Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!samsung!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: 3501P@NAVPGS.BITNET (Jeffrey)
Newsgroups: comp.virus
Subject: Johsi / Stoned2 (PC)
Message-ID: <0009.9101151325.AA04099@ubu.cert.sei.cmu.edu>
Date: 14 Jan 91 18:06:42 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 22
Approved: krvw@sei.cmu.edu


   Thanks to everyone on Virus-l for their help with my Virus problem
especially Nick F., Michael B., James O., and Carlos J.  The response
was great, and sorry if I didn't mention you by name if you replied to
my note.  Our PC was infected by both viruses simultaneously.
Stoned-2 sporadically caused the machine not to boot (but didn't
display the "stoned" message), and Joshi disabled the machine when we
tried to boot up on Jan. 5 1991 (again without the signature message,
"type happy birthday joshi to continue...").  Apparently each virus
caused the other one to execute incompletely.

   Both Virii were successfully removed, though the corruption of the
partition table from Johsi neccesitated a cable transfer from my
Hard-disk to a clean hard-disk.  We now have McAfee's program
installed.  The virus was apparently picked up from someone who
accessed a bulletin board and executed some code they had down-loaded.

   Lastly, someone replying to my note requested a copy of the virus
so they could analyze it and tell me more about it (I forgot who,
though).  Sorry, but I won't send any live code to anyone for any
reason.  Thanks again for all the help.
                       --Jeffrey