Path: utzoo!utgpu!news-server.csri.toronto.edu!bonnie.concordia.ca!uunet!news.uu.net!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: CHESS@YKTVMV.BITNET (David.M.Chess)
Newsgroups: comp.virus
Subject: re: Tequila virus (PC)
Message-ID: <0001.9105221524.AA01619@ubu.cert.sei.cmu.edu>
Date: 20 May 91 18:39:33 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 10
Approved: krvw@sei.cmu.edu

>From:    microsoft!c-rossgr@uunet.uu.net
>
>Additionally, it looks a lot like a combo of 1260 and v101:
>it is impossible to get a scan string for it.

While I know what you mean, Ross, I'd like to clarify for our readers:
the Tequila doesn't actually seem to share any code with the 1260 or
Virus-101 (no evidence that the author of the Tequila had seen either
of those), and a scanner that can handle variable-length "don't care"
areas can detect it with no problems.  DC