🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.virus
Article #4333

INFO SOUGHT: FILLED virus (PC)

#4333
From: Ken Mcvay
Date: Wed, 16 Dec 1992 04:10
30 lines
1822 bytes
One of my leaf sites (news/mail) recently lost their data to FILLED -
the machine that went down (FAT out to lunch) was repaired by
reformatting the disk (high level, w/MS-DOS 5.0) and re-installing the
software.

When SCANV was run, it warned of FILLED three times, after the format
- - local rumour has it FILLED resides on an area of the disk DOS
doesn't read - at any rate, after three warnings, the system was shut
down.

I installed the latest versions of SCANV and CLEAN onto the system
today, and ran both from a write-protected floppy. No warning
appeared, and clean aborted with nothing to do. I did not try the
older version of SCANV again.

Is it gone? Is there a difference in the latest flavour of SCANV's
approach to FILLED that might cause a miss? FILLED is listed as a
stealth-type in the McAfee doc's, and I'd like to know more about that
as well - enough, at any rate, to be comfortable in thinking the
infection is gone.

If someone can point me towards an ftp site where I can find some
information re FILLED, I'd appreciate it, or it could be mailed to me
privately if it's 'old hat' - if not, here's fine :-)

- --
The Old Frog's Almanac - Public Access UseNet for Central Vancouver Island
     (604) 245-3205 (v32) (604) 245-4366 (2400x4) SCO XENIX 2.3.2 GT
 Ladysmith, British Columbia, CANADA. Just south of Tupperware Central...
                 Information is power - get connected
Technical Details
Message-ID: <0009.9212171857.AA14855@barnabas.cert.org>
Path: arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!news.sei.cmu.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!news

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!news.sei.cmu.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!news
From: kmcvay@oneb.almanac.bc.ca (Ken Mcvay)
Newsgroups: comp.virus
Subject: INFO SOUGHT: FILLED virus (PC)
Message-ID: <0009.9212171857.AA14855@barnabas.cert.org>
Date: 16 Dec 92 04:10:52 GMT
Sender: virus-l@lehigh.edu
Lines: 30
Approved: news@netnews.cc.lehigh.edu