aryehg@ozonebbs.UUCP (Aryeh Goretsky) (03/01/91)
WHAT'S NEW
Version 75 of VIRUSCAN adds seven new viruses and fixes a
problem that caused Version 74-B to false alarm on diskettes
formatted with Easy-Format. We apologize for any inconvenience we
may have caused due to this problem. The new viruses added were:
The Phantom virus is a memory-resident .COM file infector sent
to us from Budapest, Hungary by Dr. Szegedi Imre. It contains a
message stating that it was written by the PHANTOM of the
"Hungarian Virus Developing Laboratory." The Azusa virus is a
memory-resident floppy disk boot sector and hard disk partition
table infector reported from multiple sites in the U.S. The V-299
is a direct-action .COM file infector based on the Amstrad virus.
It is not memory-resident. The V-555 virus is a memory-resident
.COM, .EXE, and overlay infector. The Lazy virus is a
memory-resident .COM file infector. When it is resident, it slows
down the processor and screen output significantly. For more
information about these viruses, please refer to the enclosed
VIRLIST.TXT file.
Version 75 of CLEAN-UP adds removal of the Azusa virus, a
floppy disk boot sector and hard disk partition table virus that
has been reported in multiple sites in the U.S.
Version 75 of VSHIELD and NETSCAN add prevention against and
network detection of the above-listed viruses, respectively.
------------------------------------------------------------
NB: I've received several pieces of mail regarding Version 74
incompatibilities with the NEC and Zenith OEM Versions of DOS 3.3.
The NEC version of DOS uses a nonstandard partitioning scheme to
"get around" the 32Mb hard disk size limit imposed by DOS.
VIRUSCAN Version 74 was unable to recognize this and as a result
would give a false alarm. Version 74 also misidentified the Zenith
OEM version of DOS as having the Swedish Diaster (yet another
Stoned variant) virus in the boot sector of formatted disks (hard
and floppy). This is due to the fact that the boot sector
contained the same code we were looking for in the Swedish Diaster
virus. We've also found this code in 10Mb Iomega Bournoulli disk
cartridges and disks formatted with DR-DOS 5.0. Version 74-B
corrected this problem.
We are sorry for any inconvenience or panic caused by our error.
Aryeh Goretsky
PS: I've also gotten several messages about my internet address. To
the best of my knowledge, the site I'm calling from, "ozonebbs.uucp"
is on the networks maps and I can be reached as "aryehg@ozonebbs.uucp"
if this fails, please try "ozonebbs!aryehg@apple.com" which should reach
me. In the event this one bounces also, Mr. Keith Peterson has
graciously set up the following mail address "aryehg@tacom-emh1.army.mil"
A special note of thanks to all who have persevered in their efforts to
reach me (thanks Keith!). -- Aryeh
+----------------------------------------------------------------+
| Aryeh Goretsky, Tech Support vox (408) 988-3832 |
| McAfee Associates fax (408) 970-9727 |
| 4423 Cheeney Street bbs (408) 988-4004 |
| Santa Clara, California 95054-0253 // |
| Internet: aryehg@ozonebbs.uucp // |
| UUCP: apple!netcom!nusjecs!ozonebbs!aryehg \X/ |
| "Opinions expressed are my own and do not neccessarily reflect |
| those of my employer."--universal disclaimer applied herein. |
| "How is a cat like a meatloaf?"--John R. De Palma, M.D. |
+----------------------------------------------------------------+