From: Eli Zaretskii <eliz AT is DOT elta DOT co DOT il>
Newsgroups: comp.os.msdos.djgpp
Subject: Re: DJGPP viruses (Re: HELP! "invalid page exception"??)
Date: Wed, 15 Sep 1999 12:04:18 +0200
Organization: NetVision Israel	
Lines: 20
Message-ID: <Pine.SUN.3.91.990915120355.27871S-100000@is>
References: <37D534CD DOT 9FE72805 AT this DOT newsgroup> <Pine DOT SUN DOT 3 DOT 91 DOT 990908103147 DOT 21899I-100000 AT is> <37D6B63A DOT 68278B19 AT this DOT newsgroup> <Pine DOT SUN DOT 3 DOT 91 DOT 990909092000 DOT 6646I-100000 AT is> <37D7B0BD DOT DE998100 AT this DOT newsgroup> <Pine DOT SUN DOT 3 DOT 91 DOT 990913123223 DOT 8713K-100000 AT is> <7rmlv7$99s$1 AT solomon DOT cs DOT rose-hulman DOT edu>
NNTP-Posting-Host: is.elta.co.il
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Trace: news.netvision.net.il 937389785 23605 199.203.121.2 (15 Sep 1999 10:03:05 GMT)
X-Complaints-To: abuse AT netvision DOT net DOT il
NNTP-Posting-Date: 15 Sep 1999 10:03:05 GMT
X-Sender: eliz AT is
In-Reply-To: <7rmlv7$99s$1@solomon.cs.rose-hulman.edu>
To: djgpp AT delorie DOT com
DJ-Gateway: from newsgroup comp.os.msdos.djgpp
Reply-To: djgpp AT delorie DOT com
X-Mailing-List: djgpp AT delorie DOT com
X-Unsubscribes-To: listserv AT delorie DOT com
Precedence: bulk


On Tue, 14 Sep 1999, Damian Yerrick wrote:

> Antivirus software can also check for writing to EXE files,
> which the linker does

The DJGPP linker doesn't usually write to the .exe file, unless you
replaced/edited the djgpp.djl linker script supplied with
djdevNNN.zip.

And in this case, based on the output of "gcc -v" posted in this
thread, the compiler seems to crash when it runs the preprocessor,
long before the linker is invoked.

> DOS viruses can't infect them

Not true.  Every DJGPP program has a short real-mode stub prepended
to it.  As far as DOS (and DOS-based virus) is concerned, a DJGPP
program is a very short real-mode program with lots of data attached
to it.