🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.virus
Article #4536

Possible PC Virus (PC)

#4536
From: robert c. morales
Date: Thu, 13 Jun 1991 20:36
21 lines
1613 bytes
I have a Packard Bell with an 80386X-16 Mhz CPU. It runs on MS-DOS
4.01 and a Dosshell 4.0. Everytime I do work on the computer (word
processing, networking, games, etc.) DOS seems to create (on its own)
a file, named numerically or alpha-numerically but in a random
fashion, of about 15K in size (with a range of from 7K to 17K). When
you try to view the file (which incidentally sits among the DOS
files), you can make out that it is bits and pieces of what is on the
hard drive. Initially, it has not affected any other program on the
hard drive. However, two days ago, the DOS files appeared to have
replicated themselves with such names as EDLIN._OM and AUTOEXEC._AT,
all of which were 77 bytes in size with the same dates and times. This
necessitated reformatting the hard drive. Also, the Dosshell was
removed from the AUTOEXEC.BAT. Right now, the problem seems to have
been corrected, whatever it was. Is anybody familiar with this
problem? Most other resource people I I have consulted about this have
indicated that they have only heard about this on Packard Bell
computers. Any tips?

Robert Morales
7340p@navpgs
7340p@cc.nps.navy.mil
Technical Details
Message-ID: <0006.9106171414.AA16331@ubu.cert.sei.cmu.edu>
Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: 7340P@NAVPGS.BITNET (robert c. morales)
Newsgroups: comp.virus
Subject: Possible PC Virus (PC)
Message-ID: <0006.9106171414.AA16331@ubu.cert.sei.cmu.edu>
Date: 13 Jun 91 20:36:04 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 21
Approved: krvw@sei.cmu.edu