PROTOCOL: ALT CONNECT 2400 CBBS(R) 4.0.3b 05/25/94 21:16:05 Y/N: want CBBS "1st time user" info?^U ?^U ?^U ?n;ward;christensen;odraw;;fullc;piss Logging name to disk... You are caller 232542; next msg =46656; 376 active msgs. Prev. call 05/22/94 @ 11:25, next msg was 46654 Recording logon for next time. Use FULL? to check assignments ?^U ?xxxxx "Mine" command checking for msgs TO you, ^K to abor >Function:?dir c:log;dir c:killed;dir summary;type-20 log,ward c;or;*;short LOG. 10 KILLED. 15 05/22/94,11:25:32,232520,2,WARD CHRISTENSEN,, E#46654,4 05/22/94,18:04:03,232521,2,MARTIN MILLER,, 05/22/94,21:08:48,232522,2,JACK DONALDSON,CHICAGO,4 05/22/94,21:12:49,232523,2,JACK DONALDSON,,33 05/23/94,00:18:34,232524,2,ALEX ZELL,, 05/23/94,06:58:55,232525,2,DENNIS STAHL,,4 05/23/94,13:03:01,232526,2,DARRELL BARBER,,4 05/23/94,14:16:05,232527,2,DENNIS STAHL,,1 05/23/94,16:40:37,232528,2,PAUL BRAMEL,,8 05/23/94,18:01:11,232529,2,JAY PIAZZA,Addison/ Il,2 05/23/94,18:08:52,232530,2,AL HIGGINS,,8 05/23/94,18:31:05,232531,2,KENNETH SPENCER,Chicago/Illinois,8 05/23/94,22:04:41,232532,2,MARTIN SCHRADER,,8 05/23/94,22:20:21,232533,2,MICHAEL SHARTIAG,,4 05/24/94,00:53:22,232534,2,DAN WILSON,SEATTLE WA,5 05/24/94,09:53:32,232535,2,PAUL STREETER,, E#46655,11 05/24/94,13:24:41,232536,2,DENNIS STAHL,,2 05/25/94,01:35:41,232537,2,PETE CANTELE,,2 05/25/94,09:40:50,232538,2,DENNIS STAHL,,0 05/25/94,13:35:50,232539,2,DENNIS STAHL,,1 05/25/94,18:46:14,232540,2,KENNETH SPENCER,,8 05/25/94,20:11:58,232541,2,BRUCE VELDMAN,Darien/ IL,1 05/25/94,21:16:08,232542,2,WARD CHRISTENSEN,, 46654 05/22/94 WARD CHRISTENSEN => ANDY SHAPIRO: "R/THIS BOARD" 46655 05/24/94 PAUL STREETER => WARD: "VIRUS AGAIN" - End of summary - Retrieving flagged msgs: C skips, K aborts. Msg 46654 is 03 line(s) on 05/22/94 from WARD CHRISTENSEN to ANDY SHAPIRO re: R/THIS BOARD Funding? ha, only a phone line and a couple bucks worth of 'lectricity. As long as Randy is willing, and doesn't move to the SouthWest like he is threatening. Msg 46655 is 12 line(s) on 05/24/94 from PAUL STREETER to WARD re: VIRUS AGAIN No, I wasn't smart enough to save the offending master boot record. In fact I'm not sure how to do that. I modify AUTOEXEC.BAT to include CHKDSK >CHKDSK.RPT AND MODIFIED a BASIC programs that copies stuff to a RAM drive to scan the dataset looking for the 655360 figure, and stop the world with a message when it failed to find it. This happened this morning, giving us the best clues so far about when the virus was introduced. Since the user had only one diskette in the machine yesterday, we have a good suspect, but I am afraid to do anything with the diskette except run MSAV, which did not find anything. After I sign off, I may call Central point or someone. The technician at COMPAQ today was not helpful on this problem. Meanwhile, if it happens again, I will not wipe out the evidence so soon. dup. chars. >Function:?r;-1 Msg 46655 is 12 line(s) on 05/24/94 from PAUL STREETER to WARD re: VIRUS AGAIN No, I wasn't smart enough to save the offending master boot record. In fact I'm not sure how to do that. I modify AU --End of 46655 Msg #:?