Path: utzoo!news-server.csri.toronto.edu!cs.utexas.edu!rice!uw-beaver!ubc-cs!fs1!ee.ubc.ca!jmorriso
From: jmorriso@ee.ubc.ca (John Paul Morrison)
Newsgroups: comp.windows.ms
Subject: Re: ***WARNING*** possible windows virus in the cica uploads directory
Message-ID: <1991Mar14.121314@ee.ubc.ca>
Date: 14 Mar 91 20:13:14 GMT
References: <2610@travis.csd.harris.com>
Sender: root@fs1.ee.ubc.ca
Reply-To: jmorriso@ee.ubc.ca
Organization: UBC Electical Engineering
Lines: 36

In article <2610@travis.csd.harris.com>, leoh@hardy.hdw.csd.harris.com
(Leo Hinds) writes:
> 
> 
> Hopefully I am crying wolf, but the following is what happened to me
right now

> 
> 3) I copied win.ini to the location I had "yourway" as the data
location (a 
>    networked drive) & tried to run it again, this time specifying the
complete 
>    path where yourway was located & hit the ok button, again UAE ...
but his 
>    time windows was also hung.
> 
> 4) warm-boot pc & reenter win ... looks funny ... try & edit win.ini
... 
>    contents are gone & replaced with:
> 
> 	<binary garbage> YourWay Ha Ha Ha! <binary garbage mixed with some 
> 	text strings>

I don't think you can rule out a virus, but you also can't rule out
crappy programming!!
I remember a bug ridden program called click (or  something) that was
posted to cica,
way back last August. I had to hunt around with Norton Utilities (Bless
him!!) to pull
out the severely ravaged WIN.INI file. Lesson: back up WIN.INI and
SYSTEM.INI! they are
some of the most important files! A SYSTEM.INI file is a  strange,
subtle thing that can
take months to evolve into the "perfect setup"

John Paul Morrison