[comp.virus] Stoned and Stoned-II

JPARR1@UA1VM.ua.edu (Mark Parr) (07/11/90)

Question....

How is the Stoned-II virus different from the Stoned virus?

Another one....

I found a couple of my floppies that were "infected" in the boot
sector with both.  Using VirusSCAN (V64), I got the following:

Scanning for known viruses.
Scanning boot sector of disk A:
  Found Stoned-II Virus (S-2) in boot sector.
  Found Stoned Virus (Stoned) in boot sector.

Using CLEANUP A: (S-2) I got a message saying that it could not be
safely removed.  However, when I did CLEANUP A: (Stoned), that worked
ok.  Then when I re-SCANed the program, Stoned-II was no longer there.
So, does removing Stoned remove Stoned-II or does this appear to be a
problem with SCAN.  The hard drive from which the floppies were
infected was found to be infected with just Stoned (This was
determined with SCANV63 -- that's what makes me think that it could
just be a bug -- unless V63 doesn't catch Stoned-II???).  Anyone got
any ideas on this?

NOTE: Brackets for SCAN were replaced with parentheses...   :)

- ----------
"Sometimes I think the surest sign that intelligent life exists
elsewhere in the universe is that none of it has tried to contact us."
                                          -=Calvin=-
- ----------

               |-- JPARR1@UA1VM.BITNET  --  JPARR@MIBSRV.MIB.ENG.UA.EDU
   Mark Parr --|-- University of Alabama in Tuscaloosa
               |-- (Where you can sleep all day and still be tired.)

CHESS@YKTVMV.BITNET (David.M.Chess) (07/11/90)

Mark Parr <JPARR1@UA1VM.ua.edu>:

> How is the Stoned-II virus different from the Stoned virus?

> Using VirusSCAN (V64), I got the following:
>
> Scanning for known viruses.
> Scanning boot sector of disk A:
>   Found Stoned-II Virus (S-2) in boot sector.
>   Found Stoned Virus (Stoned) in boot sector.

SCANV64 apparently has an error that causes it to identify
Stoned-infected diskettes as having both the Stoned and the Stoned-II.
Try just removing the Stoned, and see if that fixes it.  (In general,
I can't think of a way a diskette could have two different viruses in
the same boot sector, at least not with the kinds of boot-sector
infectors that we've seen so far.  Of course, there could be one virus
in the boot sector, and another in the saved copy of the "original"
boot sector stashed away by the first, but a scanner that just read
the boot sector would see only one virus.)

DC