Removing the 4096 (PC)

Article View: comp.virus

Article #5102

#5102

From: Yuval Tal (972)-8-474592
Date: Tue, 30 Jan 1990 13:12

25 lines
1916 bytes

There is a very easy method to get rid of the 4096 virus (100 years).
Lets say you want this virus had spread on your hard-disk and you want
to remove it.  Take an *INFECTED* PKZIP, PKARC or any other such
thing. Compress all your files (or some of them) into one file. Erase
all the compressed files from your disk and boot from a clean
diskette. Now, take a *CLEAN* PKUNZIP, PKXARC or whatever and open the
compressed file. That's it!

How does it work??? When the virus is active in memory, and you try to
read an infected file, it will only read the file until the virus
(orinial file). So, what really happens here, is that the archiver
compresses only the files without the virus.

- -Yuval Tal

+--------------------------------------------------------------------------+
| BitNet:   NYYUVL@WEIZMANN        Domain: NYYUVAL@WEIZMANN.WEIZMANN.AC.IL |
| InterNet: NYYUVAL%WEIZMANN.BITNET@CUNYVM.CUNY.EDU                        |
+----------------------+---------------------------------------------------+
| Yuval Tal            | Voice:   +972-8-474592  (In Israel: 08-474592)    |
| P.O Box 1462         | BBS:     +972-8-421842 * 20:00-7:00 * 2400 * N81  |
| Rehovot, Israel      | FidoNet: 2:403/136                   (CoSysop)    |
+----------------------+---------------------------------------------------+
|  "Always look on the bright side of life" *whistle*  -  Monty Phython    |
+--------------------------------------------------------------------------+

Technical Details

Message-ID: <0002.9002011922.AA24486@ge.sei.cmu.edu>

Path:

arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: NYYUVAL@WEIZMANN.BITNET (Yuval Tal (972)-8-474592)
Newsgroups: comp.virus
Subject: Removing the 4096 (PC)
Message-ID: <0002.9002011922.AA24486@ge.sei.cmu.edu>
Date: 30 Jan 90 13:12:09 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Lines: 25
Approved: krvw@sei.cmu.edu