home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!ornl!rsg1.er.usgs.gov!darwin.sura.net!wupost!zaphod.mps.ohio-state.edu!ub!dsinc!netnews.upenn.edu!netnews.cc.lehigh.edu!news
- From: mechalas@mentor.cc.purdue.edu (John Mechalas)
- Newsgroups: comp.virus
- Subject: Re: SCAN Ver 97 & Monkey Virus (PC).
- Message-ID: <0001.9211191448.AA21875@barnabas.cert.org>
- Date: 17 Nov 92 03:43:45 GMT
- Sender: virus-l@lehigh.edu
- Lines: 20
- Approved: news@netnews.cc.lehigh.edu
-
- martin@cs.ualberta.ca (Tim Martin; FSO; Soil Sciences) writes:
- >But it isn't trivial, so instead you might want to get a copy of
- >my KILLMONK program, which does that and more for you. It uses
- >some careful identification strings, checks that the recovered MBR
- >is correct, etc. Also makes scanning and cleaning of floppies
- >easy. And strictly speaking, it doesn't require a clean boot, as
- >long as the only virus messing things up at the time is Monkey.
- >
- >I think KILLMONK may have been posted at some of the ftp sites.
- >If you can't find it, or want me to send it (uuencoded) via
- >e-mail, drop me a note. (It's free of course, and worth every
- >virtual cent!)
-
- I found killmonk.zip at oak.oakland.edu, so I assume it is at all of
- the SIMTEL20 mirrors. It's in the trojan-pro directory, by the way.
- - --
- John Mechalas | If you think my opinions are Purdue's, then
- mechalas@mentor.cc.purdue.edu | you vastly overestimate my importance.
- Purdue University Computing Center | Help put a ban on censorship :)
- General Consulting | #include disclaimer.h
-