Re: virus code is never executed - virus or not?]]

>Actually I think integrity checkers have a great potential, _if_ there is a
>valid path of trust from the system boot (and no, I don't think TCG is the
>right way :-) _and_ it is supported by vendor update procedures. Just some 
>checksums won't be sufficient, but software certifiction may be an option.

You are forgetting the problems of ignorance and gullibility.

As long as people are willing to execute an attachment they receive in their
mail or a program they download from a website, an integrity checker is not 
going to help one bit if they just say "yes, it is OK to run this program".

Integrity checkers just don't work against worms and backdoors - they may
be somewhat effective against parasitic viruses, though.

-- 
Fridrik Skulason   Frisk Software International   phone: +354-540-7400
Author of F-PROT   E-mail: [email protected]       fax:   +354-540-7401


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html