                   What to do if you find a new virus...

If a new virus appears, F-PROT may miss it, or report it either as a "New
variant of ..." or "Possibly a new variant of ...".  In this case we may
not have a copy of the virus, but would of course appreciate receiving it.

The same applies to false alarms - despite our precautions they may
occasionally appear, but we always try to correct them as soon as
possible.  This is particularly important for false alarms generated by
Secure scan, but we also try to fix any false alarms created by the
heuristic scanner.

There are several methods that can be used to send files to us:

 1) The best method involves anonymous FTP to ftp.complex.is, and putting the
    files in the /incoming directory.  JUST DO NOT FORGET TO UPLOAD THE
    FILES IN BINARY MODE! This directory is write-only, but for added
    security the files may be encrypted.  We recommend PGP 2.3 (or later)
    (see public key below), but PKZIP or ARJ encryption is probably
    sufficient, provided the password is sent via a more secure route -
    such as via fax.  If you use FTP, please don't use an "obvious" name
    such as NEWVIR.ZIP - although we download the files regularly, there is
    always a chance of a new upload overwriting an earlier one - in
    particular as you cannot check which files are in the directory.

    NOTE: If using PGP, please do not use the personal keys of Fridrik
    Skulason or Vesselin Bontchev - use the public key of Frisk Software
    International (included below)

 2) The files may also be E-mailed to f-prot@complex.is after they have been
    converted from binary to printable form.  XXencode is recommended, but
    UUencode will usually work.  BtoA, BinHex and MIME-encoded files are
    accepted, but due to the extra work involved in handling them we
    appreciate if you could avoid those formats.

    You can also use PGP with the -A switch to create a file that can be
    sent by E-mail.

 3) A slower method is to mail us a diskette with the virus.  Ordinary mail
    may take up to two weeks to arrive, so if time is critical we recommend
    DHL.  However, do not use Emery Worldwide or any other company that
    sends the package accompanied with an air way bill.  Also, do not
    include a bill - even one that says "computer disk, value $1".  If you
    do, the package may get stuck in customs here in Iceland for days.  We
    consider viruses to have no value....please don't put a price on them.

Boot sector viruses create a special problem.  The best way is to mail the
actual diskette, but a TELEDISK image will usually do.  In an emergency,
you can send us a boot sector image or a hex dump of the boot sector.

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6.2i
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=zSDo
-----END PGP PUBLIC KEY BLOCK-----
