[comp.virus] Q: Do I Have a Virus --> answered :-)

rfink@eng.umd.edu (Russell A. Fink) (02/16/91)

Many thanks to those who responded. As you recall, I had two machines
with identical numbers of bad bytes on their hard drives, which made
me suspect viral infection (vi).  I solicited responses from this
newsgroup, and received many replies.

I downloaded McAfee's scanv74c (or whatever the latest version is)
from the SIMTEL20 archives, unzipped it, ported to my PC, did all that
was required, and found that no viruses were present on either
machine. Barring the possibility that I have a new viral strain, or
one which is not checked as part of McAfee's list of 166, I have
reason to believe that the chkdsk numbers were just coincidence -- it
is a known fact (ref: a reader from South Africa) that hard disks come
with defective sectors.

For those interested, I accessed SIMTEL20 via
ftp 26.2.0.74
and downloaded with the following:
binary
get PD1:<MSDOS.TROJAN-PRO>SCANV67C.ZIP
get PD1:<MSDOS.TROJAN-PRO>SCANV67B.ZIP
Since I am quoting some older mail, and I have newer versions,
try downloading
ascii
mget PD1:<MSDOS.TROJAN-PRO>00-*
which will give you the index of that particular subdirectory, which
contains many helpful utilities and virus information.

Thanks again to the Army, the NewsNet community, and all the people
who took time to respond.

- --
   //=====   //=====   Russ Fink  ===============
  //        //____     rfink@eng.umd.edu
 //        //          University of Maryland
//=====   //=====      College Park  ============