Subj : Family executables again
To : David Noon
From : Mike Luther
Date : Mon Oct 15 2001 01:21 am
OK Dave ..
DN> Under OS/2, Win32s programs need to be run in a WIN-OS/2 session. This
DN> means that a Win16 shell [typically PROGMAN.EXE or
DN> WINFILE.EXE] must already be running, or a WPS
DN> "program reference object" must be created to
DN> initiate WIN-OS/2. Neither of these is performed by
DN> Nimda, because it isn't coded for OS/2. [Yes, I know
DN> 4OS2 can start Win16 programs automatically, but
DN> Win32s programs are linked as PE, not NE, load
DN> modules.]
I've now made thta mental connection. I use almost no WIN programs at all,thus
don't thing about all this until prompted... (!)
DN> The only way you'll get a Nimda infection on an OS/2
DN> machine is if you have an infected Win32 machine
DN> owning filesystem shares with write permissions to
DN> your OS/2 box.
Oh that's true enough. But family executables could be written between WIN and
OS/2 if one worked hard enough at it. Coding Raiders of the Lost Vark would be
a larger job, sure. But coding a small bit of code as family wouldn't be quite
so much of a pigglet, one would think. Look at AEDIT, for example.
--> Sleep well; OS/2's still awake! ;)
Mike @ 1:117/3001
--- Maximus/2 3.01
* Origin: Ziplog Public Port (1:117/3001)