-=> Quoting Kurt Wismer to David Desrosiers <=-
KW> @MSGID: 1:250/503.0 32c3ecfa
KW> an image of the virus is in a dos buffer, thats why it's being
KW> detected... the instruction pointer never points into a dos buffer so
KW> the instructions that may be contained within never get processed...
Yes, true, but if I power off that system, and scan it with a clean
disk, it will detect the virus on the MBR.
KW> try this... on a known clean system after boot up, place an infected
KW> disk in the drive and execute a dir a:... then scan and you should see
KW> a warning.... then take the disk out, boot from a known clean diskette
KW> and scan again, you should not see a warning... if you do either the
KW> system wasn't clean to begin with or the known clean floppy wasn't
KW> actually clean...
See above.
KW> there is something very basic to computers... they execute code and
KW> they manipulate data in responce to the execution of the code...
KW> reading something in and of itself only loads data into memory, it does
KW> not execute anything except the code that did the loading (and that
KW> code has to already be in memory)...
So you're saying that a computer can't execute commands without
loading it into memory first?
-The Visionary
visionary@brazerko.com
... Install failed: Attempting to transfer virus to c:
--- WtrGate+ 0.93.PRE1 beta sn 116
---------------
* Origin: hacker heaven bbs - #include (1:320/2600)
|