home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Black Box 4
/
BlackBox.cdr
/
virusers
/
f_prot.arj
/
NEW.202
< prev
next >
Wrap
Text File
|
1992-01-19
|
5KB
|
176 lines
Version 2.02 - major changes:
The names of many viruses have been changed, but the name of the old
virus is left as an alias. This change is not complete yet, and there
are some differences between the naming used by Quick and Secure Scan.
"Secure Scan" is now considerably faster than before, and it is now
the default method. "Full Scan" no longer exists.
"Analysis" no longer exists as a separate function in the main menu,
but only as the third search method, in addition to Secure Scan and
Quick Scan.
Version 2.02 - corrections:
"Secure Scan" used to report a "possible new variant of Yaunch" when
scanning certain files, including some OS/2 executables - fixed.
On certain old types of 360K floppy disk drives the scanner would not
always detect a disk change - it would scan the boot sector correctly,
but not the files contained on the diskette - fixed.
"Analyse Program" would occasionally crash with a "Divide error"
message - fixed.
Version 2.01 had some problems when scanning Bernoulli boxes, and
when run from the OS/2 DOS box - fixed.
Version 2.02 - minor improvements:
"Secure Scan" can now usually determine if data has been appended to a
file after infection or if a file has been infected by two different
viruses, and should be able to remove them in the correct order.
Memory scan is now much faster than previously, but can no longer be
aborted by pressing ESC.
As the first .SYS-infecting files have now been found "in the wild"
outside Bulgaria, the set of default file extensions has been expanded
to include "SYS" as well.
It is now possible to scan for any combination of boot/file viruses,
Trojans and user-defined patterns at the same time - previously a
separate scan was required to search for user-defined patterns.
The scanning report now includes a date/time stamp, as well as a
description of the parameters used.
The following command-line switches have been added.
/ANALYSE Uses heuristic analysis instead of signature-based
virus scanning.
/BOOT Scan for boot sector viruises [default]
/COMMAND Force command-line mode.
/FILE Scan for file viruses [default]
/HARD Scan all DOS partitions on the hard disk.
/INTER Force interactive mode.
/MULTI Scan multiple diskettes.
/NET Scan all network "drives".
/NOBOOT Do not scan for boot sector viruses.
/NOFILE Do not scan for file viruses.
/NOTROJAN Do not scan for Trojans and joke programs [default]
/NOUSER Do not scan for user-defined patterns [default]
/REPORT=file Saves the output to "file".
/SILENT Generates no screen output.
The VIRSTOP.BIN file no longer exists.
F-PROT.EXE now returns an exit code, which can be checked with an
ERRORLEVEL command. See COMMAND.DOC for further information.
A "Repair:" entry is being added in the virus information database. It
indicates whether F-PROT can disinfect the virus or not (or if
disinfection is simply impossible).
The environment variable FPSETUP can now be used to indicate where the
SETUP.F" file is located.
Version 2.02 - new viruses:
The following 75 new viruses (or new variants of old viruses) can be
detected and removed with version 2.02
Albania (429, 506, 575 and 606)
AntiPascal 2 (440-B and 480-B)
Anto
Backfont-765
Black Monday-Borderline
Boojum
Burger-Pirate
Burghofer
Cascade-1701-S
Checksum (1.00 and 1.01)
Comasp-472
Crazy imp
CSL (V4 and V5)
Dada
Dark Avenger-null
DM (310 and 400-1.01)
Feist
Friday the 13th-623
Hitchcock
Hungarian-473
Hydra (0, 1, 2, 3, 4, 5, 6, 7 and 8)
ILL
JD (158, 276, 356, 392, 448 and 460)
Jerusalem (Einstein, Miky and T13)
Lao Doung
MH-757
Mosquito-Topo
MSTU-554
Murphy-Amilia
MPS-OPC 2-4.01
Silent Night
Orion (262 and 365)
Pixel-Rosen
QMU-1513
Shadowbyte-635
Sistor (2225 and 2380)
Smallv-115
Stoned-NoInt
Surrender
Sylvia-C
SYP
Timeslice
Tiny Family-Ghost
Tokyo
Trivial-44
Tumen-1.2
VCS-Manta
VCS-VDV-853
Vienna-625
Voronezh-Chemist
Wordswap (1391 and 1485)
The following 33 new viruses can now be detected but not removed.
_907 (temporary name)
Antimon
Beware
Brainy
Cascade-1661
Diskspoiler
Grapje
Hafenstrasse
Haifa
Karin (Redstar)
Keyboard bug
Liberty-SSSSS
Lozinsky (1882, 1958, 2968 and 2970)
Maltese Amoeba
Murphy-Bad Taste
Necropolis-B
PC-FLU 2
Phalcon
Pregnant
Rage
Rape-2.2
Sadist
Shirley
Tiny-DI (94, 101, 108, 110)
Vienna (Dr. Q. and Kuzmitch)
Vindicator
The following 2 viruses that could be detected but not removed with
earlier versions of F-PROT can now be disinfected.
Jerusalem-Mule
SVC 6.0 (only .COM and .EXE files, not .SYS files)
"Variant identification" of the following virus families has been improved:
Black Monday
Cascade (Jojo)
CSL