Re: Need info on MONKEY virus (PC)

Thread View: comp.virus

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by A. Padgett Peterson Tue, 17 Nov 1992 06:42

#4246

Author: A. Padgett Peterson
Date: Tue, 17 Nov 1992 06:42

22 lines
1415 bytes

>From:    martin@cs.ualberta.ca (Tim Martin; FSO; Soil Sciences)

>Third, the Monkey virus specifically (and successfully) 
>bypasses Padgett's Disk Secure program.  This virus represents
>a rare case: a very specific attack against a very specific
>disk security system.  Fortunately most scanners will find 
>the virus in memory.  Again this stresses the importance of
>having a multi-layer antivirus strategy.

Like I said, no software is proof against a directed attack, *however*
the DOS validator (CHKSEC) in the latest DS will detect the fact that
the proper code is not resident in memory and the Monkey cannot
prevent *that*.

Incidently, it was said that FixMBR cannot remove the Monkey - this is
true however if FixMBR was executed *before* infection and the .DAT
file saved, use of it as directed after booting from floppy will
restore the MBR & table as will the DiskSecure recovery disk.

				Cooly (in Chicago in November ?)

						Padgett

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads