disinfectors that leave ghosts of viruses (PC)

Thread View: comp.virus

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by A.APPLEYARD Wed, 16 Dec 1992 09:03

#4335

Author: A.APPLEYARD
Date: Wed, 16 Dec 1992 09:03

14 lines
1208 bytes

  OVERBERGER@GW.WMICH.EDU wrote: "... new variety of STONED ... infect the
partition table of infected DOS machines ... F-Prot 2.06a [and CLEAN]
identified it as a STONED virus but refused to remove it...
  FRISK@COMPLEX.IS replied: ... old problem ... disks ... infected with
stoned, and improperly disinfected by a program that just overwites a part
of the boot sector with valid code, leaving a part of the virus, so
[FRISK's] program gets a partial match...

  These 'ghosts' of killed viruses are perennial problem. It would be
useful if a FAQ entry could be made listing: (1) what variants of what
virus-removers leave ghosts and don't properly ghostbust after themselves;
(2) how a user can ghostbust after using such an untidy virus-remover, so
that he doesn't keep getting these false alarms.

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads