Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: frisk@rhi.hi.is (Fridrik Skulason)
Newsgroups: comp.virus
Subject: Re: Error in F-PROT 1.15 (PC)
Message-ID: <0011.9104241322.AA17334@ubu.cert.sei.cmu.edu>
Date: 24 Apr 91 08:53:05 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 39
Approved: krvw@sei.cmu.edu

I wrote:
>>Fix:      Either just give the command
>
>>		F-UNLOCK F-TEST.COM

billj@uop.uop.edu (Snugglupagus) writes:
>
>tried it, but it didn't work.  now i run f-test only to get the
>following message:
>
>program infected with the f-test- virus.
>access denied.
>
It works...

This is exactly the message you should get when the program is
working.  The "Program infected..." is the message you get when
F-DRIVER stops a program it suspects of being infected with a virus.
Note that F-TEST.COM does not contain a virus, however.

>>	  or replace the F-TEST.COM with the following program.
>
>>begin 755 f-test.com
>>hY70u1U4o0QoVi+-AnG349IFGGJN3IW-dQm-iPrEUOKtnR43gP4JY64xm64tj
>>BR0-rPr7fOKtb6Eo87034
>>+
>>end

>well, this is all we got at this site.  obviously, it's not the whole
>thing.

It is the whole thing.  The above program is an xxencoded correct
version of F-TEST.COM

I have also fixed a few other problems with F-PROT 1.15 - if your
program reports a "possible infection" by "10 past 3" or "Kamikaze",
ignore it.

- -frisk