Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: c-rossgr@microsoft.COM Newsgroups: comp.virus Subject: Re: Interesting interaction ( VIRx & SCAN ) (PC) Message-ID: <0005.9106241405.AA24222@ubu.cert.sei.cmu.edu> Date: 20 Jun 91 21:23:19 GMT Sender: Virus Discussion List Lines: 20 Approved: krvw@sei.cmu.edu >From: kforward@kean.ucs.mun.ca (Ken Forward) > >p1@arkham.wimsey.bc.ca (Rob Slade) writes: >> Noted an interesting interaction between two antivirals the other day, > >Tried this out for myself; no 3445 or Doom 2, but Taiwan3 [T3] was >"found" in memory. Has anyone experienced any other false positives >with this combination ? It goes to show that the viral strings used in Program A might also be used in Program B. The string database is large enough that it probably spanned more than a few DOS buffers: depending on what buffers were used by subsequent code, different portions of the string database might be left in different areas of memory, thereby those who share our strings will have different "hits" at different times. The new cut of VIRx with new strings added (a bunch) and some bug fixes is due out any second... Ross