Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!sdd.hp.com!cs.utexas.edu!asuvax!stjhmc!p88.f15.n300.z1.fidonet.org!Lawson.English
From: Lawson.English@p88.f15.n300.z1.fidonet.org (Lawson English)
Newsgroups: comp.sys.mac.programmer
Subject: Re: Question for THINK C gurus
Message-ID: <7037.28013B77@stjhmc.fidonet.org>
Date: 7 Apr 91 21:40:45 GMT
Sender: ufgate@stjhmc.fidonet.org (newsout1.26)
Organization: FidoNet node 1:300/15.88 - Tucson Apple Core, Tucson AZ
Lines: 18

Jon W{tte writes in a message to All

JW> So, of course, the virus just patches _Count1Resources to return 
JW> 0 for CODE (and no, you can't check if it's patched, since there 
JW> may be legitimate patches to it too...) 
JW>  h+@nada.kth.se  Jon W{tte

That's a mighty intellegent virus: it allows for the existance of viral checking
code in individual programs as well as virus checkers and whatever alchemy Apple
does with  memory address #4, etc.


Lawson
 

--  
Uucp: ...{gatech,ames,rutgers}!ncar!asuvax!stjhmc!300!15.88!Lawson.English
Internet: Lawson.English@p88.f15.n300.z1.fidonet.org