From owner-freebsd-hackers  Tue Apr 15 20:20:48 1997
Return-Path: <owner-hackers>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id UAA02503
          for hackers-outgoing; Tue, 15 Apr 1997 20:20:48 -0700 (PDT)
Received: from sol.ashland.edu (sol.ashland.edu [198.30.217.250])
          by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id UAA02490
          for <hackers@freefall.freebsd.org>; Tue, 15 Apr 1997 20:20:45 -0700 (PDT)
Received: from warp4.ashland.edu  for jroberts@ashland.edu
	by sol.ashland.edu (8.6.12/931002.1044) id XAA11641; Tue, 15 Apr 1997 23:20:45 -0400
Date: Tue, 15 Apr 1997 23:22:38 -0400 (EDT)
From: Jeff Roberts <jroberts@ashland.edu>
To: Charles Owens <owensc@enc.edu>
cc: hackers@freefall.freebsd.org, Chris Coleman <chris@bb.cc.wa.us>
Subject: Re: mcAffee Anti Virus
In-Reply-To: <Pine.FBS.3.93.970415221637.21281D-100000@dingo.its.enc.edu>
Message-ID: <Pine.OS2.3.95.970415231756.70B-100000@warp4>
X-X-Sender: jroberts@mail.ashland.edu
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-hackers@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk


> Chris Coleman <chris@bb.cc.wa.us> on Date: Fri, 11 Apr 1997 said:
> 
> > I was checking out the Anti-virus programs for FreeBSD by McAffee
> > and ran it on my system.  It showed that I had SEVERAL files infected with
> > a SYSLOCK virus.  Any one know about this stuff?
> >
> > Is it worth buying, and is SYSLOCK a real threat?


On Tue, 15 Apr 1997, Charles Owens wrote:
> Chris,
> 
> I tried out the Mcafee ViruScan for FreeBSD ("uvscan") and had the same
> results.  I scanned a large collection of PC files and a hundred or so
> were reported to have this virus.  Given that many of the files were GIFs
> and other pure data formats I was skeptical of the results.
> 
> So... I spend an hour or so chatting to a nice guy at Mcafee tech support.
> I mailed him a supposedly infected file (a Powerpoint file) and he scanned
> it with his Linux and DOS versions of VirusScan and found no sign of
> infection.  He sent the info off to development so the bug can be fixed.


(Jeff)

What version # is this?  The 1.01E on their Web site now, or an earlier
release?

Thanks,

Jeff
______________________________________________________________________

    Jeff Roberts >>>>  jroberts@ashland.edu  <<<<  strider@acm.org
______________________________________________________________________