-=> Quoting Curtis Canning to All <=-
CC> This is what F-prot detected :
CC> ******************************************
CC> * *
CC> * C:\SCAN\TBAV\TBAV.EXE IS INFECTED WITH *
CC> * THE 1644 VARIANT OF THE MAJOR VIRUS. *
CC> * *
CC> ******************************************
CC> Only 6 files were infected, but the point I'm trying to make here is
CC> that always have to brand name scanners, 2 on disk and 2 on the HDD,
CC> because you think that scanners are meant to have safe guards in them
CC> so they them self can't get infected.
It seems to me that antivirus programs should refuse to run if they
have been tampered with. But, there is no way to keep them from getting
infected or from infecting the drive. If you are really concerned
about running an antivirus, I would keep a copy on a write protected
disk and either run from the diskette, or compare it with the copy on
the hard drive on occasion like:
FC /B A:PROGRAM.EXE C:\PROGRAM\PROGRAM.EXE
If it differs, then you know something was playing with the program.
Now, with a resident type program, you would think it could stop
itself from becoming infected. But the idea of using 2 different
virus scanners is a good one. I would use both the commercial type
as well as the more obscure ones. The commercial ones are better
behaved and might work better, but the more obscure ones might be
less familiar with the hackers.
--- GEcho 1.11+
---------------
* Origin: [ The Mach ][ BBS ] - RA 2.50+ - USR DS V.34+/33600 (1:3654/144)
|