Short: New virus-killer (1.11) Author: djones2@glam.ac.uk (Dave Jones) Uploader: djones2@glam.ac.uk Type: util/virus Replaces: util/virus/fastkiller.lha ---------------------------------------------------------------------------- FastKiller 1.11 V1.11 15-Oct-97 ~~~~~~~~~~~~~~~~~ - Improved File-checker : - Added LiSA-Fuckup 3.0 (ScanEbola97) trojan - Added some old viruses : AFFE, Aram-Dol, AX-Fucker, Biomechanic 6, BBS-Traveller (Ebola2) Thanks again to Jan Anderson/VHT DK for these old beasts. - Some viruses wouldn't have been detected if they had their RELOC hunks converted to short relocs. - Now asks before cleaning/deleting a file, this was actually harder to implement than it sounds, and quite a large part of the filechecker had to be rewritten. - Shell Filecheck can now be aborted with Ctrl-C. - FileInfoBlock is now only allocated once per file check, before it was allocated and deallocated each time for every file. This should speed the FileChecker up a little. - Filechecks used to walk past end of buffer occasionally. - Incorrect file buffer size was FreeMem()'d - Now strips HUNK_DEBUG, HUNK_SYMBOL, & HUNK_NAME before file check. - Some viruses which can only be deleted were calling DeleteFile() instead of branching to a FastKiller routine, which sets the protection bit first. This also made the code a little shorter. - Removed some unnecessary tests in a few file-checks. - Removed enforcer hit that occured if an xfd error occured. - Improved bootblock analysis engine: - Added some old viruses : BootAIDS, ByteBandit4, COBRA, Cheater Hijacker, DigitalLife2, Disgust, DATACrime, Cracker Exterminator, Devils, Dr Mosh, Dr Mosh2, ELENI, Executors, Fast Eddie, GeneStealer, HEIL, Indiana Jones, Influenza, Infector, INGO, IRAK 3, Lamer Exterminator Decoded, LameStyle, Love Machine `90, Loverboy, Little Sven, MG, Nuked007, Obelisk (Format), Paratax III, PayDay, Perverse I, Plastique, Red Ghost, Sao Paulo, Sachsen 1, Sinister Syndicate 1.0, SS, SHI, Sonja, Starlight 2, Starlight Warhawk, Suicide Machine, TNK, TTS, TFC Revenge, Tomates-Gentechnic2.0, Unknown1, Virus-Fighter, VirusV1, VIPHS, ZAccess 3.0 Thanks to Jan Anderson/VHT DK for those. - Fixed recognition for CCCP, DiskDoktors, NorthStar2, SwitchOff & Incognito. - SCA Clones are now called just that to save memory. - Tidied the line-indenter a little. - Misc code shuffling to group associated routines, which meant a few branches are now optimised to byte distances. Ie, shorter executable. ---------------------------------------------------------------------------- ============================= Archive contents ============================= Original Packed Ratio Date Time Name -------- ------- ----- --------- -------- ------------- 13556 4880 64.0% 15-Oct-97 22:33:58 +FastVirusKiller.GUIDE 4657 1371 70.5% 15-Oct-97 22:34:00 +FastVirusKiller.GUIDE.info 10423 4265 59.0% 15-Oct-97 22:34:04 +History.GUIDE 3820 644 83.1% 15-Oct-97 22:34:06 +History.GUIDE.info 13561 5919 56.3% 15-Oct-97 22:34:08 +KnownViruses.GUIDE 1808 727 59.7% 15-Oct-97 22:34:10 +VHT-DK.txt 20876 13639 34.6% 15-Oct-97 22:34:22 +FastVirusKiller -------- ------- ----- --------- -------- 68701 31445 54.2% 16-Oct-97 17:01:38 7 files