Article View: comp.virus
Article #4333INFO SOUGHT: FILLED virus (PC)
From: Ken Mcvay
Date: Wed, 16 Dec 1992 04:10
Date: Wed, 16 Dec 1992 04:10
30 lines
1822 bytes
1822 bytes
One of my leaf sites (news/mail) recently lost their data to FILLED -
the machine that went down (FAT out to lunch) was repaired by
reformatting the disk (high level, w/MS-DOS 5.0) and re-installing the
software.
When SCANV was run, it warned of FILLED three times, after the format
- - local rumour has it FILLED resides on an area of the disk DOS
doesn't read - at any rate, after three warnings, the system was shut
down.
I installed the latest versions of SCANV and CLEAN onto the system
today, and ran both from a write-protected floppy. No warning
appeared, and clean aborted with nothing to do. I did not try the
older version of SCANV again.
Is it gone? Is there a difference in the latest flavour of SCANV's
approach to FILLED that might cause a miss? FILLED is listed as a
stealth-type in the McAfee doc's, and I'd like to know more about that
as well - enough, at any rate, to be comfortable in thinking the
infection is gone.
If someone can point me towards an ftp site where I can find some
information re FILLED, I'd appreciate it, or it could be mailed to me
privately if it's 'old hat' - if not, here's fine :-)
- --
The Old Frog's Almanac - Public Access UseNet for Central Vancouver Island
(604) 245-3205 (v32) (604) 245-4366 (2400x4) SCO XENIX 2.3.2 GT
Ladysmith, British Columbia, CANADA. Just south of Tupperware Central...
Information is power - get connected
Technical Details
Message-ID:
<0009.9212171857.AA14855@barnabas.cert.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!news.sei.cmu.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!newsShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!news.sei.cmu.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!news From: kmcvay@oneb.almanac.bc.ca (Ken Mcvay) Newsgroups: comp.virus Subject: INFO SOUGHT: FILLED virus (PC) Message-ID: <0009.9212171857.AA14855@barnabas.cert.org> Date: 16 Dec 92 04:10:52 GMT Sender: virus-l@lehigh.edu Lines: 30 Approved: news@netnews.cc.lehigh.edu