🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.virus
Article #4213

Re: KEY Press virus & McAfee v97 (PC)

#4213
From: McAfee Associates
Date: Sun, 15 Nov 1992 06:39
48 lines
2670 bytes
Hello Frisk,

you write:
[ a ">>" indicates I wrote it]
>>Well, they all are detected as viruses, which is a start.
>
>Nobody doubts that SCAN is one of the best packages for telling you if you
>have a virus at all (whether it, Alan's FINDVIRU or my own F-PROT does best
>in testing, depends of course primarily on whose collecion is used).  The
>point is, however, that SCAN is occasionally not very accurate in determining
>exactly which virus you have.

I understand that, believe me.  We will fix any such problems reported
to us.  However, we also have to look at new viruses as well as add
the occasional new feature.  Our programmers are also becoming
responsible for an increasing number of new programs, which further
limits the amount of time they have.  This means that they must
prioritize their work.  If a new virus is not detected by VIRUSCAN or
one of the existing options does not work correctly, then they are
going to be looked at first, before a virus which has a "double hit"
(i.e., two different viruses being reported in the file) on it.

That's not to say we're not going to fix it, all reported bugs are
fixed, eventually.  However, their severity, that is, their impact
upon the end user, has to be decided first.

[...portion about Cmdr. Bomber not being detected 100% deleted...]
>The problem with this one is that you don't really know where to look for it.
>It is not hard to detect by scanning the entire file, but that is really

SCAN should be doing that, which indicates (to me) a problem with
either the detection method, or the string being looked for.  Our
programmers will be looking into this one, shortly.

>time-consuming. It is a problem - and I think most scanners will have a hard
>time detecting it.

Regards,

Aryeh Goretsky
Technical Support
- -- 
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
McAfee Associates, Inc.  | Voice (408) 988-3832 | INTERNET:
3350 Scott Blvd, Bldg 14 | FAX   (408) 970-9727 | mcafee@netcom.COM
Santa Clara, California  | BBS   (408) 988-4004 | CompuServe ID: 76702,1714
95054-3107  USA          | USR HST Courier DS   | or GO MCAFEE
Support for SENTRY/SCAN/NETSCAN/VSHIELD/CLEAN/WSCAN/NETSHIELD/TARGET/CONFIG MGR
Technical Details
Message-ID: <0014.9211161950.AA15221@barnabas.cert.org>
Path: arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!ames!sun-barr!rutgers!netnews.upenn.edu!netnews.cc.lehigh.edu!news

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!ames!sun-barr!rutgers!netnews.upenn.edu!netnews.cc.lehigh.edu!news
From: mcafee@netcom.com (McAfee Associates)
Newsgroups: comp.virus
Subject: Re: KEY Press virus & McAfee v97 (PC)
Message-ID: <0014.9211161950.AA15221@barnabas.cert.org>
Date: 15 Nov 92 06:39:28 GMT
Sender: virus-l@lehigh.edu
Lines: 48
Approved: news@netnews.cc.lehigh.edu