Date: Wed, 31 Mar 1999 23:17:05 -0800 (PST) From: <unknown@riverstyx.net> To: Ben Smithurst <ben@scientia.demon.co.uk> Cc: Greg Lehey <grog@lemis.com>, NIcky Lai <nickylai@sirius.com>, FreeBSD Questions <questions@FreeBSD.ORG> Subject: Re: ?? Virus detected on CD FSB_330A ??? Message-ID: <Pine.LNX.4.04.9903312315310.16723-100000@hades.riverstyx.net> In-Reply-To: <19990401002400.A94041@scientia.demon.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
I'm just speculating, but a lot of boot sector code is often incorrectly detected as "Virus" code because the code's so common. --- tani hosokawa river styx internet On Thu, 1 Apr 1999, Ben Smithurst wrote: > Greg Lehey wrote: > > > [this message forwarded to FreeBSD-questions] > > > > On Tuesday, 30 March 1999 at 11:59:58 -0800, NIcky Lai wrote: > > > >> Virus name: PRESTO * > >> TOOLS\OSBSBETA.EXE (OS-BS\OS-BS.COM) > >> TOOLS\OSBS135.EXE (OS-BS\OS-BS.COM) > > > > Interesting. I wonder what the information in parentheses means. > > I think the .EXE files are self-extracting archives, and the filename in > parentheses is the file within the archive which (possibly) has this > "virus". > > -- > Ben Smithurst > ben@scientia.demon.co.uk > > send a blank message to ben+pgp@scientia.demon.co.uk for PGP key > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.04.9903312315310.16723-100000>