🚀 go-pugleaf

Hello Brian C. Boorman,
In article <0013.9211101943.AA07075@barnabas.cert.org> you write:
>Does anyone know how Michelanelo is transmitted.  We have a serious
>problem at this institution with it's spread.
>
>Basically my question is this: We know that it can transmit via a
>5-1/4 disk in the A drive of a PC, but can it infect the boot sector
>of a 3-1/2 floppy in the B drive?

The Michelangelo virus is spread by booting from an infected floppy
diskette.  When the infected floppy is booted from, the virus code is
loaded and executed by the computer.  The virus is now installed in
memory and will monitor the system for disk accesses.  When a disk
access occurs, the virus checks the disk to see if its infected, and
if not, infects the disk (network drives, Stacker compressed volumes,
and other media which are accessed through a device driver are not
affected).  I recall that the first copy of the virus we saw did not
infect the second disk drive, however, a later version (February or
March of this year?) infects both floppy drives.

Regards,

Aryeh Goretsky
Technical Support
- -- 
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
McAfee Associates, Inc.  | Voice (408) 988-3832 | INTERNET:
3350 Scott Blvd, Bldg 14 | FAX   (408) 970-9727 | mcafee@netcom.COM
Santa Clara, California  | BBS   (408) 988-4004 | CompuServe ID: 76702,1714
95054-3107  USA          | USR HST Courier DS   | or GO MCAFEE
Support for SENTRY/SCAN/NETSCAN/VSHIELD/CLEAN/WSCAN/NETSHIELD/TARGET/CONFIG MGR