home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
The Party 1994: Try This At Home
/
disk_image.bin
/
fprot
/
new_vir.doc
< prev
next >
Wrap
Text File
|
1995-01-12
|
3KB
|
57 lines
What to do if you find a new virus...
If a new virus appears, F-PROT may miss it, or report it either as a "New
variant of ..." or "Possibly a new variant of ...". In this case we may
not have a copy of the virus, but would of course appreciate receiving it.
The same applies to false alarms - despite our precautions they may
occasionally appear, but we always try to correct them as soon as
possible. This is particularly important for false alarms generated by
Secure scan, but we also try to fix any false alarms created by the
heuristic scanner.
There are several methods that can be used to send files to us:
1) The best method involves anonymous FTP to complex.is, and putting the
files in the /incoming directory. JUST DO NOT FORGET TO UPLOAD THE
FILES IN BINARY MODE! This directory is write-only, but for added
security the files may be encrypted. We recommend PGP 2.3 (or later)
(see public key below), but PKZIP or ARJ encryption is probably
sufficient, provided the password is sent via a more secure route -
such as by fax. If you use FTP, please don't use an "obvious" name
such as NEWVIR.ZIP - although we download the files regularly, there is
always a chance of a new upload overwriting an earlier one - in
particular as you cannot check which files are in the directory.
2) The files may also be E-mailed to our Internet address (support@complex.is)
after they have been converted from binary to printable form. XXencode
is recommended, but UUencode will usually work. BtoA and BinHex are
acceptable, but not recommended. Currently we cannot handle MIME-encoded
files, but that will change in the future.
You can also use PGP with the -A switch to create a file that can be
sent by E-mail.
3) A slower method is to mail us (or one of the distributors of the
commercial version) a diskette with the virus. Ordinary mail may take
up to two weeks to arrive, so if time is critical we recommend DHL.
However, do not use Emery Worldwide or any other company that sends
the package accompanied with an air way bill. Also, do not include a
bill - even one that days "computer disk, value $1". If you do, the
package may get stuck in customs here in Iceland for days. We
consider viruses to have no value....please don't put a price on them.
Boot sector viruses create a special problem. The best way is to mail the
actual diskette, but a TELEDISK image will usually do. In an emergency,
you can send us a boot sector image or a hex dump of the boot sector.
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.2
mQCNAivi0YQAAAEEALfzAGrwAOObnOE4umpsuNf1Fx71MnWe24txqyXs9EpQD2ca
pdYZmMuUtg8WlA6ujSeoKaoNlL2Xtypcbx9tllF2viZCrutHzzq6TJfmPtun8ctv
EDg/FRuBi0E07QCeAK0VajDJwB6cAfSkKdxPNu430AoMHbLR0m2ufIxQZc/DAAUR
tCNGcmlkcmlrIFNrdWxhc29uIDxmcmlza0Bjb21wbGV4LmlzPg==
=BBPJ
-----END PGP PUBLIC KEY BLOCK-----