Path: utzoo!utgpu!news-server.csri.toronto.edu!bonnie.concordia.ca!uunet!lll-winken!iggy.GW.Vitalink.COM!widener!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: wdh2866@zeus.tamu.edu (HAWKINS, WILLIAM DARYL)
Newsgroups: comp.virus
Subject: Help! Casper/1260 virus (PC)
Message-ID: <0003.9104291313.AA23337@ubu.cert.sei.cmu.edu>
Date: 26 Apr 91 16:33:31 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 14
Approved: krvw@sei.cmu.edu


   I have just recently scanned my harddrive with F-PROT115.  During
the scan, it returned the message - possible virus found: casper/1260.
The file which it says is infected is vaxlink.exe.  As the name
implies, I use it to upload and download files to and from the vax.
When I tried to disinfect the file, F-FCHK still reported a possible
infection, but would not... or could not disinfect the file.  I have
also scanned the same file with McAfee's SCANV76C, and it does not
report an infection.  The question: Do I have an infection?  (or is
F-FCHK interpreting a piece of code in the vaxlink program as the
signature of the casper/1260 virus...) If I do have an infection, why
won't F-PROT disinfect the file?

 Any help would be greatly appreciated......  Thanks in advance.