Bill.Viggers@comp.vuw.ac.nz (Bill Viggers) (10/14/90)
There seems to be a little problem with the latest version of Scan and its related products. Killer is (I think) locally written, and is designed to remove the STONED virus. When I ran Scan v67 it picked up killer.com as being infected with the invader virus. Thinking that I actually might have the virus I used clean to fix it up. This unfortunatly seems to have destroyed killer.com. Checking further, I discovered the invader virus on the version of killer.com given to me by my dealer. Having successfuly used killer.com before, and the 'virus' not having spread, I was a little surprised, and used scan v67 to check out killer.com that was on a pc at VUW. That too it appears had this virus. The documentation for Scan v67 said that the invader virus is a new virus, and that was why the release of this version of Scan was delayed. Putting 2 and 2 together, I assume that this means that killer.com has some code in it that Scan uses to identify the invader virus. If anyone who could either confirm or refute this, I would appreatiate it. Bill Viggers (Under graduate).
maven@rata.vuw.ac.nz (Jim Baltaxe) (10/16/90)
Bill.Viggers@comp.vuw.ac.nz (Bill Viggers) writes: > There seems to be a little problem with the latest version of > Scan and its related products. Killer is (I think) locally written, > and is designed to remove the STONED virus. > Putting 2 and 2 together, I assume that this means that > killer.com has some code in it that Scan uses to identify the > invader virus. This appears to be the case, although our own testing is no finished yet. In any event, I would suggest that people, in New Zealand at least, no longer use KILLER to treat the Stoned virus. We have released a new program, NOSTONE, which handles both the original Stoned and a new variant with an altered signature (and one of several new messages, including "Donald Duck is a liar.") Recent versions (post 64) of McAfee's SCAN also know about both versions of the Stoned virus. NOSTONE is available on our publicly distributed collection of anti-virus utilities and it will be available for anonymous FTP very shortly; like wait a day or two. The files will be in /usr/local/ftp on rata.vuw.ac.nz Jim Baltaxe - MAVEN@vuw.ac.nz - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= There are some days when I can't be sure whether life is trying to pass me by or trying to run me over.