Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!usc!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: microsoft!c-rossgr@uunet.uu.net Newsgroups: comp.virus Subject: Re: Tequila virus (PC) Message-ID: <0011.9105231331.AA02851@ubu.cert.sei.cmu.edu> Date: 22 May 91 20:53:37 GMT Sender: Virus Discussion List Lines: 26 Approved: krvw@sei.cmu.edu >From: mrs@netcom.com (Morgan Schweers) > > *Chuckle* It's a variant of the Flip virus, actually. A bit of >psuedo-encryption code was added, and a bit of infection code was >removed, but otherwise it's mostly flip-like. Interesting phrase, "psuedo-encryption". What, exactly, does it mean? > Mr. McAfee gave me a scan string quickly after I handed it to >him, and it'll be in the upcoming release of Scan as well. (Clean, >of course, will remove it.) It's *VERY* rarely 'impossible' to find >a scan string for something. Sorry: I don't count "wild card" strings as a search pattern. There's too much chance for false positives. But, true, if you don't mind the occasional false positive, I guess you could state that a search string was available for Tequilaa. > Dave Chess mentioned to me that the Tequila displays a low resolution >Mandelbrot set upon activation. I haven't confirmed it, but I plan to. >(Anybody want GIF copies when I do? *chuckle*) Sorry, I'l wait for the sequel: Tequila Part II: The Resolution Improves! Ross