Thread View: comp.virus
1 messages
1 total messages
Started by Kevin Marcus
Thu, 24 Dec 1992 07:03
Re: Is this a new virus? (PC)
Author: Kevin Marcus
Date: Thu, 24 Dec 1992 07:03
Date: Thu, 24 Dec 1992 07:03
22 lines
1616 bytes
1616 bytes
bontchev@fbihh.informatik.uni-hamburg.de (Vesselin Bontchev) writes: >tck@fold.ucsd.edu (Kevin Marcus) writes: > >> I have varients of stoned which copy to 0,0,15, and 0,0,7, as well as a >> few other locations. They do not necessarily copy to the same spot. > >And we have here variants that put the original MBR at 0,0,2 and >0,0,8. This is irrelevant. What is rellevant is that the problem with >Michelangelo occurs exactly because the "standard" Stoned variant put >the original MBR at 0,0,7 - at the same place as Michelangelo, and >because the two viruses do not recognize each other. Oh, come on, it is relevant. The original problem: Disinfection of a Stoned and MIchelangelo infection. Where they move the orig. MBR is quite important, because in one case, it is possible to remove the viruses by pulling the original MBR up, and in the other, it is not. - -- || Kevin Marcus, Computer Virologist. (619)/457-1836; RE-xxx, TSCAN || || INET: tck@bend.ucsd.edu []-[]-[]-[]-[]-[]-[]-[]-[]-[]-[]-[]-[]-[]-[] || tck@fold.ucsd.edu || All I wanted was a Pepsi... || || datadec@watserv.ucr.edu || And she wouldn't give it to me...||
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads