Greetings Bob,
}- }- [...]
}- }- 3) Scan it.
}- }- 4) Run it.
}- }- 5) Scan it again. (Note: The reason for the second scan is
}- }- that some viruses cannot be detected until the
}- }- executable is run
}- Ack! That's where I'd always see a "You've got a virus, but I
}- cannot disinfect it" message at the schools!
Yes, this is courtesy mostly of PKLite, a virus implanted in a
PKlited file cannot be detected until it is run. The way to tell
is to look at the executable with a text editor like QEdit, the
first line will look something like this:
MZp 8&W2PKlite(R) Copr. 1990-1996 PKWARE Inc. All Rights Reserved C %
But will also contain some actual code of course.
Boanne
--
FROM: Over the hills and far away...
[EMAIL PROTECTED]
A Dinosaurs Garden (collection of DOS links and files)
http://www.jdreece.com/dinosaur/dg.htm
*Trust your technologist.
Old Virus detected! Contact the author for an update.
To unsubscribe from SURVPC send a message to [EMAIL PROTECTED] with
unsubscribe SURVPC in the body of the message.
Also, trim this footer from any quoted replies.
More info can be found at;
http://www.softcon.com/archives/SURVPC.html
