🚀 go-pugleaf

>From:    martin@cs.ualberta.ca (Tim Martin; FSO; Soil Sciences)

>Third, the Monkey virus specifically (and successfully) 
>bypasses Padgett's Disk Secure program.  This virus represents
>a rare case: a very specific attack against a very specific
>disk security system.  Fortunately most scanners will find 
>the virus in memory.  Again this stresses the importance of
>having a multi-layer antivirus strategy.

Like I said, no software is proof against a directed attack, *however*
the DOS validator (CHKSEC) in the latest DS will detect the fact that
the proper code is not resident in memory and the Monkey cannot
prevent *that*.

Incidently, it was said that FixMBR cannot remove the Monkey - this is
true however if FixMBR was executed *before* infection and the .DAT
file saved, use of it as directed after booting from floppy will
restore the MBR & table as will the DiskSecure recovery disk.

				Cooly (in Chicago in November ?)

						Padgett