[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference powdml::pc_security

Title:PERSONAL COMPUTER SECURITY
Notice:SWEEP servers Note 5; more info on www-is-security.mso.dec.com
Moderator:BSS::BOREN
Created:Wed Jan 02 1991
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:504
Total number of notes:2905

486.0. "Deletes Program Groups?" by LJSRV1::BONNEAU (Rich Bonneau Windows NT S/W Group 226-2453) Mon Mar 03 1997 15:19

Friend reported what appears to be a virus on a Windows 3.1 system which seems
to randomly delete program group files from the Windows directory each time the
system reboots.

Anyone see this one and, more importantly, what version of F-PROT can
eradicate it?

Many thanks!

Rich
ServerWORKS Engineering
Acton MA
T.RTitleUserPersonal
Name
DateLines
486.1Have you tried this?TROOA::trp147.tro.dec.com::ACHANArthur Chan @TROMon Mar 03 1997 21:3111
Rich,

I have not heard of this behaviour before.

Have you tried booting from a clean floppy and running 
either Sweep for DOS (v2.94) and F-Prot(v2.25) on the 
system?

Regards,
Arthur
I.T. Security
486.2Where can I find these?LJSRV1::BONNEAURich Bonneau Windows NT S/W Group 226-2453Tue Mar 04 1997 14:177
    Arthur,
    
    	Where can I get these versions of the software?  I will copy them
    and then try to see if they can find anything.
    
    Thanks,
    Rich
486.3TROOA::trp147.tro.dec.com::ACHANArthur Chan @TROTue Mar 04 1997 14:5727
Rich,

As you are located in AKO, may I suggest using AKO-OFFICE-1 as 
your local site server.   Just map a network drive to 
\\ako-office-1\sectools.

 Sweep for DOS is located in:

\\ako-office-1\sectools\sweepdos

F-Prot is located in

\\ako-office-1\sectools\f_prot

To create a floppy you do not need to copy all the files in the 
directory, there is a set of detailed instructions on the web, at 

http://www-is-security.mso.dec.com/is-sec/pc-sec/digital-virus-faq.html

Refer to Question #13.

Please keep me posted.

Regards,
Arthur
I.T. Security