Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!think.com!zaphod.mps.ohio-state.edu!cis.ohio-state.edu!pacific.mps.ohio-state.edu!linac!att!news.cs.indiana.edu!widener!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: padgett%tccslr.dnet@mmc.com (A. Padgett Peterson)
Newsgroups: comp.virus
Subject: Interesting advert (PC)
Message-ID: <0011.9105291438.AA09086@ubu.cert.sei.cmu.edu>
Date: 28 May 91 21:11:07 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 22
Approved: krvw@sei.cmu.edu

>From:    "K.Stevenson" <ERCN53@emas-a.edinburgh.ac.uk>

>It uses  cryptographic checksums to  monitor the  state  of
>executables on  a PC or  file-server.  Any change, however caused will
>be detected.  Since  Vaccine does not  need to know  about  particular
>viruses in order to detect them,  it is future proof.  Once installed,
>Vaccine will detect all viruses, past, present and future."

Question: when does it go resident ? If from CONFIG or later, you know
          my opinion.

Comment:  4096, EDV, INT13, Zenith 158 & 159

>From:    john.blakeney@f1701.n713.z3.fido.oz.au (John Blakeney)
>Subject: Virus detection via crcs

>(crc) check is only effective way of looking for viral activity unless
>search strings are known for the viruses listed in letters. trhere is
>no known virus(to my knowledge which does not alter crc check.

See above, a vital element in a good integrity management system, but not the
only element.