Path: utzoo!utgpu!attcan!uunet!lll-winken!lll-tis!helios.ee.lbl.gov!pasteur!agate!bionet!apple!bloom-beacon!tut.cis.ohio-state.edu!cwjcc!hal!nic.MR.NET!tank!nucsrl!jln
From: jln@eecs.nwu.edu (John Norstad)
Newsgroups: comp.sys.mac
Subject: Virus Rx 1.0a2 Doesn't Detect nVIR
Message-ID: <10330078@eecs.nwu.edu>
Date: 7 Nov 88 18:57:08 GMT
Organization: Northwestern U, Evanston IL, USA
Lines: 39


We're currently experiencing an nVIR outbreak on campus.  Much to
my suprise and dismay, I've discovered that Apple's Virus Rx 1.0a2
DOES NOT detect nVIR!  I've tested it against two different strains of
nVIR, and it completely misses both of them.  It fails to detect both
infected system files and infected applications.  That's the reason for
this posting - this fact may be common knowledge in some circles, but I
wasn't aware of it, and I think it's important.  

I currently recommend Interferon 3.1 as the best general-purpose
virus detector.  I've tested it, and it does catch both of the nVIR strains
that I have, as well as Scores.  However, DO NOT try to use Interferon to 
get rid of an infection - it does not properly repair infected 
applications, and will leave them irreparably damaged.  Use AntiPan and
KillScores to get rid of infections (see below).

I've also tested the AntiPan program that recently appeared at
Rascal.ics.utexas.edu.  It's an nVIR eradicator.  It seems to work well
in getting rid of both strains.  We're using it to fight our nVIR 
infection.

My current recommendations for virus-fighting tools are Vaccine for
protection (efective against Scores and both nVIR strains), Interferon
for detection, KillScores for Scores eradication, and AntiPan for
nVIR eradication.  All of these tools are available via anonymous FTP
from Rascal, and from many other sources.

Both Scores and nVIR have been around for quite some time now (about a
year).  Despite tremendous publicity and a collection of good virus-
fighting tools, they both continue to spread like wildfire, especially
at Universities.  I've been receiving tons of mail lately from people
asking for help fighting infections.  Please, people, get a copy of
Vaccine and use it religiously.  Practice safe hex!

John Norstad
Academic Computing and Network Services
Northwestern University

Bitnet:    jln@nuacc
Internet:  jln@nuacc.acns.nwu.edu