IA96@PACE.BITNET (IA96000) (11/28/89)
I have heard of, nor have I ever found any modules which were specifically linked into a program, but I would like some of the experts to comment on the following possibility: 1) A new or existing virus is developed and produced as a linkable object file. 2) Said object file is then either directly linked into an executable file at link time, or placed in a run-time library. Is this even a remote possibility? If so, does anyone have any examples or know of any examples where this has been done? I would really like to gather opinions and comments on this possibility.
johng@uunet.UU.NET (John Gardner) (12/04/89)
IA96@PACE.BITNET (IA96000) writes: >1) A new or existing virus is developed and produced as a linkable > object file. > >2) Said object file is then either directly linked into an executable > file at link time, or placed in a run-time library. There is a virus on the amiga that looks for an executable that is in the startup batch file and moves the executable`s code into a data segment and inserts itself into the code segment. If it can't find the startup file it then inserts itself into the dir command. It is easy to spot as one of your commands changes size, and you just have to delete that command to kill it. - -- PHONE : (02) 436 3438 ACSnet : johng@cavs.dwt.oz "But that wasn't the question !" - Do Androids Dream Of Electric Sheep