Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!sdd.hp.com!zaphod.mps.ohio-state.edu!swrinde!ucsd!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: George_Bragg@carleton.ca (George Bragg)
Newsgroups: comp.virus
Subject: Stoned virus (PC)
Message-ID: <0008.9012041357.AA13652@ubu.cert.sei.cmu.edu>
Date: 30 Nov 90 15:06:00 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 15
Approved: krvw@sei.cmu.edu

Having seen a lot of confusion about what the stoned virus does, I
thought I'd tell you my own experiences with said virus when a major
infestation hit the university where I work as a computer consultant.
Stoned, as mentioned by others, is a boot sector virus.  It can only
infect memory if you boot up from a "dirty" disk.  Once it is in
memory, however, it writes to anything.  If you get it on a hard
drive, it attacks the FAT (I think), and when you reboot from the hard
drive, it's back in memory to spread it's jolly message to the masses.
This is probably why you'd see the cross- linked files with CHKDSK,
and why a floppy can be infected from a HD.  BTW, McAfee's SCAN does a
wonderful job of both detecting and removing this virus.

Disclaimer:  Nobody cares about my opinions, so I can't blame anybody else
             for them.
George Bragg (WATPOD46@CARLETON.CA)


Brought to you by Super Global Mega Corp .com