🚀 go-pugleaf

In article <749195134snx@holly.demon.co.uk> mcr@holly.demon.co.uk writes:

> Does anyone have any experience of using MARK/RELEASE to remove F-PROT's 
> VIRSTOP program from memory? (I need to free as much memory as possible 
> when accessing the net!) Last time I experimented with MARK/RELEASE (with 
> Smartdrv) I completely trashed my hard drive's FAT, and I'd rather seek 
> advice before trying again. Alternatively, is there a hidden (or 
> forthcoming?) command line switch to uninstall?

It is generally accepted by the Antivirus Authors that there should
be no way to unload the Guard TSR's since such a call would give a
virus a means of bypassing the security (unload, infect, reload) and
infect a machine whilst the user believed himself secure.

I believe some virus stopper TSR's go to some trouble to prevent
themselves being unloaded.


-- 
=============================================================================
Malcolm S. Muir                              EMAIL: malcolm@muir.demon.co.uk
Sunderland                                   CIX: mmuir BIX: mmuir
England                                      CSERVE: 100012,31
======================= PGP 2.0 Public Key Available ========================

In article <749195134snx@holly.demon.co.uk> mcr@holly.demon.co.uk (Mark Rogers) writes:

>Does anyone have any experience of using MARK/RELEASE to remove F-PROT's 
>VIRSTOP program from memory? (I need to free as much memory as possible 
>when accessing the net!) Last time I experimented with MARK/RELEASE (with 
>Smartdrv) I completely trashed my hard drive's FAT, and I'd rather seek 
>advice before trying again. Alternatively, is there a hidden (or 
>forthcoming?) command line switch to uninstall?


I don't know of any way to unload VIRSTOP but if you load it using the /DISK 
switch it reduces the amount of memory it takes to about 2K...


kate wilson
sph0301@utsph.sph.uth.tmc.edu
UT Health Science Center, Houston

sph0301@utsph.sph.uth.tmc.edu (Kate Wilson) writes:

>In article <749195134snx@holly.demon.co.uk> mcr@holly.demon.co.uk (Mark Rogers) writes:

>>Does anyone have any experience of using MARK/RELEASE to remove F-PROT's 
>>VIRSTOP program from memory? (I need to free as much memory as possible 
>>when accessing the net!) Last time I experimented with MARK/RELEASE (with 
>>Smartdrv) I completely trashed my hard drive's FAT, and I'd rather seek 
>>advice before trying again. Alternatively, is there a hidden (or 
>>forthcoming?) command line switch to uninstall?

You could check out the latest version of Mark & Release.  They have
a MARKNET & RELNET (or something like that) which saves more environment
info, and is less likely to give you problems.  I find it very unusual
that MARK & RELEASE would screw up your fat, unless you released
SMARTDRV before flushing the cache.  Alternatively, switch to another
disk cacheing program that allows you to remove it from memory with
a command line switch like /U.  I think most others allow this.

-- 
 Peter Goudswaard                  _________                     _________
 goudswaa@sfu.ca (preferred)      |         |      __/^\__      |         |
 goudswaa@sd28.unbc.edu           |         |      \     /      |         |
 pgoudswa@cln.etc.bc.ca           |         |   _/\_\   /_/\_   |         |
 pgoudswa@cue.bc.ca               |         |   >           <   |         |
 "There's no gift like the present"         |    >_________<    |         |
    - Goudswaard's observation    |_________|         |         |_________|

In article <goudswaa.749258053@sfu.ca> goudswaa@fraser.sfu.ca (Peter Goudswaard) writes:
> You could check out the latest version of Mark & Release.  They have
> a MARKNET & RELNET (or something like that) which saves more environment
> info, and is less likely to give you problems.  I find it very unusual
> that MARK & RELEASE would screw up your fat, unless you released
> SMARTDRV before flushing the cache.  Alternatively, switch to another
> disk cacheing program that allows you to remove it from memory with
> a command line switch like /U.  I think most others allow this.

I used a batch file along the lines of:
    smartdrv /c
    release smartdrv

(I forget the exact syntax). I also tried MARKNET and RELNET. The problem 
was that there was no noticable damage at first / just machine crashes. 
It wasn't until the mark/release progs disappeared that I realised the 
extent of the damage. (The affected drive was a Stacked one for what it's 
worth, although I've had no problems with Stacker either before or since, 
and I'm more inclined to blame the fault on smartdrv given the odd things 
I was trying to do with it. I doubt the mark/release utils were to 
blame, either.)

I now use Norton's NCACHE2 (from Norton Utilities v7) which does 
uninstall correctly.

Mark.
-- 
mcr@holly.demon.co.uk          "I'm an egg in the teeth of a shark" (Squeeze)

In article <749172531snz@muir.demon.co.uk> malcolm@muir.demon.co.uk writes:
> It is generally accepted by the Antivirus Authors that there should
> be no way to unload the Guard TSR's since such a call would give a
> virus a means of bypassing the security (unload, infect, reload) and
> infect a machine whilst the user believed himself secure.
> 
> I believe some virus stopper TSR's go to some trouble to prevent
> themselves being unloaded.

I know that McAfee's VSHIELD has an uninstall option, together with the 
facility to disable it. I have now managed to hide the checker up in high 
memory so it's out of the way, so providing that my other assumption 
(that download speeds won't be affected) is correct I guess I have 
nothing to worry about.

Mark.
-- 
mcr@holly.demon.co.uk          "I'm an egg in the teeth of a shark" (Squeeze)