Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!usc!elroy.jpl.nasa.gov!sdd.hp.com!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: CHESS@YKTVMV.BITNET (David.M.Chess) Newsgroups: comp.virus Subject: re: Virus Query (PC) Message-ID: <0011.9011081829.AA17940@ubu.cert.sei.cmu.edu> Date: 8 Nov 90 14:40:23 GMT Sender: Virus Discussion List Lines: 6 Approved: krvw@sei.cmu.edu Dave Goodwin asks about side-effects of the Dark Avenger virus. It's a potentially rather nasty one; on something like every 16th execution of an infected program, a more-or-less random sector on the disk is overwritten with 512 bytes of garbage beginning with the string "Eddie lives". You might want to use some sector-string-search program to look for that string... DC