Date: Tue, 20 Apr 1999 13:11:37 -0400
Message-Id: <199904201711.NAA11294@envy.delorie.com>
From: DJ Delorie <dj AT delorie DOT com>
To: djgpp AT delorie DOT com
In-reply-to: <E1DA9C81FAEBD0118ADF00805FC18CEA197CD8@smtp.priassoc.com>
	(message from Glenda Begeman on Tue, 20 Apr 1999 13:14:19 -0400)
Subject: Re: virus
References:  <E1DA9C81FAEBD0118ADF00805FC18CEA197CD8 AT smtp DOT priassoc DOT com>
Reply-To: djgpp AT delorie DOT com
X-Mailing-List: djgpp AT delorie DOT com
X-Unsubscribes-To: listserv AT delorie DOT com
Precedence: bulk


Many virus scanners think the stub *is* a virus, because it does
virus-like things.  Check with other virus scanners, and if none of
them show a virus, and Inoculan shows all DJGPP programs are a virus
but no other programs are, then I'd say Inoculan is broken.  Have you
tried contacting them?

Can you still *run* those djgpp programs?  The stub won't run a
virus-infected coff image.

> We have had  DJGPP on our server since 8/1/98.  Our Inoculan 4.0 is
> updated automatically each month.  Since the last update (4/17/99) I
> have been getting virus warnings for only this software.  I get no
> errors and no warnings for any other software.  The virus that is found
> is Cold3927.  Is this possible? I have found no documentation on this
> virus except through Inoculan.  Thanks.