🚀 go-pugleaf

Libbie Counselman writes:
>Has anyone on this list heard of the CANSU virus?  Many of the
>machines on our campus have been infected, and so far only one
>anti-viral program, (McAfee) has been found that can combat it.  Does
>anyone know of other anti-virals that will detect and/or disinfect it?

NAV 2.1 can detect and disinfect it.

Cansu has the ability to permute a small number of its instructions to
make itself look different.  (12 permutations).  Once in memory, it
has a consistent memory signature.

The strain of Cansu with which we are familiar does not damage
systems.  It only has the capability to display a large V on the
screen.  This large V accounts for its aliases as V-SIGN and BigV.

I guess we can add PA/NJ to the list.  Sigh.  Previously, it had only
been seen in Europe and Southern US.

Jimmy Kuo                                       cjkuo@ccmail.norton.com
Norton AntiVirus Research