Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: csg020@cck.coventry.ac.uk (***CURTIS***)
Newsgroups: comp.virus
Subject: Unknown virus help! (PC)
Message-ID: <0001.9103191337.AA19481@ubu.cert.sei.cmu.edu>
Date: 13 Mar 91 14:45:25 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 31
Approved: krvw@sei.cmu.edu

Hello all.

	I have a little problem with my 386 PC. A few days ago I had
the Jeruselem B virus on my machine (it's going ripe round here). I
got rid of it but somehow it kept coming back....  (I know about the
memory resident thingies etc etc) In the end I got rid of it.

Yesterday, I ran my virus checker from hard disk. It came up with the
warning "Virus checker Infected. Do not use" So I ran the
write-protected version I had on floppy, No virus's found.  Next I
copied the virus checker from floppy to HD and ran it.  It, again,
said it had been infected. On further investigation I found that
whatever I had was appending itself onto the end of the file, around
10-15K worth. However, the virus only appends to a file once.

Has anyone out there got a good virus killer (shareware of course!)
that they could arc and mail me?? Or any suggestions as to what to do
(I don't particulaly want to HDWIPE the hard disk as I have only just
recovered from doing the last one! I do not think the boot sector is
infected which was my first thought.

Cheers for any help,

- --
_______________________________________________________________________________
_
| Flesh : ***CURTIS*** E-mail : csg020%uk.ac.cov.cck@uk.ac.earn-relay
|
| Voice : (0203) 599500 Quote : What a great day, watch some bastard spoil it!
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~