Xref: utzoo comp.sys.mac:23849 comp.sys.mac.programmer:3497 Path: utzoo!attcan!uunet!ncrlnk!ncrcae!ncr-sd!hp-sdd!hplabs!decwrl!labrea!rutgers!att!pacbell!rtech!mtxinu!taniwha!michael From: michael@taniwha.UUCP (Michael Hamel) Newsgroups: comp.sys.mac,comp.sys.mac.programmer Subject: Re: nVIR virus found in "Kill Virus" Message-ID: <244@taniwha.UUCP> Date: 10 Dec 88 17:32:05 GMT References: <579@uva.UUCP> <226@taniwha.UUCP> <9062@bcsaic.UUCP> Reply-To: michael@taniwha.UUCP (Michael Hamel) Organization: Taniwha Systems Design, Oakland Lines: 23 In article <9062@bcsaic.UUCP> lbaum@bcsaic.UUCP (Larry Baum) writes: >As it happened we discovered nVIR on our system just as AntiPan arrived. It was >extemely effective but it did fail on a couple of files. All but one of these >were Lightspeed C applications and Lightspeed C itself. Ha! We haven't got LS C at Otago, it must be doing something interesting. Thank you, I will fix this. > The only other interesting thing that happened is that even though >AntiPan reported no problem with DA Handler (i.e. it either claimed to have >diinfected it or found it clean), Virus Detective still found nVIR when we ran it >subsequent to using AntiPan. Damn. AntiPan checks files with a type of 'APPL' or a creator of 'MACS'. I thought this covered what nVIR could get into, but DA Handler must be an exception. I will enlarge its range. Thankyou very much, this is exactly the kind of feedback I need... -- Where now are those who in times past have opposed the Group of Seventeen? Michael Hamel University of Otago ..!ucbvax!michael@otago.ac.nz