Patrick Ahlbrecht wrote in a message to Kurt Wismer:
[trojans]
PA> I'd say it's more because trojans aren't that widespread (due to
PA> the lack of beeing able to reproduce). They'd typically only show
PA> up on a view systems.
PA> Also (imho) trojans are more a problem of the Unix world (and since
PA> most people use MS ...). I mean what could a trojan possible do to
PA> a MS system (that is if you were able to upload it afterall) ?
PA> Formatting your C: ? Big deal ... very satisfyieng indeed. But
PA> under Unix there are the real possibilities :
PA> - re-routing mail
PA> - locking out root
PA> - leaving backdoors to the system
PA> - stealing data out of /home
PA> - ok, crashing the system is possible as well ;)
Hey, you can have some real fun with trojans. Crash the system? Reset switch
- little damage done. Format the HDD? Ok, maybe cause a few tears, but the
fix is pretty obvious.
Hows about something like one I picked up and used for a while before
figuring it out? It was this nice little undelete directory. Unlike MS-DOS's
undelete, it had a text-GUI and also undeleted directories. But on occaision,
things went missing and were to corrupted to undelete. I eventually found out
that when the util was used to undelete a directory (eg PIX), it would
over-write a directory with the same first letter (POINT) with the undeleted
data, thus destroying the second directories contents. Sometimes it would
also cause minor corrutions to the FAT, and cause Dos to ask you to put the
original disk back in drive D: because it had been changed.
Or hows about another suspected trojan/virus activity on my DOS system -
redirecting mail for one user to another user, or something that causes minor
errors/changes to the way DOS works. Whereas a format and re-install me be
the best, easiest way to do something, most people will try to salvage data.
I spent 12 hours one day at a friends place trying to recover a slowly
corrupting disk, reboot to clean floppy, FDISK and format HDD's, and
re-install from scratch was the only way to fix things - no virus scanner
would pick anything up either..
Hmm, something that randomly changes a character in a .CFG file, or detects
and alters whole path lines in a .cfg file - now that would be cruel!
Dave
--- timEd 1.10
---------------
* Origin: GnomeVille TBBS 64-4 235-6887 (3:771/1560)
|