On (08 Jan 97) Rick Collins wrote to Patrick Ahlbrecht...
-=> Quoting Patrick Ahlbrecht to Rick Collins <=-
-=> FidoMail to 1:163/215, please.-=<
pa> By the way are there any bootsectorviri bigger than 512 Byte ?
pa> This would mean they had to store parts of their code in other
pa> areas of the disk (for example clusters marked as bad). In this
pa> case FDISK wouldn't get rid of the whole virus (only the starter
pa> routine).
RC> And the result is a virus that won't execute or re-infect, and can be
RC> ignored.
And if you run the MS-DOS utility SCANDISK, or another surface
scanning utility those falsely marked bad sectors are tested
(overwritting the virus code) and after passing unmarked bad and
returned to the free disk cluster pool to be reused.
Gordon
... Ignorance of history makes current events surprising.
--- PPoint 2.00
---------------
* Origin: From the Underground Zorkian Empire (1:105/55.42)
|