Path: utzoo!attcan!uunet!lll-winken!ames!mailrus!cornell!biar!trebor
From: trebor@biar.UUCP (Robert J Woodhead)
Newsgroups: comp.sys.mac
Subject: Re: nVIR in the System file...
Message-ID: <388@biar.UUCP>
Date: 17 Mar 89 15:46:23 GMT
References: <37259@bbn.COM> <383@biar.UUCP> <37317@bbn.COM>
Reply-To: trebor@biar.UUCP (Robert J Woodhead)
Organization: Biar Games, Inc.
Lines: 19

In article <37317@bbn.COM> franco@ferrari.bbn.com (Frank A. Lonigro) writes:
>file and everything seems fine.  But I have an other question.  After I
>removed the infected applications and then removed just the nVIR resource
>from the System file(leaving behind and still installed the INIT 32),
>VirusRx1.4a2 and Interferon3.1 both reported that the disk was free of known
>viruses.

Virus checking programs tend to be pretty specific in their checks.  They
do things like "if INIT 32 is there and it starts with bytes XYZ AND there
are nVIR resources", nVIR is present".  This is to avoid a "false positive".

In Interferon, there are problems with "anomalies" being interpreted as
viruses incorrectly.  And the one "general" virus check I did, the "sneak"
virus, generates a false positive on the latest version of "Tops".

-- 
* Robert J Woodhead * The true meaning of life is cunningly encrypted and *
* uunet!biar!trebor * hidden somewhere in this signature...               *
* Biar Games, Inc.  *                       ...no, go back and look again *