Path: utzoo!utgpu!watmath!clyde!att!alberta!ubc-cs!van-bc!root
From: lphillips@lpami.wimsey.bc.ca (Larry Phillips)
Newsgroups: comp.sys.amiga
Subject: Re: IRQ virus
Message-ID: <2138@van-bc.UUCP>
Date: 11 Jan 89 14:51:20 GMT
Sender: root@van-bc.UUCP
Lines: 23

In <29@snll-arpagw.UUCP>, paolucci@snll-arpagw.UUCP (Sam Paolucci) writes:
>In article <13341@cup.portal.com> dan-hankins@cup.portal.com (Daniel B Hankins) writes:
>->Re self-checking programs:  Not effective.  The virus prepends itself to
>->the program.  After the virus executes, *then* in loads the regular program
>->and runs it.  The regular program never knows the virus was there.  The
>->checksum matches.
>
>Not if the checksum code is part of the startup code.
>

Huh? If a virus is prepended as a code section, the startup code _is_ part of
the virus code.

-larry

--
Frisbeetarianism: The belief that when you die, your soul goes up on
                  the roof and gets stuck.
+----------------------------------------------------------------------+ 
|   //   Larry Phillips                                                |
| \X/    lphillips@lpami.wimsey.bc.ca or uunet!van-bc!lpami!lphillips  |
|        COMPUSERVE: 76703,4322                                        |
+----------------------------------------------------------------------+