ECHO OFF CLS IF NOT EXIST VCHECK.COM GOTO DIRERROR ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ» ECHO º VSEARCH - The ultimate line of defense against computer virus. º ECHO º º ECHO º This program harnesses the power of VCHECK and VCOMP to detect º ECHO º ANY changes in your virus-vulnerable files. It does this by º ECHO º comparing the checksums that VCHECK creates. Even if you don't º ECHO º know about checksums, rest assured that no alteration to a º ECHO º program may be made without changing the checksum. This will º ECHO º take some time, but it will be worth it. º ECHO º You'll not have to run this procedure frequently. º ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ ECHO ÿ FOR %%A IN (NEW new) DO IF "%1"=="%%A" ERASE VSUM.REF IF EXIST VSUM.REF GOTO HDRPAUSE ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ» ECHO º First off, you'll want to create a "reference" list º ECHO º of checksums for later comparison using VSEARCH. º ECHO º Do you want to make the reference list now? º :HDRPAUSE if not exist VSUM.REF ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ ECHO [ HIT ANY KEY TO CONTINUE (OR Ctrl-Break TO QUIT) ] ECHO ÿ PAUSE > NUL CLS IF NOT EXIST VSUM.REF GOTO MAKENEW ECHO Creating comparison list now. This may take a few minutes... ECHO ÿ VCHECK /VSUM.NEW CLS ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ» ECHO º Comparing new list with reference . . . º ECHO º º ECHO º Any differences will be detected. º ECHO º Different file statistics mean that file has º ECHO º been altered -- probably by a virus or bomb. º ECHO º Replace any such files if there is any doubt. º ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ VCOMP VSUM.REF VSUM.NEW > VSUM.!!! REM errorlevel 2 means diffs were found; 1 means file was infected. IF NOT ERRORLEVEL 2 GOTO NODIFFS ECHO VCOMP DETECTED DIFFERENCES. SEE FILE "VSUM.!!!" ECHO A note stating - STATISTICS NOT SAME !!! - ECHO could indicate a file changed by a virus. GET Do you want to see VSUM.!!! now? [Y]es/other key to quit IF ERRORLEVEL 90 GOTO EXITMSG IF NOT ERRORLEVEL 89 GOTO EXITMSG CLS IF EXIST VSUM.!!! TYPE VSUM.!!! GOTO EXITMSG :NODIFFS ERASE VSUM.!!! > NUL ECHO ÿ ECHO  OK, NO DIFFERENCES DETECTED  ECHO ÿ GOTO EXITMSG :DIRERROR ECHO ÿ ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ» ECHO º You should be in the Victor Charlie Home Directory º ECHO º to use this program as it stands. If not, you will º ECHO º have VSUM.REF files dotted around your disk. º ECHO º You can easily edit VSEARCH to your own needs. º ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ ECHO ÿ GOTO EXIT :MAKENEW ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ» ECHO º VSUM.REF does not exist. Creating it now. º ECHO º directory of this drive. Stand by please . . . º ECHO ÿ ECHO (Actual output is being redirected. This could take a few minutes ...) VCHECK /VSUM.REF ECHO ÿ ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ» ECHO º OK! Statistics of vulnerable files are recorded in º ECHO º VSUM.REF. º ECHO º When you really need to do an exhaustive search of º ECHO º executables for changes, just run VSEARCH again. º ECHO º This is an advanced line of defense, should VCHECK º ECHO º fail to spot the infected programs with a passive search. º ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ :EXITMSG ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ» ECHO º Remember: if you change, add or delete any PROGRAMS º ECHO º in your computer, you should delete VSUM.REF and make º ECHO º a fresh list by running VSEARCH. This warning does NOT º ECHO º apply to new data files, which VSEARCH does not check. º ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ :EXIT