A new version of ChekMate, the virus detection utility, has just been
released to SimTel, the Coast to Coast Software Repository.  It is
available via anonymous ftp at:

        ftp.coast.net/SimTel/msdos/virus/cm8106b.zip

ChekMate detects known and *UNKNOWN* file, boot and partition table
viruses.  It will also detect many memory resident viruses.

ChekMate is a change detector and does not use scan strings.  It should be
used alongside a good quality virus scanner and is designed to work with
any DOS scanner you wish to use.

ChekMate detects changes to the areas that are frequently attacked by
viruses.  It also launches decoy or bait files to purposely get a virus to
infect them.  This eliminates nearly all the problems with false alarms.

The Areas Protected Are:

- The Boot Sector(s)      : (Up to 4 drive letters are supported)
- The Partition Table     :
- Top Of Memory           : Many viruses change this.
- The Command Processor   : This can be NDOS, 4DOS or COMMAND.COM
- The BAIT Files          : 6 different files are used.
- Interrupts              : Key interrupts are checked.
- CMOS                    : Registered version only.

Protection Mechanisms:

- 128 bit cryptographic fingerprints (using MD5 from RSA).
- Byte for byte analysis against clean code fragments stored after
  first use.
- Length of file against stored values.
- Interrupt checking for memory resident viruses.
- CMOS verification.

From What Does This Protect Me?:

Known/unknown viruses of the following types:
- Boot Sector Viruses
- Partition Table Viruses
- File Infecting Viruses
- Stealth Viruses
- Virus Toolkit Created Viruses
- MtE or Any Other Polymorphic Viruses

On What Operating Systems Does ChekMate Work?:
- MS or PC-DOS 3.3 or later
- Windows 3.0, 3.1. 3.11. Workgroups and Windows '95
- OS/2 2.0, 2.1 and Warp

Special requirements:  IBM PC Compatible running DOS 3.3 or later with at
least 256Kb of memory and a hard disk.  DEBUG must also be in the Path.

To date ChekMate has detected three unknown viruses, none of which had been
detected by virus scanners.

The Registered version offers extra features and a higher level of
protection against viruses.

The cost of a one-year license for the Registered version for a single
machine is $25 U.S. (or 15 Pounds Sterling).  The per-machine cost
decreases with number of licenses ordered.  Discounts are available for
educational centers and students.

Orders from the U.S. and Canada (*) should be sent to

     Ed Fenton (ChekWARE)
     Rockville Information Services, Inc.
     P.O. Box 14
     Rockville Centre, NY 11571-0014
     U.S.A.

     Internet ID: ris@transit.nyser.net

     (*) Checks, Bank Money Orders or Postal Money Orders in
         US dollars, please.

All other orders (**) should be sent to:

     Martin Overton (ChekWARE),
     8 Owl Beech Place,
     Horsham,
     West Sussex, RH13 6PQ,
     ENGLAND.

     Internet ID: chekmate@salig.demon.co.uk

     (**) International Money Orders or Checks in Sterling drawn on
          United Kingdom banks, please.
 
 =========================================================
 From the 'New Product News' Electronic News Service on...
 AOL (Keyword = New Products) and Delphi (GO COMP PROD)
 =========================================================
 This information was processed from data provided by the
 company/author mentioned. For additional details, please
 contact them directly at the address/phone# indicated.
 Trademarks are the property of their respective owners.
 =========================================================
 All submissions for this service should be addressed to:
 BAKER ENTERPRISES,  20 Ferro Dr,  Sewell, NJ  08080  USA
 Email: rbakerpc@delphi.com  -or- RBakerPC (on AOL/Delphi)
 =========================================================
