frisk@rhi.hi.is (Fridrik Skulason) (01/08/90)
As some of you already know, I have been working on an anti-virus
package the last five months or so. The English version of this
package, F-PROT, is now (finally) ready for distribution. It can
handle the following PC viruses:
Agiplan, Alabama, Alameda (Yale), Amstrad, April 1., Brain, Cascade,
Dark Avenger, DataCrime, DataCrime II, dBase, December 24th, Den Zuk/Ohio,
Disk Killer (Ogre), Do-Nothing, 405, 4096, Fumble, Fu Manchu, Ghost,
Icelandic/Icelandic II/Saratoga, Jerusalem/New Jerusalem/Sunday,
Lehigh, MIX1, New-Zealand (Stoned), Oropax, Perfume, Ping-Pong/Typo,
South African "Friday 13.", Sylvia, SysLock/Macho, Swap (Fallboot),
Traceback/2930, Vacsina, Vcomm, Vienna/Lisbon, Virus-90, W13, Yankee
Doodle and Zero Bug (Palette)
Included in the package are programs for...
... scanning diskettes or files for infection (similar to SCAN and
VIRSCAN)
... removing any viruses found without destroying the original programs
(a complete set of disinfection tools)
... preventing infected programs from being executed (similar to SCANRES)
... adding "self-testing" to other programs
... providing protection against Trojans
and much, much more...
The programs included are even able to prevent the use of Dr Solomon's
"fourth method".
When new viruses appear, only a single tine, containing an encrypted
signature string has to be added to one of the text files.
The package will be distributed as shareware, (suggested contribution
$15 US).
The .ARC file is rather large (237K), but I will arrange for it to be
uploaded to SIMTEL and the various anti-virus archives. I intended to
have the program distributed on comp.sys.ibm.pc, but the resignation
of the moderator there will probably delay that.
I will also E-mail copies to those I have already promised a copy, but
I simply cannot send copies to everyone interested. However, if you
are willing to upload the package to a BBS or make it available to a
number of other people, let me know and I'll E-mail you a copy.
I will send the package as a XXencoded PKarc file. If you do not have
xxdecode, I can include the source to it (in C).
- -frisk