Simtel MSDOS 1992 June/SIMTEL_0692.cdr/msdos/trojanpr/vcheck11.arc/VCHECK11.MSG

Internet Message Format | 1989-02-01 | 1.7 KB

From: unido!cosmo![e-mail] (Axel Dunkel)
Newsgroups: comp.binaries.ibm.pc
Subject: v01i076: vcheck, pgm to detect unusual file changes v1.1
Date: 31 Jan 89 09:00:30 GMT
Summary: vcheck.arc, pgm to detect unusual file changes v1.1
Approved: [e-mail]

Posting-number: Volume 01 Issue 076
Originally-from: unido!cosmo![e-mail] (Axel Dunkel)
Submitted-by: unido!cosmo![e-mail] (Axel Dunkel)
Archive-name: vcheck11/vcheck11.uue

VCHECK V1.1E by Systemberatung A. Dunkel

As the danger of computer viruses rises from day to day, VCHECK.EXE was
developed as a virus detection program for IBM (compatible) computers.

VCHECK.EXE creates a database of all executable files (*.EXE and *.COM)
and calculates check-sums of these files.  Presumed that a virus has to
change the code of a program in order to infect it, it is possible to
detect the infection by either a change of the programs' size or by a
change of its checksum.  This work of watching and comparing file
sizes/checksums REGULARLY is done by VCHECK.

The documentation of VCHECK is in VCHECK.DOC.  VCHECK.FX contains the
same manual but with EPSON-FX printer control characters.

[
One useful feature of this program is a switch that tells it to check
CRCs only if a CRC check has not been done today.  This lets you put it
into your autoexec.bat file, and have it check CRCs only in the first
reboot each day and to skip the check during further reboots.  So far
as I can tell from the documentation and the way the program runs, even
if you provide this switch, file sizes are always checked.  This is
probably because checking sizes can be done very quickly.

-- R.D.
]