[comp.virus] Stoned Virus Clear

OP@TRAKDEN.BITNET (Yavuz Selim KOMUR) (07/27/90)

Hello Virus networker.
We have Stoned virus in PC. How I clear virus it from  partion table
I tried to format hard disk two times, but I couldn't successfull .
Thank for your comments.

Yavuz.

SANTO@SENECA.BITNET (07/28/90)

If you're going to use the Norton Advanced Utilities you may as well remove
the Stoned virus while you're there.

Hard Disk Infection:
        - copy Side 0 Cylinder 0 Sector 7 to Side 0 Cylinder 0 Sector 1.
        - 007 is where your original partition table has been moved.

Floppy Diskette Infection:
        - copy Side 1 Cylinder 0 Sector 3 to Side 0 Cylinder 0 Sector 1.
        - 103 is where your original boot sector has been moved.

This may not work for all variations of the Stoned virus but it probably will.

Good Luck.
-
 -------------------------------------------------------------------------------
Santo Nucifora                 :    Address: SANTO@SENECA.BITNET
Seneca College of              :
Applied Arts and Technology    : Disclaimer: What's a disclaimer?!?
-
 -------------------------------------------------------------------------------

frank@relay.EU.net (Mulder F.J.M.) (07/30/90)

Dear Yavuz,

I had a similar case recently, and the method used to destroy the virus
in the partition table was as follows:

- - Boot the machine from a write protected, non infected system disk,
so that the virus does not become resident and infects the system
immediately after you removed it.

- - Find a PC of the same brand as the infected one, with the same
harddisk and the same partition of the harddisk.

- - Use Norton Utility (advanced edition) to make a copy of the
partition table of the non-infected harddisk (use absolute sector
0 0 1 write to file as described in the booklet that came with
your Norton utilities)

- - Again use the Norton utility to write this file on the infected
system to absolute sector 0 0 1.

- - if all went well, you should now have a clean harddisk and you can
continu to clean all infected diskettes, by copying them to clean
diskettes followed by a format.

Note: depending on your harddisk it might either be nessecary to
copy only the very first physical sector, or the whole first
track. You can find out by using the partition table editor to see
where the first logical sector starts.

If you have any questions, you can contact me at FJ_Mulder@pttrnl.nl