| Title: | AMIGA NOTES |
| Notice: | Join us in the *NEW* conference - HYDRA::AMIGA_V2 |
| Moderator: | HYDRA::MOORE |
| Created: | Sat Apr 26 1986 |
| Last Modified: | Wed Feb 05 1992 |
| Last Successful Update: | Fri Jun 06 1997 |
| Number of topics: | 5378 |
| Total number of notes: | 38326 |
<<< FRSOLD::IS$NOTES:[NOTES$LIBRARY]AMIGA_SYS.NOTE;2 >>>
-< comp.sys.amiga - postings >-
================================================================================
Note 4030.0 Virus Warning No replies
FRAIS2::ZIMMERMANN "lanl!rbw" 41 lines 7-DEC-1989 13:11
--------------------------------------------------------------------------------
Path: shlump.nac.dec.com!decwrl!sun-barr!cs.utexas.edu!usc!zaphod.mps.ohio-state.edu!uakari.primate.wisc.edu!aplcen!haven!adm!cmcl2!lanl!rbw
From: rbw@lanl.gov (Bob Walker)
Newsgroups: comp.sys.amiga
Subject: Virus Warning
Keywords: Xeno, AC#5 AC#6
Message-ID: <38185@lanl.gov>
Date: 6 Dec 89 21:45:51 GMT
Organization: Los Alamos National Laboratory
Lines: 31
-----------------
Virus warning ---
-----------------
On Friday 12/1/89 I received a disk from Amazing Computing (their PD
disk AC#6) that was infected with the Xeno virus. I have since
cleaned up my hard disk, and verified that it was in fact the AC disk
that introduced the virus.
I spoke to a representative from PiM (Mike) and he verified that two
of their disks, AC#5 and AC#6 were distributed with this virus. On
AC#6, the virus is present in at least the following two files : CLI
(in the main directory) and less (in the c: directory). You can
detect this virus with VirusX 4.0, and you can detect/deactivate it
using the KV utility that was included in the VirusX4.0 distribution.
Xeno can also be deactivated with a utility called XenoZap (?), which
I've not heard of before. Amazing Computing was unaware of the
presence of the virus on their machines/disks prior to approximately
last Friday. I was told that I could get clean copies of the disks I
ordered by returning the infected ones.
If you obtained copies of these disks recently from AC, I suggest you
inspect the disks very carefully. The people at AC were completely
cooperative, and suggested that I post this info.
Bob Walker, T-12, LANL
rbw@t12.lanl.gov
| T.R | Title | User | Personal Name | Date | Lines |
|---|---|---|---|---|---|
| 3193.1 | Commercial s/w viruses | HPSCAD::DMCARR | Asleep at the mouse | Wed Jan 24 1990 04:17 | 18 |
I ordered some s/w from Computability before Christmas. One of the
disks (Word Master, a piece of educational s/w from Unicorn Software)
was infected w/ the SCA virus. Called Unicorn, they said it was news
to them. (I made a backup & let VirusX loose on it).
Also bought Digitek's Hole in One Mini Golf. The program disk had a
bad sector in the tutorial; called Digitek, they sent out a new disk
which arrived damaged a week or so ago. Called them again, they sent
out another which arrived today - complete w/ the Lamer II virus. The
original disks were not infected. This one came directly from Digitek.
They'll get a call tomorrow. Time to let VirusX do its stuff once again.
I can see the risk of getting viruses off of bbs's, but to see it in
commercial s/w... Moral: keep VirusX up and running at all times.
-Dom
| |||||
| 3193.2 | Me too! | HPSCAD::GATULIS | Frank Gatulis 297-6770 | Wed Jan 24 1990 12:26 | 17 |
I also got Hole-in-One for christmas. I ordered from Able
1. Hole In One (2 disks)
2. Extra course Disk
Both of the Hole-In-One diske were infected with "Lamer II", right
out of the shrink wrap.
I can't for the life of me understand why Commercial Companies
don't do more to protect against this.
I have an idea! How about every time a commercial vendor sends
us an infected product, we immediately ZAP the Virus and make
the product PD. That ought to get their attention eh!
Frank
| |||||
| 3193.3 | MSVAX::BARRETT | It's not a mouse, it's a rat | Wed Jan 24 1990 15:32 | 9 | |
I wonder if it is also possible that these disks were "re-shrink
wrapped"? I know a few stores, for instance, that will demo a product;
then re-wrap it to sell it. A virus could get onto the disk that
way also.
Re: -.1
I'd be happy if I just got the product for free.
| |||||
| 3193.4 | MQOFS::DESROSIERS | Lets procrastinate....tomorrow | Fri Jan 26 1990 12:29 | 9 | |
A friend came over and we swapped a few files, on one of his disquettes
VIRUSX identified the LAMER II. After I checked all the files on the
boot partition with KV (kill virus) and could find no evidence of it.
Now I wonder if VIRUSX will let the virus on the floppy transfer itself
to others (especially hard disks) or it will prevent it from doing any
harm when the requester asks to eradicate it.
Jean
| |||||