mvolo@ecsvax.UUCP (Michael R. Volow) (03/05/88)
On my IBMPC with JRAMIII card (1.5 meg plus SSC module) with JRAM
{drivers (jboot.bin and jdrive.bin), I recently installed flushot3
in my root/autoexec.bat in hopes of protecting against virus
programs. I immediately had all kinds of warnings that something was
trying to write to command.com (DOS 3.1), when my autoexec.bat was
trying to copy a few utilities to my ramdisk (using JRAM's jet.com
fast copy routine); or when I tried to do a >dir c:\command.com
command. This did not happened when I tried >dir a:\command.com to
a write-protected, original DOS disk in drive a:.
My interpretation is that the JRAM software patches the image of
command.com in memory to get some of its unique features and that
I do not have a virus. Is this a correct assumption. I did a
comp on the command.com's in a: and c: and they have the same date
stamp and length, and the end of the files look the same when I
view them with browse.com.
Your suggestions would be appreciated. I have removed flushot3 for
the time being.
Michael Volow, M.D.
Dept of Psychiatry, Durham VA Medical Center, Durham, N.C. 27705
919 286 0411 mvolo@ecsvax.UUCP