Article View: comp.virus
Article #4254Re: KEY Press virus & McAfee v97 (PC)
From: Vesselin Bontchev
Date: Tue, 17 Nov 1992 17:08
Date: Tue, 17 Nov 1992 17:08
40 lines
2156 bytes
2156 bytes
mcafee@netcom.com (McAfee Associates) writes: > >point is, however, that SCAN is occasionally not very accurate in determinin g > >exactly which virus you have. > I understand that, believe me. We will fix any such problems reported > to us. Will you? Any such problems? Let's hope... Because, if memory serves correctly, I am reporting such problems to you since about a year... Such problems include: 1) Viruses mentioned in VIRLIST.TXT but never reported by SCAN. 2) Viruses reported by SCAN but never mentioned in VIRLIST.TXT. 3) Viruses mentioned under one name in VIRLIST.TXT, but reported under a slightly different name by SCAN. 4) Viruses described with wrong properties in VIRLIST.TXT. 5) Several (often - completely different) viruses reported with one and the same name. This is the most dangerous problem, since it causes misidentification. As a reply of one of my reports about these, I got a very angry reply from John McAfee himself. The reply was posted from your account, so you should know about it. It claimed that the viruses mentioned by me are actually closely related. Those viruses were Number of the Beast, Compiler.1, and Darth Vader. Anybody who has bothered to disassemble them knows that they are completely different... BTW, SCAN 97 still reports all the three of them as "512 [512]"... :-( Regards, Vesselin - -- Vesselin Vladimirov Bontchev Virus Test Center, University of Hamburg Tel.:+49-40-54715-224, Fax: +49-40-54715-226 Fachbereich Informatik - AGN < PGP 2.0 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C e-mail: bontchev@fbihh.informatik.uni-hamburg.de D-2000 Hamburg 54, Germany
Technical Details
Message-ID:
<0009.9211191448.AA21875@barnabas.cert.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!ornl!rsg1.er.usgs.gov!darwin.sura.net!zaphod.mps.ohio-state.edu!ub!dsinc!netnews.upenn.edu!netnews.cc.lehigh.edu!newsShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!ornl!rsg1.er.usgs.gov!darwin.sura.net!zaphod.mps.ohio-state.edu!ub!dsinc!netnews.upenn.edu!netnews.cc.lehigh.edu!news From: bontchev@fbihh.informatik.uni-hamburg.de (Vesselin Bontchev) Newsgroups: comp.virus Subject: Re: KEY Press virus & McAfee v97 (PC) Message-ID: <0009.9211191448.AA21875@barnabas.cert.org> Date: 17 Nov 92 17:08:43 GMT Sender: virus-l@lehigh.edu Lines: 40 Approved: news@netnews.cc.lehigh.edu