Article View: comp.virus
Article #4115Re: Which format for Partition Table Viruses (PC)
From: Fridrik Skulason
Date: Tue, 21 May 1991 07:49
Date: Tue, 21 May 1991 07:49
17 lines
1215 bytes
1215 bytes
tony4@garfield.cs.mun.ca (Anthony H. Galway) writes: >(be assured that I have also done a LOW level format in cases when the >partition table was hopelessly infected). Uh, what do you mean ? There is NO virus which will "hopelessly" infect the partition table - all PBR infections can be removed without any formatting at all, although sometimes with some effort. Disinfection may not always cure all problems - if the virus in question is the variant of Stoned which stores the original PBR at (0,0,2) a low level format may be necessary on some machines - PS/2 in particular, I think. In the case of Azusa, Bloody and a few other viruses, not all disinfection packages are able to handle the problem, however. - -frisk
Technical Details
Message-ID:
<0012.9105211425.AA07798@ubu.cert.sei.cmu.edu>Path:
arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!usc!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvwShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!usc!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: frisk@rhi.hi.is (Fridrik Skulason) Newsgroups: comp.virus Subject: Re: Which format for Partition Table Viruses (PC) Message-ID: <0012.9105211425.AA07798@ubu.cert.sei.cmu.edu> Date: 21 May 91 07:49:47 GMT Sender: Virus Discussion List <VIRUS-L@LEHIIBM1> Lines: 17 Approved: krvw@sei.cmu.edu