Path: utzoo!attcan!uunet!recondo!sirius
From: sirius@recondo.UUCP (Mike Stilson)
Newsgroups: comp.sys.amiga
Subject: Re: Suggestion about a new version of virusX (are you listening Steve)
Message-ID: <0827.AA0827@recondo>
Date: 9 Jun 89 03:17:16 GMT
Followup-To: comp.sys.amiga
Lines: 19

>I strongly suggest you test the "KickTagPtr" too, the same way you
>test the "*Capture" (KickTagPtr should be 0). You musn't wait with
>testing that place after a new virus has found it's way to the
>software, test it now so that a new virus won't have a change.

Commodore's recoverable RAMdisk also sticks around by the KickTagPtr, so there's
a fair chance that it won't be 0 in many instances.  Although that IS a nice
place to stick a virus, if you have a rrd mounted and it just disappears, then
there's a good chance something changed it, and you'd also notice it yourself.

>Marco Dedecker


--
Mike 'Sirius' Stilson      -      Sirius Software
UUCP:    sirius@recondo.UUCP
BITNET:  sirius%recondo@uunet.UU.NET
MA-BELL: (412) 793-1242 or (412) 793-5765
USNail:  1312 Universal Rd.   Penn Hills, PA  15235-3936