Article View: comp.virus
Article #51144096 virus detection (PC)
From: Alan_J_Roberts
Date: Thu, 01 Feb 1990 22:07
Date: Thu, 01 Feb 1990 22:07
17 lines
1171 bytes
1171 bytes
This is a forward from John McAfee: A number of people have called about SCAN's ability to detect the 4096 virus. When I said we could not detect it on disk, I was referring to a system where the virus is active in memory. If the virus is not already in the system, then SCAN will of course identify the virus on any file that you wish to scan before you run it. If the infected program is executed, however, then SCAN can only detect the virus in memory thereafter. What I'm trying to say, I guess, is that once the virus gets into memory and gains control, the only detection scheme that seems to work is a scan of memory. John McAfee 408 988 3832 (voice) 408 988 4004 (BBS) 408 970 9727 (FAX)
Technical Details
Message-ID:
<0007.9002021158.AA26135@ge.sei.cmu.edu>Path:
arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!wuarchive!brutus.cs.uiuc.edu!ux1.cso.uiuc.edu!tank!cps3xx!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvwShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!wuarchive!brutus.cs.uiuc.edu!ux1.cso.uiuc.edu!tank!cps3xx!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw From: Alan_J_Roberts@cup.portal.com Newsgroups: comp.virus Subject: 4096 virus detection (PC) Message-ID: <0007.9002021158.AA26135@ge.sei.cmu.edu> Date: 1 Feb 90 22:07:18 GMT Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU> Lines: 17 Approved: krvw@sei.cmu.edu