[comp.virus] Weird Stuff Happening to Pc's Here At Ohio Univ.

smash@oucsace.cs.ohiou.edu (Scott Mash) (03/06/91)

In one of our computer labs we have developed a very serious problem
with our pc's.  Most of the computers will not recognize the printers.
We have tried everything short of formating the hard drive and
rebuilding it.

We have been scanning almost everyone's disks because of prior
problems with stoned and ping pong.  Last week one of our lab
guardians came up to the office and reported that he scanned someone's
disk and found a virus called "ohio".  When he tried to clean it V72
couldn't recognize or clean it.

Does this problem sound like something a virus could cause.  Any
suggestions or anything that could possibly help us.

Thanks in advance,

Scott Mash

- --
|  Scott (Smasher) Mash                  |                                  |
|                                        |   Elvis lives !                  |
|  Internet: smash@oucsace.cs.ohiou.edu  |   Buddy Holly is the dead guy !  |
|  Bitnet: cs819@ouaccvmb                |                                  |

XPUM04@prime-a.central-services.umist.ac.uk (Anthony Appleyard) (03/07/91)

from: {A.Appleyard} (email: APPLEYARD@UK.AC.UMIST), Thu, 07 Mar 91 11:19:20 GMT
On 05 Mar 91 20:29:08 +0000 smash@oucsace.cs.ohiou.edu (Scott Mash) wrote:
(1) "....Most of the computers will not recognize  the  printers.  We  have
tried  everything short of formating the hard drive and rebuilding it.... "
(2) "....Last week one of our lab guardians  came  up  to  the  office  and
reported  that  he  scanned someone's disk and found a virus called "ohio".
When he tried to clean it V72 couldn't recognize or clean it....".
.......................................
There may or may not be a connection between these two events. There  is  a
PC  virus  called 'Ohio' which has been known of for quite a time. It could
be that why Version 72 (of which  antiviral  please?)  found  it  and  then
couldn't  clean it, is that a file on that PC contained an innocent program
containing a section of code that accidentally duplicated the part  of  the
Ohio virus used as a search signature. That sort of thing happens from time
to time, e.g. these messages in Virus-L vol4:-                        ISSUE
["Virus" story] hard disk crash?;
  antiviral thought that TOPS network software was a virus (longish)    025
[SCANv74B false positive (PC)] thought that KILLER.COM (a small Stoned
  remover) had/was Invader virus                                        032
F-FCHK with [New Leprosy signiture? (PC)] thought that Turbo Debugger 1.0
  TD.OVL & Turbo C++ 1.0 TCLASSS.LIB had or were Leprosy virus          025