Article View: comp.virus
Article #4213Re: KEY Press virus & McAfee v97 (PC)
From: McAfee Associates
Date: Sun, 15 Nov 1992 06:39
Date: Sun, 15 Nov 1992 06:39
48 lines
2670 bytes
2670 bytes
Hello Frisk, you write: [ a ">>" indicates I wrote it] >>Well, they all are detected as viruses, which is a start. > >Nobody doubts that SCAN is one of the best packages for telling you if you >have a virus at all (whether it, Alan's FINDVIRU or my own F-PROT does best >in testing, depends of course primarily on whose collecion is used). The >point is, however, that SCAN is occasionally not very accurate in determining >exactly which virus you have. I understand that, believe me. We will fix any such problems reported to us. However, we also have to look at new viruses as well as add the occasional new feature. Our programmers are also becoming responsible for an increasing number of new programs, which further limits the amount of time they have. This means that they must prioritize their work. If a new virus is not detected by VIRUSCAN or one of the existing options does not work correctly, then they are going to be looked at first, before a virus which has a "double hit" (i.e., two different viruses being reported in the file) on it. That's not to say we're not going to fix it, all reported bugs are fixed, eventually. However, their severity, that is, their impact upon the end user, has to be decided first. [...portion about Cmdr. Bomber not being detected 100% deleted...] >The problem with this one is that you don't really know where to look for it. >It is not hard to detect by scanning the entire file, but that is really SCAN should be doing that, which indicates (to me) a problem with either the detection method, or the string being looked for. Our programmers will be looking into this one, shortly. >time-consuming. It is a problem - and I think most scanners will have a hard >time detecting it. Regards, Aryeh Goretsky Technical Support - -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - McAfee Associates, Inc. | Voice (408) 988-3832 | INTERNET: 3350 Scott Blvd, Bldg 14 | FAX (408) 970-9727 | mcafee@netcom.COM Santa Clara, California | BBS (408) 988-4004 | CompuServe ID: 76702,1714 95054-3107 USA | USR HST Courier DS | or GO MCAFEE Support for SENTRY/SCAN/NETSCAN/VSHIELD/CLEAN/WSCAN/NETSHIELD/TARGET/CONFIG MGR
Technical Details
Message-ID:
<0014.9211161950.AA15221@barnabas.cert.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!ames!sun-barr!rutgers!netnews.upenn.edu!netnews.cc.lehigh.edu!newsShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!ames!sun-barr!rutgers!netnews.upenn.edu!netnews.cc.lehigh.edu!news From: mcafee@netcom.com (McAfee Associates) Newsgroups: comp.virus Subject: Re: KEY Press virus & McAfee v97 (PC) Message-ID: <0014.9211161950.AA15221@barnabas.cert.org> Date: 15 Nov 92 06:39:28 GMT Sender: virus-l@lehigh.edu Lines: 48 Approved: news@netnews.cc.lehigh.edu