Article View: comp.virus
Article #4270TBAV 5.01 (PC)
From: Malte Eppert
Date: Mon, 07 Dec 1992 23:19
Date: Mon, 07 Dec 1992 23:19
24 lines
1218 bytes
1218 bytes
Hello Vesselin! You wrote about TBAV 5.01: > BTW, the integrity checking seemed -very- weak to me, but I have > not tested it completely... By default TBCHECK checks only the entry point of an executed file. (You can set it to check the whole file's CRC, but that's documented to be real slow.) That's what I think to be the weakness, but could you explain why? Are there many link viruses (guess that's what TBCHECK is written for) which don't touch the entry point at infection time? BTW: I managed to have Armageddon infect a file after I allowed the virus to go TSR, though I've activated the whole product palette. What's that - a special way to put its code into a file, which TB doesn't recognize? cu! eppi - --- Via SCANTOSS V 1.37 * Origin: No Point for viruses - The EpiCentre! (9:491/6002)
Technical Details
Message-ID:
<0008.9212141513.AA07337@barnabas.cert.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!news.sei.cmu.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!newsShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!news.sei.cmu.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!news From: Malte_Eppert@f6002.n491.z9.virnet.bad.se (Malte Eppert) Newsgroups: comp.virus Subject: TBAV 5.01 (PC) Message-ID: <0008.9212141513.AA07337@barnabas.cert.org> Date: 7 Dec 92 23:19:00 GMT Sender: virus-l@lehigh.edu Lines: 24 Approved: news@netnews.cc.lehigh.edu