Thread View: comp.virus
1 messages
1 total messages
Started by Luca Parisi
Sat, 19 Dec 1992 22:15
Another Kind Of Droppers (PC)
Author: Luca Parisi
Date: Sat, 19 Dec 1992 22:15
Date: Sat, 19 Dec 1992 22:15
24 lines
1559 bytes
1559 bytes
Not much time ago, a posting by Stefano Turci (Stefano_Turci@ f108.n391.z9.virnet.bad.se) prompted discussion about the fact that converting a file from .COM to .EXE caused scanners not to recognize some virus infections any more. I don't have much to object to the views expressed by the scanners themselves (well, actually their authors :-) but I faced the same problem while dealing with the "leftovers" of my previous posting. That is, files infected with virus 855 (Nov. 17th) and subsequently immunized with CPAV 1.2 are not recognized as such by F-Prot 2.06, Scan 97 or VirX 2.4 (I know they are not entirely up-to-date, but all three recognize the 'vanilla' infection on the same files). I don't think this is more than an "academic" problem unless the current DOS version of CPAV still offers immunization, and a bit more if the rumored MSDOS 6.0-bundled one does (the most recent plain DOS CPAV I have is 1.2, and WinCPAV doesn't). More generally, I'd say that the integrity check should be a built-in function, otherwise it can only build false security. But somebody here must have said that before and better than me... Luca Parisi <MC1980@mclink.it>
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads