On 23 Dec at 15:36, Kurt Wismer of 1:250/503 wrote to Manuel Llorens:
KW>> not if properly used.... boot clean and the virus won't be in memory
KW>> and won't be able to hide itself... keep the integrity files offline
ML>> I have to insist...
KW>> cannot infect a file without changing something somewhere... (and a
ML>> Not necesary. Beleave me ;-)
KW> then put your money where your mouth is... show us... describe to us an
KW> infection scenario in which something somewhere hasn't changed...
Companion virus ?
The original EXE file is unchanged.
It's about the only thing that =may= get past a good integrity checker.
Regards,
Chris Maddock
chrism@softtech.brisnet.org.au
--- Msged/386 4.00
---------------