>I just ran against the cd-rom file with NA VirusScan 4.0.3 with a dat file dated 10/13/99, nothing detected.
>

You're one engine release and three DAT releases behind; you can download the current engine and DAT from www.nai.com; if you're getting the updates through your employer, they should be getting the update sent to them via SecureCast.

>Bob
>>>After installing the October MSDN, I ran Norton AntiVirus (NAV 5.02-NT), and it reported that C:\Program Files\Common Files\Microsoft Shared\MSDN\1033\COLCHNG.EXE, contained a "Trojan Horse" virus. I submitted this to the Symantec AntiVirus Research Center (SARC), and they confirmed it. I rechecked the CD and it is also "infected".
>>>
>>>First, can anyone else, using an alternate virus checker, confirm this? Second, anyone know what COLCHNG.EXE is used for? The only reference to this I could find was in the registry, and it indicates that PID.EXE "calls" it. I could find no reference to either .EXE in the MSDN search.
>>
>>Rick, I've been running VirusScan pretty religiously, with both the latest engine (4.0.35) and the 4.00.4049 DAT file - there's a new one today which I'm downloading now. It doesn't squawk about COLCHNG.EXE
>>
>>The version info I have is version 1.00.8597, the Microsoft Collection Change Tool, date/time stamped 8/22/99, last accessed on November 5, about 36K (36,864 bytes).
>>
>>It's used to modify the collection detail that combines the indexes of all the CHM files into a single collection and central reference.
>>
>>I installed the full October MSDN from the DVD on a network drive.
>>
>>Interestingly, there's a different one than the one I have actually installed on the workstations in the DVD's \axp\os\system directory, but it's the same version created for the Alpha, but with a different date signature.
>>
>>There's nothing on the AVERT site about it.
>>
>>I just ran 4.00.4050 against it - no bitch and moan.