From owner-freebsd-hackers  Fri Apr 11 18:26:58 1997
Return-Path: <owner-hackers>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id SAA07189
          for hackers-outgoing; Fri, 11 Apr 1997 18:26:58 -0700 (PDT)
Received: from apolo.biblos.unal.edu.co ([168.176.37.75])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id SAA07184
          for <hackers@FreeBSD.ORG>; Fri, 11 Apr 1997 18:26:54 -0700 (PDT)
Received: from unalmodem.usc.unal.edu.co (unalmodem15.usc.unal.edu.co [168.176.3.45])
	by apolo.biblos.unal.edu.co (8.8.5/8.8.5) with SMTP id UAA10537;
	Fri, 11 Apr 1997 20:29:15 -0500 (COT)
Message-ID: <334F002B.1270@fps.biblos.unal.edu.co>
Date: Fri, 11 Apr 1997 20:23:23 -0700
From: Pedro Giffuni <pgiffuni@fps.biblos.unal.edu.co>
X-Mailer: Mozilla 3.0 (Win16; I)
MIME-Version: 1.0
To: Chris Coleman <chris@bb.cc.wa.us>
CC: hackers@FreeBSD.ORG
Subject: Re: mcAffee Anti Virus
References: <Pine.NEB.3.94.970411164155.8061A-100000@aries.bb.cc.wa.us>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-hackers@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Chris Coleman wrote:
> 
> I was checking out the Anti-virus programs for FreeBSD by McAffee
> and ran it on my system.  It showed that I had SEVERAL files infected with
> a SYSLOCK virus.  Any one know about this stuff?
> 
I don't know, but I went into McAfee's Mall and I didn't see any
specific FreeBSD version. If you're using a version for Linux, it
probably confused signatures. A Linux version will only clean Linux
software.
> Is it worth buying, and is SYSLOCK a real threat?
> 
I have never heard of FreeBSD viruses, except for the reported trojans
in freefall on a security notification. (BTW, no details on that ever
came out). But a multitasking computer, in a networked
environment...it's matter of time. 
Simply be careful on what you run as root, and use more software that
comes with source code :).

Pedro.


> Thanks
> 
> Christopher J. Coleman (chris@aries.bb.cc.wa.us)
> Computer Support Technician I  (509)-766-8873
> Big Bend Community College  Internet Instructor
> FreeBSD Book Project:  http://vinyl.quickweb.com/~chrisc/book.html
> Disclaimer: Even Though it has My Name on it, Doesn't mean I said it.