🚀 go-pugleaf

mcafee@netcom.com (McAfee Associates) writes:

> The Michelangelo virus is spread by booting from an infected floppy
> diskette.  When the infected floppy is booted from, the virus code is
> loaded and executed by the computer.  The virus is now installed in
> memory and will monitor the system for disk accesses.  When a disk
> access occurs, the virus checks the disk to see if its infected, and
> if not, infects the disk (network drives, Stacker compressed volumes,
> and other media which are accessed through a device driver are not

Not quite exact. The virus tries to infect the hard disk only at boot
time, i.e., when you are trying to boot from an infected diskette. If
the virus is being booted from the hard disk, or if it is already
resident, it doesn't try to infect the hard disk any more. Thus, it
can be disinfected from the hard disk even if it is active in memory,
although this is not generally recommended.

Regards,
Vesselin
- -- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.0 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany