INFO SOUGHT: FILLED virus (PC)

Thread View: comp.virus

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Ken Mcvay Wed, 16 Dec 1992 04:10

#4333

Author: Ken Mcvay
Date: Wed, 16 Dec 1992 04:10

30 lines
1822 bytes

One of my leaf sites (news/mail) recently lost their data to FILLED -
the machine that went down (FAT out to lunch) was repaired by
reformatting the disk (high level, w/MS-DOS 5.0) and re-installing the
software.

When SCANV was run, it warned of FILLED three times, after the format
- - local rumour has it FILLED resides on an area of the disk DOS
doesn't read - at any rate, after three warnings, the system was shut
down.

I installed the latest versions of SCANV and CLEAN onto the system
today, and ran both from a write-protected floppy. No warning
appeared, and clean aborted with nothing to do. I did not try the
older version of SCANV again.

Is it gone? Is there a difference in the latest flavour of SCANV's
approach to FILLED that might cause a miss? FILLED is listed as a
stealth-type in the McAfee doc's, and I'd like to know more about that
as well - enough, at any rate, to be comfortable in thinking the
infection is gone.

If someone can point me towards an ftp site where I can find some
information re FILLED, I'd appreciate it, or it could be mailed to me
privately if it's 'old hat' - if not, here's fine :-)

- --
The Old Frog's Almanac - Public Access UseNet for Central Vancouver Island
     (604) 245-3205 (v32) (604) 245-4366 (2400x4) SCO XENIX 2.3.2 GT
 Ladysmith, British Columbia, CANADA. Just south of Tupperware Central...
                 Information is power - get connected

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads