home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: comp.org.eff.talk
- Path: sparky!uunet!spool.mu.edu!agate!rsoft!mindlink!a3916
- From: Clayten_Hamacher@mindlink.bc.ca (Clayten Hamacher)
- Subject: Re: Beneficial Virus?
- Organization: MIND LINK! - British Columbia, Canada
- Date: Sat, 9 Jan 1993 10:48:06 GMT
- Message-ID: <19423@mindlink.bc.ca>
- Sender: news@deep.rsoft.bc.ca (Usenet)
- Lines: 20
-
- >But that's just what the BCV does, in one description. It prompts the user
- >for an action (suicide, install marker file, etc). If the BCV existed,
- >how long do you think it would be before someone wrote a copy-cat virus
- >that looked for the same marker file, performed the same compression, and
- >at some later date, wiped the disk clean?
-
- Then why wouldn't someone d/l a new version of some PD utility and install a
- virus in there? It's just as likely to happen in the compression virus as a
- space invanders clone.
-
- >You can compare an executable (for non-changing code) against a known clean
- >copy, to check for infection after the clean copy date.
-
- Not if you d/l it from a BBS or FTP site, you can't be sure that what you are
- getting is clean code.. You can compare later versions with this to see if it
- changes, but that's another story, you're not sure it's clean.
-
- --
-
- Clayten_Hamacher@Mindlink.bc.ca Land of the rising snow.
-