Path: utzoo!utgpu!watmath!clyde!att!rutgers!mailrus!ulowell!cbmvax!bill
From: bill@cbmvax.UUCP (Bill Koester CATS)
Newsgroups: comp.sys.amiga
Subject: Re: IRQ virus
Keywords: -beep-
Message-ID: <5662@cbmvax.UUCP>
Date: 11 Jan 89 17:01:02 GMT
References: <2301@nunki.usc.edu>
Reply-To: bill@cbmvax.UUCP (Bill Koester CATS)
Organization: Commodore Technology, West Chester, PA
Lines: 40

In article <2301@nunki.usc.edu> wdao@castor.usc.edu (Walter Dao) writes:
>hmmmm let me think .... 
>
>YEAAAHHH !!!
>
>how about fighting fire with fire ? 
>lets write a virus counter virus ? 
>
	Not this again. Let's put out the fire with an A-Bomb!!
>
>then have pseudo virus in the amiga ram that acts like a virus that does the 
>following :
>1) when a prg has to be loaded , 
>   recalculate the whole chcksum (I am not going to go in deep but you get
>   the idea).
>2) get the checksum we got and which is imbedded in the code.
>3) compare . if  same then ok , everything is fine. 
>     othewise, the code is not the same . 
>
>what the IRQ virus could do . 
>- After the irq merges itself with the code, recalculate the chcksum.
>  (they will have to have the right formula to calculate the chcksum).
>  but to much of a hassle ....
>
 	Nothing ever seems to be TOO much of a hassle for the average
	virus writer. All they have to do is get the right checksum
	routine to break this method. Just say NO to anti virus viruses!
>
				BK
-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Bill Koester (CATS)            >>Commodore Amiga Technical Support<<
Commodore International Ltd.   UUCP {allegra|burdvax|rutgers|ihnp4}!cbmvax!bill 
		               PHONE  (215) 431-9355
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
The official word, is NO. I am therefore going anyway!
   						         Kirk - Star Trek III

                Pleese desrigard eny spealing airors!!!!!!!
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=