-=> Mocking David to Rick <=-
  (Mock, mOck, moCk, mocK)
 RC> If the virus is "looking for a specifc jump sequence" then the virus
 RC> is _already_ loaded, and executing.  Now:  How did the virus get
 RC> loaded?
 DD> Ok, let's change that. Let's say the "virus" is not
 DD> executable, but as it sits in memory, the viewer (which this "virus" is
 DD> specifically tailored to work with) sees it as a part of itself, like
 DD> two parts of a whole, or like a plug-in for a browser looking for a
 DD> stub or jump.
personally, i would have thought someone entrusted with the upkeep of
numerous machines would be better versed on the way computers work with a
low level of abstraction...
the instructions in a program are executed sequentially, one after
another... programs don't go around looking for their next instruction,
the location of the next instruction is predefined... the only way data
is going to be executed is if some part of the program tells the
processor to move the ip to the data area and continue executing from
there...
problem is that programs are made to avoid that because it's usually a
dangerous thing to do...
programs that have "plug-ins" have set data files telling them exactly
where to look for those "plug-ins"... programs that don't aren't going to
treat something as a plug-in... again, the location of executable code
is all predefined...
 DD> It runs that, instead of the one on disk, or the one
 DD> built into the executable later on. Now, the "virus" isn't really
 DD> running, but the program that "sees" the viral code as part of itself
 DD> is running it. I think this could be possible, if viruses were
 DD> tailored more specifically to specific programs.
no, this is possible only if specific programs are tailored more
specifically to viruses... the execution behaviour you're suggesting is
insipid and i doubt that any programmer who thinks thats a logical way
to have a program operate would be competent enough to compile a program
in the first place...
... quantum chromodynamics - the RGB nature of the universe...    
--- Maximus 2.02
---------------