home *** CD-ROM | disk | FTP | other *** search
- *** The following information is provided to describe ***
- *** the options available and the terms used ***
-
-
- FILE VIRUSES
- ------------
-
- Not so long ago viruses infected either Boot Sectors or Files, but
- now an increasing number try to infect both, making them potentially
- much more infectious and also more difficult to clear out. Some
- viruses with the capability of infecting both files and sectors have
- not been generally recognised as such (eg FLIP and LIBERTY) which
- may have extended their opportunities to propagate.
-
- You will be able to pick out the infection targets easily as you
- navigate through PC-Virus Index, thanks to the check marks which
- vividly present this information. The target areas for file viruses
- are:
-
-
-
- 1. COMMAND.COM
-
- The COMMAND.COM file is a popular target for viruses, some of which
- hide themselves inside so as not to add to its size. This means
- that, it may not be possible to disinfect this file in which case,
- deletion and replacement will be needed.
-
-
- 2. COM FILES
-
- COM files are executable programs ending with the extension .COM and
- they are the most popular target of virus writers because they are
- both very common and relatively simple in structure. Provided that
- a file has not been overwritten, then disinfection is likely. COM
- files are a special type of EXE file and they cannot be larger than
- 64KB, for example. Viruses are therefore often selective about the
- sizes of files that they will infect: avoiding the small ones
- because they might be too obvious and the larger COM files where,
- for example, they might exceed the size constraint.
-
-
- 3. EXE & OVERLAY FILES
-
- EXE files are executable programs ending with the extension .EXE.
- These are more complicated than COM programs and often use
- 'overlays' which they bring into use when required. The overlays are
- also executable programs and they are given a variety of extensions,
- dependent on the whim of the software developer. Overlays do get
- infected by viruses but this seems to be a function of how the
- program was written rather than how the virus was targeted.
-
- Most virus detectors scan only COM & EXE files by default, which
- makes sense because these are the principal targets and this speeds
- things up considerably. However when a virus infection is found, all
- files should then be scanned as a matter of routine. Note, it is
- not generally possible to scan Overlay files globally because of the
- variety of suffixes in use.
-
-
- 4. OTHER EXECUTABLES
-
- In theory, any executable file can be infected by a virus and a few
- have been found which target SYS and BAT files.
-
-
- ++++++++++++++ end of report ++++++++++++