Article View: comp.virus
Article #4443Re: F-Driver.SYS and QEMM (PC)
From: Fridrik Skulason
Date: Sat, 01 Jun 1991 23:26
Date: Sat, 01 Jun 1991 23:26
13 lines
1095 bytes
1095 bytes
Michael_Kessler.Hum@mailgate.sfsu.edu writes: >However, the station had been used on and off several times since its >infection, with no detection by f-driver.sys (ver 1.15A), and I >suspect that the reason for this is that it had been loaded into high >RAM by QEMM when running OPTIMIZE. I do not recall reading anything >about this in the F-PROT documentation. No - simply because I was not aware of it until recently - it seems that if F-DRIVER is loaded into high memory, it may miss some boot sector viruses on bootup, although it will detect all program viruses. This has been fixed in 1.16 - due in a few days..... - -frisk
Technical Details
Message-ID:
<0012.9106031950.AA02037@ubu.cert.sei.cmu.edu>Path:
arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvwShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: frisk@rhi.hi.is (Fridrik Skulason) Newsgroups: comp.virus Subject: Re: F-Driver.SYS and QEMM (PC) Message-ID: <0012.9106031950.AA02037@ubu.cert.sei.cmu.edu> Date: 1 Jun 91 23:26:47 GMT Sender: Virus Discussion List <VIRUS-L@LEHIIBM1> Lines: 13 Approved: krvw@sei.cmu.edu