[comp.virus] Stone-2

Michael_Kessler.Hum@mailgate.sfsu.edu (01/12/91)

Someone mentioned that Stone-2 has not reached the States yet.  Maybe
not.  But I have had an infection that has been "dual."  Running Scan,
I would be told that I had an infection of Stone and Stone II.  But
one pass of Clean would remove it.  Since then I have switched to
F-Prot, have had infection of Stone, but no indication that Stone II
was involved (I am using Roman numerals because that is the way it was
identified; is there a difference between Stone II and Stone-2?)

MKessler@hum.sfsu.edu

CHESS@YKTVMV.BITNET (David.M.Chess) (01/15/91)

Michael_Kessler.Hum@mailgate.sfsu.edu:
> Someone mentioned that Stone-2 has not reached the States yet.  Maybe
> not.  But I have had an infection that has been "dual."  Running Scan,
> I would be told that I had an infection of Stone and Stone II.

Early on, a signature for the "Stoned 2" (or "Stoned II") was
circulated that in fact occurred in the normal Stoned virus.  Because
of this, at least one scanner would report both Stoned and Stoned II
when scanning a disk with the usual Stoned on it.  I suspect that's
what you saw...  DC

timt@ashtate.A-T.COM (Tim Trimble) (01/17/91)

We have had the stone virus pop up here with one or two incidents but
was able to catch it with the McAfee software.  So the suggestion of
the stone virus not being in the states yet can be considered false.

- --
=============================================================
Timothy Trimble (Ashton-Tate 213-538-7625)
timt@ashtate.a-t.com     Unix
76306,1115               Compuserve

CHESS@YKTVMV.BITNET (David.M.Chess) (01/24/91)

Tim Trimble <timt@ashtate.A-T.COM>:
>We have had the stone virus pop up here with one or two incidents but
>was able to catch it with the McAfee software.  So the suggestion of
>the stone virus not being in the states yet can be considered false.

The Stoned virus is definitely common in the States; but
the "Stoned 2" (a variant, not identical to the Stoned)
has only been seen in Australia/New Zealand.  The
various U.S. "Stoned 2" reports that we heard awhile back
all, as far as I know, turned out to be due to the
signature confusion that I mentioned earlier: some
scanners would report the "Stoned 2" when scanning
a disk with the usual Stoned virus on it.           DC