🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.virus
Article #3148

Re: Is this a virus? (PC)

#3148
From: Vesselin Bontchev
Date: Thu, 12 Nov 1992 09:33
26 lines
1788 bytes
rknazik@x102a.harris-atd.com (knazik bob) writes:

> My 386 PC reports that I have 654360 conventional memory when I do a
> "chkdsk" or a "mem" (DOS 5.0).  This is 1024 short of the expected
> amount.  I seem to remember that there was a virus that caused this
> result, but VSCAN finds nothing wrong.  Does anyone know if this is a
> virus or just some weird hardware failure ?  Any help is appreciated.

This is in the FAQ. While there -are- viruses that reduce the memory
size by 1 Kb, they are not widespread, so it is rather unlikely that
you have a virus. Most resident viruses reduce the memory size by a
larger amount of bytes - usually at least 2 Kb.

Check your CMOS setup - maybe you have told it to allocate 1 Kb from
the top of memory for its data area. Are you using a SCSI controller?
Any kind of additional operating system, like Unix? Is MS-DOS loaded
high? With what kind of memory manager? All these reasons can cause
memory reduction...

Regards,
Vesselin
- -- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.0 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany
Technical Details
Message-ID: <0015.9211121950.AA09997@barnabas.cert.org>
Path: arc1-ca.pugleaf.net!sparky!uunet!ornl!utkcs2!darwin.sura.net!zaphod.mps.ohio-state.edu!magnus.acs.ohio-state.edu!usenet.ins.cwru.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!news

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!ornl!utkcs2!darwin.sura.net!zaphod.mps.ohio-state.edu!magnus.acs.ohio-state.edu!usenet.ins.cwru.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!news
From: bontchev@fbihh.informatik.uni-hamburg.de (Vesselin Bontchev)
Newsgroups: comp.virus
Subject: Re: Is this a virus? (PC)
Message-ID: <0015.9211121950.AA09997@barnabas.cert.org>
Date: 12 Nov 92 09:33:21 GMT
Sender: virus-l@lehigh.edu
Lines: 26
Approved: news@netnews.cc.lehigh.edu