Path: utzoo!attcan!uunet!samsung!usc!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: HKR@PSUVM.PSU.EDU (Ken Rosenberry)
Newsgroups: comp.virus
Subject: Search strings for IBM VIRSCAN program (PC)
Message-ID: <0008.9006061301.AA19134@ubu.cert.sei.cmu.edu>
Date: 5 Jun 90 18:35:48 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1.BITNET>
Lines: 16
Approved: krvw@sei.cmu.edu

The VIRSCAN.EXE program from IBM uses two signature files as input when
performing a virus scan.  These files are:

    SIGFILE.LST   - a list of signature entries for EXE and COM files
    SIGBOOT.LST   - a list of signature entries for boot sectors

We have versions of these files dated Sept 11, 1989.  Are there any
persons who maintain updated versions of these files as new viruses are
discovered?  If so, could you please either E-mail me the new files or
post info on where they could be obtained.

Thank you

Ken Rosenberry                    BITNET:    hkr@psuvm
Senior Systems Programmer         Internet:  hkr@psuvm.psu.edu
Pennsylvania State University     APPLELINK: u0485