Hello there,

Saturday, November 9, 2002, 4:04:53 PM, Marck D Pearlstone wrote:

MDP> <...> AV software spotting a viral infection in a file with a
MDP> non-executable extension. This is not a risk to anyone -
MDP> professional or not. <...>

Before this becomes a dead horse I just wanted to make a side
note, since there is always an exception to the rule.  Some days
ago, someone brought me a supposedly infected laptop.  I first
scanned all executable files (.exe, .bat etc) and indeed found the
bugbear virus.  Then I scanned all files, and discovered that
bugbear had also infected the system's cpy files which are files
used from the system recovery tool for recovery purposes.  If an
unknowledgeable user had restored a system configuration using the
infected cpy files, the laptop would get infected once again. All
this means that infected files, even if not executable, can be a
potential danger in some cases. Maybe not for you, me, or anybody
else in this list, but surely for an unknowledgeable user. Just
for the story, I had to disable system recovery in order to be
able to delete the files...



-- 
Best regards,
 Alexander Cicovic

Using The Bat! 1.61 under Windows 2000 Service Pack 3


________________________________________________
Current version is 1.61 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to