On Fri, 17 May 2002, at 2:36pm, [EMAIL PROTECTED] wrote: > How does NT do it? Do they really scan the data stream before it gets > written to disk?
NT has system calls that allow services to hook into the filesystem API stack, and intercept reads and writes, where they can be scanned for viruses. It does have a significant performance hit, but since the virus scanner essentially runs in kernel mode and is fully memory resident, as long as you have the memory, it is not an unacceptable performance hit. (Stability is another matter. I have seen corrupted virus scan software completely kill a system.) -- Ben Scott <[EMAIL PROTECTED]> | The opinions expressed in this message are those of the author and do not | | necessarily represent the views or policy of any other person, entity or | | organization. All information is provided without warranty of any kind. | ***************************************************************** To unsubscribe from this list, send mail to [EMAIL PROTECTED] with the text 'unsubscribe gnhlug' in the message body. *****************************************************************
