frisk@rhi.hi.is (Fridrik Skulason) (01/21/91)
Changes to F-PROT
Version 1.14 added the following features:
Detection, but not removal of
Anthrax
Crazy Eddie
V2P6
The reason V2P6 is not removed is because of the complexity of
the various encryption methods - If you ever get infected by the
virus, I suggest you contact its author:
Mark Washburn
4656 Polk Street NE
Coloumbia Heights, MN 55421
USA
Detection and removal of the following viruses:
217
417
440
492
516
600
696
699 (erronously called "711" elsewhere)
707
948
1049
1067
1075
1226
1600
2144
2480
Agiplan
Alabama-B
Amstrad-852
AntiPascal
AntiPascal 2
Attention
Bebe
Best Wishes
Black Monday
Burger-537
Carioca
Christmas in Japan
Cookie
Datalock
Destructor
DIR
Doteater
Evil
Father Christmas (Choinka)
Groen Links
Guppy
Hymn
Internal
Invader
Jerusalem-G
Joker
Joker-01
Kemerovo
Leprosy-B
Liberty II
Lozinsky
MG
MG-3
MGTU
MLTI
Monxla/Time
Musicbug
Nina
Nomenklatura
Parity
Phoenix
Piter
Plastique (4 new variants)
Polimer
Proud
Saddam
Scott's Valley
Stone `90 (T@V) - a variant of Vienna
Superhack (Scottish Murphy)
SVC
Sverdlov
Tiny-family (11 different variants)
Turbo-448
Turbo Kukac
Turku (Twins)
V2P2
VFSI (Happy)
Vienna (several new variants)
Violator
Virdem-792
Voronezh
Westwood
Wisconsin
Zero Hunt (Minnow)
F-FCHK now does a much better job of identifying minor variants of
viruses, in particular those cases where the differences are
insignificant and do not matter with regard to disinfection. As
an example, it will now identify the minor Jerusalem-variants
(Payday, Mendoza, A-204, Puerto, Sunday, Anarkia, Westwood, B, C, G
GrLkDos etc.) correctly, instead of just labeling them "Jerusalem".
The /LIST switch added to F-FCHK, to produce a report with a list
of files scanned, and results.
The /MULTI switch added to F-FCHK and F-DISING to scan multiple
diskettes.
The switches may be combined with other switches - for example
you can use
F-DISINF A: /MULTI /AUTO
if you have a large pile of infected diskettes or
F-FCHK C: /AUTO /LIST > report.lis
to scan and disinfect drive C: and produce a report.
The following bugs/problems have been fixed:
The identification string for "Zero Bug" has been changed
as it produced a false positive in LB.COM from Lahey and
several other programs.
F-FCHK now reports the correct number of files disinfected,
when files are infected with multiple viruses.
Occasional (but very rare) crashes of F-XLOCK and F-FCHK
if F-LOCK was not installed.
Problems when removing "Stoned" from a hard disk formatted
under some DOS versions earlier than 3.0
Occasional incorrect removal of Alabama.
The following problem-fixes and changes are expected in version 1.15
Detection of Whale is not fully reliable, as I do not yet have
samples of all the different mutations of the virus. This is not
a serious problem, as the virus is not known to exist "in the wild",
but I am working on this.
F-DRIVER.SYS seems to be disabled on some machines running PC-NFS.
This was only discovered yesterday, and I am searching for a way to
solve this.
Automatic scanning of boot sectors will be added in 1.15.