[comp.virus] Self-extracting archive files

p1@arkham.wimsey.bc.ca (Rob Slade) (04/13/91)

We've had various discussions on the merits of "archived" and "self-
extracting" files for virus protection.  The following is from a local
bulletin board:

Original message from: Rene Blais, to: All -ffected by the presence of header a
nd
trailer information.

However, in the case of the newer "spawning" viral programs, this
procedure does nothing at all for detection, because "spawning" viri
never touch the original file, relying on MS-DOS's "execution order
preference" for .COM files, and creating a separate virus file.  The
separate file may be hidden from detection in various ways, and still be
"infectious."

=============
Vancouver          p1@arkham.wimsey.bc.ca   | "Don't buy a
Institute for      Robert_Slade@mtsg.sfu.ca |     computer."
Research into      (SUZY) INtegrity         | Richards' First
User               Canada V7K 2G6           | Law of Data
Security                                    | Security