Article View: comp.virus
Article #4744Invalid Boot Sectors (PC)
From: Roger Riordan
Date: Thu, 24 Dec 1992 01:55
Date: Thu, 24 Dec 1992 01:55
35 lines
1608 bytes
1608 bytes
I recently wrote
>In a recent comment on a query by MOPURC01@ULKYVM.LOUISVILLE.EDU
>(Michael Purcell) about a virus which allegedly made disks
>unreadable I wrote.
>> If you put the wrong byte in the wrong place you can get the
>> symptoms described. ...
It appears the original message got lost, but the gist was that,
IN THEORY, it is possible to write a BS virus which is invisible
on an infected PC, but impossible to detect on an uninfected PC
with any existing scanner because DOS will crash if any attempt is
made to access an infected disk.
More seriously, we have established that neither F-Prot V2.05,
nor SCAN 8.9V97 will detect QUOX on 1.44M 3.5" disks.
F-Prot reports
Scanning boot sector B:
Error: B: not found
SCAN less elegantly crashes with a critical error
Scanning for known viruses.
General failure reading drive B
Abort, Retry, Fail?
Seasons Greetings to All,
(PS - I'll be away till early Jan)
Roger Riordan riordan.cybec@tmxmelb.mhs.oz.au
CYBEC Pty Ltd. Tel: +613 521 0655
PO Box 205, Hampton Vic 3188 AUSTRALIA Fax: +613 521 0727
Technical Details
Message-ID:
<0008.9301051858.AA13030@barnabas.cert.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!elroy.jpl.nasa.gov!usc!cs.utexas.edu!qt.cs.utexas.edu!yale.edu!jvnc.net!netnews.upenn.edu!netnews.cc.lehigh.edu!newsShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!elroy.jpl.nasa.gov!usc!cs.utexas.edu!qt.cs.utexas.edu!yale.edu!jvnc.net!netnews.upenn.edu!netnews.cc.lehigh.edu!news From: riordan@tmxmelb.mhs.oz.au (Roger Riordan) Newsgroups: comp.virus Subject: Invalid Boot Sectors (PC) Message-ID: <0008.9301051858.AA13030@barnabas.cert.org> Date: 24 Dec 92 01:55:50 GMT Sender: virus-l@lehigh.edu Lines: 35 Approved: news@netnews.cc.lehigh.edu