Article View: comp.virus
Article #4737Filler virus (PC)
From: Bill Lambdin
Date: Mon, 28 Dec 1992 23:21
Date: Mon, 28 Dec 1992 23:21
29 lines
1359 bytes
1359 bytes
Quoting from Brill@aecom.yu.edu to All About Filler virus (PC) on 12-07-92 B > Scan 99 detected "Filler" active in the memory of my computer. B > When I booted from a write-protected floppy the nasty virus was not B > found, no matter how many times I tried. By the way, I have CPAV B > constantly running and it did not detect anything wrong. You have probably already received many answers, but I will add my two cents any way. The problem is the VSAFE or VWATCH TSRs that comes with CPAV. The virus signatures are not encrypted when these TSRs are in memory, and Scan finds the signature, and assumes the rest of the virus is there. You have several options. A. Use CPAV exclusively. B. Stop using CPAV. In my tests, these scanners rank highest. F-Prot from Frisk Software VIRx from Data Watch Software (Used to be Microcom) McAfee's Scan. Bill - --- * WinQwk 2.0 a#383 * HALLOWEEN activates Oct 31st
Technical Details
Message-ID:
<0004.9301051858.AA13030@barnabas.cert.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!elroy.jpl.nasa.gov!usc!cs.utexas.edu!qt.cs.utexas.edu!yale.edu!jvnc.net!netnews.upenn.edu!netnews.cc.lehigh.edu!newsShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!elroy.jpl.nasa.gov!usc!cs.utexas.edu!qt.cs.utexas.edu!yale.edu!jvnc.net!netnews.upenn.edu!netnews.cc.lehigh.edu!news From: bill.lambdin%acc1bbs@ssr.com (Bill Lambdin) Newsgroups: comp.virus Subject: Filler virus (PC) Message-ID: <0004.9301051858.AA13030@barnabas.cert.org> Date: 28 Dec 92 23:21:00 GMT Sender: virus-l@lehigh.edu Lines: 29 Approved: news@netnews.cc.lehigh.edu