Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: 7340P@NAVPGS.BITNET (robert c. morales) Newsgroups: comp.virus Subject: Possible PC Virus (PC) Message-ID: <0006.9106171414.AA16331@ubu.cert.sei.cmu.edu> Date: 13 Jun 91 20:36:04 GMT Sender: Virus Discussion List Lines: 21 Approved: krvw@sei.cmu.edu I have a Packard Bell with an 80386X-16 Mhz CPU. It runs on MS-DOS 4.01 and a Dosshell 4.0. Everytime I do work on the computer (word processing, networking, games, etc.) DOS seems to create (on its own) a file, named numerically or alpha-numerically but in a random fashion, of about 15K in size (with a range of from 7K to 17K). When you try to view the file (which incidentally sits among the DOS files), you can make out that it is bits and pieces of what is on the hard drive. Initially, it has not affected any other program on the hard drive. However, two days ago, the DOS files appeared to have replicated themselves with such names as EDLIN._OM and AUTOEXEC._AT, all of which were 77 bytes in size with the same dates and times. This necessitated reformatting the hard drive. Also, the Dosshell was removed from the AUTOEXEC.BAT. Right now, the problem seems to have been corrected, whatever it was. Is anybody familiar with this problem? Most other resource people I I have consulted about this have indicated that they have only heard about this on Packard Bell computers. Any tips? Robert Morales 7340p@navpgs 7340p@cc.nps.navy.mil