Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!think.com!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: 72571.3352@CompuServe.COM (Wolfgang Stiller) Newsgroups: comp.virus Subject: Partition Table Viruses (PC) Message-ID: <0010.9105201353.AA06044@ubu.cert.sei.cmu.edu> Date: 18 May 91 03:38:31 GMT Sender: Virus Discussion List Lines: 33 Approved: krvw@sei.cmu.edu >From: "Anthony H. Galway" > > Our PC labs have been recently become victim of several >partition table viruses, namely Bloody!, Azusa and Stoned. I find >that McAfee's CLEAN works well on the STONED allowing it to clean the >partition table almost all the time (rarely, though it happens, it >seems to be to far gone and I end up doing a format), but the BLOODY! >virus seems to be a bit more advanced more often than not the CLEAN >program claims that it can not safely remove the virus from the >partition table ... and so ....format C:! > > Now am I the absolute soul of niavete by taking this action, >or am I doing the only thing possibly? Is there any better anti-viral >around that can handle partition table problems? If not is there any >way to better protect ourselves. There are tools: CHKBOOT and LODBOOT which come with the PCdata Integrity toolkit (Free) which will detect any boot or partition table infections and reload if these sectors should be infected. (The toolkit also detects any file corruption or virus infection) Reloading the partition sector would have solved your problem without the need for a "format C:" unfortunately, you've got to use CHKBOOT before your partition table is infected. These programs are available on CompuServe (GO ZNT:UTILFORUM) and download PCDCOM.ARC and PCDART.COM for the toolkit and the (self-extracting) article. These files are also on many BBS systems including the NCSA BBS 202-364-1304. Please read my article in the Feb 13th 1990 PC Magazine to learn all about this free software without downloading. If used according to directions the toolkit provides a complete virus detection system that will detect ALL viruses. Wolfgang Stiller (Stiller Research) Author of the PCdata Integrity Toolkit