From: "Damian Yerrick" <web DOT poison AT pineight DOT 8m DOT com>
Newsgroups: comp.os.msdos.djgpp
References: <380F153B DOT 6034D333 AT arcticmail DOT com> <380F21D1 DOT 5CAD AT erols DOT com>
Subject: Re: Not COFF
Lines: 41
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
Message-ID: <SGJP3.563$SS6.15142@dfiatx1-snr1.gtei.net>
X-Trace: +ryjt4aP/PpsFtm0gWexHKQThrio/62/uTqPOra7NiAISCJ45d89oYYLigntLt0lKD8uWsJJVGSI!gf3sJqYIQq8ncjx7O8QA4vz7VEksIJ6AhwoumKETv1JrvWmLzIQFICXcAHaQySXTm/QatYCz
X-Complaints-To: abuse AT gte DOT net
X-Abuse-Info: Please be sure to forward a copy of ALL headers
X-Abuse-Info: Otherwise we will be unable to process your complaint properly
NNTP-Posting-Date: Thu, 21 Oct 1999 19:19:14 GMT
Distribution: world
Date: Thu, 21 Oct 1999 19:19:14 GMT
To: djgpp AT delorie DOT com
DJ-Gateway: from newsgroup comp.os.msdos.djgpp
Reply-To: djgpp AT delorie DOT com


John S. Fine <johnfine AT erols DOT com> wrote in message
news:380F21D1 DOT 5CAD AT erols DOT com...
> N J Chackowsky wrote:
>
> > [4] if he runs strings.exe a few times in a row, it suddenly stops
> > working (file not COFF)
> > [5] strings.exe has mysteriously _increased_ in size (as compared to
> > the cd-rom copy)
> >
> > I'm guessing a virus? Or should I be looking elsewhere?
>
>   You are guessing correctly.  That is a virus.
>
> Find a good anti-virus program.

http://www.mcafee.com/

> Use a clean computer to put DOS and the
> anti-virus program on a bootable floppy.

Or use the bootable floppy or CD that comes
with the program.

> Write protect it and take it to the infected
> computer.  Boot it and run it from the floppy.

Perhaps someone should change "File not COFF" to
"File infected or not COFF" to make the message a
bit clearer.

So there aren't any COFF only viruses yet?

--
Damian Yerrick
CM 398, Rose-Hulman Institute of Technology
5500 Wabash Ave | Terre Haute, IN 47803
http://come.to/yerrick <- redpinocchio
http://yerricde.tripod.com/ <- pinocchio's brother