home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
United Public Domain Gold 2
/
United Public Domain Gold 2.iso
/
utilities
/
pu214.dms
/
pu214.adf
/
VirusMemoryKill
/
VMK.doc
< prev
next >
Wrap
Text File
|
1990-09-07
|
4KB
|
122 lines
Virus Memory Kill V1.10 © Chris Hames. (2388 Bytes)
(REMEMBER! no virus can copy itself to a write-protected disk.)
This utility is different to the previous version in that it no
longer directly detects any virus. Instead it is now the most powerful
tool for detecting new viruses. It checks a heap of things that viruses
use and tells you when they have changed.
Firstly it checks CoolCapture, ColdCapture, WarmCapture, KickTagPtr
and the KeyboardReset to find anything that is trying to survive reset. If
any of these are abnormal it will alert you including a display of the area
of memory that they are pointing to. You can look for words describing was
the thing is and then decide whether to do nothing or do a cold reset(note
this is much more that just a normal reset) which should clear memory of the
virus.
Secondly it checks the jump tables of all resident libraries, devices
and resources and warns you if any are not pointing to ROM. It will give
you a message describing what isn't pointing to rom and where it is actually
pointing. Most systems will get at least a few of these warnings. Setpatch
causes a few and ther legit programs do as well.
FOR PEOPLE WHO DON'T UNDERSTAND A WORD I AM SAYING:-
This program is very technical I agree but a general user can just
have it in their startup-sequence and notice the messages it gives. If
they change and you haven't changed your system get the latest best Virus
Killer(One that checks your disks and files) and run it to check out your
system.
ALERTS THAT ARE CAUSED BY LEGIT PROGRAMS
Please note some legit programs will cause alerts.
If a Alert/Warning is being caused by a standard workbench program or
kickstart version provide me with details and I will hopefully add it
to the list of legit patches.
Stopping Alerts/Warnings that are caused by legit programs:-
You can stop a alert/warning by giving the full cause of the alert
which is best idea
eg -$01E(graphics.library)=$66666666
eg KickTagPtr=$77777777
You can stop a alert/warning by giving the full cause without the
of the alert which is second best idea
eg -$01E(graphics.library)
You can stop a alert/warning by giving just the description of the
of the alert which is the worst idea
eg KickTagPtr
eg (keyboard.device)
Usage: VMK -cas alerts
-c will cold reset(this should kill any virus from memory)
-a will make library/devices/resources warnings into alerts
with memory display.
-s use strict mode where common changes (like setpatch stuff)
is not ignored.
Examples of use:-
VMK -c ; Resets your machine safely!!
; (Should kill ANY virus from memory)
VMK -s -a ; Very strict. Alerts for everything. I have this as
; the first command on my kickstart 2.0 startup-sequence
VMK -a ; Not as strict. Alerts for everything. I have this as
; the first command on my kickstart 1.3 startup-sequence
VMK KickTagPtr ; Stops alerts about the KickTagPtr
VMK KickTagPtr=$00000700 ; Stops the specific alert at this location
VMK (dos.library) ; Stop all warnings/alerts about the dos library
VMK (dos.library) -$01E(graphics.library) ; no dos &
; no -$01E graphics alerts
If you find a new virus send it to:-
Erik Lovendahl
Snaphanevej 10
4720 Prst
Denmark
Contact the above address for more information on a $1000 REWARD for
information about virus programmers.
History:
10/ 6/91 V1.0 First release
13/10/91 V1.1 VMK now knows about most versions of RAD: and most proper
routine patches. ie you should now be able to put VMK
as the first thing in your startup-sequence with
kickstart 1.3 without getting any warnings.
This program is provided "as is" without any warrenty or guarantee
it will do anything. All use is at your own risk.
Bye,
Chris Hames (Available for any Amiga work)
Internet: bytey@phoenix.pub.uu.oz.au
ins760z@monu4.cc.monash.edu.au (1991 only)
FidoNet: 3:633/353