Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!usc!sdd.hp.com!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: hartnegg@SUN1.RUF.UNI-FREIBURG.DE (Klaus Hartnegg) Newsgroups: comp.virus Subject: Re: Viruses surviving warm boots. (PC) Message-ID: <0009.9012201846.AA05875@ubu.cert.sei.cmu.edu> Date: 20 Dec 90 12:48:38 GMT Sender: Virus Discussion List Lines: 19 Approved: krvw@sei.cmu.edu franks@cicux.neth.hp.com (Frank Slootweg CRC) writes: > I think reports of viri which survive warm reboots are caused by >misunderstanding the viri and/or the viri scanners. . > Perhaps virus scanners should include an option or a seperate >program which can be used to clear all of memory after a virus has >been found in memory, so this class of false alarms can be eliminated. I am not sure whether these are really false alarms in all cases. Viri CAN survive warm boot because not all verctors are reset in a warm boot! I know for example a CGA emulator for hercules cards that does survive warm boot. It CAN be done! I do however not know whether there are already viri that really do it. - -- - --------------------------------------------------------------- Klaus Hartnegg, Kleist-Str. 7, D-7835 Teningen, Tel 07641/48652 BITNET : HAKL@DFRRUF1 Internet : HAKL@ibm.ruf.uni-freiburg.de