ZeroVirus v1.3 (c) Copyright 1989 by Jonathan Potter INTRODUCTION: Welcome to ZeroVirus,the MegaDisc virus checker. This program was written for for and is recommended by MegaDisc, and it is my hope that this program will serve to totally protect you from any form of Amiga virus.While I have comple te confidence in the performance of this program, neither I nor MegaDisc will be liable for any damage resulting from the use or abuse of this program (un likely, but..).ZeroVirus is a fully integrated virus checker and killer, and bootblock backup-er and restore-er.With ZeroVirus,you can check the bootblock of any disc.You may install the disc (removing any virus present) with one of four different bootblocks, and backup the bootblocks of your commercial pro- grams to ensure recovery from any viruses in the future. ZeroVirus will also check a directory of files for any known file viruses,and give you the option of removing them.ZeroVirus uses BrainFiles to make updating easier.The Brain- Files contain information that ZeroVirus uses to identify viruses. ZeroVirus has a LEARN option whereby you may include in the BrainFile information from a given disc,so that ZeroVirus will recognise that disc in the future.The ca- pacity of the BrainFiles are only limited by available memory(each known boot block takes approximately 150 bytes), so the option is there to learn and re- cognise every non-standard bootblock in your software library. ZeroVirus is driven by gadgets,which are selected by clicking and releasing the left mouse button,while the pointer is positioned over them. STARTING ZEROVIRUS: To start ZeroVirus,double-click on the icon or type "ZeroVirus" from the CLI. You MUST have the BrainFile(called ZeroVirus.BrainFile) in either the current directory (same directory as ZeroVirus) or in the S: directory. The BrainFile will be read in, and then ZeroVirus checks memory for any viruses. If any are found,they are automatically removed, and you are notified of their presence. The Warm,Cool and Cold Capture,and the KickTagPtr,KickMemPtr and KickCheckSum vectors are checked.These should normally be $000000,and one sign of a new vi rus is these vectors pointing somewhere else.If they do not point to $000000, you will be told of their value,and given the option to restore them to $0000 00.Note PLEASE that some legitimate programs, like Guardian modify these to their own purposes,so you should be careful about restoring these if you are using such a program.If the AmigaDOS1.3 Recoverable RAMdisc is found,you will be told of this.If any viruses are detected in memory, you should carefully check your bootdisc,and any discs you have used since then,for viruses. Once ZeroVirus has completed this, you are prompted to press either mouse button. The main menu then appears on the screen. MAIN MENU: Several options are available from the main menu. These are described below, and then discussed in detail. CHECK DISCS FOR VIRUSES: This option allows you to check your discs for viruses,and kill them if found BACKUP BOOTBLOCKS TO DISC FILES: This option allows you to backup the custom bootblocks of your discs. RESTORE BOOTBLOCKS FROM DISC FILES: This option allows you to restore previously backed-up bootblocks to discs. CATALOGUE BACKED-UP BOOTBLOCKS: This option allows you to generate a catalogue of backed-up Bootblocks. ADJUST COLOURS: This option allows you to alter the colour settings of ZeroVirus. ABOUT ZEROVIRUS: This displays program information. ICONIFY: This allows you to shrink ZeroVirus to a small window on the Workbench screen EXIT FROM ZEROVIRUS: This exits the program,and returns you to from whence you came! CHECK DISCS FOR VIRUSES: This option allows you to check the bootblock of any disc, to check a given directory or file for the presence of a file virus,and to check your Startup Sequence for the calling of a file virus. As with most of the main options, CHECK DISCS FOR VIRUSES has four disc drive gadgets in the top left quarter of the screen (gadgets for drives not connected will be disabled).To check a disc,simple click on the appropriate drive gadget.If any errors occur,either a requester will appear or a message will be displayed at the bottom of the screen.If all goes well,the disc will be checked,and you will be told of the result.To the right of the appropriate drive gadget appears the name of the bootblock.If the disc contains a standard DOS bootblock,you will see "Normal DOS bootblock".If the disc contains a non-standard bootblock, you will see "Non-standard bootblock".If the disc contains a recognised non-standard boot block,the name of the bootblock will be shown. If the bootblock is a virus, this will be displayed in red (or whatever colour has been chosen to replace red). For example,"SCA virus recognised","CCS-BOOT bootblock recognised". At the bottom of the screen will appear a comment or instruction pertaining to the current bootblock.Again,if the bootblock is a virus,this will be in red. For example,"This disc is okay.Insert another disc to keep checking.", "This disc contains a virus!INSTALL it immediately!".ZeroVirus detects discchanges for the currently selected drive automatically,so if you replace the disc in the currently selected drive with another one,it will be automatically check ed for you. The first menu option is LEARN. This allows you to permanently learn (as long as you keep the same BrainFile!) the bootblock of the current ly selected drive (provided ZeroVirus does not already know it). When you se lect LEARN,you are presented with a requester asking firstly for the name of the bootblock.This can be a maximum of 60 characters. Note that the string "recognised."will automatically be concatenated to the name, so you should not end the name with a period,or the word "recognised". Once you have enter ed the desired name + pressed return,you are asked for a description of the bootblock.This again can be 60 characters long,but nothing is joined on end. If the bootblock you wish to LEARN is a virus, you should just press return for the description (i.e. an empty string). The string "This disc contains a virus! INSTALL it immediately!"will automatically be substituted,and will be displayed in red.Once you have entered the description,the learnt bootblock will be written to the BrainFile. Again,the BrainFile MUST be in the current directory or the S: directory.The disc it resides on should not be writeprotected,and there should be at least 150 bytes free).Every time you LEARN a bootblock, the user update count of the BrainFile version number will be updated. The official version number is not updated;this is changed as new BrainFiles are issued by the author. INSTALL DISC allows you to overwrite a bootblock on the selected drive with one of four built in bootblocks (after a positive request to an "Are you su- re?" requester).What is already there will be irrevocably lost,so if you are unsure you should BACKUP the bootblock first (see further instructions for this).If no errors occur,the disc will be installed.Pressing the right mouse button allows you to select the bootblock you wish to write.A requester will open, with the following four bootblocks available: STANDARD - This is the standard AmigaDOS 1.3 bootblock NOFASTMEM - Turns off all auto-configuring expansion memory on reboot. BIGSCREENTEST - All PAL Amigas have a bug that causes an NTSC (200 line) si zed screen to occasionally open on bootup, instead of normal PAL size. This bootblock checks the size of the screen you are about to boot into,and if it is NTSC sized,will give you a chance to reset the computer. AUTOADDRAM - Allows you to automatically add one chunk of non-autoconfigu ring memory on bootup. When you install a disc with this bootblock you are prompted for the start and end addresses of this chunk,in hex.If you give no input to this,the RAM from $f80000 to $fbfffe present in Amiga 1000s with KickStart in ROM is assumed. VIEW bootblock allows you to see (in ASCII) the bootblock of the currently selected drive.The bootblock is displayed in two blocks (the first 512 bytes and the last 512 bytes).All non-standard characters (i.e. all characters con flicting with those in the same position in a standard bootblock) are dis- played in red.All standard characters are in white. RETURN TO MAIN MENU will do just that. FILE VIRUS CHECK allows you to check a file,whole directory or Startup-Se- quence for the presence or calling of currently recognised file viruses.File viruses are NOT updated by BrainFiles, so as new ones appear, ZeroVirus will be updated.Descriptions of the recognised file viruses are given when you se lect FILE VIRUS CHECK. After instructions have been given, a file requester appears.If you wish to check a whole directory for file viruses, just enter the name of the directory (complete path name) into the drawer string gadget and choose OK.If you wish to check one file, enter the path into the drawer string gadget, and the filename into the file string gadget. If you wish to check a Startup-Sequence, you should enter "Startup-Sequence" (sans quotes) into the file string gadget.Choose OK when ready to proceed,or CANCEL to can cel.Once you choose OK,whatever you have specified will be checked. If file viruses are found,you will asked if you want them removed. Once the checking has finished,statistics on files checked are displayed.Pressing the left mou se button will continue the check on another directory, or the right mouse button will take you back to the CHECK DISCS menu. If a BSG9 file virus is found, and deleted, you will also be given the option to try to restore the original file.If this is unsuccesful,a requester will notify you of the fai- lure. TOOLKIT KEYS: The toolkit keys are available from the CHECK DISCS menu. The keys allow you to access features not available from gadgets.They are described below. F1 - UnINSTALL.This tool uninstalls the disc in the currently selected drive and makes the disc no longer bootable. F2 - Fix Checksum. This tool allows you to fix the bootblock checksum on the currently selected drive,and make it bootable. F3 - Copy bootblock.This tool allows you to copy the bootblock from the disc in the currently selected drive to another disc. When you choose it you will be asked to click on the destination drive. BACKUP BOOTBLOCKS TO DISC FILES: This option allows to keep copies of the bootblocks of any programs using custom bootblocks.If these bootblocks are overwritten with,say,a virus,these programs will no longer work.A good example of these are the Psygnosis games If a virus strikes,and the bootblock is overwritten, you will be able to re- store it from your backed-up copy,and save the program. This option presents you with a screen very similar to that of CHECK DISCS FOR VIRUSES. LEARN and FILE VIRUS CHECK are missing,and have been replaced by BACKUP BOOTBLOCK. For instructions on the other functions,see the CHECK DISCS FOR VIRUSES section. BACKUP BOOTBLOCK allows to backup the bootblock of the currently selected drive to a disc file.When selected,the bootblock is read and you are presen- ted with a file requester.You should enter the path into the drawer string gadget.The name of the disc is automatically entered into the file string gadget as the filename,although you may edit this if you wish. It is sugges- ted you keep all your backed-up bootblocks in a directory, with nothing else but bootblocks,although it is not necessary. Once the path and filename have been entered,choose OK.You are then prompted for an optional comment for the bootblock (maximum 40 characters).Once it is entered, and provided no errors occur,the bootblock will be written to the file. RESTORE BOOTBLOCKS FROM DISC FILES: This option allows you to restore a previously backed-up bootblock to the currently selected drive.When RESTORE BOOTBLOCK is selected,you are present- ed with a file requester prompting for the path and the filename. Once these are entered,and provided no errors are encountered,the selected bootblock will be written to the currently selected drive. VIEW SAVED BOOTBLOCK operates in the same way as VIEW BOOTBLOCK, except that a backed-up bootblock is viewed instead of the bootblock of the currently se lected drive.When it is selected you are prompted for the path and filename of the backed-up bootblock you wish to view. CATALOGUE BACKED-UP BOOTBLOCKS: This option allows you to generate a catalogue of all the backed-up boot- blocks in a specified directory. CATALOGUE TO FILE and CATALOGUE TO PRINTER allow you to send the generated catalogue to a disc file, or to the printer (PRT:). INCLUDE COMMENTS and INCLUDE DATES allow you to select whether comments and dates are included in the catalogue. GENERATE CATALOGUE presents you with a file requester, prompting you for the directory containing the bootblocks you wish to catalogue. Enter a path name in the path string gadget and choose OK.If you have chosen to send the cata- logue to a file,you are then prompted for the filename.The directory is then read.Only bootblocks saved with ZeroVirus are included in the catalogue.Pro vided no errors occur,the catalogue is sent to the desired output. ADJUST COLOURS: This presents you with a palette requester,allowing you to adjust the colors of ZeroVirus.The eight coloured gadgets in the top left quarter allow you to select the current colour to adjust.The first three slider gadgets allow you to change the amount of red,green and blue in the colour, and the last three slider gadgets allow you to change the hue, saturation and luminance of the colour.The wide coloured bar displays the currently selected colour, and (in hex) the amounts of red,green and blue in it.COPY allows you to copy the cur rently selected colour to another pen.SPREAD allows you to spread the colors between the currently selected colour and another pen. RESET will reset the colours to their states when ADJUST COLOURS was chosen. Pressing ESC has the same effect as RESET.CANCEL,or the close gadget resets to colours and exits the palette requester.OK accepts the colours and exits the palette requester SAVE accepts the colours, exits the palette requester, and attempts to save the colours to the colour file (ZeroVirus.Palette). The file must be in the current or S: directory,and the disc must not be write protected. ABOUT ZEROVIRUS: This simply gives you some information on the program and author, and tells you which version BrainFile you are using. ICONIFY: This option closes the ZeroVirus window and screen, and opens a small window on the Workbench screen. ZeroVirus now behaves very much like the PD program VirusX. Unlike VirusX, however, it also contains a title bar clock and mem ory monitor.The current time is displayed(and updated) along with the amount of chip and fast memory available in the system. When the iconified window first opens,all discs present are checked for viruses or non-standard boot- blocks.If they have viruses or other non-standard bootblocks on them,a re- quester appears,asking you if you wish to return to ZeroVirus. Note that if the bootblock is a virus,you are not told which virus it is. You will find this out when you return to ZeroVirus and CHECK DISCS FOR VIRUSES. After all discs have been checked,the clock starts and continues updating.Every time a disc is changed,that disc is automatically checked,and the same procedure as above follows.To return to ZeroVirus from the iconified window,click the clo se gadget. If ZeroVirus is run with the "-i" option, it will start up in the iconified mode.You are only notified if the bootblock is a virus,or if it is a non-standard and unknown bootblock. EXIT FROM ZEROVIRUS: This option simply exits ZeroVirus. HOW TO USE THE FILE REQUESTER: The file requester presents a very easy way to access any file anywhere on the Amiga. It consists of several different gadgets: DIRECTORY gadgets which allow you to select a file,drawer or volume by scrolling through a list and clicking on the one you want,or by entering your own in a string gadget. PAR ENT gadget allows you to jump back to the parent of the current directory. OKAY gadget which you use to end the requester and accept your choices. An alternative to this : double clicking on a file name.CANCEL gadget which you use to end the requester and reject your choices. RENAME gadget which allows you to rename the currently selected file. DELETE gadget which allows you to delete the currently selected file. MAKE DIR gadget which allows you to make a subdirectory in the current directory.To scroll through the lists of files drawers and volumes you have a slider which lets you scan quickly through the entries, and an up and down gadget which allows you to move through the list one entry at a time. When the requester is first opened, the available volumes are read in, sorted, and added to the list. The current directory is then searched for files and subdirectories. All gadgets are active while the directories are being read. The volume list is only updated on discchanges, however the file and drawer lists are updates whenever you change directory (or choose a new volume). ABOUT BRAINFILES: The BrainFile for ZeroVirus is a file called ZeroVirus.BrainFile. This is a text file,not a program,so it can not be executed.This file can be edited di rectly,but it is easier to enter known bootblocks in it via the LEARN option The BrainFile MUST end with "QUIT" on a new line,and with no CR/LF following the QUIT.BrainFile updates will be released on MegaDisc,the MegaDiscSoftware catalogue, or are available from the author. It is NOT recommended that you edit the brainfiles directly,as they must have exactly the right format, or else they will not work correctly. PROGRAM STATUS: ZeroVirus is NOT public domain,although it is freely redistributable. It is under NO circumstances to be sold, or included on any commercial product. I consider it immoral to make money out of viruses, so I am not charging for ZeroVirus.If ZeroVirus does save you from viruses, why not write me a letter and let me know. No need to send any money (although I am not stupid enough as to refuse a small contribution), but it would be nice to know just how much this program is used.Also,if you have any comments or bug reports, or find any new viruses,PLEASE send them to me. THE END: ZeroVirus is an easy program to use.I hope it becomes a program you use regu larly to guard against the battery of viruses on the Amiga. THE MAGIC ARTS AND ALPHA FLIGHT PLK 052135 D 4300 ESSEN 1 WEST GERMANY