Path: utzoo!attcan!uunet!mcsun!isgate!krafla!frisk
From: frisk@rhi.hi.is (Fridrik Skulason)
Newsgroups: comp.sys.ibm.pc
Subject: Re: Write protect for hard drive
Keywords: hard drive ibm
Message-ID: <1740@krafla.rhi.hi.is>
Date: 30 May 90 10:46:47 GMT
References: <1323@hq.af.mil> <1733@krafla.rhi.hi.is> <1990May29.192755.7817@gpu.utcs.utoronto.ca>
Reply-To: frisk@rhi.hi.is (Fridrik Skulason)
Organization: University of Iceland (RHI)
Lines: 17

In article <1990May29.192755.7817@gpu.utcs.utoronto.ca> georgen@gpu.utcs.utoronto.ca (G. Ng) writes:
>What is it about HDSentry that makes it not 100% reliable?  I've been using
>it on my PC and it works fine for me.  Do you mean that certain viruses or
>trojans are able to circumvent HDSentry's protection scheme?  Hmm...

That is just what I mean.  In my virus collection (which now contains over
100 different PC viruses) there are three or four that are able to write to
the hard disk, even if a "write-protecting" interrupt monitoring program like
HDSENTRY is installed, as they simply jump directly into ROM.  I have a program
that is also able to stop those viruses, but it too could easily be
circumvented if the virus writer knew just what method was used.


-- 
Fridrik Skulason      University of Iceland  |       
Technical Editor of the Virus Bulletin (UK)  |  Reserved for future expansion
E-Mail: frisk@rhi.hi.is    Fax: 354-1-28801  |