On 30 Dec at 11:16, Dmitry Mostovoy of 2:5020/69.4 wrote to Chris Maddock:
DM> Hi Chris!
Hi Dmitry!
CM>> Companion virus ?
CM>> The original EXE file is unchanged.
CM>> It's about the only thing that =may= get past a good integrity checker.
DM> Integrity checker and CRC checker are not the same things. The most
DM> programs called "integrity checker" realy are only CRC checkers. Real
DM> integrity checker _can_ detect companion viruses. For example, ADinf
checks
DM> not only file CRCs and lengths, but also it checks directory structure,
DM> i.e. whether new files were created or some files were deleted or renamed
DM> or moved to another directory, or some new directories were created or
DM> removed. So, companion viruses can be detected with no problems.
Great and thanks for your explanation.
As I said though, it =may= get past. Any good product worth anything really
must have companion checking, as with any decent scanner whether heuristic or
otherwise.
A good suite of programs Dmitry. How about a short uncommercial explanation
of basically what each one does ??
Are there any plans towards making some speed improvements ?? On a large
drive they are somewhat slowish.
Regards,
Chris Maddock
chrism@softtech.brisnet.org.au
--- Msged/386 4.00
---------------
* Origin: Diagnostic CBBS - DownUnder - (3:640/302)
|