Re: From Hadi (A little urgent question)

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigA40D12E22A8B50BF59317D94
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit

mail.emirates.net.ae wrote:
> Hi!
> 
> I'm making some codes on Assembly..
> 
> To stop execution (Low-Level)..
> 
> So what to do then?
> 
> Now I can stop all files execution before running (EXE, COM, Bat...) so what
> are the strings to put in the database to stop them?Or what resources could
> help me and explain what does Heuristic search for in the files?

As I said, I do not know what "writing to a segment and then executing 
it" means in x86 assembler. Someone told me that infecting a file leaves 
some traces, as you have to start the original file, so that people 
don't notice the infection. But I am the wrong person to answer such 
questions.

-- 
Kurt Huwig             iKu Systemhaus AG        http://www.iku-ag.de/
Vorstand               Am Römerkastell 4        Telefon 0681/96751-0
                        66121 Saarbrücken        Telefax 0681/96751-66
GnuPG 1024D/99DD9468 64B1 0C5B 82BC E16E 8940  EB6D 4C32 F908 99DD 9468

--------------enigA40D12E22A8B50BF59317D94
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFA0BsrTDL5CJndlGgRAnKaAJ9lQYTqJ1S9+VYAbiJ7QIFm+SgomQCgiXf5
13AwYxAbR4WqrvcK/NkW8ow=
=7hDD
-----END PGP SIGNATURE-----

--------------enigA40D12E22A8B50BF59317D94--


-------------------------------------------------------
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND