-=> Mocking Alain Gohier to Kurt Wismer <=-
   
 AG> Hi, Kurt !
 
 KW> AG> If someone can explain to me, I'm sure I'll understand.
 KW> AG> I use 4 (yup, four.) Antivirus in my system. TBAV 8.04a - Scan
 KW> AG> from McAfee, 3.0x - F-Prot 2.28 - Integrity Master 4.01.
 KW>oooow... that's the new version, isn't it?... i've got to check it out
 KW>one of these days...
 AG> For Scan, I have now the last one I've found : 3.14 .
 
i believe i downloaded 3.1.5e just the other day... let me check, yup,
scni315e.zip... of course i got it straight from their ftp site, your
milage over the bbses may vary...
 KW> AG> Common.com  -- EICAR test file.
 KW> AG> Sampvir.com  -- Which is a simple signature of DEMOLITION virus.
 KW> AG> Lkccmini.exe  -- Which come from the uic_v24.zip file and have
 KW> AG> a V2P6 virus in it.
 AG> Common is AN EICAR test file. Sampvir is a test from the package
 AG> of IM401a. The other, lkccmini.exe isn't a test file !  IT IS
 AG> infected !
 
 KW>the problem is that you don't understand the difference between
 KW>simulated viruses and real viruses...
 AG> You really think ?  I've so many simulated ones here, just to
 AG> understand what they do... These ones I got them from BBS.
 
simulated viruses aren't real viruses... nor are they particularly
useful for anything beyond detecting faulty installation of the av
product...
 KW>the reason tbav and f-prot didn't detect any viruses is because you
 KW>don't have any viruses.... they detected eicar.com because they use that
 KW>as an installation test...
 AG> I'll forward to you (in that base, in reality) the results from a
 AG> mail with TBAV staff support. I've uuencoded them the two files
 AG> undetected viruses...
 
how do you know they're viruses? that's the real question when you're
dealing with supposed virus samples... if they don't replicate, or if
their offspring don't replicate, then they aren't viruses...
 KW>im detects your sample viruses because it's designed to use them the
 KW>same way tbav and f-prot are designed to use eicar.com... they aren't
 AG> Look ahead :
 AG> sampvir.com
 AG> ´       º.Í!Í è
sample virus, from integrity master is not a real virus, wolfgang knows
better than to distribute real viruses, he could get kicked out of asp
for something like that (doren rosenthal - author of virus simulator -
already has)... it's just a program that contains a string that
integrity master looks for when it's scanning... it's just a signature,
not a real virus...
... quantum chromodynamics - the RGB nature of the universe...
--- Platinum Xpress/Win/Wildcat5! v2.0
---------------