Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!wuarchive!brutus.cs.uiuc.edu!lll-winken!lll-lcc!unisoft!mtxinu!ucbvax!pro-houston.cts.com!jeffn
From: jeffn@pro-houston.cts.com (Jeff Noxon)
Newsgroups: comp.sys.apple
Subject: Re: Resource Forks? (viruses)
Message-ID: <8=10142319.AA12114@trout.nosc.mil>
Date: 14 Oct 89 20:19:39 GMT
Sender: daemon@ucbvax.BERKELEY.EDU
Organization: The Internet
Lines: 10

Network Comment: to #1248 by dlyons@apple.com

I$had the understanding that various MAC viruses would add a code resource and
then PATCH the program to cause the resource to be executed.  Since most S16
programs in assembly begin with the same code, it can be replaced and executed
elsewhere.

|uucp: [ucsd, nosc] ..!crash!pro-houston!jeffn  | "If I wanted your opinion, |
|inet: jeffn@pro-houston.cts.com   $            |    I would have given it   |
|arpa: crash!pro-houston!jeffn@nosc.mil         |           to you!"         |