Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: frisk@rhi.hi.is (Fridrik Skulason)
Newsgroups: comp.virus
Subject: Re: F-Driver.SYS and QEMM (PC)
Message-ID: <0012.9106031950.AA02037@ubu.cert.sei.cmu.edu>
Date: 1 Jun 91 23:26:47 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 13
Approved: krvw@sei.cmu.edu

Michael_Kessler.Hum@mailgate.sfsu.edu writes:
>However, the station had been used on and off several times since its
>infection, with no detection by f-driver.sys (ver 1.15A), and I
>suspect that the reason for this is that it had been loaded into high
>RAM by QEMM when running OPTIMIZE.  I do not recall reading anything
>about this in the F-PROT documentation.

No - simply because I was not aware of it until recently - it seems
that if F-DRIVER is loaded into high memory, it may miss some boot
sector viruses on bootup, although it will detect all program viruses.
This has been fixed in 1.16 - due in a few days.....

- -frisk