From rjmartin@nist.gov Wed Nov 2 09:23:56 1994 Received: from SST.NCSL.NIST.GOV by dkuug.dk with SMTP id AA10885 (5.65c8/IDA-1.4.4j for ); Wed, 2 Nov 1994 19:23:08 +0100 Received: from sst118 (SST118.NCSL.NIST.GOV) by sst.ncsl.nist.gov (4.1/rbj/jck-2) id AA29087; Wed, 2 Nov 94 13:22:23 EST Message-Id: <9411021822.AA29087@sst.ncsl.nist.gov> X-Sender: rmartin@sst.ncsl.nist.gov Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Date: Wed, 02 Nov 1994 14:23:56 -0500 To: D.Cannon@exeter.ac.uk, sc22wg15@dkuug.dk From: rjmartin@nist.gov (Roger Martin) Subject: Re: (wg15tag 820) (SC22WG15.434) We've been bugged... X-Mailer: X-Charset: ASCII X-Char-Esc: 29 Dave, I had the 'Stoned.Manitoba' virus on the unlabeled diskette that I had used to copy files from you and Ron Elliott. It had not infected my harddrive. I had actually checked that diskette before I gave it to you, so I picked up the virus from either you or Ron. Thanks for letting me know. It was a little time bomb just sitting there ticking away on that diskette. I'm sending this reply through the WG15 reflector because I made copies of the minutes and resolutions files for several people, but can't remember who. So, if you haven't done it yet, it would be prudent to run a virus checker for your hard drives and diskettes that were at Whistler. (I used F-Prot to check for it). ....roger > There's some good news, and some bad news... > > On returning to my home machines and plugging in the floppies I > used in Whistler I found one contaminated by a virus - the > 'Stoned.Manitoba' variant, to be precise. It was found and > (possibly more importantly) removed by Norton Anti-Virus 3.0. > My copy came with Norton Desktop for Windows, together with a > version which has much the same functionality, but runs under > DOS. > > The disk concerned had been last used by Martin Kirk, when he > passed me some ZIPped files, but may have been infected before > that - I think John Hill and Roger Martin are the other possible > candidates. The good news is that its a boot-sector virus > which doesn't seem to migrate from the floppy unless you attempt > to boot from it - I hadn't, so the hard disk on my portable was > clean - the chances are that only one of you has it on your > system... Good luck... > >-- >_________________________________________________________________________ >David Cannon University of Exeter, IT Services > Laver Building, North Park Road >Systems/Network Programmer Exeter, EX4 4QE, Devon, UK > Phone: +44 (0)392 263998 > Fax: +44 (0)392 211630 >_________________________________________________________________________ > > > > ****************************************************** * Roger J. Martin * * National Institute of Standards & Technology * * Bldg 225 Room B266 * * Gaithersburg, MD 20899 * * * * Phone: 301-975-3290 Fax: 301-926-3696 * * e-mail: rjmartin@nist.gov * ******************************************************