From:	"Damian Yerrick" <web DOT poison AT pineight DOT 8m DOT com>
Newsgroups:	comp.os.msdos.djgpp
References:	<380F153B DOT 6034D333 AT arcticmail DOT com> <380F21D1 DOT 5CAD AT erols DOT com>
Subject:	Re: Not COFF
Lines:	41
X-Priority:	3
X-MSMail-Priority:	Normal
X-Newsreader:	Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE:	Produced By Microsoft MimeOLE V5.00.2314.1300
Message-ID:	<SGJP3.563$SS6.15142@dfiatx1-snr1.gtei.net>
X-Trace:	+ryjt4aP/PpsFtm0gWexHKQThrio/62/uTqPOra7NiAISCJ45d89oYYLigntLt0lKD8uWsJJVGSI!gf3sJqYIQq8ncjx7O8QA4vz7VEksIJ6AhwoumKETv1JrvWmLzIQFICXcAHaQySXTm/QatYCz
X-Complaints-To:	abuse AT gte DOT net
X-Abuse-Info:	Please be sure to forward a copy of ALL headers
X-Abuse-Info:	Otherwise we will be unable to process your complaint properly
NNTP-Posting-Date:	Thu, 21 Oct 1999 19:19:14 GMT
Distribution:	world
Date:	Thu, 21 Oct 1999 19:19:14 GMT
To:	djgpp AT delorie DOT com
DJ-Gateway:	from newsgroup comp.os.msdos.djgpp
Reply-To:	djgpp AT delorie DOT com

John S. Fine <johnfine AT erols DOT com> wrote in message
news:380F21D1 DOT 5CAD AT erols DOT com...
> N J Chackowsky wrote:
>
> > [4] if he runs strings.exe a few times in a row, it suddenly stops
> > working (file not COFF)
> > [5] strings.exe has mysteriously _increased_ in size (as compared to
> > the cd-rom copy)
> >
> > I'm guessing a virus? Or should I be looking elsewhere?
>
>   You are guessing correctly.  That is a virus.
>
> Find a good anti-virus program.

http://www.mcafee.com/

> Use a clean computer to put DOS and the
> anti-virus program on a bootable floppy.

Or use the bootable floppy or CD that comes
with the program.

> Write protect it and take it to the infected
> computer.  Boot it and run it from the floppy.

Perhaps someone should change "File not COFF" to
"File infected or not COFF" to make the message a
bit clearer.

So there aren't any COFF only viruses yet?

--
Damian Yerrick
CM 398, Rose-Hulman Institute of Technology
5500 Wabash Ave | Terre Haute, IN 47803
http://come.to/yerrick <- redpinocchio
http://yerricde.tripod.com/ <- pinocchio's brother

- Raw text -