GOLDSTN@MAINE.BITNET (Michael E. Goldstein) (10/15/89)
Does anyone know if there are any programs that will
compare the size(s) of .exe and .com files on your
PC harddisk with size(s) recorded during a previous
execution. The intention being to notice any
files which have grown because of infection from a
virus?
Michael Goldstein goldstn@maine.maine.edu
goldstn@maine.bitnetts@chyde.uwasa.fi (Timo Salmi LASK) (10/17/89)
In article <2067GOLDSTN@MAINE> GOLDSTN@MAINE.BITNET (Michael E. Goldstein) writes: >Does anyone know if there are any programs that will >compare the size(s) of .exe and .com files on your >PC harddisk with size(s) recorded during a previous >execution. The intention being to notice any >files which have grown because of infection from a >virus? There is an alternative method which is more efficient, since there is no assurance that a change of file size would be involved. This is calculating the crc-16 or crc-32 checksum for the files prior and after. There are good utilities for this purpose, which can be found from many BBSes, or by anonymous ftp eg from Simtel20 or our site. (Search for chksum, or similar.) Also you might acquire scanv42.arc in a similar manner, if virus discovery is what you are after in the first place. ................................................................... Prof. Timo Salmi (Site 128.214.12.3) School of Business Studies, University of Vaasa, SF-65101, Finland Internet: ts@chyde.uwasa.fi Funet: vakk::salmi Bitnet: salmi@finfun