Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!mailrus!accuvax.nwu.edu!tank!eecae!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: portal!cup.portal.com!Alan_J_Roberts@Sun.COM
Newsgroups: comp.virus
Subject: German DOS62 Virus
Message-ID: <0003.y8907122227.AA01842@ge.sei.cmu.edu>
Date: 5 Jul 89 03:12:13 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Lines: 11
Approved: krvw@sei.cmu.edu


        The virus reported by Chris Fischer is clearly the DOS62
virus.  This virus will replace the firts five bytes of every eighth
infected file with the system initialization routine.  Clearly,
COMMAND.COM was the eighth file infected within his system - hence at
power-on the system will continuously cycle through the re-boot
sequence.  We have had numerous reports of similar synptoms from this
virus.

Alan Roberts
HomeBase/CVIA 408 988 4004