Article View: comp.virus
Article #3147Re: Filler virus - Need Help! (PC)
From: Wes Ames
Date: Thu, 12 Nov 1992 00:28
Date: Thu, 12 Nov 1992 00:28
22 lines
1592 bytes
1592 bytes
bontchev@fbihh.informatik.uni-hamburg.de (Vesselin Bontchev) writes:
> It is much more
> probable that you are using some other anti-virus software, like CPAV
> or TNTVIRUS, that does not encrypt its scan strings and is causing a
> false positive. If you are using CPAV, read the manual - it clearly
> says that it is not compatible with any other anti-virus software. So,
> throw away either CPAV or SCAN. If I were you, I would throw away
> CPAV...
I have seen several references similar to the above, and I would
appreciate some clarification. I use several different anti-virus
packages in our "anti-virus toolkit", including CPAV. My experience
has been that early versions of CPAV did indeed have a problem with
viral scan strings in memory, but the problem has been eliminated in
more recent versions. Not only are the strings encrypted, but they
are specifically overwritten when the user exits the app. That has
been my understanding of the current product - have you seen something
different??
Wes Ames |
ames@bcstec.ca.boeing.com |
|
Technical Details
Message-ID:
<0013.9211121950.AA09997@barnabas.cert.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!ornl!utkcs2!darwin.sura.net!zaphod.mps.ohio-state.edu!magnus.acs.ohio-state.edu!usenet.ins.cwru.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!newsShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!ornl!utkcs2!darwin.sura.net!zaphod.mps.ohio-state.edu!magnus.acs.ohio-state.edu!usenet.ins.cwru.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!news From: ames@bcstec.ca.boeing.com (Wes Ames) Newsgroups: comp.virus Subject: Re: Filler virus - Need Help! (PC) Message-ID: <0013.9211121950.AA09997@barnabas.cert.org> Date: 12 Nov 92 00:28:20 GMT Sender: virus-l@lehigh.edu Lines: 22 Approved: news@netnews.cc.lehigh.edu