Re: Vshield vs Virstop (PC)

Article View: comp.virus

Article #4785

#4785

From: McAfee Associates
Date: Thu, 07 Jan 1993 01:22

23 lines
1163 bytes

Hello Bill Lambdin,

You write:
[regarding VSHIELD's ability to check validation (CRC) data created by SCAN]
 
>2. These CRCs will not detect stealth infectors because stealth viruses 
>   disinfects infected files when an infected file is opened for any 
>   reason.

VSHIELD (or SCAN) will detect the change in a CRC made by a stealth
virus provided the stealth virus is not resident in memory to
interfere with checking.

Regards,

Aryeh Goretsky
Technical Support

- -- 
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
McAfee Associates, Inc.  | Voice (408) 988-3832 | INTERNET: aryeh@mcafee.COM
3350 Scott Blvd, Bldg 14 | FAX   (408) 970-9727 | IP# 192.187.128.1
Santa Clara, California  | BBS   (408) 988-4004 | CompuServe ID: 76702,1714

Technical Details

Message-ID: <0014.9301071651.AA16031@barnabas.cert.org>

Path: arc1-ca.pugleaf.net!sparky!uunet!think.com!yale.edu!jvnc.net!netnews.upenn.edu!netnews.cc.lehigh.edu!news

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!think.com!yale.edu!jvnc.net!netnews.upenn.edu!netnews.cc.lehigh.edu!news
From: aryeh@mcafee.com (McAfee Associates)
Newsgroups: comp.virus
Subject: Re: Vshield vs Virstop (PC)
Message-ID: <0014.9301071651.AA16031@barnabas.cert.org>
Date: 7 Jan 93 01:22:10 GMT
Sender: virus-l@lehigh.edu
Lines: 23
Approved: news@netnews.cc.lehigh.edu