Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!samsung!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: AWOODHULL@hamp.hampshire.edu (Al Woodhull)
Newsgroups: comp.virus
Subject: Re: Virus scanners (PC)
Message-ID: <0006.9106181359.AA17901@ubu.cert.sei.cmu.edu>
Date: 17 Jun 91 17:05:00 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 15
Approved: krvw@sei.cmu.edu

> The only "test target" that can be used is the entirety of a virus,
> and at that point you no longer have a "simulator", you have the real
> thing.  -- Fritz Schneider

I have only had serious problems with two viruses, Yankee Doodle and
Jerusalem.  For each of these I took a file that was infected from my
"zoo" disk, and appended it to a small program that prints a message
and exits. I saved the hybrid files as executables. (I did all of this
with DEBUG). The new files contain all of the infected code and so are
good test targets, but since there is no way to execute the infected
code it is essentially just a block of data. There is no need to worry
about someone else using my computer wondering "I wonder what that
program does?"

 -- Al    awoodhull@hampvms.bitnet