Re: Protection evaluation with test virus: (PC)

Article View: comp.virus

Article #4527

#4527

From: McAfee Associates
Date: Wed, 12 Jun 1991 23:50

29 lines
1637 bytes

holly@fifi.isi.edu (Dennis Hollingworth) writes:
>Posted for Dan Hirsh (818) 505-2285
>
>I tested McAfee's SCAN77 using Rosenthal Engineering's new release of
>Virus Simulator (I've seen posted as VIRSIM11.COM on EXEC-PC,
>Compuserve and others).  It seems that SCAN77 misses three boot sector
>viruses that SCAN76 found on the same disk.  Both versions of SCAN
>found nine viruses in the .COM, four in the .EXE and seven in the test
>memory virus.
[rest of message deleted...]

Rosenthal Engineering's VIRSIM program is a string-based virus
simulator.  As such, only scanners that use the same strings that
VIRSIM uses will detect its "viruses."

We regularly adjust our strings, so this why V76 would report viruses
that V77 did not.

Regards,

Aryeh Goretsky
McAfee Associates Technical Support

- --
McAfee Associates	 | Voice (408) 988-3832	| mcafee@netcom.com
4423 Cheeney Street	 | FAX   (408) 970-9727	| (Aryeh Goretsky)
Santa Clara, California	 | BBS   (408) 988-4004	|
95054-0253  USA		 | v.32  (408) 988-5190	| mrs@netcom.com
ViruScan/CleanUp/VShield | HST   (408) 988-5138 | (Morgan Schweers)

Technical Details

Message-ID: <0009.9106131515.AA13504@ubu.cert.sei.cmu.edu>

Path:

arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!usc!sdd.hp.com!elroy.jpl.nasa.gov!lll-winken!iggy.GW.Vitalink.COM!widener!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!usc!sdd.hp.com!elroy.jpl.nasa.gov!lll-winken!iggy.GW.Vitalink.COM!widener!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: mcafee@netcom.com (McAfee Associates)
Newsgroups: comp.virus
Subject: Re: Protection evaluation with test virus: (PC)
Message-ID: <0009.9106131515.AA13504@ubu.cert.sei.cmu.edu>
Date: 12 Jun 91 23:50:07 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 29
Approved: krvw@sei.cmu.edu