34HLEFG@CMUVM.BITNET (Mark Strandskov) (02/02/91)
Hello, We could use a little help. We have a PC which seems to have a virus which is undetectable by SCAN6.3V72. Like most, it infects COMMAND.COM and then procedes to infect all executables. As far as we can tell, it changes the first 8-12 bytes and then appends about 1579-1591 bytes on the end of the file. It does change the date and time for the file. It doesn't display any message or signature associated with it. If a disk is write protected, it doesn't error but it will make the drive sound like it is eating your disk for lunch. The infected files generally seem to either lock up the computer or cause errors when executing the program. As of this time, we have only spotted it on one computer. I would greatly appreciate any assistance in identifying the virus. I am going to try to get in touch with McAfee Assoc. to help with this "pain in the lower tender region." Thanks. Mark Strandskov Central Michigan University 34HLEFG@CMUVM