🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.virus
Article #4126

Stoned / Azusa (PC)

#4126
From: THE GAR
Date: Tue, 21 May 1991 19:03
28 lines
1895 bytes
I noticed something interesting using a McAfee Mix of V77.  Vshield 77
reported that it had found STONED and AZUSA, but after I cleaned
STONED it no longer saw AZUSA.  Turns out it is a double identifier.

McAfee says this will be corrected in 79 (recall that 78 is BOGUS and
there will NOT be a real version 78.)  They also told me the test
would be if it had found AZUSA first, it probably would have only had
AZUSA, and if it found STONED first it would probably only have
STONED.

This does not apply to every virus, as we have seen many cases where
both STONED and PING PONG B have been on the same machine, and it took
two passes with CLEAN to get them both.

Samford just licensed VSHIELD and hopefully this will help us quickly
bring the STONED/PING PONG battle to an end.  We have been engaged
since December in this battle, but without the funds to win.  I'll
have a report later as to how effective VSHIELD is, but I am quite
optomistic.

(It might be September before I report, since we just lost 80% of our
student body to summer.)

 /++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\
!  Later        +   Systems Programmer                                 !
!  Gary Warner  +   Samford University Computer Services               !
!               +   II TIMOTHY 2:15                                    !
 \+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++/
Technical Details
Message-ID: <0009.9105221524.AA01619@ubu.cert.sei.cmu.edu>
Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!wuarchive!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!wuarchive!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: GLWARNER@SAMFORD.BITNET (THE GAR)
Newsgroups: comp.virus
Subject: Stoned / Azusa (PC)
Message-ID: <0009.9105221524.AA01619@ubu.cert.sei.cmu.edu>
Date: 21 May 91 19:03:26 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 28
Approved: krvw@sei.cmu.edu