Re: F-Prot's (v2.05) memory scanning. (PC)

Thread View: comp.virus

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Fridrik Skulason Tue, 17 Nov 1992 08:58

#4250

Author: Fridrik Skulason
Date: Tue, 17 Nov 1992 08:58

16 lines
1156 bytes

cz1jed@orac.sunderland-poly.ac.uk (J.EDWARDS) writes:

>After hours of failing to get Windows to install, the owner suddenly
>announced he thought his computer might be infected.  I ran F-Prot
>straight away and sure enough it announced it had detected 'Stoned' in
>memory.  I booted from my clean floppy and when running F-Prot again
>it claimed the hard-disk was infected with not 'Stoned' but
>'Michaelangelo'.

The reason for this is simple - The memory scan only reports the virus
family, not the exact variant name.  As Michelangelo has been
classified as a member of the "Stoned" family, it reports "Stoned".
When you scan the boot sector, F-PROT identifies the variant - in this
case Michelangelo.

- -frisk

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads