Path: utzoo!mnetor!uunet!husc6!cmcl2!rutgers!dayton!ems!nis!stag!trb
From: trb@stag.UUCP ( Todd Burkey )
Newsgroups: comp.sys.amiga
Subject: Re: Virus Author comes forward!!!
Message-ID: <297@stag.UUCP>
Date: 1 Jan 88 15:26:57 GMT
References: <3007@cbmvax.UUCP> <3008@cbmvax.UUCP> <6028@cisunx.UUCP> <4862@well.UUCP> <597@inria.UUCP> <3064@cbmvax.UUCP>
Reply-To: trb@stag.UUCP ( Todd Burkey )
Organization: Mindtools ST Access Group, Plymouth, MN
Lines: 18
Keywords: virus, diskkiller

In article <3064@cbmvax.UUCP> carolyn@cbmvax.UUCP (Carolyn Scheppner CATS) writes:
>If thought it was clear from Bill's postings that we will not distribute
>the SCA Virus Protector because:
>
>   a. We don't have the source 
>   b. It only protects against the original Virus

Wouldn't it be simple to check for a virus that lodges itself in
the OS and/or boot sectors by writing a simple CRC routine (two-level
to allow byte isolation). The routine would simply checksum specific
sectors (or offset sectors) against know values. Of course, this
wouldn't safeguard against virus's or trojan horses that stick themselves
inside of auto-run executables (or whatever the equivalent is on the Amiga).
Since we have the full OS on ROM on the ST, I tend to worry more about
the Trojan horse problem (i.e. I have a very full hard disk and
something like 250 disks of PD software...)
  -Todd  Burkey
   trb@stag.UUCP