Re: From Hadi (A little urgent question)]

> Someone told me that infecting a file leaves 
> some traces, as you have to start the original file, so that people 
> don't notice the infection. But I am the wrong person to answer such 
> questions.

Recognizing that a file has been modified after compilation is not that
difficult.  The problem is in determining whether those changes are
caused by a parasitic virus or some other program, for example a runtime
decompressor like UPX.

However, parasitic viruses are less of a problem than they used to be - what
people are seeing nowadays are backdoors and worms and they are structurally
just like any other application.

-frisk



-------------------------------------------------------
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND