[comp.binaries.ibm.pc.d] Variant of Stoned virus

mcafee@NETCOM.COM (McAfee Associates) (06/08/91)

                                                 June 7, 1991
 
 
     A new Stoned variant is becoming widespread in the US and Canada
which is not detected by version 77 of SCAN.  The /EXT external virus
data option in SCAN and CLEAN can be used to identify and disinfect
the virus.  The external virus data file should read:
 
"A1 13 04 48 48 A3 13 04 B1 06 D3" PS-Stoned Variant [Stoned]
 
To scan a system for the virus, type in:
 
        SCAN x: /EXT filename
 
Where "x:" is the drive to be scanned, and "filename" is the name of
the external virus data file.
 
 
To remove the virus, type in:
 
        CLEAN x: /EXT filename [STONED]
 
Where "x:" is the drive to be scanned, and "filename" is the name of
the external virus data file.
 
     The symptoms for thia variant are similar to the Stoned virus,
however, no message is displayed.
 
 
Aryeh Goretsky
McAfee Associates Technical Support
mcafee@netcom.com