|
Posted by Nick Domukhovsky on March 14, 2007, 1:13 am
If you were Registered and logged in, you could reply and use other advanced thread options > This is a FALSE statement and bad information.
>
> First you must differentiate between viral and non-viral malware. Non-viral
malware in the
> form of SOME Trojans may be ablr to stopped from loaded but will not be
removed by this
> methodology. There are many ways that Malware can be loaded by the OS that
auto-runs will
> miss. Additionally the malware may be multi-facted and may more than one
loading approach
> with one protecting the other such that the malware can NOT be removed. A
good example
> would be a Klone or Conhook Trojan.
>
> Second is if the malware is indeed a virus. There are different typoe of
viruses from Boot
> Sector Infectors to Internet worms to file infectors. Therea re many viruses
in the wild
> that will spread by infecting other files. I can tell you how many times I
have come
> accross a IRCBot or IRC Trojan that is infected with the Parite virus.
>
Maybe. But I didn't saw a real virus (that is - malware, which infect
executable files) for a last 10 years. Only malware which placed itself
in various locations and uses various registry entries ti start itself.
--
With best regards
Nickolay Domukhovsky, MCSA
|