Hi Larry,
you wrote in /FIDO/VIRUS_INFO at 14 Oct 97:
BO>> it seems impossible that after unzipping something you get a virus..
BO>> but it is not impossible to get a boot sector virus from a downloaded
BO>> executable file, it may be a virus dropper and it may trick the
BO>> antivirus software..
LK> It is not impossible to get a virus simply by unzipping something. You
an
LK> also activate a virus by copying a file. Some boot sector files also
LK> attach to overlay files as well as executables.
It depends on how you unzip, you can infect by
- unzipping an self-extracting archive by simply executing it
- unzipping with a copy of the utility you obtained from somewhere
without checking it for viruses before
but you cannot get infected if you use the utility from your HDD you ever
used and that is free of viruses.
No, you can not infect by simply copying a file, but a file can get
infected while copying if a virus is allready active and you can get
infected by executing that file.
Yes some boot sector viruses also infect files they are called
multipartied viruses then. The other way boot sector viruses can be
introduced by a file are droppers it is just a program that installs the
virus in the system. Due the many possibilities how such an dropper could
work it is impossible to detect them reliable by scanning. But most of
them can be detected well by a watchdog program also call behaviour
blocker.
Michael
--- CrossPoint v3.11
---------------
* Origin: VIRNET 9:493/3160.3 (2:2452/249.3)
|