[comp.virus] M-1704 question

JSHANESY%NAS.BITNET@VMA.CC.CMU.EDU (Jim Shanesy) (10/05/89)

We (Don Kazem of our Technical Systems group, and myself, a
programmer/analyst) have just downloaded M-1704.ARC from the Homebase
bulletin board and found upon reading the documentation that SCANV40
is supposed to detect M-1704.EXE as a virus.  It does not.  We both
ran SCANV40 (also obtained from Homebase) on our respective hard disks
and SCAN reports them both as clean.

Don's machine is a PS/2 Model 70 with ESDI-controlled 120 Meg hard
disk, and mine is a PS/2 Model 60 with ESDI-controlled 66 Meg hard
drive.  We are reluctant to run this program until we verify that it
is not indeed infected, since its behavior is different from that
described in the documentation.

Any comments, Mr. McAfee?

[Ed. I believe that the newer ViruScan versions were modified to *not*
produce this false alarm; perhaps Mr. McAfee can confirm this.]

**********************************************************************
 Jim Shanesy  JSHANESY@NAS.BITNET
 Office of Computer and Information Technology
 National Academy of Sciences
 2101 Constitution Ave., NW
 Washington, DC  20418
 (202)-334-3219
**********************************************************************