Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!usc!sdd.hp.com!elroy.jpl.nasa.gov!lll-winken!iggy.GW.Vitalink.COM!widener!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: mcafee@netcom.com (McAfee Associates) Newsgroups: comp.virus Subject: Re: Protection evaluation with test virus: (PC) Message-ID: <0009.9106131515.AA13504@ubu.cert.sei.cmu.edu> Date: 12 Jun 91 23:50:07 GMT Sender: Virus Discussion List Lines: 29 Approved: krvw@sei.cmu.edu holly@fifi.isi.edu (Dennis Hollingworth) writes: >Posted for Dan Hirsh (818) 505-2285 > >I tested McAfee's SCAN77 using Rosenthal Engineering's new release of >Virus Simulator (I've seen posted as VIRSIM11.COM on EXEC-PC, >Compuserve and others). It seems that SCAN77 misses three boot sector >viruses that SCAN76 found on the same disk. Both versions of SCAN >found nine viruses in the .COM, four in the .EXE and seven in the test >memory virus. [rest of message deleted...] Rosenthal Engineering's VIRSIM program is a string-based virus simulator. As such, only scanners that use the same strings that VIRSIM uses will detect its "viruses." We regularly adjust our strings, so this why V76 would report viruses that V77 did not. Regards, Aryeh Goretsky McAfee Associates Technical Support - -- McAfee Associates | Voice (408) 988-3832 | mcafee@netcom.com 4423 Cheeney Street | FAX (408) 970-9727 | (Aryeh Goretsky) Santa Clara, California | BBS (408) 988-4004 | 95054-0253 USA | v.32 (408) 988-5190 | mrs@netcom.com ViruScan/CleanUp/VShield | HST (408) 988-5138 | (Morgan Schweers)