home *** CD-ROM | disk | FTP | other *** search
-
- Update report of Thunderbyte Anti-Virus utilities.
- Prefixes:
- '-' indicates a change that does not require user attention.
- '->' indicates a modification that requires user attention, such as a
- change in program invocation, etc.
-
-
- 7.01 Product update
- -------------------
-
- General notes:
- - Over 200 new signatures added!
-
- -> The Security.Doc file for PGP authenticy verification
- will now be created by using our company key: ESaSS.PGP.
- This key is signed by my Veldman.PGP key which is
- distributed for a long time now: so you can confirm that
- the new ESaSS.PGP key is valid.
-
- - We have added a new PGP key to our distribution archive,
- ESaSS.PGP. It is recommended to add this key to your
- keyring. If you want to send us viruses, we recommend
- that you use this key to encrypt the files.
-
-
- TbScan:
- - Updated the heuristic engine: reduced false positives,
- and increased the detection rate!
-
- - TbScan now allows itself to be loaded in upper memory or
- top of memory, without causing false positives.
-
- - Fixed a few minor bugs.
-
- - Changed the detection routines for macro viruses. TbScan is
- now able to locate the macro's everywhere in the document files,
- and is able to detect the viruses, even if the macro's are
- splitted or encrypted. If a document contains encrypted macro's,
- TbScan displays the '#' heuristic flag.
-
- - TbScan now also scans the AMI-PRO macro files (.SMM).
-
- - Optimized the file I/O code: TbScan is now somewhat faster!
-
- - Improved the generic decryptor. Added a few rules to handle
- some new polymorphic viruses.
-
-
- Viruses:
- - Changed signatures:
-
- dBase -> Dbase
- Intruder -> Intruder.A
- Kilroy -> Kilroy.A
- Nightfall {1} -> Nightfall.5764
- Nightfall {2} -> Nightfall.4518
- Fax_Free.Mecojoni.1536
- Karnavali.1972/1986 {mbr}
- Karnavali.1972/1986
- Wire.3518
- One_Half Solved false positive
- Antitrace.1334
- Bowl.737
- BV.Xop
- Chang.1759/3584
- Halt.B
- IMI.1536
- Invisible.2926/3223
- PS-MPC.719
- QuietMouse.724
- VCL.KMEE
- WereWolf.1208
- WereWolf.684
- WereWolf.693
- WereWolf.1367
- WereWolf.1152
- WereWolf.658/678
- Chapa -> Chapa.447/448/450 + variant detection
- Burglar.1150 Changed signature
- Doperland.490 Changed signature
- _846 -> Jinx.846/854 + variant detection
- Michelangelo.A -> Michelangelo {1} + variant detection
- Michelangelo.B -> Michelangelo {2}
- Barrotes.1310 -> Barrotes.1310/1874 + variant detection
- Diehard variant detection
- DM.400.c/d variant detection
- DOS1 -> DOS1.184/185 + variant detection
- ErrorVir variant detection
- Frodo.Frodo -> Frodo.4096 + variant detection
- Intruder variant detection
- Lemem variant detection
- Manuel_II.2209 variant detection
- Massacre variant detection
- Proto-T {2} variant detection
- Trance.1721 -> Nuker.1721
-
- - Added bootsector signatures:
-
- Chang.3584 {mbr}
- Da'boys
- Dull_Boy
- Halt.A
- Multi_Ani
- Stoned.Andrew
- Tornado
- Zimboot
- Babose
- Bug70
- Karnavali.1986 {mbr}
- Live_Death.3564 {mbr}
- Mephisto.921 {mbr}
-
- - Added file virus signatures:
-
- _846
- _3008
- Kilroy.B
- MPolice {mbr}
- Vandor
- ACDC.494
- ACDC.499
- Alfons.1344
- AntiBasic.351
- AntiCMOS.726
- Antifort.1110
- Antitrace.1946
- AntiWin.933
- AsmVirus
- Awaits.500
- Baby.962
- Baddless.494
- Barrotes.1127
- Batman_II.2844
- BGU.1295/1298
- Born2Loose.970
- Boso.1037
- Boso.1388
- Boso.1636
- Bowl.550
- Brownie.688
- Bugs_Bunny.494
- Burglar.1150
- Bye
- Cannabis.357
- Click.375
- CmosDense.807
- CPP.239
- Crazy_October.1024
- Cunning.1997
- Cybertech.419
- C&Y.428
- Destructor.2082
- Doperland.490
- Eddie.657
- Favor.2567
- Fifo.333
- Flaco.1330
- FSN.1279.A
- FSN.1279.B
- Hellis.616
- Helloween.1377
- Inch.386
- Inch.534
- Kobrin.489
- Kobrin.491
- Kobrin.511
- Louse.919
- Lunch_Time.783
- Manuel_II.2209
- Megadeath.687
- Megadeath.1017
- Morgul.400/401/424
- MTZ.5081
- Nado.814
- Ozzy.546
- Positron.512
- Puppets.960
- Silence.4096
- Silence.5120
- SillyC.316
- SillyC.373
- SillyRC.191
- Turner.3276
- Voices.1500
- Umbrella.3032
- WilliWonka.1088
- Alia.2047
- Bad_COM.600
- Bolero.1000
- Bolero.1300
- Chapa.566/572
- Chapa.586
- DST.231
- DST.242
- DST.330
- DST.347/396
- Dune.579/640
- Fonx.1958
- Formas.1146
- Hi.378
- Hi.512
- Hi.549
- Hi.671/806/833
- HLLO.Big&Fat
- HLLO.Zalman
- Karnavali.1986
- Live_Death.3654/3656
- Magnum.1592
- Morgen.656
- Neumann.752
- Nightfall.5767
- Pan.1000
- SillyCR.214
- SillyCR.354
- Triple_5.556
- Vang.483
- Vienna.480
- Wire.3518
- _70
- _586
- _641
- _789
- _912
- Anarchy.6503
- Annihilator.809
- Apo.2108
- Blos.1087
- Connie.2835
- Cybertech.1078
- Dan.585
- Dan.626
- Dan.677
- Dan.709
- Dan.849
- Dan.995
- Dan.1278/1372
- Dark_Angel.3250
- Demon3B.4767
- Dumb.192/215
- Dumb.4722
- Ebola_II.313/378
- EvilMan.303
- ExeHdr.NLA.332/347/383
- ExeHdr.Grigory.406
- ExeHdr.Morality.424
- Fallen_Angel.338
- Fiber.2834
- Fletan.565/574
- Floriana.939
- Freedom.2448 {com}
- Freedom.2448 {exe}
- GOL_Wanted.923
- Gripped.685
- Hello.297
- HLLC.4112
- HLLC.7508
- HLLC.21603
- HLLO.5788
- HLLO.17923
- Ieronim.2028
- Inferno.781
- Int_FF.647
- Iron_Maiden.891
- Jain.1437/1536
- Jain.1614
- Jerusalem.2368
- Kpi.329
- Life_Changer.296
- Katya.732
- Khizhnjak.812
- Khizhnjak.1101
- Kranty.255
- Krapodnik.589
- Kurt.704
- Lapiddan.439
- Little_Cat.2913
- Locust.735/1158
- MacGyver.1098
- Major.1691
- Malatinec.1554
- Mari.1942
- Maxi.1198
- Mephisto.921
- Midinfector.760/775
- Mipth.460
- Mipth.905
- MMCA.505
- Moon.501
- Nado.838
- Nado.1217
- NMSG.214
- Noki.448
- Nuker.1688
- Nuker.1986
- NY.1277/1577
- Proto-T.465
- Proto-T.539
- Seventh_Son.440
- Detic.1514
- FITW.7953
- Intruder.B
- Justin.268
- KBWin.1349
- Mand.1061
- MPolice.3072
- Retaliator_II.956
- Sequin.236
- Slips.1432
- Slips.1459
- Tentacle.1944
- Timid_II.497
- Yellow.643
- AmiProMacro/Green_Stripes
- WordMacro/Atom
- WordMacro/Colors
- WordMacro/Concept
- WordMacro/DMV
- WordMacro/Hot
- WordMacro/Imposter
- WordMacro/Nuclear.A
- WordMacro/Nuclear.B
- WordMacro/Xenixos
- WordMacro/WiederOffnen
- WordMacro/FormatC
-
-