ry15@rz.uni-karlsruhe.de (Christoph Fischer) (11/21/90)
Second message on the DOS-TREND magazine. I now received several copies of the magazine! we have two groups of people claiming there is a virus or trojan on the disks! 1. the "AIDS-TROJAN" This is certainly a false alarm these people used an older version of TNT-SCAN (Carmel) that had an ambigous search string. In fact it probably searched for the instrinsic part of MS-BASIC 3 compiled code. Thus it claimed that any file created by that BASIC is an AIDS-TROJAN 2.Some people claim there is STONED II on the disk. We couldn't find any infection on our samples! I am waiting for mail to arrive from people who had an infection on their disks. Since the disks are write enabled it is hard to say who put the virus on the disks. At the moment I can't say if it is just a coincidence that several people infected their disks with the *same* virus or if a certain ammount of the production load was infected. The publisher claims that their machines are clean! I'll publish more when we are done with the search but then in VIRUS-L not on VALERT-L ******************************************************************** * Christoph Fischer * * University of Karlsruhe * * Micro-BIT Virus Center * * Zirkel 2 * * W-7500 KARLSRUHE 1 Germany * * BITNET : RY15@DKAUNI2.BITNET * * INTERNET : ry15@rz.uni-karlsruhe.de * * Tel.: +721 37 64 22 FAX: +721 32 55 0 * ********************************************************************