[comp.virus] Removing Azusa

CHESS@YKTVMV.BITNET (David.M.Chess) (06/12/91)

>From:    dwe29248@uxa.cso.uiuc.edu (Derek William Ebdon)
>The only way to
>disinfect a hard drive is to redo the low level format because the
>virus infects the boot sector and the dos partition.

A low-level format is certainly not the *only* way to fix an
Azusa-infected hard disk.  Any program that can write a valid boot
record to the partition-table area (preserving the partition
information and just fixing the code) will remove the virus from the
execution stream, and (since the Azusa uses only the partition table
area on a hard disk, and no sectors in the DOS partition or anywhere
else) that will disinfect the disk very nicely...  DC