home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!zaphod.mps.ohio-state.edu!cs.utexas.edu!qt.cs.utexas.edu!yale.edu!spool.mu.edu!darwin.sura.net!jvnc.net!netnews.upenn.edu!netnews.cc.lehigh.edu!news
- From: bill.lambdin%acc1bbs@ssr.com (Bill Lambdin)
- Newsgroups: comp.virus
- Subject: Re: Vshield vs Virstop (PC)
- Message-ID: <0004.9301062041.AA14693@barnabas.cert.org>
- Date: 29 Dec 92 00:28:00 GMT
- Sender: virus-l@lehigh.edu
- Lines: 34
- Approved: news@netnews.cc.lehigh.edu
-
- Quoting from Vesselin Bontchev to All About Re: Vshield vs Virstop (P on
- 12-09-92
-
- VB> BTW, I think that there is a way to tell Vshield to use the EMS if yo
- VB> have some. This is a feature that Virstop doesn't have yet. Vshield
-
- Vesselin:
-
- Vshield doesn;t go into EMS. It can be loaded high in upper memory blocks.
- However. this is done with the /LH parameter. Vshiels will not work if
- users use LOADHIGH from DOS 5.0 or LOADHI in QEMM or some other memory
- manager.
-
- VB> has also some other features, like an attempt to do on-line integrity
- VB> checking, but this is not implemented well enough.
-
- There are several problems with the integrity checking by Scan, and
- Vshield.
-
- 1. Some programs will not run after the CRC is added to the file. So it is
- necessary to remove the CRC. Scan filename /RV will remove the CRC.
-
- 2. These CRCs will not detect stealth infectors because stealth viruses
- disinfects infected files when an infected file is opened for any
- reason.
-
- 3. These CRCs will not detect the presence of companion infectors because
- these companion infectors do not attach to files.
-
- Bill
-
- - ---
- * WinQwk 2.0 a#383 * JULY 13TH activates Jul 13th
-
-