Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!swrinde!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: terry@spcvxb.spc.edu (Terry Kennedy, Operations Mgr)
Newsgroups: comp.virus
Subject: Re: Norton sd says *NonMovable Blk* (was Curse.exe virus) (PC)
Message-ID: <0008.9011081406.AA17159@ubu.cert.sei.cmu.edu>
Date: 7 Nov 90 15:23:30 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 17
Approved: krvw@sei.cmu.edu

rzi@philpav.tds.philips.se (Roman Zielinski) writes:
> The only strange thing is why msdos.exe is nonmovable?
> Can someone explain that?????

  Sure. Norton thinks that anything "strange" is non-movable because
it might be copy-protected. MSDOS.EXE is (last I looked) a 1-byte
file. Now it is not possible to have a 1-byte EXE. MS-DOS sees an
invalid header and loads it as a .COM, but Norton doesn't know about
that.

  If you call Norton, you might ask them about a program called
"SDPROBE" which will tell you lots of useful things about why files
are not movable, as well as debugging information about SD itself.

        Terry Kennedy           Operations Manager, Academic Computing
        terry@spcvxa.bitnet     St. Peter's College, US
        terry@spcvxa.spc.edu    (201) 915-9381