Hi Kurt!
10 Dec 96, letter Kurt Wismer to Alexander Kovneristy:
KW> why would anyone say "yes".... integrity checking, when properly
KW> implimented cannot be deceived by any virus past present or future...
KW> of course proper implimentation requires, among other things, that
KW> integrity data be collected for all files, that it can be stored
KW> off-line, and that the checker be run from a clean bootable floppy like
KW> any other av program...
Not all integrity checkers requier clean boot from a floppy disk. For
example ADinf scans disks by direct call to BIOS entry point and implements
FAT and VFAT functions inside the program. So it can find every stealth virus
without clean boot. More over! ADinf implements special alghorithms which
compare information obtained by direct disk access sector-by-sector throw the
BIOS and information obtained by DOS functions. This comparation implemented
in ADinf can find any new active stealth virus. So stealth mechanism helps to
find infectors! :-)
With best regards,
Dmitry Mostovoy
--- GoldED 2.50+
---------------
* Origin: E-mail: dmost@dials.ru (2:5020/69.4)
|