Keypress-B virus

[Paul]

I recently updated my McAfee virus dat file and after running the DOS version
of the AV-scanner I get the message that the Keypress-B virus is found in
memory or its a image from another operation.

I tried running the Win95 McAfee scanner and it doesn't detect anything nor
does any of the other AV programs (NAV 4.0, Fprot f-secure, Quick Heal,
ThunderByte 95...all trial versions).

The DOS McAfee consistently finds this virus and yet cannot clean it but does
not find any infected files just resident in memory. I have not had any of
those suspicious repetitive type letters symptons usually associated with the
keypress B virus so could it be just an image left from a prevoius operation?
If not how do you clean this virus?

thanks

[Jeffrey A. Setaro]

[This followup was posted to alt.comp.virus and a copy was sent to the
cited author.]

In article <6ihs7u$l9p$1...@tor-nn1.netcom.ca>, p...@netcom.ca says...

> I recently updated my McAfee virus dat file and after running the DOS version
> of the AV-scanner I get the message that the Keypress-B virus is found in
> memory or its a image from another operation.
>

This is know false alarm.... Contact McAfee for an update.

> I tried running the Win95 McAfee scanner and it doesn't detect anything nor
> does any of the other AV programs (NAV 4.0, Fprot f-secure, Quick Heal,
> ThunderByte 95...all trial versions).
>

You don't have a virus... McAfee's DOS version is fa;se alarming.

> The DOS McAfee consistently finds this virus and yet cannot clean it but does
> not find any infected files just resident in memory. I have not had any of
> those suspicious repetitive type letters symptons usually associated with the
> keypress B virus so could it be just an image left from a prevoius operation?
> If not how do you clean this virus?
>

McAfee for DOS is wrong you do not have a virus... It's a false alarm.
There are three things you can do:

1) Learn to live with the false alarm.

2) Upgrade to a version of McAfee that doesn't have that particular false
alarm.

3) Switch to an anti-virus program that is less prone to false alarming.

> thanks
>
>

Your welcome.

--
Cheers-

Jeff Setaro
jase...@sprynet.com
http://home.sprynet.com/sprynet/jasetaro
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99

[Kevin Lam]

I suspect that you may also still be running VSafe in the background? VSafe
which was included with some previous versions of DOS was notorious for leaving
harmless virus fragments in memory. Hope this helps.

Kevin

Paul wrote:

> I recently updated my McAfee virus dat file and after running the DOS version
> of the AV-scanner I get the message that the Keypress-B virus is found in
> memory or its a image from another operation.
>

> I tried running the Win95 McAfee scanner and it doesn't detect anything nor
> does any of the other AV programs (NAV 4.0, Fprot f-secure, Quick Heal,
> ThunderByte 95...all trial versions).
>

> The DOS McAfee consistently finds this virus and yet cannot clean it but does
> not find any infected files just resident in memory. I have not had any of
> those suspicious repetitive type letters symptons usually associated with the
> keypress B virus so could it be just an image left from a prevoius operation?
> If not how do you clean this virus?
>

> thanks

[Kevin Lam]

[zi...@pinhead.com]

Revert to previous DAT files, McAfee confirms a misreport issue with
the April DATS for keypress-B

[Chengi J. Kuo]

Kevin Lam <kevi...@mindless.com> writes:

>I suspect that you may also still be running VSafe in the background? VSafe
>which was included with some previous versions of DOS was notorious for leaving
>harmless virus fragments in memory. Hope this helps.

It's a false id. Occurs only in memory. And if it's not that one,
it'll be another Keypress. It will be fixed shortly if not already in the
beta. (In England so can't verify.)

Jimmy
cj...@mcafee.com

>Kevin