Mail Archives: djgpp/1999/10/22/13:30:51
Damian Yerrick (web DOT poison AT pineight DOT 8m DOT com) wrote:
[...]
> Perhaps someone should change "File not COFF" to "File infected or
> not COFF" to make the message a bit clearer.
No need to, as the current message already does that. The original
poster didn't quote it in full. The actual message text is:
{Program name}: not COFF (Check for viruses)
If that message text isn't explicit enough to carry the idea across,
no other one will do, I suspect. Some people simply don't *want* to
believe that something like a virus could be happening to them... It
once took me about half an hour of talking to convince the staff of
the PC store that there indeed was a virus on that unwritable VGA card
driver diskette they'd given me (5 1/4" disk, without any notch at
all). My scanner didn't even detect it clearly, yet, calling it a
suspected variant of another, known one. Turned out it was
'Michelangelo', which became rather famous later on, partly because it
*was* spread on 'factory-written' write-protected disks of various
kinds.
> So there aren't any COFF only viruses yet?
No DJGPP viruses, to be precise. Win32 PE viruses are COFF viruses,
technically spoken, but they won't usually work with DJGPP programs,
either. Maybe DJGPP profits from 'securicy by obscurity', here. There
just aren't enough users of DJGPP-compiled programs for any virus
writer to view it as a useful population to plant a virus in, I
assume. So far.
--
Hans-Bernhard Broeker (broeker AT physik DOT rwth-aachen DOT de)
Even if all the snow were burnt, ashes would remain.
- Raw text -