HISTORY: V1.8 1-Sep-97 ~~~~~~~~~~~~~~~~~ - Added UnhappyNearlyNewYearSummer97 installer & dropped file. Thanks to Adam Polkosnik for this shit. This is a compiled REXX script supposedly written by me. I'd love to meet the asshole who made this lame shit. This didn't even run on any of my systems, so I was unable to produce any infected files. - Converted docs to AmigaGuide format. - Added a list of known viruses with explanations. - When HitchHiker 2.01 was cleaned from a file, too much of the buffer was saved, and may have created some unloadable files. - Rewrote the SaveFile() routine, so that it deletes the file first. - Added VMM3.3 & KBVirus to LoadSeg() tunneler. ---------------------------------------------------------------------------- V1.7 28-Aug-97 ~~~~~~~~~~~~~~~~~ - Added BootShop virus installer. - Added more bootviruses. -- Fast2, Lamer Exterminator 1-7, Paradox2 Rene, SwitchOff, CopperBoot, SherLock2.0, VirKill2, Tai-Pan Chaos, Tai-Pan LameBlame, PVL 3.0, PVL 4.0, PVL 5.0, PVL 5.1, PVL 5.3, PVL 5.4, PVL 6.1, PVL 6.4, PVL 6.5 - Fixed MAD2 bootvirus detection. - Added XFDPatch to the vector tunneller - DirWalker wouldn't abort on Ctrl-C. - DirWalker didn't obey the QUIET argument. - If a virus was found in a crunched file, and the QUIET arg was specified, then no text would be printed. - Now restores filedate when removing link-viruses. - FVK now sets the Read & write file protection bits when removing a link virus from a file, and restores the original status afterwards. - Removed all inline file-delete's, and replaced them with Bsr's to a DeleteFile routine which sets the Delete bit first. - Optimised filecheck routine a little, to use jumptables instead of multiple compares. - Boot analysis engine sometimes exited before completing the scan which meant some bootviruses were reported as clean. - Bootblock analysis engine sometimes got stuck in an infinite loop. - Outputs some error-messages if the something goes wrong during filecheck. - Selfcheck would fail if started from DirectoryName/FastVirusKiller - BOKOR 1.05 and BOKOR 1.06 are virtually identical to check for, so now they use just one removal routine, (They are both reported correctly though) - Fixed version string. ---------------------------------------------------------------------------- V1.6 22-Aug-97 ~~~~~~~~~~~~~~~~~ - Self-check routine now uses a larger buffer for pathname. - Added a variant of Harry Sintonen's DirWalker routine. The script is no longer necessary. - Rewrote text output routines. They now generate a buffer, and print that all in one go, instead of printing each line in three stages. (filename, packer, virusname) ---------------------------------------------------------------------------- V1.5 17-Aug-97 ~~~~~~~~~~~~~~~~~ - Added BOKOR 1.1 virus. - Added Xtruder 3.5 trojan. - Added Drive-Music `joke'. - Added Bootfile analysis engine. This beauty is really fast. I don't believe it can be done any faster way. And it won't slow down much when more bootviruses are added to it. - Added over a hundred bootviruses to the bootfile engine. - Tidied docs a little. - Program now does a self-check, and removes any link-viruses that may have been attached to it. - Removed the `FastKiller FastKiller' line from the script. ---------------------------------------------------------------------------- V1.4 11-Aug-97 ~~~~~~~~~~~~~~~~~ - Added AmixHack trojan. - NOSAVE wasn't working. - Now distinguishes between Trojans and viruses, and prints correct name. - Misc code cleaning. - Added some small optimisations. ---------------------------------------------------------------------------- V1.3 10-Aug-97 ~~~~~~~~~~~~~~~~~ - Corrected some strings. BOKOR 1.01 was reported as 1.0, and 1.05 as 1.01 - Added BOKOR 1.06 virus. - If NOSAVE was specified, and a virus was found, an infinite loop occured. ---------------------------------------------------------------------------- V1.2 26-Jul-97 ~~~~~~~~~~~~~~~~~ - Added recognition for 5 more fileviruses. - BOKOR v1.01 (Thanks to Olli-Pekka Kaikuaho for that one.) - HitchHiker 2.01 - HitchHiker 4.11 (Thanks to Dave from IRC #Amiga for that one.) - VirusMaker1.0 - TimeBomb 0.9 - BGS9 - Saddam 1 - Improved File-scanner. - Some internal changes that make it easier to add new viruses. - Now handles more hunktypes Should now cause no crashes while scanning. - If a virus is removed from a file, it now tries to decrunch the cleaned file before rescanning. - Sometimes didn't free filememory. Now fixed. - Didn't scan new file after removal of a virus, but instead, a messy-buffer, file is now reloaded. - Fixed FreeMem() bug. - Now handles Zero-byte hunks. - Rewrote reloc-hunk parser. - Filescanner code wasn't reentrant, now fixed. - Script now scans C:Protect too, in case the user used it to set the script bit of `ScanDirs' while a virus was active. - Improved Memscanner - Improved recognition of BOKOR v1.05 - If there was more than one virus in memory, FVK went into an infinite loop. This has now been fixed. - Now recognises PPLoadSeg and SegTracker, and tunnels them to get the LoadSeg vector before they patched it. If a virus is found after tunneling, The Vector previous to it will be restored.. Imagine.. ROM VECTOR Virus SegTracker PPloadSeg After tunneling PPLoadSeg and SegTracker, the virus is found, and the ROM vector will be set, so effectively, SegTracker & PPLoadSeg will be removed. ---------------------------------------------------------------------------- V1.1 4-Jul-97 ~~~~~~~~~~~~~~~~ - Added support for Non-crypted BOKOR 1.05 strains. Thanks to Harry Sintonen for the hints. - Optimised BOKOR 1.05 detection in memory slightly. ---------------------------------------------------------------------------- V1.0 28-Jun-97 ~~~~~~~~~~~~~~~~~ - Detects and cleans BOKOR 1.05 from memory and files. Thanks to _Monk_ from IRC for that Virus.