Article View: comp.virus
Article #4709New way of opeing files??? (PC)
From: Amir Netiv
Date: Sun, 17 Jan 1993 13:34
Date: Sun, 17 Jan 1993 13:34
19 lines
969 bytes
969 bytes
Hi Chris. you wrote: > I've heard that the NuKE group is starting to use function > AX,6C00h/INT 21h to open files... Why go so far? Did you here of writing to the disk via a port - instead of using standard interrupt method to write? I don't know of any A-V product that can monitor writing to ports, (unless it was a debugger that monitors every command that an application performs, and believe me: you don't want to use that!). Regards * Amir Netiv, V-CARE Anti-Virus, Head team.* - --- FastEcho 1.21 * Origin: <<< NSE Software >>> Israel (9:9721/120)
Technical Details
Message-ID:
<0010.9301281842.AA17847@barnabas.cert.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!ukma!cs.widener.edu!dsinc!netnews.upenn.edu!netnews.cc.lehigh.edu!newsShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!ukma!cs.widener.edu!dsinc!netnews.upenn.edu!netnews.cc.lehigh.edu!news From: Amir_Netiv@f120.n9721.z9.virnet.bad.se (Amir Netiv) Newsgroups: comp.virus Subject: New way of opeing files??? (PC) Message-ID: <0010.9301281842.AA17847@barnabas.cert.org> Date: 17 Jan 93 13:34:00 GMT Sender: virus-l@lehigh.edu Lines: 19 Approved: news@netnews.cc.lehigh.edu