home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Over 1,000 Windows 95 Programs
/
Over 1000 Windows 95 Programs (Microforum) (Disc 1).iso
/
1316
/
whatsnew.20a
< prev
next >
Wrap
Text File
|
1997-06-17
|
4KB
|
86 lines
What's new in this release?
---------------------------
This is a major overhaul of Perforin. Numerous features are added,
scanning and disinfection code optimized and improved, documentation
beefed up, and so on. Signature database from previous releases is not
compatible with the 2.0 release. Perforin checks the version number and
warns the user if it is necessary to get a newer signature database.
Features available only in the registered copy are marked with an
asterisk (*).
2.0a
----
-Rewrote major sections of scanning and cleaning code. Speed is improved
by 60% in some cases. The new implementation also makes it possible to
load a very large number of virus entries in the database without slowing
down Perforin's operation noticably.
-Added reliable polymorphic macro virus scan.
-In some rare cases, the macro table was not parsed correctly. Fixed.
-Added detection and removal for about 400 new variants. That brings the
variant count to over 1000 in mid-June 1997.
*-Added capability to scan inside password protected documents. If a document
is infected, or disinfected, the password will be displayed next to the
virus name both on the screen and in the log file. Perforin does not
decrypt user documents. It uses StripSearch(tm) technology to scan and
disinfect in a transparent manner. (registered copy only)
-Added user-adjustable heuristics. Higher level settings are prone to
false alarms. We are working to improve Perforin in this area.
-Improved variant identification and eliminated false hits due to snatched
macros found in some antivirus macro-based solutions.
-Changed the default file search algorithm to skip files known usually
not to be documents, such as EXE and DLL files. Perforin goes thru drives
much faster now. Note that this differs than common implementations that
will miss viruses in files that do not have a .DOT or .DOC extension.
-Added an option to force Perforin to scan all files. This may be desirable
when you actually discover a virus infection during the regular scan mode.
-Enhanced removal algorithm to automatically switch to "remove all" mode
if the found virus requires such a method. You don't need to change
the cleaning mode to "remove all macros" for viruses like Cap. Perforin
knows how to handle each viruses properly.
-Simplified and enhanced ExamineDoc to report viruses that contain a certain
macro. Our research indicates that only 25% of the macros found in known
viruses are different. The rest are borrowed from each other or innocent
macro packages. You can see a list of similar viruses easily.
*-ExamineDoc can now display the source code of the macro, even if the
document is password protected using the StripSearch(tm) technology.
Note: StripSearch is disabled in the trial copy. Source code will be
displayed if and only if the macros are not encrypted. We do not release
the fully enabled ExamineDoc at this time due to potential misuse.
-Improved the multiple virus report capability. Even polymorphic + other
virus combinations are reported properly.
-Added family variant detection to discover minor variants of known viruses.
This new scanning method does not use signatures, and it was very reliable
in our tests.
-Added an option to show all documents that have macros in them even if
no known virus is found.
-Added reload signatures command to update the virus signatures without
exiting Perforin. This dynamic update feature will be extended in the
future to check a location on a server periodically and apply the necessary
updates transparently.
-Added a command to launch the default browser so that users can visit
our website easily.
-Added support for Korean Word 6/7 documents.