[comp.virus] Virucide & Twelve Tricks

76476.337@CompuServe.COM (Robert McClenon) (11/01/90)

Two correspondents in the past two months have commented that McAfee's
SCAN program detected the Twelve Tricks Trojan after the Virucide
commercial anti-viral program was installed.  There is an innocent but
technically sophisticated explanation.  Both SCAN and Virucide are
checking for the Twelve Tricks Trojan by looking for its signature.
SCAN looks at Virucide and sees the test for the signature of Twelve
Tricks and thinks that the test CONTAINS the signature of Twelve
Tricks.  This is a standard case of an odd interaction between
security programs.  There is probably no real problem.  However, I
would suggest a call to the vendor for Virucide to ask whether they
are in fact doing a signature check for the Twelve Tricks Trojan.

What is the Twelve Tricks Trojan anyway?

          Robert McClenon
          Neither my employer nor anyone else paid me to say this.