOS boot sectors of the disk(ette)s. On 24th of
every month the virus activates and makes the keys "click" when
pressed. There is a variant reported, which activates on 18th instead,
but I have not seen it yet.

Regards,
Vesselin
-- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.0 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany