Welcome, Guest. Please login or register.

Author Topic: Fake Virus Alert?  (Read 1218 times)

Description:

0 Members and 1 Guest are viewing this topic.

Offline CassTopic starter

  • Hero Member
  • *****
  • Join Date: Apr 2003
  • Posts: 826
  • Country: 00
    • Show all replies
Fake Virus Alert?
« on: May 03, 2004, 11:52:15 AM »
I've encountered 2 warnings from the "Virus Checker II" for the F*ck & Trabbi virii (on different instances). It said that were inactivated. The funny thing is that I have done a full disk check, with no virus found, and I wasn't running any unusual software the time the warning appeared.

Is there any system behaviour (flushing the mem, PPC kernel etc.) that could simulate the virus' memory behaviour and trick the Virus Checker?

I have the xvs.library v33.41

________
SILVER SURFER REVIEWS
« Last Edit: March 18, 2011, 10:24:29 PM by Cass »
"If we don't got it, you don't want it!"
 

Offline CassTopic starter

  • Hero Member
  • *****
  • Join Date: Apr 2003
  • Posts: 826
  • Country: 00
    • Show all replies
Re: Fake Virus Alert?
« Reply #1 on: May 04, 2004, 02:21:13 PM »
Yes, they are!

I cross-checked with the VirusZ v1.0 and nothing came up, although Virus CheckerII & VirusZ use the same resources (xvs.library).

What happens, is that the AmigaROM update remmaping and the vectors moving to other memory areas, sometimes may confuse the VirusChecker.

The strange thing is that this kind of behaviour was recognized as 2 different kinds of virii, in 2 different instances (different patterns?:-?).

________
VAPORIZER HELP
« Last Edit: March 18, 2011, 10:24:50 PM by Cass »
"If we don't got it, you don't want it!"