C
2/50: Has anyone heard...
Name: Lady Danica #237 @5297
Date: Tue Oct 08 07:42:46 1991
From: -=*The BD BORD*=- [DREM] [PH] [512-442-7883]
[STATUS:] Reply Wanted.
of a new one called DIR-B? Supposedly it's so new that it's not detected by
any of the current programs...
-----]-- Lady Danica - Renunciate's Guild
[ORIGIN] -=THE BAD BOARD AUSTIN=- *WWIVnet @5297*
-=64 Msg Subs & 30 Online Games!=-
Take The Plunge At (512)442-7883 300/1200/2400 Baud
3/50: homie dont speak that
Name: Sunstriker #1 @5297
Date: Tue Oct 08 11:36:37 1991
From: -=*The BD BORD*=- [DREM] [PH] [512-442-7883]
[REPLY TO:] Salut
[STATUS:] Reply Not Needed.
sigh
[ORIGIN] -=THE BAD BOARD AUSTIN=- *WWIVnet @5297*
-=64 Msg Subs & 30 Online Games!=-
Take The Plunge At (512)442-7883 300/1200/2400 Baud
4/50: Dark Avenger
Name: The Controller #256 @5297
Date: Tue Oct 08 22:42:44 1991
From: -=*The BD BORD*=- [DREM] [PH] [512-442-7883]
[STATUS:] Reply Wanted.
Has anyone out there had any experience with the Dark Avenger virus? I think
I have two strains of it. One is called Dark Avenger, and the other is Dark
Avenger 2000. Problem is, SCANV82 only detects Dark Avenger. So does
CLEAN82. I found the other strain using a different scanning program. I
finally traced the DA 2000 virus down to one file, but SCAN said that it was
clean. But if I ran the file, SCAN detected it in memory, but still not on
disk. Needless to say, I deleted the file, but I'm worried about other files
that might be infected in the same way. I don't have access to the program
that found it anymore. Any suggestions? I need to know where to get other
anti-virus programs besides SCAN and CLEAN. I also need to know where the
newest version of VSHIELD can be obtained. Anyone? Anyone ? HELP!
Thanks,
The Controller
[ORIGIN] -=THE BAD BOARD AUSTIN=- *WWIVnet @5297*
-=64 Msg Subs & 30 Online Games!=-
Take The Plunge At (512)442-7883 300/1200/2400 Baud
5/50: Im Beta Testing it, somewhat..
Name: Ghost Wheel #1 @9709
Date: Tue Oct 08 23:38:26 1991
From: The City Of Avalon [907-443-3189]
RE: Scan
I got a copy of the Beta..
6/50: About the fake -AV
Name: Mark #1 @8868
Date: Tue Oct 08 09:00:59 1991
From: The Radio Control Model Plane BBS [818-919-2879]
It's a file called MAKEAV.ZIP that can create the correct code to give a person a "registered" copy of PkWare's PkZip...
-=The Radio Control Model Plane BBS 818-919-2879=-
7/50: Joshi Virus
Name: Kebin Chung #28 @8868
Date: Tue Oct 08 23:59:49 1991
From: The Radio Control Model Plane BBS [818-919-2879]
I just got a "JOSHI" Virus on my HD about a week ago. It did something funny
to my boot sector so that I couldn't boot by pressing the "ALT-DEL" process.
Anyway, I used "Central Point" and "NORTON VIRUS" scan to detect and get rid
of it, only after a week later..... I get a warning again! It warns me that a
JOSHI VIRUS is present, and that I should use Central Points Virus Scanner
(CPAV.EXE) to clean it. But when I do this, the Scanner doesn't detect
anything! The program I run is called NDD (Norton Disk Doctor) which when
scanning the HD gives me the warning sign.
This is my second computer that the virus is on, and it's got about 200
Meg worth of stuff I don't care to delete. Can anybody tell me why it's
giving me these warnings, because when I run the Central Point & Norton Virus
scanners, they don't detect anything. I am booting of a "safe" floppy. So
it's not like stupid or anything. I also tried putting in a new Command.com
and the two system hidden fils, but I still get the message. Apparently, the
cleaning process still has left some or all of this virus somewhere in my HD.
Any suggestions? I don't even use the comptuer right now. I've written to
Central Point, but I don't know how long this is goin to take. Help!!!
-=The Radio Control Model Plane BBS 818-919-2879=-
8/50: the latest scan version
Name: Loki Trickster #263 @5211
Date: Fri Oct 11 18:19:37 1991
From: Blitzkrieg [502-499-8933]
RE: I have not read French in
BY: Mesmer #28 @8365
is NOT v. 82. A new version was issued yesterday. I think it's v. 84.
Don't know fer sure, but the file date is October 10 (I think) 1991.
9/50: All of the McAfee stuff
Name: Mesmer #28 @8365
Date: Sat Oct 12 13:21:40 1991
From: The Coffee Shop [813-840-0217]
RE: Dark Avenger
BY: The Controller #256 @5297
can be DL'd right from their bbs. I don't have the number at hand, but it is
in the docs for SCANV82, etc....
If you don't want to do that, I guess you will have to scout around your area
for it. If you don't want to do that, leave me E-Mail and I willgive you my
bbs phone number. I always have the very latest McAfee, straight from their
bbs. (Cheaper to call them, I am LD, too!)
MESMER
10/50: McAfee Assoc. BBS#
Name: Mike #34 @8365
Date: Sat Oct 12 18:57:04 1991
From: The Coffee Shop [813-840-0217]
The number for McAfee Assoc. BBS, HOMEBASE, is (408) 988-4004. There are also
lines for HST and V.32, but I don't have them. They are in the log-on screen.
If you are calling just to d/l anti-viral programs, you needn't register, use
the "Guest User" account, first name "GUEST", last name "USER", and password
"123". This information is also presented in the log-on screen.
Later, Mike
Sysop: Plain Vanilla (813) 831-5779
GEnie: M.TYSON2
11/50: MAKEAV.ZIP
Name: No Beta #23 @8365
Date: Sat Oct 12 21:46:36 1991
From: The Coffee Shop [813-840-0217]
RE: About the fake -AV
BY: Mark #1 @8868
Thanks for the info!
{- o a t -}
12/50: Could be...
Name: Mesmer #28 @8365
Date: Sun Oct 13 01:48:39 1991
From: The Coffee Shop [813-840-0217]
RE: Joshi Virus
BY: Kebin Chung #28 @8868
that the virus is in your boot record, not command.com. Try McAfee...
MESMER
13/50: ...
Name: Luc Mccarragher #7 @5496
Date: Fri Oct 11 12:32:17 1991
From: Unknown System
RE: Non poly vieu francais.
BY: Ghost Wheel #1 @9709
What is you question i no you are in alaska but the bbs not say what for you
reply Sorry !!! .............
14/50: Yes...
Name: Omen #1 @8365
Date: Sun Oct 13 22:23:56 1991
From: The Coffee Shop [813-840-0217]
RE: the latest scan version
BY: Loki Trickster #263 @5211
Yes, 84 is out now, and of coarse it is available at the
homebase(McAfee's) . Just verifiying a previous post..seee yaa!!
Omen
15/50: Techno-Babel will DL from McAfee
Name: Mesmer #28 @8365
Date: Mon Oct 14 00:28:41 1991
From: The Coffee Shop [813-840-0217]
RE: Yes...
BY: Omen #1 @8365
before the end of the week.
MESMER
16/50: Scan V 84.
Name: Ghost Wheel #1 @9709
Date: Mon Oct 14 04:45:03 1991
From: The City Of Avalon [907-443-3189]
RE: the latest scan version
Your right, lag time causes some confusion... Scan V 84 is now out..
17/50: MacAffee BBS
Name: Ghost Wheel #1 @9709
Date: Mon Oct 14 04:48:01 1991
From: The City Of Avalon [907-443-3189]
RE: Dark Avenger
408-988-4004
18/50: dont use anything but
Name: Wolfchild #7 @19961
Date: Mon Oct 14 02:02:20 1991
From: The Gameland BBS [919-542-1841]
RE: Joshi Virus
BY: Kebin Chung #28 @8868
vscan80 or whatever version is latest...
that should get rid of Joshi
else you can write the writers of vscan and tell 'em
they could probably help...
THE GAMELAND BBS 919-542-1841 300/1200/2400 BAUD OPEN 24 HOURS!!!
19/50: hey can anyone out there
Name: Mega #22 @2364
Date: Sun Oct 13 18:06:56 1991
From: The Grand Ol Oprey [213-472-0520]
in the vast dark hole in the bbs world called net (actually lalala
land.heheheh)
know anyone a good bbs numbers for atlanta,georgia preferably p/h/a/v/c.
thanx
off to never never land
012[/\/\dg`[210
20/50: Shit
Name: Spermie #171 @5211
Date: Sat Oct 12 09:03:57 1991
From: Blitzkrieg [502-499-8933]
RE: the latest scan version
BY: Loki Trickster #263 @5211
i still havent got 83.... Although my computer cant catch virus's I wont let
it.
21/50: Scan v. 83
Name: Loki Trickster #263 @5211
Date: Sat Oct 12 10:26:47 1991
From: Blitzkrieg [502-499-8933]
RE: Shit
BY: Spermie #171 @5211
McAfee's skipped v. 83, because some clown on the West Coast circulated a
trojan named v. 83. I think the file date is something like October 7,
1991. I KNOW it's October.
22/50: Hello. Looking for a user named Thunder!
Name: Wizard #21 @9416
Date: Mon Oct 14 14:19:54 1991
From: Windows of Opportunity [904-733-3719]
Hello. If you (thunder) are out there, please respond to this message. I would
like to talk to you about your post about your macro and how you used escape
codes in it. Sorry for posting here!
Wizard
23/50: JOSHI
Name: Rambo #1 @8856
Date: Mon Oct 14 03:38:38 1991
From: Rambo-Scan BBS [818-566-7912]
RE: Joshi Virus
BY: Kebin Chung #28 @8868
This Virus was discovered in India in Mid 1990.
This Virus can be hard to remove, if your not careful... From what I have
read, you have NDD, if so, then you should have NU (Right?)...
It was your HD right?
Next fire up NU and take a look at your partition tables first two bytes, and
see if they are EB 1F, if so, your infected... This is a Jump Instruction
that moves you to Track 0, Sector 2-6 which contains the rest of the Viral
Code.
To Remove the Joshi Virus:
#1 Shut off the system (Wait a Minute or Two)
#2 Boot from a KNOWN CLEAN WRITE PROTECTED floppy DOS disk
#3 Back-Up your hard drive(s)
#4 Perform a LOW LEVEL FORMAT & Re-Partition the HD
#5 Restore your Data, and re-check your work for problems.
This should do it...... Sorry it isn't that easy, but you have run into a
little bugger of a Virus...
-*=p|/-\|/-\|RAMBO|/-\|/-\|p=*- SysOp Of Rambo-Scan BBS (818) 566-7912 Burbank California
24/50: vIRUS
Name: Kebin Chung #28 @8868
Date: Sun Oct 13 19:25:29 1991
From: The Radio Control Model Plane BBS [818-919-2879]
RE: Dark Avenger
You can try McAffee at 408-988-5138 or 408-988-4004. These are BBS
numbers. You can download the latest version of Vshield, and be "almost"
certain that you're getting the original pacakage. But it's in the San Jose
Area! It's in California, but it's still San JOse! They have version 84 out.
I don't know if it'll help. The new scan 84 I have doesn't detect a "Joshi"
virus on my other computer, but the Anti-Virus by Central Point does detect
this. So I don't really know if it's that good.
-=The Radio Control Model Plane BBS 818-919-2879=-
25/50: West Coast Distribution Site for SCAN
Name: Rambo #1 @8856
Date: Tue Oct 15 01:24:46 1991
From: Rambo-Scan BBS [818-566-7912]
And about 200 other ANTI VIRUS program.
-*=p|/-\|/-\|RAMBO|/-\|/-\|p=*- SysOp Of Rambo-Scan BBS (818) 566-7912 Burbank California
26/50: Joshi
Name: Kebin Chung #28 @8868
Date: Tue Oct 15 19:35:59 1991
From: The Radio Control Model Plane BBS [818-919-2879]
I tried Vshield 84, Scan, and Clean on my hard disk. Nothing detects this
virus. It says its a "JOSHI" virus..... this happens when I put "Central
Point's Antivirus" loaded.... and then I run programs like "FDISK, NDD
(Norton), and Speedisk" which all checks the boot sectors and "partition
tables." Bootsafe comes out with a warning saying "Joshi Virus Present, clean
with 'CPAV', but when I run this program, it does not detect this virus. It
does not detect "anything"! It scans the whole disk, and says 'no virus
found'. This is the same with "McAffee and Norton". Nothing detects this
"virus" except "Bootsafe"! I don't think the virus is there, but who knows!
My friends still insists that the virus is just what was left after I cleaned
out the hard disk about 2 months back.
I've since then re-partitioned and reformatted my hard disk. Still, when I
run Bootsafe, I get the same results! I need help! Anybody????
-=The Radio Control Model Plane BBS 818-919-2879=-
27/50: I don't know where you are getting SCANV84
Name: Mesmer #28 @8365
Date: Wed Oct 16 10:31:50 1991
From: The Coffee Shop [813-840-0217]
RE: Scan V 84.
BY: Ghost Wheel #1 @9709
we called McAfee on Monday after hearing about V84. Only thing there was V82.
If you have seen V84 one of 2 things is happening:
1. It is a beta test version, nit yet released as fully working, or:
2. It is anothet of those phoneys, a virus spreader itself.
Be careful...
MESMER
28/50: Scanv84
Name: Yanik Proulx #20 @5496
Date: Tue Oct 15 11:08:08 1991
From: Unknown System
Bon, je vais vous uploader Scanv84 et il n`y aura plus de mal entendu. Si j`ai
le temps j`enverrai aussi Clean84. Essayez le
--- Yanik ---
29/50: Joshi.
Name: Riel #28 @2364
Date: Thu Oct 17 23:48:21 1991
From: The Grand Ol Oprey [213-472-0520]
According to others, you should use CPAV to scan the entire drive and not just
the COMMAND.COM and such.
Till the next.
Riel Riel Riel
PASO 7 ^]PASO 7^]
I'm not paying attention to this, just conveying your post to a board.
30/50: Thanks
Name: Kebin Chung #28 @8868
Date: Thu Oct 17 22:48:32 1991
From: The Radio Control Model Plane BBS [818-919-2879]
RE: dont use anything but
Thanks.... I'll do just that.
-=The Radio Control Model Plane BBS 818-919-2879=-
31/50: Thanks
Name: Kebin Chung #28 @8868
Date: Thu Oct 17 22:55:50 1991
From: The Radio Control Model Plane BBS [818-919-2879]
RE: JOSHI
Thanks for the advice. I did most of what you said.... except I have an IDE
Seagate st144a (125MEG) and a CONNER (MEG) also IDE. The instruction for
these HDs says that I "should not" low format my HD. The factory supposedly
low formatted it already, and they recommend I don't touch it or I would the
"internal" cache? I'm not sure about this.... Help!!!!!! I havent' checked
the partition table yet..... it seems to catch it in my D: drive partition
which is not the boot drive (Seagate Drive), but not the Conner which is Drive
C. I'm at a lost.... Nothing is happening.... I'm not getting any problems at
all so far. it's been about a week now. I really need some more advice. Any
would be greatly appreciated.
-=The Radio Control Model Plane BBS 818-919-2879=-
32/50: There
Name: Off Road #92 @8856
Date: Thu Oct 17 22:41:44 1991
From: Rambo-Scan BBS [818-566-7912]
RE: Shit
BY: Spermie #171 @5211
Was no 83, he skipped from 82 to 84 (prolly a trojan problem or something,
people are always trying to make bunk versions of Scan and putting viruses or
trojans in them.) Just be careful where you d/l it from, and be sure the
person that U/l it wouldn't do such a thing.
me
33/50: Thanks
Name: Kebin Chung #28 @8868
Date: Thu Oct 17 22:48:32 1991
From: The Radio Control Model Plane BBS [818-919-2879]
RE: dont use anything but
Thanks.... I'll do just that.
-=The Radio Control Model Plane BBS 818-919-2879=-
34/50: Thanks
Name: Kebin Chung #28 @8868
Date: Thu Oct 17 22:55:50 1991
From: The Radio Control Model Plane BBS [818-919-2879]
RE: JOSHI
Thanks for the advice. I did most of what you said.... except I have an IDE
Seagate st144a (125MEG) and a CONNER (MEG) also IDE. The instruction for
these HDs says that I "should not" low format my HD. The factory supposedly
low formatted it already, and they recommend I don't touch it or I would the
"internal" cache? I'm not sure about this.... Help!!!!!! I havent' checked
the partition table yet..... it seems to catch it in my D: drive partition
which is not the boot drive (Seagate Drive), but not the Conner which is Drive
C. I'm at a lost.... Nothing is happening.... I'm not getting any problems at
all so far. it's been about a week now. I really need some more advice. Any
would be greatly appreciated.
-=The Radio Control Model Plane BBS 818-919-2879=-
35/50: Where is everybody getting V84?
Name: Mesmer #28 @8365
Date: Fri Oct 18 10:17:41 1991
From: The Coffee Shop [813-840-0217]
RE: vIRUS
BY: Kebin Chung #28 @8868
We are licensed McAfee's users and called their BBS on Tuesday to get the V84
everybody here was talking about. The version they have up for DL is V82! Are
you SURE about V84?
MESMER
36/50: There is a possibility
Name: Mesmer #28 @8365
Date: Fri Oct 18 10:21:20 1991
From: The Coffee Shop [813-840-0217]
RE: Joshi
BY: Kebin Chung #28 @8868
that you don't even HAVE a virus. Virus detection programs look for certain
"signatures" that indicate the presence of a given virus. Sometimes other
programs may have a pettern of bytes that is the same as one of these
signatures without actually con taining the virus. So your detection program
senses this pattern and says "Whoa!" with no problem at all being there.
I suggest that you spend the loot to call McAfee's bbs and ask them about it.
They are very helpful...
MESMER
37/50: Didn't you read my post?
Name: Rambo #1 @8856
Date: Fri Oct 18 03:44:55 1991
From: Rambo-Scan BBS [818-566-7912]
I posted the SURE FIRE way to determine if you are infected by the Joshi Virus.
Go Back a few posts (Right after your first post on the Subject), and you will
see how to find it and remove it...
If your still having problems, you can E-Mail me..
-*=p|/-\|/-\|RAMBO|/-\|/-\|p=*- SysOp Of Rambo-Scan BBS (818) 566-7912 Burbank California
38/50: Got the Beta Test 84..
Name: Ghost Wheel #1 @9709
Date: Fri Oct 18 18:18:16 1991
From: The City Of Avalon [907-443-3189]
RE: I don't know where you are getting SCANV84
Sorry, I got the Beta Test 84..
39/50: bootsafe
Name: Rocker #76 @6457
Date: Sat Oct 19 00:38:34 1991
From: The Fields of Nephilim [614-475-3303]
[In Reference] Joshi
[Fiend Posted] Kebin Chung #28 @8868
has a bug that it almost always says you have a virus, whether you do or not.
I have seen many times that progrma doing this, even on brand spanky new drives
out of the box. I wouldn't worry about it too much. If you are THAT worried,
call the maker of bootsafe or CP....someone there might be able to help, but
they'll probably tell you the same thing (not bootsafe though....<G>)
40/50: Mesmer..
Name: Rambo #1 @8856
Date: Sat Oct 19 02:32:54 1991
From: Rambo-Scan BBS [818-566-7912]
Your Behind the times... SCAN V84 has been out for a little time now..
This is a good version of SCAN, it is available from either McAfee or my BBS..
-*=p|/-\|/-\|RAMBO|/-\|/-\|p=*- SysOp Of Rambo-Scan BBS (818) 566-7912 Burbank California
41/50: DO NOT LOW-LEVEL
Name: Hank Williams Sr. #1 @2364
Date: Sun Oct 20 08:27:32 1991
From: The Grand Ol Oprey [213-472-0520]
Do NOT low-level format an IDE hard drive!! You will ruin the drives. Get
the Spinrite program. It will tell you if your drives can be low-level
formatted or not. But I can assure you that an IDE drive can NOT be
low-level formatted!
Hank Williams Sr.
1@2364
The Grand Ole Oprey
42/50: Yes I am.
Name: Ghost Wheel #1 @9709
Date: Mon Oct 21 22:51:52 1991
From: The City Of Avalon [907-443-3189]
RE: Where is everybody getting V84?
Problem is SCANV84 is only in beta test.. Sorry for the confusion..
43/50: No,
Name: Brucelee #14 @8856
Date: Mon Oct 21 22:25:15 1991
From: Rambo-Scan BBS [818-566-7912]
RE: Where is everybody getting V84?
BY: Mesmer #28 @8365
Scan V84 was definitely out at the time of that post, maybe you should try
again.
I have all three utils on my HD right now, downloaded from this board.
44/50: Scan - Scan - Scan...
Name: No Beta #23 @8365
Date: Tue Oct 22 00:54:12 1991
From: The Coffee Shop [813-840-0217]
RE: Thanks
BY: Kebin Chung #28 @8868
Just keep looking til you find it. McAfee's scanner will find the Josi virus.
I suggest you try:
SCAN C:*.* /A
SCAN D:*.* /A
{- o a t -}
45/50: Forgot something.
Name: No Beta #23 @8365
Date: Tue Oct 22 00:55:13 1991
From: The Coffee Shop [813-840-0217]
RE: Thanks
BY: Kebin Chung #28 @8868
The book you got with your Hard Drive is correct. Do not low level format it!
{- o a t -}
46/50: Gawd...
Name: Rambo #1 @8856
Date: Tue Oct 22 01:58:59 1991
From: Rambo-Scan BBS [818-566-7912]
RE: Got the Beta Test 84..
BY: Ghost Wheel #1 @9709
SCANV84 has been out for quite a while now (I believe since the 9th of this
month)... I am a Beta Tester for McAfee, and I did have the Beta Scan V84
since the First of the month..
Now Read This
Scan V.84 is the Newest, it isn't a Trojan/Virus/Hack Get it, use it, love
it...
-*=p|/-\|/-\|RAMBO|/-\|/-\|p=*- SysOp Of Rambo-Scan BBS (818) 566-7912 Burbank California
47/50: Again...
Name: Mesmer #28 @8365
Date: Wed Oct 23 01:14:30 1991
From: The Coffee Shop [813-840-0217]
RE: Mesmer..
BY: Rambo #1 @8856
the minute we heard of V84 we called McAfee - what was there was V82... We
will be calling agin in a day or so...
MESMER
48/50: This NET
Name: Off Road #92 @8856
Date: Tue Oct 22 21:25:56 1991
From: Rambo-Scan BBS [818-566-7912]
RE: Scanv84
BY: Yanik Proulx #20 @5496
thing's gone way out of hand here, we can't be getting FRENCH posts man, come
on, I know it's prolly from Canada but even though this is really redicicilous.
me
49/50: Jeeze..
Name: Rambo #1 @8856
Date: Wed Oct 23 02:41:03 1991
From: Rambo-Scan BBS [818-566-7912]
ScanV84... This is getting OLD..
-*=p|/-\|/-\|RAMBO|/-\|/-\|p=*-
50/50: So has anyone seen this Dir-2 virus that v84 is suposed to
Name: Loki #28 @5413
Date: Thu Oct 24 21:36:51 1991
From: The 286 Express PIN [504-282-5187]
find??? From the little letter we got from our distributor with our copy of
V84 it said that Dir-2 is suposed to be quite a nasty virus, and infects
extremely fast and furious with serious Stealth capabilities....
Post on The Dirty Dozen (Trojans & Viruses)?