Path: utzoo!utgpu!news-server.csri.toronto.edu!bonnie.concordia.ca!nstn.ns.ca!news.cs.indiana.edu!widener!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: microsoft!c-rossgr@uunet.uu.net
Newsgroups: comp.virus
Subject: re: Tequila virus (PC)
Message-ID: <0001.9105232038.AA03593@ubu.cert.sei.cmu.edu>
Date: 22 May 91 21:19:17 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 16
Approved: krvw@sei.cmu.edu

>From:    "David.M.Chess" <CHESS@YKTVMV.BITNET>

>While I know what you mean, Ross, I'd like to clarify for our readers:
>the Tequila doesn't actually seem to share any code with the 1260 or
>Virus-101 (no evidence that the author of the Tequila had seen either
>of those), and a scanner that can handle variable-length "don't care"
>areas can detect it with no problems.  DC

Whoops!  You're write! I should right better and knot make so many
misteaks! :-)

I have an abhorrence for wild-carded scan strings -- too many false
positives -- so I tend to not include them.  I ended up going
algorithmically on the Tequila in any case...

Ross