Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!usc!zaphod.mps.ohio-state.edu!uakari.primate.wisc.edu!aplcen!haven!adm!cmcl2!lanl!rbw
From: rbw@lanl.gov (Bob Walker)
Newsgroups: comp.sys.amiga
Subject: Virus Warning
Keywords: Xeno, AC#5 AC#6
Message-ID: <38185@lanl.gov>
Date: 6 Dec 89 21:45:51 GMT
Organization: Los Alamos National Laboratory
Lines: 31



-----------------

Virus warning ---

-----------------

On Friday 12/1/89 I received a disk from Amazing Computing (their PD
disk AC#6) that was infected with the Xeno virus.  I have since
cleaned up my hard disk, and verified that it was in fact the AC disk
that introduced the virus. 

I spoke to a representative from PiM (Mike) and he verified that two
of their disks, AC#5 and AC#6 were distributed with this virus.  On
AC#6, the virus is present in at least the following two files : CLI
(in the main directory) and less (in the c: directory).  You can
detect this virus with VirusX 4.0, and you can detect/deactivate it
using the KV utility that was included in the VirusX4.0 distribution.
Xeno can also be deactivated with a utility called XenoZap (?), which
I've not heard of before.  Amazing Computing was unaware of the
presence of the virus on their machines/disks prior to approximately
last Friday.  I was told that I could get clean copies of the disks I
ordered by returning the infected ones. 

If you obtained copies of these disks recently from AC, I suggest you
inspect the disks very carefully.  The people at AC were completely
cooperative, and suggested that I post this info.

Bob Walker, T-12, LANL
rbw@t12.lanl.gov