Hi Chris!
28 Dec 96, letter Chris Maddock to Kurt Wismer:
CM> Companion virus ?
CM> The original EXE file is unchanged.
CM> It's about the only thing that =may= get past a good integrity checker.
Integrity checker and CRC checker are not the same things. The most
programs called "integrity checker" realy are only CRC checkers. Real
integrity checker _can_ detect companion viruses. For example, ADinf checks
not only file CRCs and lengths, but also it checks directory structure, i.e.
whether new files were created or some files were deleted or renamed or moved
to another directory, or some new directories were created or removed. So,
companion viruses can be detected with no problems.
With best regards,
Dmitry Mostovoy
--- GoldED 2.50+
---------------
* Origin: DialogueScience, Moscow; E-mail: dmost@dials.ru (2:5020/69.4)
|