rec.autos.simulators

F1RS Edit is a virus!!!!

Bria

F1RS Edit is a virus!!!!

by Bria » Fri, 09 Jul 1999 04:00:00

Thanks for posting Greg,
I also ran Norton AV on the installer 1.63 exe and got the same result.
Brian



> >I've been using F1RS version 1.62 for over a year on my machine with no
> >problems.  I don't know much about trojans or virus', but I'm pretty sure
> >that if this file is a problem Arturo will fix it.  His older version
edit
> >program works fine, and the new version is posted on a reputable website.
> >Enjoy F1RS!

> It isn't the F1RS Edit executable itself, it is the installer exe. I
called
> Norton a second time and was told that they put the F1rsedit163.exe
> which I sent them, on an isolated machine and tested it to see if
> it steals passwords or not. They insist that it did. So if everyone
> wants to ignore this (including Rick D who runs the unofficial F1RS
> site) that is just fine with me.

Greg Cisk

F1RS Edit is a virus!!!!

by Greg Cisk » Fri, 09 Jul 1999 04:00:00


>Thanks for posting Greg,
>I also ran Norton AV on the installer 1.63 exe and got the same result.
>Brian

Well once you get the latest definitions dated 7/2/1999 you will
find the file is no longer "infected". Obviously I have been had
by Norton AV. I even called their tech support twice and they
insisted that they checked the file and it had that trojan. Obviously
they did not.

I plan to call them again and send the file again and see why they
gave erronious information.

So as of now F1RS edit seems cool. Arturo never did contact
me (I did email him) to ask what the deal was. But as of now
I would like to apololgize to him. At least until the next virus
definitions come out :-)

I did learn alot avout this AV stuff. Namely you really do not
know. Even sending the file to Norton for analysis is a half
baked sham.

--

Header address intentionally scrambled to ward off the spamming hordes.

cisko [AT] ix [DOT] netcom [DOT] com




>> >I've been using F1RS version 1.62 for over a year on my machine with no
>> >problems.  I don't know much about trojans or virus', but I'm pretty
sure
>> >that if this file is a problem Arturo will fix it.  His older version
>edit
>> >program works fine, and the new version is posted on a reputable
website.
>> >Enjoy F1RS!

>> It isn't the F1RS Edit executable itself, it is the installer exe. I
>called
>> Norton a second time and was told that they put the F1rsedit163.exe
>> which I sent them, on an isolated machine and tested it to see if
>> it steals passwords or not. They insist that it did. So if everyone
>> wants to ignore this (including Rick D who runs the unofficial F1RS
>> site) that is just fine with me.

Greg Cisk

F1RS Edit is a virus!!!!

by Greg Cisk » Fri, 09 Jul 1999 04:00:00

This is an email I sent to norton today in reply to an email I received
from Norton:

Well according to the definitions dated 6/28/99 there was a virus and your
labs confirmed the trojan existed. This is the *SAME* file I submitted on
6/29/99 which is tracking number 33678. I have included your reply at the
end of this message. If you scan this file with the 6/28/99 definitions it
will show the trojan. The 7/2/99 definitions does not show the trojan
because the PM Trojan (TIM) virus is not in the definitions. Instead there
are definitions for PM Trojan (TIM) (2) and PM Trojan (TIM) (3).

Please clarify what the discrepancy is.

Thanks,
Greg

--------------

Received: from gavin.symantec.com (host44-sub156.symantec.com
[155.64.156.44])
by ixmail8.ix.netcom.com (8.8.7-s-4/8.8.7/(NETCOM v1.01)) with ESMTP id
FAA06461;


by gavin.symantec.com (8.8.7/8.8.7) id FAA31077;
Tue, 29 Jun 1999 05:59:26 -0700
Date: Tue, 29 Jun 1999 05:59:26 -0700

Content-Type: multipart/mixed; boundary="----------=_930661166-161-741"
Mime-Version: 1.0
X-Mailer: MIME-tools 4.103 (Entity 4.115)


Subject: SARC Automation: Tracking #33678
Status: RO

This is a multi-part message in MIME format...

------------=_930661166-161-741
Content-Type: text/plain
Content-Disposition: inline

Below is a status update on your virus submission:

Dear Greg Cisko
We have analyzed your submission.  The following is a report of our
findings for each file you have submitted:

filename: C:\Scratch\F1rs\virus\F1rsedit163.exe
machine: CISKO
result: This file is infected with PM Trojan (TIM)

The attached file is a self extracting zip containing updated virus
definitions for Norton AntiVirus to successfully detect and repair
this virus.

Developer notes:
C:\Scratch\F1rs\virus\F1rsedit163.exe is infected by a non-repairable virus
or a Trojan Horse.  You should delete this file and replace it if
neccessary.

Should you have any questions about your submission, please contact
technical support at the appropriate number listed below and give them
the tracking number in the subject of this message.

-----------------------------------------------------------------------
This message was generated by SARC automation.

Symantec worldwide technical support numbers
--------------------------------------------
USA           (+1)   541 465 8420
UK            (+44)  0171 616 5813
FRANCE        (+33)  1 64 53 80 63
GERMANY       (+49)  069 6641 0353
HOLLAND       (+31)  071 408 3952
SOUTH AFRICA  (+27)  11784 9856
SWEDEN        (+46)  8 735 5024
ITALY         (+39)  0 542 28062
SWITZERLAND   (+41)  12 12 1847
BELGIUM       (+32)  27 131 701
NORWAY        (+47)  23 05 33 30
DENMARK       (+45)  35 44 57 20
SPAIN         (+34)  9 1662 5255
AUSTRIA       (+43)  150 137 5023
AUSTRALIA     (+61)  2 9850 1050
HONG KONG     (+852) 2528 6206
KOREA         (+82)  2 3420 8650
MALAYSIA      (+60)  3 704 9273
NEW ZEALAND          0800 442 795
SINGAPORE     (+65)  239 2099
TAIWAN        (+886) 2 2739 6068

--

Header address intentionally scrambled to ward off the spamming hordes.

cisko [AT] ix [DOT] netcom [DOT] com

Eldre

F1RS Edit is a virus!!!!

by Eldre » Sat, 10 Jul 1999 04:00:00



>>     Should you have questions or need assistance with NAV, please don't
>>     hesitate to contact our Technical Support at (541) 465-8420.

>>     Thank you for your patients,
>>     Symantec Antivirus Research Center

'patients'?  This from a company that should KNOW better?  Doesn't give me much
confidence...

__

Put your message in a modem, and throw it in the ***-sea...
remove SPAM-OFF to reply.


rec.autos.simulators is a usenet newsgroup formed in December, 1993. As this group was always unmoderated there may be some spam or off topic articles included. Some links do point back to racesimcentral.net as we could not validate the original address. Please report any pages that you believe warrant deletion from this archive (include the link in your email). RaceSimCentral.net is in no way responsible and does not endorse any of the content herein.