JK_APPLEREP@UNHH.UNH.EDU (Joe Kazura) (11/26/90)
We have a student who claims that Vaccine is reporting a "DCD WORM" infestation I have never heard of a WORM on the Mac as yet, but who knows! I have not seen this message and nothing I have can detect it on floppies that contain the "infected" files! Supposedly SAM is one of the infected files as well as GateKeeper (and Aid)! I'm lost here, any help would be GREAT!!!! Thanks in advance, Joe Kazura Apple Student Rep. Univ. of New Hampshire JK_APPLEREP@UNH.UNHH.EDU ST0566@APPLELINK.APPLE.COM (ST0566 on AppleLink)
76476.337@compuserve.com (Robert McClenon) (12/03/90)
> We have a student who claims that Vaccine is reporting a "DCD WORM" > infestation > I have never heard of a WORM on the Mac as yet, but who knows! > I have not seen this message and nothing I have can detect it on > floppies that contain the "infected" files! Supposedly SAM is one of > the infected files as well as GateKeeper (and Aid)! This is another case where an anti-viral program is reporting an infection of another anti-viral program. In all likelihood Vaccine is finding the signature of the "DCD WORM" in SAM, Gatekeeper, and Aid. They may have the signature of the worm because they are themselves scanning for its signature. If one anti-viral program detects a virus or other nasty in another anti-viral program, it is probably a false positive caused by the fact that they both use (and therefore contain) the same signature. Try scanning the supposedly infected anti-viral programs on clean read-only distribution diskettes. If this is indeed a signature conflict, the clean anti-viral programs will still trigger a false positive. If you use two or more anti-viral or other security programs, they are very likely to interact surprisingly, especially by suspecting each other. Security programs are "paranoid". They were designed that way and they have to be that way. Robert McClenon (Neither my employer nor anyone else paid me to say this)