POSTER
Article 1208 in comp.binaries.amiga (moderated):
From: amiga-request@ab20.larc.nasa.gov (Amiga Sources/Binaries Moderator)
Subject: mv91i179: VirusMemoryKill 1.00 - tool for detecting new viruses, Part01/01
Message-ID: <comp.binaries.amiga.v91i179@ab20.larc.nasa.gov>
Date: 14 Jun 91 22:02:30 GMT
Reply-To: ins760z@monu4.cc.monash.edu.au (mr c.r. hames)
Lines: 145
X-Mail-Submissions-To: amiga@uunet.uu.net
X-Post-Discussions-To: comp.sys.amiga.misc
Submitted-by: ins760z@monu4.cc.monash.edu.au (mr c.r. hames)
Posting-number: Volume 91, Issue 179
Archive-name: utilities/vmk-1.00/part01
This virus detector does complete checks of all system libraries
devices and resources as well as the regular checks to make it
the best new virus detection program available.
This utility is different to the previous versions in that it no
longer directly detects any virus. Instead it is now the most powerful
tool for detecting new viruses. It checks a heap of things that viruses
use and tells you when they have changed.
Firstly it checks CoolCapture, ColdCapture, WarmCapture, KickTagPtr
and the KeyboardReset to find anything that is trying to survive reset. If
any of these are abnormal it will alert you including a display of the area
of memory that they are pointing to. You can look for words describing was
the thing is and then decide whether to do nothing or do a cold reset(note
this is much more that just a normal reset) which should clear memory of the
virus.
Secondly it checks the jump tables of all resident libraries, devices
and resources and warns you if any are not pointing to ROM. It will give
you a message describing what isn't pointing to rom and where it is actually
pointing. Most systems will get at least a few of these warnings. Setpatch
causes a few and other legit programs do as well.
