Re: Interesting interaction ( VIRx & SCAN ) (PC)

Article View: comp.virus

Article #4592

#4592

From: c-rossgr
Date: Thu, 20 Jun 1991 21:23

20 lines
1320 bytes

>From:    kforward@kean.ucs.mun.ca (Ken Forward)
>
>p1@arkham.wimsey.bc.ca (Rob Slade) writes:
>> Noted an interesting interaction between two antivirals the other day,
>
>Tried this out for myself; no 3445 or Doom 2, but Taiwan3 [T3] was
>"found" in memory.  Has anyone experienced any other false positives
>with this combination ?

It goes to show that the viral strings used in Program A might also be
used in Program B.  The string database is large enough that it
probably spanned more than a few DOS buffers: depending on what
buffers were used by subsequent code, different portions of the string
database might be left in different areas of memory, thereby those who
share our strings will have different "hits" at different times.

The new cut of VIRx with new strings added (a bunch) and some bug
fixes is due out any second...

Ross

Technical Details

Message-ID: <0005.9106241405.AA24222@ubu.cert.sei.cmu.edu>

Path:

arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: c-rossgr@microsoft.COM
Newsgroups: comp.virus
Subject: Re: Interesting interaction ( VIRx & SCAN ) (PC)
Message-ID: <0005.9106241405.AA24222@ubu.cert.sei.cmu.edu>
Date: 20 Jun 91 21:23:19 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 20
Approved: krvw@sei.cmu.edu