cs106132@uunet.UU.NET (cs106132) (05/09/91)
HI, This is a follow-up on my previous posting regarding a problem with F-PROT & FluShot+ (1.81) packages and a variant of 4096 virus. I have received messages from the developers of these products requesting a sample of the mentioned virus so that they can update. The previously described scenario happened on an isolated system that is used solely for testing. The mentioned variant of 4096 was modified for testing purposes. Neither developer needs to worry about updates since this strain will not exist outside the test machine. The point was, however, that such sophisticated viruses defeat the "hunt-for-pattern" approach. Both developers are invited to improve their techniques dealing with this variety of viruses instead of trying to add just another pattern to search for. Regards, Tarkan