home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Gold Medal Software 4
/
Gold Medal Software - Volume 4 (Gold Medal) (1994).iso
/
virus
/
hsv358us.arj
/
README.V34
< prev
next >
Wrap
Text File
|
1993-07-09
|
2KB
|
38 lines
What is new?
HS COM 4220 ; The main program, v3.4 with Anti Hardware Stealth
HS SYS 3642 ; A device driver, so you can run from CONFIG.SYS, v3.4
Major update:
I have now added something called AHS, or Anti Hardware Stealth. Recently
a new virus from russia used a new stealth technique to trick programs
trying to read the infected MBR. The virus used another interrupt than 13h
to accomplish this. My AHS code will take all boot infectors trying to use
hardware stealth.
The BIOS checking is now better, to ensure that the machine will not crash if
you change BIOS after installing HS on your machine. Also solves a similar
problem if you move a harddisk from one PC to another PC, and the new PC
have another BIOS.
Changed data area slightly, to make it more effective. It also contain more
data now. So you have to make a new datafile to use the new version of HS.
HS.SYS is a new device driver version of HS, so you can run from CONFIG.SYS
as device=HS.SYS filename, where filename is the name specified when you
installed with HS /M filename.
HS should now be able to catch all existing boot virus, per July 1993!!!
I am now thinking of adding some kind of CMOS save/recovery/change detection,
for solving clean-up problems with the EXE_BUG virus that alters CMOS upon
infection. But I have not yet succeeded in obtaining the Exe_Bug.A virus, so
I miss some details about its CMOS alterations.
Henrik Stroem
Stroem System Soft