Hi Michael!
21 Dec 96, letter Michael Mueller to Alexander Kovneristy:
MM> When I remember right there was atleast one file virus infecting on
MM> Int 13h calls. IMHO it was an EXE-Header-Virus. So you may spread the
MM> virus all over with ADInf.
No. It is not true. There is a lot of viruses infecting files or boot
records on the Int 13h level. But ADinf does not go throw Int 13h chain. It
does not process instruction "Int 13h"! While disk scanning ADinf uses
instructions
pushf
Call DWORD PTR [Int 13h hardware BIOS entry address]
So no active virus will obtain control and no virus can infect any files
or boot sectors. And of course, no stealth virus can hide itself.
With best regards,
Dmitry Mostovoy
--- GoldED 2.50+
---------------
* Origin: DialogueScience, Moscow; E-mail: dmost@dials.ru (2:5020/69.4)
|