Alan_J_Roberts@cup.portal.com (02/02/90)
This is a forward from John McAfee: A number of people have called about SCAN's ability to detect the 4096 virus. When I said we could not detect it on disk, I was referring to a system where the virus is active in memory. If the virus is not already in the system, then SCAN will of course identify the virus on any file that you wish to scan before you run it. If the infected program is executed, however, then SCAN can only detect the virus in memory thereafter. What I'm trying to say, I guess, is that once the virus gets into memory and gains control, the only detection scheme that seems to work is a scan of memory. John McAfee 408 988 3832 (voice) 408 988 4004 (BBS) 408 970 9727 (FAX)