-=> Quoting Rick Collins to David Desrosiers <=-
 dd> What if the virus is tailored to look for a specific jump
 dd> sequence in a specific viewing program, and then "load" based on
 dd> that, and use the jump as a "wave" to ride upon, completing the
 dd> execution sequence? Wouldn't that work?
 RC> If the virus is "looking for a specifc jump sequence" then the virus
 RC> is _already_ loaded, and executing.  Now:  How did the virus get
 RC> loaded?
        Ok, let's change that. Let's say the "virus" is not executable, but 
s
it sits in memory, the viewer (which this "virus" is specifically tailored to
work with) sees it as a part of itself, like two parts of a whole, or like a
plug-in for a browser looking for a stub or jump. It runs that, instead of 
he
one on disk, or the one built into the executable later on. Now, the "virus"
isn't really running, but the program that "sees" the viral code as part of
itself is running it. I think this could be possible, if viruses were 
ailored
more specifically to specific programs. With the advent of the net, these
programs (like mIRC, Netscape, IE, and so on) are being proliferated all over
the place, and these intelligent "designer viruses" could then become the
rage.
        Just some ponderings...
-The Visionary
visionary@brazerko.com
visionary@aura.title14.com
Big Brother is watching you.
You are watching Big Brother.
You are Big Brother... watching...
... Never marry a man who hates his mother because he'll end up hating you
--- WtrGate+ 0.93.PRE9-d beta sn 116
---------------