home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Amiga GigaPD 3
/
Amiga_GigaPD_v3_3of3.iso
/
fred_fish
/
fish_601-700_lha
/
fish_641.lha
/
LVD
/
LVD.doc
< prev
next >
Wrap
Text File
|
1993-06-02
|
11KB
|
366 lines
LVD v1.72
Copyright ⌐ 1991, 1992 Peter Stuer
All rights reserved
Release date April 2, 1992
FREEWARE
User Manual
KickStart 2.0 compatible
DISCLAIMER
LVD has been thoroughly tested and is the result of a constant
process of changes and updates. The program has proven to be
stable in everyday use. The author is not responsible for any
loss of data, damages to software or hardware that may result
directly or indirectly from the use of this program.
PREFACE
This program is freeware, this means that you can copy it
freely as long as you don't ask any more money for it than a
nominal fee for copying. If you want to distribute this program
you should keep this document with it. This program cannot be
used for commercial purposes without written permission from the
author.
If you have suggestions or remarks about this program, of if you
find any bugs, please let me know.
If you find any new viruses or linkviruses that LVD does not
recognize yet, please send them on a disk to me (my address
follows this paragraph). I will return the disk to you with an
updated copy of LVD.
Write to the following address:
Peter Stuer
Kauwlei 21
B-2550 Kontich
Belgium - Europe
A MESSAGE FROM OUR SPONSORS...
Our motto: "Safe Hex..."
LVD can be kept up to date thanks to the energy and work put
into a global anti-virus information bank founded by Erik
L°vendahl S°rensen from Denmark.
This group has over 120 international members now, among them
some of the programmers of wellknown anti-virus programs like
Steve Tibbet and Jonathan Potter. Among the activities of this
group are:
- Spreading information to anti-virus programmers as fast as
possible.
- Trying to get names and proof against virus programmers and
giving the information to the justice departement of his/her
country to press charges.
- Writing articles in popular magazines to inform new Amiga
users about viruses and how to protect themselves.
Also the organization is prepared to pay upto $ 1000 US for the
name and the address of a virus programmer. All information will
be delt with confidentially and will be handed over to the proper
authorities of the virus programmer's country.
All this is volunteer work. If you want some more information
about this organization or you want to sponsor our work, contact
Erik at the following address:
Erik L°vendahl S°rensen
Snaphanevej 10
4720 Prµst°
Denmark - Europe
Phone: 00 45 53 79 25 12
Fidonet 2:230/114.26
HELP
Around the time this release hits the street, FireBird BBS will
be up and running. As co-sysop of the Amiga area of this BBS I
can tell you that it is our aim to become number one (1) among
the Amiga BBS's in Belgium.
If you need help with my utilities or with OS programming for
the Amiga in C or assembler you can leave me a message at this
mailbox. Also, this BBS will always be the place to get the most
recent release of LVD.
If you have question about KickStart 2.0, the Amiga 3000 or
programming in general, leave a message for Nico Franτois (of
PowerPacker fame) on the same BBS.
FireBird BBS
Tel. +32 (0)3 236.39.84
2400 BPS 8 N 1
24-24 h.
128 Mb on-line storage + CD-ROM
CD-ROM with Fred Fish 1 thru 530 on-line for Amiga
FIDO 2:296/120
Use 'j 1' to join conference 1 to get into the Amiga area.
Introduction
------------
LVD is a first defence protection scheme against linkviruses,
fileviruses and trojan horses. Look at the bottom of this
document to find out which linkviruses LVD recognizes. LVD
checks every executable file your Amiga tries to run BEFORE the
actual program starts running. This way, if a linkvirus has
attached itself to the program, it will never get a chance to be
activated.
If LVD finds that a linkvirus is attached to the program, an
alert will pop up:
LVD 1.72
xxxxxxx virus dectected in
<filename>
The infected program will be changed in such a way that it will
immediately stop and release all memory.
Should you encounter a file that LVD identifies as infected by
a virus, the best action to take is to DELETE the file and then
turn off the power of your Amiga to remove any residual code from
memory. A cold reboot using Left Amiga + Right Amiga + Ctrl is
NOT sufficient.
You should then use a program that scans your disks for
linkviruses (f.i. BootX or LVX, a viruskiller/detector of the
same author) to check at least all the copies you made of the
infected program.
Usage
-----
LVD is meant to be put in your startup-sequence, preferably as
close to the begining as possible, but NOT as the first entry
since the first entry of a startup-sequence is most likely to be
infected by a linkvirus.
Insert into your startup-sequence:
LVD
When run, LVD displays an info message:
LVD v1.72 by Peter Stuer - April 2, 1992 FREEWARE
Linkvirus Detector installed.
...
If you don't want this message to be displayed, use redirection
to get rid of the text:
LVD >NIL:
It is possible that some programs report that the LoadSeg
vector has changed and think that LVD is a virus. If you use a
vectorchecker in your startup-sequence, use EVW of the same
author (Early Virus Warning). It recognizes the linkviruses and
also LVD and PatchLoadSeg v1.20 by Pieter van Leuven.
Description
-----------
LVD is a small Assembler program that patches the LoadSeg
vector of the dos.library. This may sound very technical (and it
IS) to non-programmer Amiga users. When the Amiga loads a
program file this is most of the times done via the LoadSeg
function of the dos.library. LVD first uses the original LoadSeg
function to load the program. It then scans through all the
program hunks looking for certain ID's that identify the
linkviruses. If a linkvirus is found the first few bytes of the
code is changed to:
moveq.l #-1,D0
rts
which sets the return code to -1 and causes the program to exit
immediately to its caller.
LVD is KickStart 2.x aware: in KickStart 2.x the dos.library
(finally) changed to be a full featured and true Amiga library.
LVD has also been tested on an A2000 expanded with a 68040
accelerator board. As of version 1.50 the caches of the 68030 and
the 68040 are cleared after the code has been modified.
Recognized programs
-------------------
PPLoadSeg by Nico Franτois
PatchLoadSeg x.xx by Pieter van Leuven
LVD x.xx by Peter Stuer
Recognized linkviruses
----------------------
Amiga Knights file virus
Bret Hawnes
BSG-9 (TTV1, The Terrorists) 1 & 2
BlueBox Install
Butonic 1 & 2
Byte Parasite I, II & III
CCCP
Centurions (The Smily Cancer) 1 & 2
Disaster-Master V2
Disk-Validator fileviruses (Saddam & L.E. Revenge)
Disktroyer 1.0
EuroMail Filevirus
Freedom
Gotcha Lamer
Gotcha Lamer Install
Icon.library filevirus
IRQ-Team v41.0
Lamer Exterminator Install
Lamer VirusX file
Liberator
Metamorphosis 1.0
Red October 1.7
Revenge of the Lamer Exterminator,
TFC Revenge x.xx bootvirus Installer
The Traveling Jack 1, 2 & 3
TimeBomb 7840
Turk bootvirus installer
VirusBlaster 2.3
VirusTest 936
Xeno
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::::::::::::::::::::::: PROGRAM HISTORY :::::::::::::::::::::::::
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::: Version 1.72 ::: (April 2, 1992) ::::::::::::::::::::::::::::
- New recognised filevirus:
Byte Parasite I
Disktroyer 1.0
Installer of TFC Revenge x.xx bootvirus
- New recognised linkvirus:
Metamorphosis 1.0
Red October 1.7
- Switched to Macro68 assembler.
::: Version 1.71 ::: (February 3, 1992) :::::::::::::::::::::::::
- New recognised linkvirus:
Trabi
::: Version 1.70 ::: (January 4, 1992) ::::::::::::::::::::::::::
- New recognised filevirus:
Byte Parasite II & III
- Finally fixed the bug that cause overlayed programs to crash
when LVD was installed. These programs (wrongly) expected that
register D1 was the same as register D0 when returning from
LoadSeg().
::: Version 1.63 ::: December 24, 1991 ::::::::::::::::::::::::::
- New recognised filevirus:
Liberator
- Added an AmigaDOS 2.0 version string.
::: Version 1.62 ::: November 12, 1991 ::::::::::::::::::::::::::
- New recognised fileviruses:
Freedom
Lamer VirusX
VirusBlaster 2.3
::: Version 1.61 ::: October 2, 1991 ::::::::::::::::::::::::::::
- New recognised linkvirus:
The Traveling Jack 3
::: Version 1.60 ::: October 1, 1991 ::::::::::::::::::::::::::::
- Complete rewrite of the checking algorithm.
- LVD now shows the name of the virus.
::: Version 1.51 ::: September 30, 1991 :::::::::::::::::::::::::
- Added a check for the Amiga Knights file virus.
::: Version 1.50 ::: January 30, 1991 :::::::::::::::::::::::::::
- Added a check for Centurions 2 linkvirus.
- LVD now shows the path and filename of the infected file.
- The instruction and data caches of the 68040 are now properly
cleared after modifying the code. Thanks to Nico Franτois and
Olaf Barthel for pointing this out.
::: Version 1.43 ::: July 30, 1991 ::::::::::::::::::::::::::::::
- Added checks for:
BlueBox Install
TimeBomb 7840
VirusTest 936
Gotcha Lamer
Gotcha Lamer Install
Lamer Exterminator Install
::: Version 1.42 ::: June 20, 1991 ::::::::::::::::::::::::::::::
- Bug Fix: LVD now checks if LoadSeg is already patched. Are
you happy now, Nico ?
- Added checks for:
EuroMail file virus
Turk bootvirus install
::: Version 1.41 ::: June 10, 1991 ::::::::::::::::::::::::::::::
- Added a check for the icon.library filevirus.
::: Version 1.40 ::: May 1, 1991 ::::::::::::::::::::::::::::::::
- Added a check for the Butonic 1.31 (JEFF) linkvirus.
- Added a check for the Bret Hawnes linkvirus.
- The Traveling Jack 2 and a mutant version of the Saddam trojan
horse are now recognized too.
::: Version 1.30 ::: April 9, 1991 ::::::::::::::::::::::::::::::
- Added a check for the Saddam trojan horse.
- The new dos functions in Kickstart 2.0 NewLoadSeg and
InternalLoadSeg are now patched too.
::: Version 1.20 ::: February 11, 1991 ::::::::::::::::::::::::::
- Removed the bug that caused overlayed programs to crash.
- LVD now checks if it already has been installed. If it has, a
message is displayed and LVD exits without installing a second
copy.
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
⌐ 1992 LVD v1.72 written by Peter Stuer
thanks to Nico Franτois for beta-testing and
all the useful suggestions.
_
_ //
Thanks to \X/ Amiga for being the best computer ever !