Re: Questions about OS2SCAN and OS/2-based AV software in general (OS/

Thread View: comp.virus

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Vesselin Bontchev Tue, 22 Dec 1992 18:40

#4730

Author: Vesselin Bontchev
Date: Tue, 22 Dec 1992 18:40

22 lines
1484 bytes

aryeh@mcafee.com (McAfee Associates) writes:

> >Do you know any way in which a known DOS virus can infect an extended
> >filename on an HPFS partition?

> Nope.  But I myself create directories under OS/2 HPFS with names like 
> "MS-DOS 3.3 Files" and "Today's Downloads" in which I keep normal DOS
> files.  I'm sure other people do as well :-)

Yup, you are right. And there is one more possibility, which I figured
out myself after posting my message. A virus could infect a file with
a short filename and the user could rename it later to an extended
filename. If the scanner does not scan those files, then there is a
danger for reinfection.

Regards,
Vesselin
- -- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.1 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads