Re: Is this a new virus? (PC)

Article View: comp.virus

Article #4353

#4353

From: Kevin Marcus
Date: Thu, 17 Dec 1992 02:57

22 lines
1483 bytes

bontchev@fbihh.informatik.uni-hamburg.de (Vesselin Bontchev) writes:
>tck@fold.ucsd.edu (Kevin Marcus) writes:
>
>> trinh@camins.camosun.bc.ca writes:
>> >[description of a typical Stoned+Michelangelo problem deleted]
>
>> It looks like you had a multiple infection.  Stoned and it's varients
>> (Michelangelo is one...) don't always copy the MBR to the same spot.
>
>No, the problem is cause by exactly the opposite - both Stoned and
>Michelangelo copy the MBR to exactly one and the same spot (on the
>hard disk), which results in the original MBR being lost.

I have varients of stoned which copy to 0,0,15, and 0,0,7, as well as a
few other locations.  They do not necessarily copy to the same spot.


- -- 
|| Kevin Marcus, Computer Virologist.  (619)/457-1836; RE-xxx, TSCAN       ||
|| INET: tck@bend.ucsd.edu       []-[]-[]-[]-[]-[]-[]-[]-[]-[]-[]-[]-[]-[]-[]
||       tck@fold.ucsd.edu       || All I wanted was a Pepsi...            ||
||       datadec@watserv.ucr.edu ||       And she wouldn't give it to me...||

Technical Details

Message-ID: <0009.9212181845.AA00632@barnabas.cert.org>

Path:

arc1-ca.pugleaf.net!sparky!uunet!elroy.jpl.nasa.gov!swrinde!zaphod.mps.ohio-state.edu!caen!spool.mu.edu!agate!usenet.ins.cwru.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!news

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!elroy.jpl.nasa.gov!swrinde!zaphod.mps.ohio-state.edu!caen!spool.mu.edu!agate!usenet.ins.cwru.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!news
From: tck@fold.ucsd.edu (Kevin Marcus)
Newsgroups: comp.virus
Subject: Re: Is this a new virus? (PC)
Message-ID: <0009.9212181845.AA00632@barnabas.cert.org>
Date: 17 Dec 92 02:57:17 GMT
Sender: virus-l@lehigh.edu
Lines: 22
Approved: news@netnews.cc.lehigh.edu