Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!sdd.hp.com!zaphod.mps.ohio-state.edu!usc!elroy.jpl.nasa.gov!ncar!midway!msuinfo!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: uctvax!MURRAY@uunet.UU.NET (Mark Murray, UCT Physics Department) Newsgroups: comp.virus Subject: Possible virus artifact in DR-DOS v5? Message-ID: <0003.9010171920.AA12825@ubu.cert.sei.cmu.edu> Date: 15 Oct 90 12:14:00 GMT Sender: Virus Discussion List Lines: 24 Approved: krvw@sei.cmu.edu I have recently upgraded my 25MHz 386 with ST4096 to DR-DOS v5. My site is (touch wood!) relatively safe from viral attack, so when McAfee's SCAN reported the STONED virus, I looked VERY carefully at what was going on. The symptoms were: 1) scan v54 & v67 reported Stoned in the partition table. 2) scan v54 & v67 did not find Stoned in memory - EVEN AFTER REBOOTING 3) no floppy that had been in this machine for the previous +- 2 days had been infected. 4) clean v67 agreed to clean out the virus, and did - scan reports all clear. 5) no damage whatsoever, and no messages from the virus. Has anyone seen this before? Is there a dead virus sitting in some code here? Am I going to get jumped on by a new kind of virus? I would appreciate any comments.... Mark Murray Physics Department, University of Cape Town murray.uctvax@f4.n494.z5.fidonet.org (internet) murray%uctvax%quagga@uunet.uu.net (internet also (better))