Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!pacific.mps.ohio-state.edu!linac!att!news.cs.indiana.edu!cs.widener.edu!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: VANTENT@HROEUR5.BITNET
Newsgroups: comp.virus
Subject: Re: Stoned Again (PC)
Message-ID: <0001.9103211827.AA22577@ubu.cert.sei.cmu.edu>
Date: 19 Mar 91 11:56:00 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 22
Approved: krvw@sei.cmu.edu

In a message of <13 Mar 91 08:57:12> Fridrik Skulason wrote:
 > You never need to low-level format a disk infected by 'Stoned',
 > to get rid of the virus.  If the virus manages to infect the hard
 > disk successfully, you should be able to remove it by booting from
 > a 'clean' system disk and running a disinfector program.

I thought so too, but lately got into trouble with some Olivetti M24
pc's ... a [Stoned] infection immediately resulted in some subdirs
full of illegal file entries, lost clusters, and crosslinks.

The same thing happened again within a day after low-level formatting
the system, when another user didn't think it necessary to check his
disk or even removing it while rebooting. So I'm pretty sure it's the
Stoned infection that's causing the FAT and/or DIR problems, it may be
because of a non-standard FDISK that comes with Olivetti's MS-DOS 3.2.

Anyhow, it helps to have a backup :-)

Jan van 't Ent, Apparatuurbeheer (microcomputer support & maint dept)
                           ERASMUS
VANTENT@HROEUR5.bitnet   UNIVERSITEIT   telefoon +31 10 4081337
jvte@cs.eur.nl  usenet    ROTTERDAM     telefax  +31 10 4081372