Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!mailrus!iuvax!purdue!decwrl!polyslo!vlsi3b15!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: dinda@cat51.cs.wisc.edu (Peter Dinda)
Newsgroups: comp.virus
Subject: Re: Request for info on viruses (PC)
Message-ID: <0001.y8907031857.AA11952@ge.sei.cmu.edu>
Date: 3 Jul 89 14:42:09 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Reply-To: VIRUS-L@IBM1.CC.Lehigh.EDU
Lines: 9
Approved: krvw@sei.cmu.edu

(c)Brain also seems to randomly mark sectors bad - whether there is
anything in them or not.  At UW-Madison's Academic Computing Center
(MACC), we've also noticed that a new version of the virus is making
its way into our labs - one that does not leave the (c)Brain warning
and thus, can not be detected by our NOBRAIN program.  Has anyone seen
a detector that works by finding 'unique' code in the boot record?

Peter A. Dinda
(also dinda@WIRCS3.macc.wisc.edu)