rs0xeg%rohvm1@VMA.CC.CMU.EDU (E.C. Greer) (10/06/89)
Below is the text of an announcement recently made by IBM. We got this
from our IBM representative. It's not particularly clear to me
exactly which viruses this software works for, but I thought I'd
pass it along. There is a number to call for more information.
September 29, 1989
MEMORANDUM TO: IBM Business Partners
SUBJECT: Personal Computer Virus Detection
There is an increasing awareness in the industry of the existence of
disruptive computer viruses. Several personal computer viruses exist
which are expected to activate after October 12, 1989. These viruses
can erase a DOS or OS/2* file or render the files on the fixed disk
inaccessible. Although the number of reported occurrences is low, this
is to alert you to the potential risk of these viruses and to provide
you with a program to assist you in detecting them.
Enclosed are 3.5 inch and 5.25 inch diskettes with the IBM Virus
Scanning Program for personal computers and its license agreement. At
your discretion, you may make copies for your customers. Also included
are a fact sheet on the IBM Virus Scanning Program and a virus question
and answer document.
We recommend that you and your customers run the IBM Virus Scanning
Program on all of your personal computers using DOS and/or OS/2 as soon
as possible prior to October 12th.
If you provide customers a copy of these diskettes, you must also pro-
vide them with a copy of the license agreement. To ensure a virus free
copy, you must follow the instructions in the READ.ME file on the
diskette. You should "write protect" all copies of the original disk-
ettes. The READ.ME file also contains additional information on the
IBM Virus Scanning Program. There is a $35.00 charge for this program.
Payment is to be made by the customer directly to:
IBM Corporation
Grand Central Station
P.O. Box 2646
New York, NY 10163
Alternatively, your customer may order the IBM Virus Scanning Program
(part number 64F1424) at a cost of $35.00, with a major credit card,
directly from the IBM fulfillment center by calling 1-800-426-7282.
IBM Virus Scanning Program Fact Sheet
+ _____________________________________
WARNING - BEFORE USING THE IBM VIRUS SCANNING PROGRAM MAKE CERTAIN
THAT THE COPY YOU INTEND TO USE COMES FROM A SECURE UNINFECTED SOURCE,
AND THAT THE DISKETTES' WRITE PROTECT TAB IS IN PLACE IF THE DISKETTE
IS NOT PERMANENTLY WRITE PROTECTED.
The IBM Virus Scanning Program has been developd by IBM to aid in the
detection of some computer viruses and is being used internally by IBM
to detect computer viruses. The program is designed to scan boot
records and executable files looking for signatures of viruses known to
IBM when the program was written. A signature is a bit pattern that is
indicative of a particular virus. The files that are scanned by the IBM
Virus Scanning Program must be in their native executable form (e.g.,
not encrypted and not packed) in order for signature matching to occur.
There may be other viruses that currently exist, or will exist in the
future, that the IBM Virus Scanning Program will not detect. We know
of no available, guaranteed solution to computer viruses, so we
recommend regular backups of your data, caution in acquiring and using
software and good security practices.
Description of the IBM Virus Scanning Program
+_____________________________________________
The program tests executable files on disks for signature strings that
are found in some common DOS computer viruses. For each drive specified
it will also test the drive for boot sector viruses.
To use it, simply type at the command prompt (for example)
VIRSCAN C: to scan the executable files on the C: drive
or
VIRSCAN A: to scan the executable files on the A: drive
or
VIRSCAN n: n: n: to scan multiple drives (n = drive id)
Type VIRSCAN without any arguments for some help.
Files infected with a virus should be erased and replaced with
uninfected copies (obtained from the original source, such as
original manufacturer's diskettes, in-house source code, backup
copies, etc).
NOTE: Prior to restoring any files, run the program against
the diskette from which you plan to restore to ensure
it is virus-free.
Technical Detail:
+________________
VIRSCAN.EXE is the executable program. It will run under DOS 2.0, 2.1,
3.1, 3.2, 3.3, 4.0 and OS/2* 1.0, 1.1, and 1.2. It will not support
OS/2 1.2 with high performance file system names.
Virus detection programs and services are available from other companies
and you may also wish to advise your customers of these. The IBM Virus
Scanning Program will not detect all personal computer virus possibili-
ties and should be considered complementary to, and not a substitute
for, established security and backup procedures.
If you have any questions, please call the NDD National Support Center
at 1-800-IBM-PROD or contact your IBM marketing representative.
R. F. Martino
Vice President
Marketing
Enclosures
* Trademark of the IBM Corporation