On Tue, 21 Aug 2001, Christopher Maujean wrote:
> Well,
> According to Trend Micro Tech details
> http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_SIRCAM.A&VSect=T
> (not very detailed if you ask me)
>
> The size of the virus is 137,216 bytes
> So, if we strip those bytes off the front of the file, presumably we would have
> an uninfected file, right?
Presumably, assuming "size of the virus" means "size of the header." If
that's the case, then:
dd if=infected.file of=output.file bs=137216 skip=1
- Neil Parker, [EMAIL PROTECTED]
