🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.virus
Article #4730

Re: Questions about OS2SCAN and OS/2-based AV software in general (OS/

#4730
From: Vesselin Bontchev
Date: Tue, 22 Dec 1992 18:40
22 lines
1484 bytes
aryeh@mcafee.com (McAfee Associates) writes:

> >Do you know any way in which a known DOS virus can infect an extended
> >filename on an HPFS partition?

> Nope.  But I myself create directories under OS/2 HPFS with names like 
> "MS-DOS 3.3 Files" and "Today's Downloads" in which I keep normal DOS
> files.  I'm sure other people do as well :-)

Yup, you are right. And there is one more possibility, which I figured
out myself after posting my message. A virus could infect a file with
a short filename and the user could rename it later to an extended
filename. If the scanner does not scan those files, then there is a
danger for reinfection.

Regards,
Vesselin
- -- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.1 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany
Technical Details
Message-ID: <0004.9301051402.AA11929@barnabas.cert.org>
Path: arc1-ca.pugleaf.net!sparky!uunet!usc!zaphod.mps.ohio-state.edu!swrinde!gatech!udel!princeton!jvnc.net!netnews.upenn.edu!netnews.cc.lehigh.edu!news

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!usc!zaphod.mps.ohio-state.edu!swrinde!gatech!udel!princeton!jvnc.net!netnews.upenn.edu!netnews.cc.lehigh.edu!news
From: bontchev@fbihh.informatik.uni-hamburg.de (Vesselin Bontchev)
Newsgroups: comp.virus
Subject: Re: Questions about OS2SCAN and OS/2-based AV software in general (OS/
Message-ID: <0004.9301051402.AA11929@barnabas.cert.org>
Date: 22 Dec 92 18:40:09 GMT
Sender: virus-l@lehigh.edu
Lines: 22
Approved: news@netnews.cc.lehigh.edu