Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!swrinde!elroy.jpl.nasa.gov!lll-winken!iggy.GW.Vitalink.COM!widener!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: martin@cs.UAlberta.CA (Tim Martin; FSO; Soil Sciences) Newsgroups: comp.virus Subject: new virus? ("evil empire" Stoned derivative) (PC) Message-ID: <0011.9104101917.AA00785@ubu.cert.sei.cmu.edu> Date: 10 Apr 91 18:29:37 GMT Sender: Virus Discussion List Lines: 14 Approved: krvw@sei.cmu.edu Has anyone else seen the boot sector virus that is plaguing some of the DOS computers at U of A? It displays an eight line text about the USA being the "evil empire" in the "impending war with Iraq". Obviously it was written before Jan 15, 1991. It wreaks havoc in the partition table of hard disks, and doesn't know how to properly format 3.5" floppies. McAfee's SCAN calls it "Stoned / Swedish", and the F-DISINF program calls it "a new version of stoned", and doesn't offer to remove it. We are now trying to decide whether this is a local virus, and also whether it has spread elsewhere. Tim Martin Soil Science, University of Alberta tmartin@vm.ucs.ualberta.ca