home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Monster Media 1996 #15
/
Monster Media Number 15 (Monster Media)(July 1996).ISO
/
prog_gen
/
ssd40.zip
/
VIRUS.DOC
< prev
next >
Wrap
Text File
|
1996-04-19
|
1KB
|
43 lines
Analysing Computer Viruses
Analysing known and suspected computer viruses (including trojan's and
software bombs) is ALWAYS risky.
Whilst SSD can detect and reject most disk writes it is never possible to
completely prevent a program which is being analysed from destroying disk data
and/or computer hardware.
Needless to say, if you do use SSD for analysing programs which do damage
anything, you do so at your own liability.
SAFETY FIRST:
When analysing known or suspected computer viruses always follow these safety
guidelines:
1) Do so on a "suicide machine". This is a stand-alone PC which contains no
data you don't mind losing.
2) Be aware that the hardware may be damaged
3) Remove (or write-protect) all floppy diskettes from the PC
4) After analysis, reboot the PC IMMEDIATELY by switching it off and then on
again.
5) Do not insert any write-enabled floppy disks into the PC untill it has
been switched off and on again, and it's hard disk has been completely
reformatted.
6) If you don't know what you're doing DON'T!
Having said all that, SSD is a valuable tool for virus researchers. It is
immune to many of the disabling techniques which so quickly put other
disassemblers and debuggers out of business.