What to do if you find a new virus... If a new virus appears, F-PROT may miss it, or report it either as a "New variant of ..." or "Possibly a new variant of ...". In this case we may not have a copy of the virus, but would of course appreciate receiving it. The same applies to false alarms - despite our precautions they may occasionally appear, but we always try to correct them as soon as possible. This is particularly important for false alarms generated by Secure scan, but we also try to fix any false alarms created by the heuristic scanner. There are several methods that can be used to send files to us: 1) The best method involves anonymous FTP to ftp.complex.is, and putting the files in the /incoming directory. JUST DO NOT FORGET TO UPLOAD THE FILES IN BINARY MODE! This directory is write-only, but for added security the files may be encrypted. We recommend PGP 2.3 (or later) (see public key below), but PKZIP or ARJ encryption is probably sufficient, provided the password is sent via a more secure route - such as by fax. If you use FTP, please don't use an "obvious" name such as NEWVIR.ZIP - although we download the files regularly, there is always a chance of a new upload overwriting an earlier one - in particular as you cannot check which files are in the directory. NOTE: If using PGP, please do not use the personal keys of Fridrik Skulason or Vesselin Bontchev - use the public key of Frisk Software International (included below) 2) The files may also be E-mailed to our Internet address (f-prot@complex.is) after they have been converted from binary to printable form. XXencode is recommended, but UUencode will usually work. BtoA, BinHex and MIME-encoded files are accepted, but due to the extra work involved in handling them we appreciate if you could avoid those formats. You can also use PGP with the -A switch to create a file that can be sent by E-mail. 3) A slower method is to mail us a diskette with the virus. Ordinary mail may take up to two weeks to arrive, so if time is critical we recommend DHL. However, do not use Emery Worldwide or any other company that sends the package accompanied with an air way bill. Also, do not include a bill - even one that says "computer disk, value $1". If you do, the package may get stuck in customs here in Iceland for days. We consider viruses to have no value....please don't put a price on them. Boot sector viruses create a special problem. The best way is to mail the actual diskette, but a TELEDISK image will usually do. In an emergency, you can send us a boot sector image or a hex dump of the boot sector. -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.1 mQCNAzB5FuQAAAEEANEYaHUd4AiNeu6GnVKOL3ykBvUMrm4E4CeAUO7VF2Uw3V5p 5vTTiUQlfqmZyE02Z9TtxOIxITOz0wMN7nevIQyhc+3NeT47rOttwMf95RRvV47L H9BvmtRPbjLWrx82kP+azn/srsim861y2LsGU/C0w8Tx8pOMLuh8c/eece0pAAUR tDBGUklTSyBTb2Z0d2FyZSBJbnRlcm5hdGlvbmFsIDxmLXByb3RAY29tcGxleC5p cz6JAJUDBRAweTpOba58jFBlz8MBAbBUA/9wetMKqa5P91drzjCuBT7ZLo11+ajt PZSZcjc5sWZADfhAsHa7/ktll0x4CEc75PWYyxSpi3g3/O3o2RxZH8jzAmcgYibM ctuvdoT24FZmLqrex9IDzOwQq96JO1Ctko3tlMtDM2ga5KYpp/5hvfGY3JufrNvC aojnygq6hckeJokAlQMFEDB5OeHofHP3nnHtKQEBCBMD/2Ln14un+BtyFy9FeFwn zgxLmzvKSjQqMJ3phPWOiTeWdnkbVdDnIo2RUYQC9E5RKGsN94jfd3ENn6Gptolt wYA3SYQH2uohYyXndZCpk7XZIuzGse58U5fHgPW1rD2MUYyNSFh9PfhaC/mWasF2 Y8iAkUSz9qSp2znt3mKCgEA0iQCVAwUQMHkXBTZWl8Yy3ZjZAQE83gP+J+Iu+a06 qf0dQP/fWfrbQXLFyHf13A6Pg93jsBy9vGEt49krHNy317aRNhLTeX5JDFoW0z+Y iTK5gVvZa6LYrGr55Psk0OJyh5jpfyemK36W2pFik5bBJ3KmdzvvggfCsndnztBk alAHqs+nnd39t/edbuwfD934Bqo50aT99kk= =Ry1v -----END PGP PUBLIC KEY BLOCK-----