🚀 go-pugleaf

Quoting from St29701@vm.cc.latech.edu to All About Re: Vshield vs Virstop 
(P on 01-15-93

S> VSHIELD with the /CF option to check for a file validation information
S> will not catch a file infecting virus like INTRUDER (very generic)
S> untill after it has infected.  I would have hoped it could chatch it
S> while the infection was trying to occure.

I may be wrong, but I thought the parameter was /CV. Its been a while 
since I used VShield.
 
Vshield can detect new and unknown viruses except for two types.
 
1. Stealth
2. Companion infectors.
 
When a stealth virus is running, It will disinfect infected files on the 
fly when they are opened for any reason, then re-infect the files when 
they are closed.
 
You could get Vshield to detect a stealth virus, but it would require two 
things.
 
1. a known clean write protected bootable diskette.
2. a known clean copy of Scan. Scan c: /CV. This compares the CRC of the 
   file against the CRC stored in the file.
 
Companion infectors do not infect files. They create small .COM files with 
the virus.
 
DOS always looks for a .COM file first, then goes back, and looks for the 
.EXE file.
 
The small .COM file with the virus is run first, then it loads the 
accompanying .EXE file.
 
Bill

- ---
 * WinQwk 2.0 a#383 * Intel sent Michelangelo on copies of LANSpool