frisk@rhi.hi.is (Fridrik Skulason) (01/15/90)
Since I made the F-PROT package available, I have received a
considerable number of messages containing the same questions over and
over.
So, here is an attempt to clarify a few details:
When new viruses appear, you do not have to obtain a new version
of the program. It is only necessary to add a single line to a
file. This line contains an encrypted signature string with a
checksum. The programs will then be able to find any infections
by the new viruses.
I will create this line and post it here on VIRUS-L/comp.virus.
However, you need a new version of the program if you want to
disinfect a program infected with any of those new viruses.
I have to write a disinfection routine for each virus - a task
that sometimes takes as little as five minutes, but in other cases
a full day of work.
The tiny (2K) .SYS file that prevents the execution of any infected
program must also be updated to stop new program viruses.
It should, however, be able to detect any new boot sector viruses
without changes.
The list of viruses the program can handle ...
Agiplan, Alabama, Alameda (Yale), Amstrad, April 1., Brain,
Cascade, Dark Avenger, DataCrime, DataCrime II, dBase,
December 24th, Den Zuk/Ohio, Disk Killer (Ogre), Do-Nothing,
405, 4096, Fumble, Fu Manchu, Ghost, Icelandic/Icelandic II/
Saratoga, Jerusalem/New Jerusalem/Sunday, Lehigh, MIX1,
New-Zealand (Stoned), Oropax, Perfume, Ping-Pong/Typo,
South African "Friday 13.", Sylvia, SysLock/Macho, Swap
(Fallboot), Traceback/2930, Vacsina, Vcomm, Vienna/Lisbon,
Virus-90, W13, Yankee Doodle and Zero Bug (Palette)
... does not quite match other lists of known viruses, but in most
cases this is because different names are used for the same virus.
There are, however, a few viruses that have been reported but not
made available for research. They are obviously not included (yet).
The documentation includes a description of all the viruses, even the
most recent ones like Amstrad, Perfume, Virus-90, W13 and Vcomm.
The suggested contribution of $15 is for a single copy - for an
organization which uses the program on more than one machine, the
suggested contribution is $2 for each additional copy.