BHOLMES@WAYNEST1.BITNET (Brian Holmes) (08/12/88)
I thought that this message would be good info for all ST users.
This is a message that has appeared on several BBS's here in
Southeastern Michigan.
Virus Warning!!!!!!
This is a warning being sent out to ALL ATARI ST users...there is a desk
accesory called DIGI.ACC that has been uplaoded to MANY Michigan BBS's.
The Sysop of the Digital Delay(313-546-4410) was going back through his file
section trying out old files, he tried DIGI.ACC, its a digital clock that
was uploaded by a new Atari ST user(i have not seen him before, and i am
knowledgeable of the few ST users out there, although i can always be
wrong), the acc when activated, opens a small window(2X5 cm) with a clock
in it, and the name Uhri at the top (The "U" has a double dot above it),
sometime during its running, it destroys the disk, apparently attacking
the FAT, the sysop (Kieth Troesch) was running it, went to drive A and
found nothing on it, with a disk editor (Michtron Utilities) he found
nothing in the boot track, i was curious, D/L'ed it, and ran it left it
to sit, after a while, with not mcuh happening, we continued chatting
on the BBS, when i logged off, i checked the disk to find nothing
wrong, i then called another BBS to put a message up about a "possible"
virus, i then again checked my disk, a terminal disk that i was testing
it on (i backed it up first), it contained the following files:
Vanterm<foler> Vanterm.cfg
Vanterm.prg
D_edit<Folder> D_edit.TOS
Maxidisk<Folder> Maxidisk.prg
Macromse.acc
trasnfer.acc
digi.acc
STtrubo.acc
When i did a Directory, i got Data on disk drive A not responnding, i checked
twice, trying dir's from diffent programs, and the desktop, with no
luck of finding anthing at all, i checked it with DLII by Simon Poole
and the FAT table was Bad.
Since i was on-line for so long, i do not know how long it took for it to go
off (the virus), but it definetly did go off.
So beware of DIGI.ACC, if you see it on a BBS, inform the SysOp of the
situation, or if you have, take great caution in its use, or delete it
all together.
If you have any questions about this, i can be reached on the following BBS's:
Digital Delay(313-546-4410)
Bloom County(313-582-0888)
The Island(313-675-5888)
Cosmic STomper(547-0440, semi private system, must have password active)
Downriver Outpost(675-4660)
Sorry, no Bitnet, Bix, or Compuserve address...
-Eric Connelly, Co-Sysop of the Digital Delay, Atari sysop of the Island,
Atari Co-sysop at Bloom County.
*******************************************************************
* Brian Holmes \ / ___ *
* Wayne State University \/\/su | | *
* Detroit Michigan ____| |____ *
* | | | | *
* BITNET : BHOLMES@WAYNEST1 | | | | *
* INTERNET : Brian_Holmes%WU@UM.CC.UMICH.EDU | | | | *
* UUCP : {UMIX|ITIVAX}!WAYNE-MTS!BRIAN_HOLMES ============= *
*******************************************************************jpdres13@usl-pc.usl.edu (John Joubert) (08/30/88)
--------- Are you sure that this thing is causing a virus? I have been using that very same accessory since early 1986 or so and have never had any problem. Unless the old accesory has been fiddled with.... hmmm ... the one that I use has "Uhrli" not "Uhri" on the title bar of the window. Maybe that is the way to tell the difference, if you can confirm that the title bar says "Uhri" on it, please respond. ---------------------------------------------------------------------------- John Joubert | /\ | /\ | _ jpdres13@usl-pc.USL or ... | \|<>|>|> \|<>|>|><`|`| ut-sally!usl!usl-pc!jpdres13 |-----/|-------/|---------------------- GEnie: J.JOUBERT | \/ \/ -----------------------------------------------------------------------------