-=> Mocking Tom Wasson to Paul Walker <=-
   
 SS> Note that your method will only detect changes from non-stealth 
 SS> viruses...
 TW> Please elaborate.  By stealth viruses, are you referring to those
 TW> that don't reside in the program file? 
no, he's talking about viruses which, apon execution remove themselves
from their hosts so that their hosts won't detect anything strange when
control is given to them to perform their sanity (self crc) check...
the virus executes before the self check code does...
when the program terminates the virus reinfects it...
full stealth viruses do this, they also disinfect on opening for
reading.. (thus hiding from scanners)
... Bill Gates wants YOU... ok, maybe just your money...
--- TGWave v1.20.b09
---------------