TIP: Click on subject to list as thread! ANSI
echo: virus_info
to: RICK COLLINS
from: GORDON FREY
date: 1997-01-09 12:25:00
subject: stealth_C

On (08 Jan 97) Rick Collins wrote to Patrick Ahlbrecht...
-=> Quoting Patrick Ahlbrecht to Rick Collins <=-
-=> FidoMail to 1:163/215, please.-=<
pa> By the way are there any bootsectorviri bigger than 512 Byte ?
pa> This would mean they had to store parts of their code in other
pa> areas of the disk (for example clusters marked as bad). In this
pa> case FDISK wouldn't get rid of the whole virus (only the starter
pa> routine).
 RC> And the result is a virus that won't execute or re-infect, and can be
 RC> ignored.
And if you run the MS-DOS utility SCANDISK, or another surface 
scanning utility those falsely marked bad sectors are tested 
(overwritting the virus code) and after passing unmarked bad and 
returned to the free disk cluster pool to be reused.
Gordon
... Ignorance of history makes current events surprising.
--- PPoint 2.00
---------------
* Origin: From the Underground Zorkian Empire (1:105/55.42)

SOURCE: echomail via exec-pc

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.