Frisk Software International - Technical note #7


                       Monkey virus removal

The problem with removing the monkey virus is that it changes the data part
of the partition sector.

This means that if you attempt to remove it after booting from the hard disk,
the virus is active and able to hide by using stealth techniques.

If you boot from a diskette, the partition data is invalid, and all the
drives on the hard disk seem to be gone.

What you need to do is:

   1) Boot from a clean diskette

   2) Run F-PROT /HARD /DISINF      (not F-PROT C:)

   3) Disinfect

   4) Reboot the machine - the hard disk should re-appear, and the machine
      should be clean.


