home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!elroy.jpl.nasa.gov!usc!cs.utexas.edu!qt.cs.utexas.edu!yale.edu!jvnc.net!netnews.upenn.edu!netnews.cc.lehigh.edu!news
- From: bill.lambdin%acc1bbs@ssr.com (Bill Lambdin)
- Newsgroups: comp.virus
- Subject: Filler virus (PC)
- Message-ID: <0004.9301051858.AA13030@barnabas.cert.org>
- Date: 28 Dec 92 23:21:00 GMT
- Sender: virus-l@lehigh.edu
- Lines: 29
- Approved: news@netnews.cc.lehigh.edu
-
- Quoting from Brill@aecom.yu.edu to All About Filler virus (PC) on 12-07-92
-
- B > Scan 99 detected "Filler" active in the memory of my computer.
- B > When I booted from a write-protected floppy the nasty virus was not
- B > found, no matter how many times I tried. By the way, I have CPAV
- B > constantly running and it did not detect anything wrong.
-
- You have probably already received many answers, but I will add my two
- cents any way.
-
- The problem is the VSAFE or VWATCH TSRs that comes with CPAV. The virus
- signatures are not encrypted when these TSRs are in memory, and Scan finds
- the signature, and assumes the rest of the virus is there.
-
- You have several options.
-
- A. Use CPAV exclusively.
- B. Stop using CPAV.
-
- In my tests, these scanners rank highest.
-
- F-Prot from Frisk Software
- VIRx from Data Watch Software (Used to be Microcom)
- McAfee's Scan.
-
- Bill
-
- - ---
- * WinQwk 2.0 a#383 * HALLOWEEN activates Oct 31st
-