[comp.virus] Possible Bug in VIRUSCAN V77

walker@aedc-vax.af.mil (William Walker) (06/06/91)

I have found what seems (to me) to be a bug in VIRUSCAN V77.  When
scanning multiple floppies (SCAN A: /M /MANY), the first virus
encountered prompts the message

    Found 1 file containing viruses.

If the next diskette also contains a virus, SCAN reports

    2 viruses found.

So far, so good.  Here's the problem: SCAN says "2 viruses found."
for every subsequent diskette with a virus, so long as no clean
floppies are scanned.  If a clean floppy is encountered, the message
returns to "Found 1 file containing viruses." and the cycle repeats.
CLEAN does not have the same problem, as its counter is accurate.

I guess this is a trivial problem, and it doesn't matter to me as it
still detects viri without problems (that I've seen).  However, it
does not inspire confidence in the user whose diskettes I'm scanning
when he or she asks, "Why isn't the count right?" and I reply, "It's
just a bug in the detection program."

Incedentally, VIRUSCAN V75 and V76C don't show this problem, and
judging from their behavior, this is not supposed to be a running
count, but merely a count of viri on the diskette just scanned.  Also
incedentally, this behavior only occurs with the Stoned virus, not any
of the other viri with which I tested it (Jerusalem-B, Yankee Doodle,
Music Bug, or 1701/1704).  Has anyone else seen this?

Bill Walker ( WALKER@AEDC-VAX.AF.MIL ) |
OAO Corporation                        |     "That's not a bug,
Arnold Engineering Development Center  |      that's a feature!"
M.S. 120                               |          - Anonymous
Arnold Air Force Base, TN  37389-9998  |