CS200CAP@ST1.VUW.AC.NZ (Pat Cain, BB: +64 4 661231) (07/19/90)
/\_Someone writes... >Question.... >How is the Stoned-II virus different from the Stoned virus? It is different in that Stoned2 has different messages and is not detected by most of the programs that detect the original Stoned strain. >I found a couple of my floppies that were "infected" in the boot >sector with both. Using VirusSCAN (V64), I got the following: >Scanning for known viruses. >Scanning boot sector of disk A: > Found Stoned-II Virus (S-2) in boot sector. > Found Stoned Virus (Stoned) in boot sector. This occurs because of a mistake or misunderstanding between here and McAfee Associates. Simon sent a search string to McAfee that occured in both strains. McAfee took this to mean that the string only occured in Stoned 2. So if you have STONED in your boot sector then SCAN64 will inform you that you have Stoned and Stoned2. We suggest in the meantime that you use NOSTONE or FPROT111 which both detect and remove the virus correctly. NOSTONE currently is the only program which detects double infections (which occur when Stoned and Stoned2 clash with each other). Simon has sent a new search string to McAfee that only occurs in Stoned 2, so hopefully the next release of SCAN will be corrected. Pat Cain __________________________________________________________________________ NOSTONE.ZIP: e-mail st131mcs@st1.vuw.ac.nz for uuencoded version of this, or from Tornado BBS +64 4 329212, username: virus (no pwd). FPROT111.ZIP: available via FTP. eg. 130.160.20.80 {mibsrv.mib.eng.ua.edu}.