Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: [linux-security] Re: Linux virus
From: alan () CYMRU NET (Alan Cox)
Date: Wed, 5 Feb 1997 14:32:49 +0000


      In any event -- McAfee may be able to add this to
      their existing uvscan product.  uvscan scan Linux
      filesystems for DOS and Windows (including Word Macro)
      viruses.   It may be possible for the AV team to
      simply add bliss' signature to the next release -- and
      it may even be possible for them to create a remover.

I've had a look at the algorithms used for this "Bliss" toy. Its quite
interesting as its a completely portable technique. It works for NT
DLL's it works for all Unixen.

Tripwire pretty much immediately spots such tampering.

Alan



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]