VIRUS-L Digest Sunday, 17 Mar 1996 Volume 9 : Issue 36 Today's Topics: Administrivia (ADMIN) Help!Youth-Silence Virus problems on the net? Re: Hard drive write protection "Alive" mailing list (related resource) Re: Hard drive hardware write protection Re: What I need in an enterprise-wide scanner Re: Virus Damage Statistics Dr Solomon's Virus Stats (Feb 96) What REALLY matters in Commercial Anti-Virus Software What REALLY matters in Commercial Anti-Virus Software Computer viruses in UNIX networks (UNIX) Re: Macintosh Ram Virus?? (MAC) Re: Macintosh Ram Virus?? (MAC) Excel macro virus? (MAC,PC) Re: MY DOCUMENTS folder virus? (WIN95) Re: Win95 calculator virus? (WIN95) Re: Windows 3.1 goes blind to icons, dies (WIN) Re: Windows 3.1 goes blind to icons, dies (WIN) Pieck. How to remove? (PC) MS Macro Virus Tool (PC) Stoned.Empire.Monkey_B (PC) Re: Found a virus on my HDD.. (PC) Possible virus--adds to command.com (PC) I need info about HOT virus please (PC) Re: McAffee Word Virus Utility (PC) Please Help with BOOT-437 (PC) Re: Problems accessing floppy drive (PC) Re: Podaj hasLo? (PC) Dir-2.a Virus - Please Help!!! (PC) Greenstripe (PC) Re: F-PROT, Opinions? (PC) Help w/ possible boot sector virus (PC) Re: Wordperfect 6.1 Virus? (PC) CD Powerplay, Feb 1996, issue 10 - Virus infected? (PC) Re: CD Powerplay, Feb 1996, issue 10 - Virus infected? (PC) Virus Utility recommendation (PC) Can't identify Virus, need help thanks (PC) IBM APTIVA possible VIRUS (PC) Re: What to do with suspected virus? (PC) Natas on a Digital Computer (PC) Re: Modem snag: Virus or NAV? (PC) Re: Virus in Memory--sometimes (PC) March Virus (PC) VIRUS-L is a moderated, digested mail forum for discussing computer virus issues; comp.virus is a gatewayed and non-digested USENET counterpart. Discussions are not limited to any one hardware/software platform--diversity is welcomed. Contributions should be relevant, concise, polite, etc. (The complete set of posting guidelines is available by FTP on CS.UCR.EDU (IP number 138.23.169.133) or upon request.) Please sign submissions with your real name; anonymous postings will not be accepted. Information on accessing anti-virus, documentation, and back-issue archives is distributed periodically on the list. A FAQ (Frequently Asked Questions) document and all of the back-issues are available at ftp://cs.ucr.edu/pub/virus-l. The current FAQ document is in a file called vlfaq200.txt. Administrative mail (e.g., comments or suggestions) should be sent to me at: n.fitzgerald@csc.canterbury.ac.nz. (Beer recipes should still be sent to Ken van Wyk at: krvw@mnsinc.com.) All submissions should be sent to: VIRUS-L@Lehigh.edu. Nick FitzGerald ---------------------------------------------------------------------- Date: Thur, 16 Mar 1996 16:01:18 From: Nick FitzGerald Subject: Administrivia (ADMIN) X-Digest: Volume 9 : Issue 36 I seem to have resolved my problems with the new listserv software at Lehigh and would like to say a big thank-you to Jim at the Computer Centre there for all his patient help! Thank-you to all the people who have replied about divide overflow errors on PC floppy access or about the PRAM battery problem causing date/time resets on Macs or about Netscape and RAM settings on Macs. There have been too many to send individual notes to, so please take this as a thank you if you haven't/don't see your submission in the list/group. I may also have dropped a few submissions in other threads that are effectively duplicates of postings I've OK'ed--I apologize here for not having sent you a note if you authored one of these "unposted duplicates". +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Nick FitzGerald, PC Applications Consultant, CSC, Uni of Canterbury, N.Z. n.fitzgerald@csc.canterbury.ac.nz TEL:+64 3 364 2337, FAX:+64 3 364 2332 Virus-L/comp.virus moderator and FAQ maintainer PGP fingerprint = 2E 7D E9 0C DE 26 24 4F 1F 43 91 B9 C4 05 C9 83 ------------------------------ Date: Tue, 05 Mar 1996 08:11:01 -0500 (EST) From: Fredrik Sundstr m Subject: Help!Youth-Silence X-Digest: Volume 9 : Issue 36 WE ve gotten a bad new(?)virus displaying itself as: signature of Youth-Silence It infects .dll-files. Can somebody help us with it Fredrik ------------------------------ Date: Tue, 05 Mar 1996 13:01:08 -0500 (EST) From: Kerstin Muehle Subject: Virus problems on the net? X-Digest: Volume 9 : Issue 36 has anybody heard of any virus problems on the Net? I recently read an article about it (sounded dramatically) and wonder now, whether there is something new (a new problem) oder whether the magazine has just made a story about things that are known for years? Thanks a lot for your answers Kerstin [Moderator's note: Assuming this might be a reference to the so-called Good Times "Email virus", there can be no better time to reprint the URLs for Les Jones' Good Times FAQ: On the WWW: http://www.usit.net/public/lesjones/goodtimes.html http://www.usit.net/public/lesjones/gtminifaq.html http://users.aol.com/macfaq/goodtimes.html http://users.aol.com/macfaq/gtminifaq.html Via FTP: ftp://usit.net/pub/lesjones/good-times-virus-hoax-faq.txt ftp://usit.net/pub/lesjones/good-times-virus-hoax-mini-faq.txt ftp://users.aol.com/macfaq/good-times-virus-hoax-faq.txt ftp://users.aol.com/macfaq/good-times-virus-hoax-mini-faq.txt] ------------------------------ Date: Tue, 05 Mar 1996 13:01:30 -0500 (EST) From: Kenneth VanWyk Subject: Re: Hard drive write protection X-Digest: Volume 9 : Issue 36 Dave Pearce asks: > 1) Is it possible to take a stock IDE or SCSI controller and write-protect > the hard disk, i.e., so that all writes fail? IMHO, one of the quickest and easiest ways of doing that is to use a Syquest (or similar) removable drive. Syquest has a 270 Mb drive that I believe will accomplish what you're looking for, and it's almost as fast as an entry-level hard drive (data throughputs of ~1300 Kb/sec are normal). They have IDE and SCSI versions, and can be used as the default boot device. Street price on the drive is, I believe, in the upper US$300's, and the cartridges run about US$80. Extremely useful (again IMHO) for setting up test versions of numerous operating systems in a lab environment. (I'm sure that other non-Syquest drives will work just as well.) We have a lab system that we can quickly boot NT, Linux, Novell, Win95, Win3.11, etc., just by popping in a different Syquest cartridge. Oh, and each Syquest cartridge was loaded from