From:	Eli Zaretskii <eliz AT is DOT elta DOT co DOT il>
Newsgroups:	comp.os.msdos.djgpp
Subject:	Re: DJGPP viruses (Re: HELP! "invalid page exception"??)
Date:	Wed, 15 Sep 1999 12:04:18 +0200
Organization:	NetVision Israel
Lines:	20
Message-ID:	<Pine.SUN.3.91.990915120355.27871S-100000@is>
References:	<37D534CD DOT 9FE72805 AT this DOT newsgroup> <Pine DOT SUN DOT 3 DOT 91 DOT 990908103147 DOT 21899I-100000 AT is> <37D6B63A DOT 68278B19 AT this DOT newsgroup> <Pine DOT SUN DOT 3 DOT 91 DOT 990909092000 DOT 6646I-100000 AT is> <37D7B0BD DOT DE998100 AT this DOT newsgroup> <Pine DOT SUN DOT 3 DOT 91 DOT 990913123223 DOT 8713K-100000 AT is> <7rmlv7$99s$1 AT solomon DOT cs DOT rose-hulman DOT edu>
NNTP-Posting-Host:	is.elta.co.il
Mime-Version:	1.0
X-Trace:	news.netvision.net.il 937389785 23605 199.203.121.2 (15 Sep 1999 10:03:05 GMT)
X-Complaints-To:	abuse AT netvision DOT net DOT il
NNTP-Posting-Date:	15 Sep 1999 10:03:05 GMT
X-Sender:	eliz AT is
In-Reply-To:	<7rmlv7$99s$1@solomon.cs.rose-hulman.edu>
To:	djgpp AT delorie DOT com
DJ-Gateway:	from newsgroup comp.os.msdos.djgpp
Reply-To:	djgpp AT delorie DOT com
X-Mailing-List:	djgpp AT delorie DOT com
X-Unsubscribes-To:	listserv AT delorie DOT com

On Tue, 14 Sep 1999, Damian Yerrick wrote:

> Antivirus software can also check for writing to EXE files,
> which the linker does

The DJGPP linker doesn't usually write to the .exe file, unless you
replaced/edited the djgpp.djl linker script supplied with
djdevNNN.zip.

And in this case, based on the output of "gcc -v" posted in this
thread, the compiler seems to crash when it runs the preprocessor,
long before the linker is invoked.

> DOS viruses can't infect them

Not true.  Every DJGPP program has a short real-mode stub prepended
to it.  As far as DOS (and DOS-based virus) is concerned, a DJGPP
program is a very short real-mode program with lots of data attached
to it.

- Raw text -