[comp.virus] Stoned / Azusa

GLWARNER@SAMFORD.BITNET (THE GAR) (05/22/91)

I noticed something interesting using a McAfee Mix of V77.  Vshield 77
reported that it had found STONED and AZUSA, but after I cleaned
STONED it no longer saw AZUSA.  Turns out it is a double identifier.

McAfee says this will be corrected in 79 (recall that 78 is BOGUS and
there will NOT be a real version 78.)  They also told me the test
would be if it had found AZUSA first, it probably would have only had
AZUSA, and if it found STONED first it would probably only have
STONED.

This does not apply to every virus, as we have seen many cases where
both STONED and PING PONG B have been on the same machine, and it took
two passes with CLEAN to get them both.

Samford just licensed VSHIELD and hopefully this will help us quickly
bring the STONED/PING PONG battle to an end.  We have been engaged
since December in this battle, but without the funds to win.  I'll
have a report later as to how effective VSHIELD is, but I am quite
optomistic.

(It might be September before I report, since we just lost 80% of our
student body to summer.)

 /++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\
!  Later        +   Systems Programmer                                 !
!  Gary Warner  +   Samford University Computer Services               !
!               +   II TIMOTHY 2:15                                    !
 \+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++/