8326442@AWIWUW11.BITNET (Martin Zejma) (07/09/90)
During the summer I'm working at a big computer software development
company here in Vienna. Like everytime I came there detecting viruses
all over our office's PC. It's allways the same old foe, the 1704
Virus (Cascade , Falling Letters,etc). It is almost impossible to
detect it without scanning for viruses, because the trigger date of
the versions floating around in Austria has never been changed from a
unfriendly hacker( original it is 1980 , or Oct to Dec 1988), so the
virus only infects everything as much as it can , but never starts its
'work'.
Allways up to date , i decided to remove it with CLEAN from John
McAffee, because i thought it would do the job quick and clean.
Fortunately, I copied all of the infected files to a floppy disc, to
have a 'backup' if problems would appear. And they did |||
1)On bigger COM-files , the original jump instruction has not been
restaurated correctly, some junk like (20,18,32) stood there, so
naturally the computer hanged up,
2) or about 3 quarters of the files were simply deleted , for example the
COM-file of Microsoft Chart 4.0 cut down from about 56 Kb to 9 Kb.
Expecting a possible error only in this version of CLEAN (V58), i tried
a newer one (V61) , the same junk appeared after the 'cleaning'.
In February i had to remove the same virus , but at that time i only
had good old M-1704 (also from John McAffee) , which changed the date
of all files th actual date / time , but worked well.
3) also CLEAN ended its run after cleaning 15 files, to heal 40 files i had
to start it 3 times.
Has anybody detected the same problems ?
Sincerly yours,
Martin Zejma
+-----------------------------------------------------------------------+
| Martin Zejma 8326442 @ AWIWUW11.BITNET |
| |
| Wirtschaftsuniversitaet Wien --- Univ. of Economics Vienna/Austria |
+-----------------------------------------------------------------------+