home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Aminet 1 (Walnut Creek)
/
Aminet - June 1993 [Walnut Creek].iso
/
usenet
/
sources
/
volume91
/
utilitys
/
bigbrthr
/
part01
/
bigbrother.doc
< prev
next >
Wrap
Text File
|
1991-03-20
|
6KB
|
184 lines
Documentation for Bigbrother V2.11
==================================
This document will describe the working of Bigbrother V2.11 for
the Commodore Amiga computer. Bigbrother and all related programs
and documents are presented as is. Although the author has made
every effort to make this product free of bugs, he can not be
held responsible for any damage resulting from the use of this
program. The program is shareware. It may be copied but may not be
used as a part of a commercial package without the prior written
permission of the author. If you like the program and if you are using
it regularly, you may send $10 or more to:
Erwin van Breemen
Berliozplein 15
2651 VG Berkel ZH
Holland
e-mail: breemen@rulcvx.LeidenUniv.nl
Feel free to send any bugs,suggestions or comments to the above address.
Requirements
============
Bigbrother requires Kickstart 1.2 or higher. For Kickstart 1.2 it is
not necessary to use the preferences file big_prefs. For Kickstart 1.3
or higher this file must be placed in the s: directory. It must contain
the DOIO vector pointing to the routine in the rom. Some features make
use of arp.library. This library must be placed in the libs: directory
Note that the arp.library (V39+) has not been included and can be
obtained on almost any BBS board.
The scriptfiles included use some general script commands. See for
explanation any AmigaDos manual.
What does Bigbrother?
=====================
Bigbrother is a virus infection detection program with some optional
utilities. It is running as a normal task and checks every 1 second
the important memory locations in the Amiga. Depending on the values
and the their combinations, an expert system will accept it or warn
you in case it thinks it is dangerous. This means that no program
can start a virus in memory without alerting Bigbrother.
As a bonus, Bigbrother is capable of starting a new shell, starting
script files, viewing and installing bootblocks. All this in a
program less than 10K.
Installation
============
Bigbrother is very easy to install. Bigbrother will detach itself
from the current shell or cli. Just put Bigbrother in the c:
directory and add the following line to your startup-sequence:
bigbrother
Place arp.library in the libs: directory.
Put big_prefs and bighelp in your s: directory. This is all there is.
Additional notes.
=================
For Kickstart 1.2 users
You must not(!) place the big_prefs in the s: directory. This file contains
the DOIO vector ( needed for a virus extermination) of Kickstart 1.3.
Bigbrother is standard configured for Kickstart 1.2. If Bigbrother finds
s:big_prefs then it will use it for the Clear option. For 1.2 users
this means a guru.
For Kickstart 1.3 or higher users
Now it is essential to have a s:big_prefs file. Otherwise Bigbrother
will use the default 1.2 value of DOIO. You can use the Memory option
to discover it's value. Use newzap or something to alter s:big_prefs
Note that Bigbrother will come to front if the DOIO is wrong for your
machine. This is also a method to discover the value of DOIO in your
machine. The supplied big_prefs contains the value for Kickstart 1.3
How to operate Bigbrother
=========================
You can bring Bigbrother to the front by pressing Crtl-Help. Bigbrother
will open a window on the workbench. The same thing happens automaticly
if a virus has been detected.
You will see a window containing several gadgets and a message box.
In the message box a text will describe the current status of your
Amiga concerning viri. Below there is a description of all gadgets:
DF0:
This gadget will select between the diskdrives available at the moment.
If you have for example 2 drives, the gadget toggles between df0: and
df1:. The drive selected will be used for the View and Install option.
Watch
When you press this gadget Bigbrother will close its window and return
to the sleeping mode. In the sleeping mode, Bigbrother checks every
second for a virus in memory and whether there has been pressed on an
interesting F-key.
Newshell
Bigbrother will create a new shell process as you press this gadget.
The same can also be done by pressing Crtl-F1 in the sleeping mode.
View
This option allows you to examine the bootblock of disk in the selected
drive.
Memory
Here you can examine the actual contents of the important vectors. For
a clean machine, all vector should point to the Kickstart rom. This means
that the addresses must point to $fc0000 or higher.
Install
In this option you can install a bootblock on the disk in the slected
diskdrive. This bootblock contains the normal bootcode plus a piece
of text in order to recognize it as a Bigbrother bootblock. Some viri
will return a normal installed bootblock. So it is safer to use the
Bigbrother bootblock. In this way you are sure you have read a real
bootblock and a faked one!
Clear
By pressing this option you will clear all the important vector to
their standard values. This is where big_prefs comes in. If big_prefs
doesn't contain the rigth value for your Kickstart, you Amiga will hang
in less than a second. Note that you will lose all your resident programs
including RAD etc.
Reboot
This option will reboot your Amiga in the official way. No viri can
survive this reset because all system structures will be recreated.
Help
This option will reveal my address. If you use Bigbrother, then please
send $10 to that address. Many thanks in advance.
Scriptfiles
===========
Bigbrother is also capable of starting scriptfiles named F2...F10 by
pressing , as you can guess, F2..F10. Some examples of scriptfiles
have been included. The only limitation is that you can not get
input from a user (i.e. ask). This means that in practice you can
use these script files to start applications like an editor.
I hope this program will help you in the fight against viri.
Erwin van Breemen (The Orega Programming Group Holland)
Berliozplein 15
2651 VG Berkel ZH
Holland
e-mail: breemen@rulcvx.LeidenUniv.nl