home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Turnbull China Bikeride
/
Turnbull China Bikeride - Disc 2.iso
/
STUTTGART
/
ANTIVIRUS
/
GUARDIAN
/
!Guardian3
/
Docs
/
Viruses
< prev
Wrap
Text File
|
1993-05-16
|
5KB
|
108 lines
***********************************
* *
* Viruses detected and dealt with *
* (as of 3/2/93) *
* *
***********************************
!Guardian can recognise the following known viruses. If you think you
have found one that is not on this list, then please let me know, so that
I can modify !Guardian appropriately.
!Guardian also copes with a large number of viruses not currently on this
list, but ones which either do not have a simple description and/or are
variants of those listed below or those which I couldn't be bothered to
update this document.
Despite some people listing loads of different viruses, there are not in
fact that many viruses on the Archimedes, so please don't alarm yourself
too much with some peoples scare mongering techniques.
virus name Description/version of !Guardian that deals with it
---------- ---------------------------------------------------
ArchieVirus Versions 2.10 upwards
(also known as The ArchieVirus seems to attack 'absolute' (FF8) file-
FF8 virus) types by adding some code on to the end and then jumping
to the new code.
I haven't actually seen the ArchieVirus, so !Guardian
detects it's presence but doesn't do anything about it.
Having pointed it out, it leaves you to deal with it as
you like.
IF YOU LOCATE THE ARCHIE VIRUS, PLEASE CONTACT ME SO
THAT I CAN AMEND !GUARDIAN APPROPRIATELY.
AW Module virus Versions 2.10 upwards
This nasty little virus inadvertantly infected the
February 1992 'Archimedes World' cover disc. It adds
itself onto the end of modules, and can be detected by
the fact that all your modules suddenly get updated with
todays date.
On 9th September 1992 it will give a message stating that
your Archimedes has been infected with a virus. It also
gives a generation count.
!Guardian detects any modules on disc that have been
infected and also provides the generation number.
!Guardian is also capable of restoring corrupted modules
to their original form.
Datadqm All versions
This is not a virus as such, due to the fact no actual
harm is down to your discs. It merely seems to be a
desktop 'silly' that is capable of replicating amongst
any application NOT already having a !Boot file.
Extend Versions 1.04 upwards automatically zap 'Extend' if found
when !Guardian loads in.
Versions 1.05 upwards include code to reset the machine
if 'Extend' is detected.
The 'Extend' virus doesn't appear to be that harmful, but
adds 1k to the RMA space when run. If left un-checked,
this will fill your machine up and eventually give the
'No Room in RMA' or memory full error.
Icon This virus consists of a short BASIC program which is
filetyped as a sprite and called 'ICON'. It amends the
following line to !Boot files (which !Guardian removes)
BASIC -quit <Obey$Dir>.Icon
If detected, !Guardian will correct the !Boot file and
delete the sprite file called Icon.
N.B. The Icon filer can also occur as Filer/Icon-A/Poison
or NewVirus - !Guardian copes with all current variations.
Net Manager Versions 1.08 upwards
No specific data available on this one.
Other known viruses
-------------------
Cebit (also known as Lord of Darkness/TlodMod virus)
Image
Link
Mymod (fairly harmless, also known as Silicon Herpes(?))
NetManager
NetStatus (also known as Boot)
Parasite - Quite nasty!
Sprite - Quite nasty!
Thanatos (also known as RISCOSext/RISC OS Extensions) - Quite nasty!
TrapHandler
Valid
IF YOU DISCOVER ANY VIRUSES THAT DO NOT OCCUR IN THIS LIST, PLEASE SEND
THEM TO ME ON A CLEARLY LABELLED DISC. I WILL THEN AMEND !GUARDIAN AND
RETURN YOUR DISC, TOGETHER WITH THE LATEST VERSION OF !GUARDIAN.
You can contact me via;
Paul Vigay
C/O 14 Victory Avenue,
Horndean,
Hants.,
PO8 9PH
England
or phone my BBS (Equinox) on 0705 871531 (viewdata, 7E1)