Path: utzoo!utgpu!attcan!uunet!lll-winken!lll-tis!ames!pasteur!ucbvax!WAYNEST1.BITNET!BHOLMES From: BHOLMES@WAYNEST1.BITNET (Brian Holmes) Newsgroups: comp.sys.atari.st Subject: Virus Notice Message-ID: <8808120304.AA01925@ucbvax.berkeley.edu> Date: 12 Aug 88 00:18:00 GMT Sender: daemon@ucbvax.BERKELEY.EDU Organization: The Internet Lines: 77 I thought that this message would be good info for all ST users. This is a message that has appeared on several BBS's here in Southeastern Michigan. Virus Warning!!!!!! This is a warning being sent out to ALL ATARI ST users...there is a desk accesory called DIGI.ACC that has been uplaoded to MANY Michigan BBS's. The Sysop of the Digital Delay(313-546-4410) was going back through his file section trying out old files, he tried DIGI.ACC, its a digital clock that was uploaded by a new Atari ST user(i have not seen him before, and i am knowledgeable of the few ST users out there, although i can always be wrong), the acc when activated, opens a small window(2X5 cm) with a clock in it, and the name Uhri at the top (The "U" has a double dot above it), sometime during its running, it destroys the disk, apparently attacking the FAT, the sysop (Kieth Troesch) was running it, went to drive A and found nothing on it, with a disk editor (Michtron Utilities) he found nothing in the boot track, i was curious, D/L'ed it, and ran it left it to sit, after a while, with not mcuh happening, we continued chatting on the BBS, when i logged off, i checked the disk to find nothing wrong, i then called another BBS to put a message up about a "possible" virus, i then again checked my disk, a terminal disk that i was testing it on (i backed it up first), it contained the following files: VantermVanterm.cfg Vanterm.prg D_edit D_edit.TOS Maxidisk Maxidisk.prg Macromse.acc trasnfer.acc digi.acc STtrubo.acc When i did a Directory, i got Data on disk drive A not responnding, i checked twice, trying dir's from diffent programs, and the desktop, with no luck of finding anthing at all, i checked it with DLII by Simon Poole and the FAT table was Bad. Since i was on-line for so long, i do not know how long it took for it to go off (the virus), but it definetly did go off. So beware of DIGI.ACC, if you see it on a BBS, inform the SysOp of the situation, or if you have, take great caution in its use, or delete it all together. If you have any questions about this, i can be reached on the following BBS's: Digital Delay(313-546-4410) Bloom County(313-582-0888) The Island(313-675-5888) Cosmic STomper(547-0440, semi private system, must have password active) Downriver Outpost(675-4660) Sorry, no Bitnet, Bix, or Compuserve address... -Eric Connelly, Co-Sysop of the Digital Delay, Atari sysop of the Island, Atari Co-sysop at Bloom County. ******************************************************************* * Brian Holmes \ / ___ * * Wayne State University \/\/su | | * * Detroit Michigan ____| |____ * * | | | | * * BITNET : BHOLMES@WAYNEST1 | | | | * * INTERNET : Brian_Holmes%WU@UM.CC.UMICH.EDU | | | | * * UUCP : {UMIX|ITIVAX}!WAYNE-MTS!BRIAN_HOLMES ============= * *******************************************************************