Date   : Thu, 10 Jan 2008 08:32:59 +0000 (WET)
From   : PCOGHLAN@... (Peter Coghlan)
Subject: DancinBeeb demo

>The file downloaded from:
>
>http://www.bbcmicro.net/old-8bs/dancebeeb.htm
>
>is marked as being infected by a virus on my machine. Is this really the
case or is it a false positive? Can someone check this out?
>

Hi Mike,

Sophos antivirus says this is infected with what it calls "Mal/Generic-A".
I suspect that this means it finds it generally suspicious in some way
rather than containing a specific recognised virus.

Dumping the strings in dancinbeeb.exe reveals (amongst others) the following:

http://www.jbls08130.pwp.blueyonder.co.uk/bbcmicro/ActiveX/

and

http://www.jbls08130.pwp.blueyonder.co.uk/bbcmicro/beeb/

Both of those urls return 404 page not found errors.

I don't know enough about windows/pcs to know if any of the other strings found
are suspicious or not.


Regards,
Peter.