Path: utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!uwm.edu!rpi!image.soe.clarkson.edu!sunybcs!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw From: bgsuvax!mckeeby@cis.ohio-state.edu (Jon Mckeeby) Newsgroups: comp.virus Subject: Ping Pong Virus (PC) Message-ID: <0009.9002272100.AA08620@ge.sei.cmu.edu> Date: 27 Feb 90 16:48:56 GMT Sender: Virus Discussion List Lines: 26 Approved: krvw@sei.cmu.edu An IMB PC with a hard disk in a lab of ours was infected with the Ping Pong Virus. I know that the Ping Pong Virus is a boot infector virus so we removed it by using the DOS SYS command. However, I have other questions about the virus. If you have an answer please reply via the newsgroup or my mailing address: mckeeby@andy.bgsu.edu. 1. How does the virus spread? 2. Are there available detection/protection programs to safeguard against new infections. What are they? 3. How is the virus activated? 4. What does the virus do besides infect the boot sector? 5. Is the DOS SYS command the best way to remove the infection? 6. Are there public domain programs to remove an infection of the ping-pong / bouncing ball virus? What are they? 7. Is the ping-pong and the bouncing ball virus the same virus? 8. An infected user said they had the Brain virus on there disk and before using the infected ping-ponged hard disk it was clean. Is there any correlation between these two viruses? I don't think so, but I want to make sure. Thank you very much for your time, Jon McKeeby Graduate Assistant Microcomputer / Microcomputer Virus Support Bowling Green State University