-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Alexander,

@10-Nov-2002, 20:03 +0200 (18:03 UK time) Alexander Cicovic [AC] in
mid:160947502.20021110200317@;gmx.net said:

MDP>> <...> AV software spotting a viral infection in a file with a
MDP>> non-executable extension. This is not a risk to anyone -
MDP>> professional or not. <...>

AC> Before this becomes a dead horse

It has rambled around many bends, but I don't think it's quite at
full circle just yet, although it is staggering :-).

AC> ... If an unknowledgeable user had restored a system
AC> configuration using the infected cpy files, the laptop would get
AC> infected once again. All this means that infected files, even if
AC> not executable, can be a potential danger in some cases.

But not in the first line of defence. These files are secondarily
infected by a system *that is already infected with a virus*. At
this time the AV software has previously failed and missed the
infection's arrival in an *executable* form.

As long as the AV software stops you getting infected, then you're
not at risk. That's how I see it.

When anyone sets an AV program loose on a potentially virus infected
system, they pull out the plugs and make it check in all the nooks
and crannies. Of course, this is rarely a job done by a novice using
"out of the box" software. This is more often a job done by the
experienced friend of the inexperienced user who thinks he may have
caught a virus because "the thing's gone mad on me mate... can you
take a look at it? You understand these things. There's a beer in it
for ya!".

So, my point still stands. It's a pointless evaluation of the
effectiveness of the software to ascertain whether it checks
non-executables by default. To say that the AV software "fails" and
should not even be considered is not reasonable.

- --
Cheers -- .\\arck D Pearlstone -- List moderator
TB! v1.62/Beta7 on Windows 2000 5.0.2195 Service Pack 2
'
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1rc1-nr1 (Windows 2000)

iD8DBQE9zrmtOeQkq5KdzaARAv37AJwPURvgFgNbcU8Nt/84Qy62ewjGvQCdGGeS
FyR9ZI3X1RU4phHM3nVq4WA=
=q3Z9
-----END PGP SIGNATURE-----



________________________________________________
Current version is 1.61 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to