Hi Paul,
you wrote in /FIDO/VIRUS_INFO at 10 Jun 97:
MM>> - some scanners do identify things as virus that aren't a virus, so
PW> False alarms, yes. Those should be very rare in the decent scanners.
Hmm, whats an decent scanner? McAfee not - it does allways find viruses in  
BMPs and other stuff. Dr.Solomon - yep, but it had false alarms too just  
try writing 'Mr. Twister' (w/o ') at the top of a file, scan it with  
version 7.71 and you'll be surprised.
MM>> they can't clean it, other can 'identify' the virus but still can't
MM>> clean it
PW> And these are also very rare.
I have no information about a quantity of this but it happens and is  
allways topic in the various echos about computer viruses.
MM>> - TbClean has well knows bugs which make it possible for a
MM>> virus to go resident or do anything else it wants while it is to be
PW> I suspect you're talking about the file which is around, showing how  
to do
PW> this, yes? You might want to check out the fact that it's talking about
PW> version 6.04 or something similar - I would guess that by version 8 it's
PW> been fixed.
Do not remember wich version this stuff appeared first but it still worked  
with 7.7x and still works. As prove I've appended a realy litt uuenccoded  
proggy, that does nothing than delting a file 'antivir.dat' in the current  
directory. So create such a file and run TbClean on the appended program.  
After TbClean finished the 'antivir.dat' will be missed. I tested this  
with Tbav 8.00 (note: have 8.02 too but not installed yet).
Michael
begin 644 test.com
8M$&Z#`$NS2&0D,T@86YT:79I * Origin: VIRNET 9:493/3160.3 (2:2452/249.3)