Path: utzoo!attcan!utgpu!news-server.csri.toronto.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: pjc@sirius.melb.bull.oz.au (Paul Carapetis)
Newsgroups: comp.virus
Subject: SLOW virus (PC)
Message-ID: <0005.9008311810.AA27971@ubu.cert.sei.cmu.edu>
Date: 31 Aug 90 20:37:38 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 21
Approved: krvw@sei.cmu.edu

During the past 3 weeks, I have had to disinfect a number of sites
here in Australia (Oz) that were infected with the SLOW virus.
Disinfection has just been a matter of wiping the infected .com and
exe files.

For virus reference, I have vsum9008: this is the latest information I
have but this document has no detail on any damage that this virus can
inflict.  MacAfee's virlist lists it as O,P,L but that is all the
information I have.  Does anyone have any information as to what
triggers its destructive mechanism and how it accomplishes the damage?
Is there any more known about this virus?  I realise that infection
outside of Oz is rare but it is quite virulent here and any
information would be gratefully accepted.

Thanx in advance,

| Paul Carapetis, Software Advisor (Unix, DOS)  |   Phone: 61 3 4200944   |
| Melbourne Development Centre                  |   Fax:   61 3 4200445   |
| Bull HN Information Systems Australia Pty Ltd |-------------------------|
| ACSnet  : pjc@.bull.oz                        | What's said here is my  |
| Internet: pjc@melb.bull.oz.au                 | opinion (and its right!)|