Article View: comp.virus
Article #4327Re: Is this a new virus? (PC)
From: Otto Stolz
Date: Tue, 15 Dec 1992 17:31
Date: Tue, 15 Dec 1992 17:31
26 lines
1652 bytes
1652 bytes
trinh@camins.camosun.bc.ca writes:
> - The system hung during booting from the HD [...]
> - A clean boot from floppy would allow access to the HD as usual.
> - [...] detected Stoned; [...] found Stoned and removed it.
> - A second run of [...] found Michaengelo but unable to remove it.
> - Fdisk /mbr did get rid of the Michaengelo look alike and the system
> reboot successfully from the HD. [...] and [...] then gave the system
> a clean bill of virus.
This is exactly the sequence of events described sub G3 in the VIRUS-L
FAQ list, which has been posted, recently.
> So would anyone please tell me what virus is this one, thanks.
Stoned + Michelangelo (original MBR lost), what else did anybody expect?
I wonder why we saw so diverging responses to this poster. Do the
experts not bother to read the FAQ list? I assure you, reading it is
worth-while! I do not say so because I am acknowledged in its preface
(my contribution was rather limited), but because knowing what's in
the FAQ list could save many VIRUS-L subscribers -- both novices and
experienced virus busters -- a lot of work, honestly!
Best wishes,
Otto Stolz <RZOTTO@DKNKURZ1.Bitnet>
<RZOTTO@nyx.uni-konstanz.de>
Technical Details
Message-ID:
<0004.9212171857.AA14855@barnabas.cert.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!news.sei.cmu.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!newsShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!news.sei.cmu.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!news From: RZOTTO@NYX.UNI-KONSTANZ.DE (Otto Stolz) Newsgroups: comp.virus Subject: Re: Is this a new virus? (PC) Message-ID: <0004.9212171857.AA14855@barnabas.cert.org> Date: 15 Dec 92 17:31:51 GMT Sender: virus-l@lehigh.edu Lines: 26 Approved: news@netnews.cc.lehigh.edu