Re: Xupiter

["Benjamin A. Okopnik" <ben () callahans org>]

On Thu, May 01, 2003 at 02:20:22PM -0000, Stephen Wilcox wrote:
> Has anyone heard for Xupiter storing itself in the memory section of the 
> pc, so when it's uninstalled and the computer is rebooted it can reinstall 
> itself?

Not possible. RAM is volatile (loses all its contents when power is
removed), plain ROM can't be written to, and the BIOS PROM doesn't have
nearly enough space. If you're seeing reinfection from the same virus,
it usually means that the original infection path still exists - or that
you haven't actually cleaned it out.


Ben Okopnik
-=-=-=-=-=-

---------------------------------------------------------------------------
FastTrain has your solution for a great CISSP Boot Camp. The industry's most 
recognized corporate security certification track, provides a comprehensive 
prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case 
studies and true hands-on utilization 
of pertinent security tools. For a limited time you can enter for a chance 
to win one of the latest technological innovations, the SEGWAY HT. 
Log onto http://www.securityfocus.com/FastTrain-security-basics 
----------------------------------------------------------------------------