Article View: comp.virus
Article #4672Re: Monkey [Mon] and Multi-2 [M12] viruses (PC)
From: Vesselin Bontchev
Date: Thu, 14 Jan 1993 11:41
Date: Thu, 14 Jan 1993 11:41
24 lines
1607 bytes
1607 bytes
LIBBIE@pucc.PRINCETON.EDU (Libbie Counselman) writes: > The first one discovered was the Monkey [Mon] virus. It affects the > File Allocation Table. SCAN discovers it, but does not disinfect, but > Norton Disk Doctor will recover the clean FAT. > The second is known as Multi-2 [M12]. It has a predecessor called > Multi [M-123], also not recognized by F-Prot. This one infects .COM > files, .EXE files, overlays and becomes memory resident. CLEAN > apparently disinfects it. Sigh... Yet another identification problem... SCAN 99 does not report as [Mon] or [M12] anything from our virus collection, so obviously we do not have these viruses. SCAN 99 reports as [M-123] the virus with CARO name SD-123. This virus -is- detected by F-Prot 2.06a, so obviously you mean a different one... Regards, Vesselin - -- Vesselin Vladimirov Bontchev Virus Test Center, University of Hamburg Tel.:+49-40-54715-224, Fax: +49-40-54715-226 Fachbereich Informatik - AGN < PGP 2.1 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C e-mail: bontchev@fbihh.informatik.uni-hamburg.de D-2000 Hamburg 54, Germany
Technical Details
Message-ID:
<0014.9301221631.AA12947@barnabas.cert.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!cis.ohio-state.edu!news.sei.cmu.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!newsShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!cis.ohio-state.edu!news.sei.cmu.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!news From: bontchev@fbihh.informatik.uni-hamburg.de (Vesselin Bontchev) Newsgroups: comp.virus Subject: Re: Monkey [Mon] and Multi-2 [M12] viruses (PC) Message-ID: <0014.9301221631.AA12947@barnabas.cert.org> Date: 14 Jan 93 11:41:05 GMT Sender: virus-l@lehigh.edu Lines: 24 Approved: news@netnews.cc.lehigh.edu