PC Memory resident viruses detection (PC)

Thread View: comp.virus

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Paul Rolland Thu, 12 Nov 1992 08:45

#3127

Author: Paul Rolland
Date: Thu, 12 Nov 1992 08:45

22 lines
1324 bytes

Hello,

Because I'd like write some code to have my programs doing a quick
memory check when starting before doing anything else (disk access or
so), I'd like to have information on the way to detect already
installed viruses.  I know some of them (at least 100) use hooked
interrupts to check if they are alreasy present. Could some one give
me these vectors and the tests to perform to see if a virus is memory
resident ?  Any help would be greatly appreciated !

PS : I already have the ones described in Ralf Brown's interrupt list.
I don't want the code of the virus but just the interrupt to call to
see if it is present.

Thanks

Paul Rolland, rol@grasp1.univ-lyon1.fr
- ---
A bug can be changed to a feature by documenting it. Developpers know !
- --------------------- DISCLAIMER -------------------
All the opinions I express in this posting are mine, but I'm
ready to share them with anybody interested :-)

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads