🚀 go-pugleaf

72461.3212@CompuServe.COM (Ross M. Greenberg) writes:

> >...Have just noticed that one of the major anti-virus houses has completed
> >the addition of effective integrity management with the ability to
> >use a single file for storage of all data for checking by their TSR
> >instead of relying on snippets on the end of each program.
>  
> C'mon now, Padgett: my own Virex-PC code has had this ability for
> something like two years.  Heck, even Flu_Shot+ has had that since Day
> One (well, since version 1.1, at least) which means that it's been
> available for about four years by this time...

Well, maybe by "effective" Padgett also means "efficace" (sp?)
integrity checking? I mean, in Bulgaria I've seen a program, that
when run, used to modify COMMAND.COM of PC-DOS 3.30 in such a way that
it displayed the string "FluShot+ is STUPID! Press any key to continue"
and waited for a keypress each time the command interpreter was run...
This was achieved using tunneling techniques, so FluShot didn't detect
the modification of the file on-line. Furthermore, the file was
modified in such a way, that the (rather trivial) checksum algorithm
of FluShot+ didn't detect the changes... I can hardly call such
integrity checking "effective"...

Besides, Padgett does not claim that some company has suddenly
invented the integrity checking; all he says is that a company that
did not provide such features in their package, has finally decided to
do so... This is always good news; let's only hope that the integrity
checking provided will be secure enough...

Regards,
Vesselin

P.S. No, I wasn't on vacation; I attended the EICAR anti-virus
conference in Munich, so I was absent for about a week... :-)
- -- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.0 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany