🚀 go-pugleaf

mechalas@mentor.cc.purdue.edu (John Mechalas) writes:

> The PC-compatibles in our labs are using the IBM Anti-Viral package
> VIRSCAN, version 2.1.9.

>    Recently, we have been getting a handful of reports of the Yankee
> Doodle-2885 virus in some of our .EXE files.   So far we have been able
> to eliminate the viruses by replacing the infected files.
>    My questions are as follows:

>      1) Does VIRSCAN have a tendancy to cause a false positive 
>         for Yankee Doodle?  I think we really do have a virus, but
>         I'd like to check this option anyway.

At least the version that we have doesn't, but it is 2.2.3A.

>      2) I check F-Prot's virus base, but of course every virus is
>         labeled differently between scanners.  :)  Which version of
>         Yankee Doodle do we have, as in what does this strain do?

The standard CARO name of the virus that has probably infected your
computer is Yankee_Doodle.TP-44.A. F-Prot calls it "Yankee (TP-44)".
You could look in its virus help database under the entry "Yankee" or
"Vacsina" (both point to one and the same text), but have in mind that
the information about viruses in F-Prot's help database is very
limited.

Regards,
Vesselin
- -- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.0 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany