Path: utzoo!utgpu!jarvis.csri.toronto.edu!rutgers!apple!bionet!agate!shelby!polya!lipa
From: lipa@polya.Stanford.EDU (William J. Lipa)
Newsgroups: comp.sys.mac
Subject: Re: Virus thought
Message-ID: <10182@polya.Stanford.EDU>
Date: 22 Jun 89 22:13:54 GMT
References: <4018@tank.uchicago.edu>
Sender: William J. Lipa <lipa@polya.Stanford.EDU>
Reply-To: lipa@polya.Stanford.EDU (William J. Lipa)
Organization: Stanford University
Lines: 12

In article <4018@tank.uchicago.edu> stel@tank.uchicago.edu (stelios  valavanis) writes:
>With all this talk about this virus and that virus eliminator, and
>with this resource that some curing progs put into the sys to prevent
>virus, I got to thinking (dangerous).  Couldn't a virus call itself by
>the name of this friendly anti-virus resource replacing the good one
>if it is there?

Probably not. The "friendly" nVIR resource installed by KillVirus has size 0,
so anti-virus programs can specifically check whether the resource is friendly
or hostile by examining the size.

Bill