🚀 go-pugleaf

overberger@gw.wmich.edu writes:

>We may have found a new variety of STONED on our campus. It seems to
>infect the partition table of infected DOS machines, disabling both
>the COM: ports as well as doing some unusual things to the root
>directory. F-Prot 2.06a identified it as a STONED virus but refused to
>remove it. Ditto with the latest version of CLEAN. After mailing Frisk
>and receiving a response indicating he believed it was not a virus
>(basically a blow off)

Well, unless I'm wrong, the description I got seemed to indicate an
old problem - the message "Possibly a new variant of stoned" happens
quite often on disks that have once been infected with stoned, and
improperly disinfected by a program that just overwites a part of the
boot sector with valid code, leaving a part of the virus, so my
program only gets a partial match.  That happens much more frequently
than new virus variants, so I just thought it was the case here too -
I apologize if I was wrong, but you see, without a copy of the boot
sector it is practically impossible to tell exactly what is going on.

- -frisk