Path: utzoo!utgpu!news-server.csri.toronto.edu!mailrus!uwm.edu!cs.utexas.edu!rice!uw-beaver!Teknowledge.COM!unix!garth!dbarnes
From: dbarnes@garth.UUCP (Dave Barnes)
Newsgroups: comp.sys.ibm.pc
Subject: Re: Stoned virus on IBM PC's
Message-ID: <100@garth.UUCP>
Date: 14 Mar 90 20:03:05 GMT
References: <9003132030.AA03562@fsucs.cs.fsu.edu>
Reply-To: dbarnes@garth.UUCP (Dave Barnes)
Distribution: usa
Organization: INTERGRAPH (APD) -- Palo Alto, CA
Lines: 33

In article <9003132030.AA03562@fsucs.cs.fsu.edu> boyd@nu.cs.fsu.edu (Mickey Boyd) writes:
>We have several machines (386 clones w/80mb hd's) infected with the "Stoned"
>virus.  On bootup (from floppy), the computer complaines about it's setup

>I need to know if the virus could have infected the hard drives, and I also
>need a virus killer that can eradicate this damn thing.  Please respond to th

>Also, does this virus do anything other than be annoying?  I mean in terms of
>data manipulation/destruction????  Is it a boot sector virus, or does it hook
>itself to .com, .exe, or other files?!?

According to a reference chart from McAfee Associates, the Stoned virus
"infects fixed disk partition table...infects floppy diskette boot...
remains resident...corrupts or overwrites boot sector...affects system
run-time operation...directly or indirectly corrupts file linkage."
Apparently it does not hook itself to .com or .exe files.

CleanUp, a program available from McAfee Associates (bulletin board
is 408/988-4004) will take care of it.  I believe the archieved file you
want is CLEANP59.ZIP.  Registration costs, I believe $35 per year
(free upgrades for a year).

Also, if you don't have it already, you must get SCANV59.ZIP, which 
is the latest version of McAfee's virus scanner.  It is dynamite
and at $25 registration (including free upgrades for one year), it is
a real bargain.

-- 
----------------------------------------------------------
David Barnes
UUCP: {pyramid,sri-unix,ingr}!apd!dbarnes     415/852-2365
USPS: Intergraph APD, 2400 Geng Road, Palo Alto, CA  94303
----------------------------------------------------------