Path: utzoo!utgpu!news-server.csri.toronto.edu!mailrus!wuarchive!uwm.edu!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: CHESS@YKTVMV.BITNET (David.M.Chess)
Newsgroups: comp.virus
Subject: new virus (PC)
Message-ID: <0008.9007091826.AA07309@ubu.cert.sei.cmu.edu>
Date: 9 Jul 90 13:43:02 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 16
Approved: krvw@sei.cmu.edu

>   Fools debuggers to prevent reverse engineering.

One small nit, just in case this list is being read by someone
in the media!   *8)  The virus contains some code that's designed
to cause a branch to a nasty place in BIOS if one single-steps
through a particular early part of the virus.   But anyone
skillful enough to use a debugger is almost certainly skillful
enough to detect what the virus is trying to do, and prevent it.
A more accurate description, to avoid giving the virus more
credit than it deserves, might be:

  Contains easily-avoidable code that's intended to
    make analysis more difficult, but in fact has no
    particular effect.

DC