Re: Urkel virus! Help please!

James Fabiano <[email protected]> Thu, 9 Jun 2022 08:14:44 -0700 (PDT)
Newsgroups alt.comp.virus
Message-ID <[email protected]>
On Tuesday, June 27, 1995 at 3:00:00 AM UTC-4, Audrey Smolin wrote:
> Does anyone know anything about the Urkel virus? 
> I copied some files (network packet driver stuff) from my secretary's
> computer to a floppy, and then used the floppy in my system (A Compaq
> running DOS 6.20). Later, when I started windows, I got the following
> message: 
> "CPQWDCTL Error W5: The microsoft windows 32-bit disk driver (CPQWDCTL)
> cannot be loaded. There is unrecognizable disk software installed on this
> computer. 
> The address that MS-DOS uses to communicate with the hard disk has been
> changed. Some software, such as disk-caching software, changes this
> address. 
> If you aren't running such software, you should run a virus-detection
> program to make sure there is no virus on your computer. 
> To continue starting windows without using the 32 bit disk driver, press
> any key." 
> I ran F-prot 2.17 and was informed that "the Urkul virus search string had
> been found in memory. F-prot advised booting from a clean floppy, and
> then closed. When I ran F-prot with the /NOMEM parameter, it did not
> report any viruses. 
> I rebooted the computer and pressed the F5 key to bypass startup files ...
> virus string aws still reported as present. 
> I booted from a clean, write-protected DOS 6.2 floppy containing F-prot. 
> It could not find drive C:!!! I closed F-prot and typed C: at the A:>
> prompt and got the message "invalid drive specification". 
> I ran f-prot from the floppy with the /hard /auto /disinf parameters and 
> it reported Urkel? infection in Master Boot Record but it couldn't/didn't 
> disinfect.
> 
> I tried another clean, write protected bootable floppy - same story! 
> I went back to my secretary's computer. It behaved the same way, except
> that the message said WDCTL instead of CPQWDCTL (her system is not a
> COMPAQ, its an HP). 
> Oh yeah .... the bootable floppies that I tried behaved properly (i.e.
> drive C: could be recognized) in another, uninfected PC in my department. 
> If I format a new floppy from my hard drive, the computer can recognize C:
> after booting, but I again get reports of the Urkul virus in memory. 
> 
> HELP!!!
> 
> How do I clean this virus up I can't address drive C: after booting from a
> clean floppy?? 
> -- 
> Audrey Smolin ([email protected])

Did it do that??????