From:	"Damian Yerrick" <mail DOT me DOT at DOT your DOT own DOT risk AT pineight DOT 8m DOT com>
Newsgroups:	comp.os.msdos.djgpp
Subject:	Re: DJGPP viruses (Re: HELP! "invalid page exception"??)
Date:	Wed, 15 Sep 1999 07:53:39 -0500
Organization:	Rose-Hulman Institute of Technology
Lines:	16
Message-ID:	<7ro50d$e2b$1@solomon.cs.rose-hulman.edu>
References:	<37D534CD DOT 9FE72805 AT this DOT newsgroup> <Pine DOT SUN DOT 3 DOT 91 DOT 990908103147 DOT 21899I-100000 AT is> <37D6B63A DOT 68278B19 AT this DOT newsgroup> <Pine DOT SUN DOT 3 DOT 91 DOT 990909092000 DOT 6646I-100000 AT is> <37D7B0BD DOT DE998100 AT this DOT newsgroup> <Pine DOT SUN DOT 3 DOT 91 DOT 990913123223 DOT 8713K-100000 AT is> <7rmlv7$99s$1 AT solomon DOT cs DOT rose-hulman DOT edu> <Pine DOT SUN DOT 3 DOT 91 DOT 990915120355 DOT 27871S-100000 AT is>
NNTP-Posting-Host:	yerricde.laptop.rose-hulman.edu
X-Trace:	solomon.cs.rose-hulman.edu 937400141 14411 137.112.205.146 (15 Sep 1999 12:55:41 GMT)
X-Complaints-To:	news AT cs DOT rose-hulman DOT edu
NNTP-Posting-Date:	15 Sep 1999 12:55:41 GMT
X-Priority:	3
X-MSMail-Priority:	Normal
X-Newsreader:	Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE:	Produced By Microsoft MimeOLE V5.00.2314.1300
To:	djgpp AT delorie DOT com
DJ-Gateway:	from newsgroup comp.os.msdos.djgpp
Reply-To:	djgpp AT delorie DOT com

Eli Zaretskii <eliz AT is DOT elta DOT co DOT il> wrote in message
news:Pine DOT SUN DOT 3 DOT 91 DOT 990915120355 DOT 27871S-100000 AT is...
>
> On Tue, 14 Sep 1999, Damian Yerrick wrote:
> > DOS viruses can't infect [DJGPP programs].
>
> Not true.  Every DJGPP program has a short real-mode stub prepended
> to it.  As far as DOS (and DOS-based virus) is concerned, a DJGPP
> program is a very short real-mode program with lots of data attached
> to it.

But wouldn't this appended data confuse most viruses to
high heck?

- Raw text -