Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!uwm.edu!linac!att!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: storck@yogi.vmsmail.unibas.ch Newsgroups: comp.virus Subject: FLIP or OMICRON (PC) Message-ID: <0003.9105141317.AA10748@ubu.cert.sei.cmu.edu> Date: 13 May 91 09:32:00 GMT Sender: Virus Discussion List Lines: 18 Approved: krvw@sei.cmu.edu Hello everybody I have an IBM Clone 386/25 and suddenly I detected a virus with the following outlook.It converted EXE-,COM- and BAT-Files to files with the name of the little greek letter GAMMA and the attributes Read-Only,System,Archive and Hidden, though the files couldn't be deleted. After having detected it with two different programs (VIRScan, TNTVirus) I had two different names of the virus: FLIP , OMICRON. Now my questions: 1) Is 'FLIP' another name for 'OMICRON' ? 2) Infected files can be desinfected by TNTVirus 7.02. Are these files after desinfection 100% executable ? Many thanks in advance to everybody who can send me an answer ! Pascal