🚀 go-pugleaf

MICKLE@csmcmvax.bitnet (Dave Mickle x5205) writes:

> We've got a PC which is displaying a message to the effect it's
> infected by the "DAME" virus.  Don't know what symptoms there are in
> addition to the message.  We're going to do a low level format, but
> would like to know what we've contracted.

Please read the FAQ for a description how to report such cases. In
particular, you should state the name and the version of the program
that reported the virus.

"DAME" is the name that SCAN gives to all MtE-based viruses. However,
a few other scanners use it too... The MtE detector in SCAN versions
before 99 is not good enough and might sometimes report false
positives. Did you get a report only about one infected file or about
several files?

It is not possible to tell you "what the DAME virus does", because
there is no such thing as "the DAME virus". There are several
different viruses, which are using the MtE for polymorphism and they
do different things. All of them are reported as DAME by SCAN (except
some of the unencrypted replicants, but this is irrelevant).

At last, a low level format is never necessary. Just delete all
infected files and replace them with clear originals.

Regards,
Vesselin
- -- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.1 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany