programming tools for Windows applications development
  Home  |   SwiftForth Archive  |   SwiftX Archive  |

Re: false positive?

From: Azedia of DOLFINA <dolfina_at_dolfina.org>
Date: Thu, 15 Nov 2001 17:34:33 -0800

I have come across install instructions that say, "shutdown virus scanner"
install then restart virus scanner. Have you tried that?

Jodell

>
> I am using SwiftForth PRO 2.00.3 19may2000.
>
> I also use the PC-cillin anti-virus program. Everything was fine with the
> November 10 virus pattern files, then with the release of the November 14
> virus pattern files, PC-cillin says it detected the virus PE_FINALDO.A in
> the file TTY.DLL and deletes that file. SwiftForth won't work without
> TTY.DLL.
>
> I have repeatedly scanned the whole computer and get a clean report. But
> then when I reinstall SwiftForth from the distribution CD, the PC-cillin
> program immediately pounces on TTY.DLL and deletes it. PC-cillin gives a
> clean result when it scans the distribution CD.
>
> When I copy TTY.DLL from my laptop onto a floppy and try to copy it onto
my
> desktop machine, PC-cillin pounces again. It also pounces on a renamed or
> zipped copy of TTY.DLL.
>
> PE_FINALDO.A is apparently a very new virus just discovered in November
> 2001.
>
> My current theory is that I do not have and never did have an infection by
> this virus and PC-cillin is giving a false positive result, possibly based
> on the unusual low level system calls in this DLL.
>
> I have e-mailed Trend Micro, the maker of PC-cillin, but have not gotten
any
> help from them so far.
>
> Any thoughts?

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.295 / Virus Database: 159 - Release Date: 11/1/2001
----------------------------------------------------------------------
sftalk_at_forth.com      The SwiftForth programming discussion email list
To unsubscribe,  send subject "unsubscribe sftalk" to listar_at_forth.com
For help with listar commands, send subject "help" to listar_at_forth.com
Archives are located at http://www.forth.com/sftalk -- check them out!
Search the archives!    Visit http://www.forth.com/search for details.
Received on Thu Nov 15 2001 - 17:33:53 PST

This archive was generated by hypermail 2.2.0 : Fri Nov 21 2008 - 03:04:19 PST