@database Virus_CheckerII.guide @master Virus_CheckerII.guide @$VER: Virus_CheckerII.guide 2.6 (03.10.1999) @author "Alex van Niel" @(c) "Alex van Niel" @node "Main" "Virus_Checker II Help" Virus_Checker, Copyright İ 1990-1995 by John Veldthuis Virus_Checker, Copyright İ 1996 by David Dustin Virus_Checker II, Copyright İ 1997-1999 by Alex van Niel Version of latest release is @{b}2.5@{ub} @{" Presentation           " link "Presentation" 0} What is Virus_Checker II @{" Important notes       " link "Important" 0} Please Read this @{" Shareware Notice      " link "Shareware" 0} Virus_Checker II is not free @{" Registration          " link "Registration" 0} Fill me out and mail me @{" Scandinavian Registration  " link "Scandinavian Registration" 0} Fill me out and mail me @{" UK Registration " link "UK Registration" 0} How to register easy when you live in the UK @{" Security/PGP          " link "Security" 0} How do I know this is not a virus @{" PGP Key Servers " link "PGP Key servers" 0} How to get my public PGP key @{" VC Preferences " link "VCPrefs" 0} How to change the settings of VirusCheckerII @{" Main Window           " link "MainWindow" 0} Main Virus_Checker II window @{" Command Line Options  " link "CommandLineOptions" 0} Start Virus_Checker II from SHELL @{" Icon ToolTypes         " link "Workbench" 0} ToolTypes Virus_Checker II uses @{" Workbench AppIcon     " link "AppIcon" 0} Drag and Drop checks @{" Files Needed          " link "Files" 0} Files required by Virus_Checker II @{" Localization          " link "Locale" 0} Yep Virus_Checker is locale aware @{" Installing            " link "Installing" 0} How to install Virus_Checker II @{" $4eb9 Link Virus      " link "4eb9 Link Virus" 0} SPECIAL NOTE ON THIS VIRUS @{" Archives          " link "Archives" 0} Checking into Archives @{" Arexx Port            " link "Arexx" 0} Arexx commands @{" VC II Related " link "VC II Related" 0} Virus_Checker II Related Addresses, where and how to get it @{" Frequently Asked Questions " Link "FAQ" 0} Questions people asked me the most @{" Hints & Tips " Link "Tips" 0} Hints and Tips for VirusCheckerII @{" Disclaimer            " link "Disclaimer" 0} And now for something completely different @{" Author Info           " link "AuthorInfo" 0} About the Author @{" Credits               " link "Credits" 0} Thanks Guys * @{" History                " link "History" 0} How things got to here * @{" History of Brainfile " link "Brain History" 0} History of the Virus_Checker brainfile @{" History of VCPrefs " link "VCPrefs History" 0} History of the Preferences editor of VCII @{" To Do/Future " link "Future" 0} What will come and what great plans I have * = changed @endnode @node "Presentation" "Presentation" This piece of software is @{"Shareware" link "Shareware" 0} ! -------------------------------------- Virus_Checker II Virus_Checker, Copyright (c) 1990-1995 by John Veldthuis Virus_Checker II, Copyright (c) 1997-1999 by @{"Alex van Niel" link "AuthorInfo" 0} =============================================================== (vht-nl@dds.nl) Virus_Checker II is a program that can be used on any Amiga that is running Workbench 2.04 or better. Versions BEFORE 7.0 will run on any Amiga regardless of the Workbench. Yep it should even work on 1.1 Virus_Checker II is designed to hunt out Amiga viruses and kill them dead. It also scans memory on startup and checks all suspect vectors. It also checks certain memory locations every 2 seconds for infection. It is also possible to use VirusChecker online with a BBS to check incoming archives IMMEDIATELY. This can be done by using the Rexx port of Virus_Checker II in combination with the extraction tool (ArcExtract) which in combination with the Archive Options feature can handle ANY archiver you desire. You will be able to use the program without reading this file but for best advantage you should read it all. This might prevent certain problems from occuring or might help you solve certain problems. Any comments or problems with any of the documentation or the program itself are welcome; if you can't get electronic mail to me, please feel free to drop me a note via the overland @{"mail address" link "AuthorInfo" 0} given below instead. Virus_Checker II is written in 100% Assembly code using Cygnus Ed, Macro68, Directory Opus 5.8 Magellan II and Debugged using Enforcer, Segtracker, Mungwall, Sushi, TNT and Amiga_E. @endnode @node "Important" Some important notes for Virus_Checker ====================================== The old keyfile that was valid for versions 1.0 of Virus_CheckerII and 8.4 and down of Virus_Checker is NO LONGER VALID! Some registered users have already received a new keyfile which unlocks the special features. They don't need to contact me. The old keyfile is now considered a cracked/bad keyfile and is treated as such. You will be able to acces the Archive Options, but you won't be able to check into archives, so it won't do anything. If you are a registered user and don't have the new keyfile, please feel free to contact me. Already registered users can get a free update (excl. possible postage and package if not send through e-mail) from me personally. To do this, fill out the reg. form again with the data you send to John and if it has changed since then, also add the current valid data (in case you moved for instance). If you would like to receive your keyfile through e-mail, then please also add you pgp public key, so I can encode it and send it to you as soon as possible. --- Virus_Checker II will pick up all the files that it requires from at least 2 places. It will first try PROGDIR: then the alternative place. Virus_Checker will save any of the files it needs to back from where it read it from. See Virus_Checker II @{"Files" link "Files" 0} for details --- Virus_Checker II is able to detect older (and some newer) viruses through the use of the Xvs library. If you want to benefit from this new feature then you need to fire up VCPrefs and turn the usage of the xvs.library on. By default xvs is turned ON, BUT! if you are upgrading Virus_CheckerII you are likely to have a config already. This means that Xvs is per default turned OFF. If you haven`t saved the config of Virus_CheckerII before, xvs is turned ON. If you are not sure if it is turned on or off, or if you don`t understand what I am trying to explain, then see the @{"VCPrefs" link "VCPrefs" 0} for more information. And check out the settings of Virus_CheckerII. --- Please send bug reports/suggestions/ideas/whatevers to vht-nl@dds.nl @endnode @node "Shareware" "Shareware Notice" This program is SHAREWARE. Virus_Checker II for me is mainly a hobby but it does cost quite a bit. Therefore I took the decision to make Virus_Checker II SHAREWARE. The cost is a very small US$15, £10 or NFL 30. For this you get a keyfile that will unlock a few features in Virus_Checker II. The key is only valid from VirusChecker II version 1.0 and up. If for some reason, hackers are able and willing to crack the key however, already registered users will have to get a new keyfile. This 'update' will be completely free (except for possible postage and package). The best way to send this to me is in cash. I prefer NFL (dutch money) because I don't have to change that at the bank. EuroCheques are NOT accepted anymore since the bank here charges really much for any kind of cheques. If you want you can have the money transferred directly to my bank account. My account number is: 88.12.57.230 Make sure you add the following description with your transfer: VCII Registration Fee : [your name] After I have received a notice from my bank that it has been received, I will send you the keyfile. If you cannot send cash or have it transferred then please send a bank draft drawn on a major bank. I cannot accept postal money orders. Our banks will just not accept them. For my e-mail/postal adddress refer to the @{"Author Info" link "AuthorInfo" 0}. And please, include YOUR e-mail address if you send me letters. If you are in a hurry to get your keyfile and have an internet e-mail address and have a PGP public key then e-mail me your public key and I can send the keyfile afap (as fast as possible :) ) over the internet. Please fill out the @{"Registration" link "Registration" 0} form and mail it to me with payment Please make sure that name and address is clear as it takes ages sometimes to decypher some peoples scrawls. @endnode @node "Registration" "Registration" ************************************************************************* ** Virus_Checker II Registration Form ** ************************************************* Send this form to: Alex van Niel B. Holiday str. 116 2551 WK Den Haag Netherlands e@mail: vht-nl@dds.nl First Name: ________________ Last Name: _____________________ Street: _______________________________________________ City: _______________________________________________ County: ________________________Post Code: ____________ Country: __________________________________________ Email: ______________@___________________________ New Registration: No/Yes Viruschecker I Registration: No/Yes ************************************************************************* If you were a Virus checker I registered user and had registered, could you tick above to show this? Registration of Virus_Checker II will unlock a few features that are present in Virus_Checker II that will not work unless you have a key. You will receive in the mail (or email if you have a PGP public key) a keyfile which will now be valid for most of the VirusChecker versions. The cost of the Shareware fee is $15 or NL30,- (18 EURO). If you require the keyfile via snail mail there will be a $1.50 or NL 3,- P+P charge, this also applies to re-registration. Please add this P+P charge to the fee when you send it to me, so I do not need to ask you for it afterwards. ************************************************************************** ________________________________________ _____________________ Signature Date ************************************************************************** @endnode @node "Scandinavian Registration" "Scandinavian Registration" Virus Checker Registreringsformular Ja, send mig straks mine personlige koder, saa jeg kan bruge Virus CheckerII fuldt ud. Personlige data (disse data vil blive opbevaret paa elektronisk form af Virus Help Team Denmark, og Alex van Niel. De videregives IKKE). FORNAVN :____________________________________________ EFTERNAVN :____________________________________________ GADE :____________________________________________ POSTNUMMER :____________________________________________ BY :____________________________________________ EMAIL (evt.) :____________________________________________ TLF. (evt.) :____________________________________________ Prisen er dkr. 140,-, som jeg vedlaegger paa check, eller i kontanter (BEMAERK: Virus Help Team Denmark paatager sig intet ansvar for kontanter der ikke er sendt anbefalet). Leveringsform, afkryds venligst: O Send mig koderne i et almindeligt brev. O Send mig koderne til min Internetadresse (PGP kodet) O Send mig koderne crash til min fidonetadresse (PGP kodet). Koderne vil blive leveret saa hurtigt som muligt, men det kan tage op til 4 uger at behandle registeringen. OBS!! Hvis koderne skal sendes via email vil brevet blive kodet med PGP, saa send et netmail med din publickey (til enten vht-dk@post4.tele.dk eller 39:140/127.100 (AmigaNet) ). Jeg er inforstaaet med ovenstaaende samt at de tilsendte koder KUN er til personligt brug. Formularen sendes til: Jan Andersen Charlottegaardsvej 131 2640 Hedehusene Denmark vht-dk@post4.tele.dk @endnode @node "UK Registration" "UK Registration" UK Registration =============== Don't you just hate going to the bank, changing your UK pounds to foreign currency paying more then the actual registration fee? I myself like to avoid going to the bank when it is not extremely necessary since client friendliness is something they have not written in their dictionaries. So why bother? Thanks to Paul Compton you can register VirusCheckerII the easy way, just contact him, he will contact me and after paying him in UK pounds, you will be a fully registered VirusCheckerII user within days. But how does it all start? Well, there are two possibilities: 1) you are an already registered user of VirusChecker or 2) you want to become a registered user of VirusCheckerII In the first case, you probably have registered yourself with John Veldthuis and are now wondering if you are beeing supported by me. Well, as I mentioned in the @{"ShareWare" link "Shareware" 0} section, every user that has registered him or herself with John, can get his/her new keyfile for free. You then only have to fill out the request form below, contact Paul, tell him that you are a already registered user and send the form either printed or digitally to Paul Compton. He will then send it to me, I will check the data you filled in. In the second case, you will have to contact Paul Compton and agree upon a way of payment. Then you will have to send the completely filled out request form that you can find below to Paul. After I have received your request form and heard from Paul that you have payed your fee, you will receive the keyfile. This will be done either through e-mail, Paul's BBS or by snail-mail (You will have to pay for the Postage and Package however). In short: I suggest you fill out the registration request form you find below, contact Paul Compton and print the request form below out, or send it digitally to him. Here is how you can reach him: You can call his Bulletin Board System (BBS): Elevate BBS +44 (0) 1329319028 Write a netmail to the following address: 2:251/18.0@Fidonet Write an e-mail to the following address: pwcomp@elevatebbs.freeserve.co.uk Or write to his snail mail address at: Paul Compton 36 Priory Road Fareham Hants PO15 5HT UK Paul also has a website, why don't you take a look at his site? His URL is: www.elevatebbs.freeserve.co.uk ************************************************************************* ** Virus_Checker II Registration Form ** ************************************************* UK Registration:- Paul Compton 36 Priory Road, Fareham. Hants. PO15 5HT pwcomp@elevatebbs.freeserve.co.uk BBS Tel.No. 44(0)1329319028 First Name: ________________ Last Name: _____________________ Street: _______________________________________________ City: _______________________________________________ County: ________________________Post Code: ____________ Country: __________________________________________ Email: ______________@___________________________ New Registration: No/Yes Viruschecker I Registration: No/Yes ************************************************************************* If you were a Virus checker I registered user and had registered, could you tick above to show this? Registration of Virus_Checker II will unlock a few features that are present in Virus_Checker II that will not work unless you have a key. You will receive in the mail (or email if you have a PGP public key) a keyfile which will now be valid for most of the VirusChecker versions. The cost of the Shareware fee is 10:00 (Includes admin charges) A PGP key will be required for registrations via EMail. Although there is no update fee for re-registering from Virus checker I, 1:50 for P&P will be required unless you send a PGP keyfile for EMail delivery. ************************************************************************** ________________________________________ _____________________ Signature Date ************************************************************************** @endnode @node "Security" "Security" Security/PGP ============ All versions of Virus_Checker II since 6.44 have PGP sig files in the archive. This enables pgp to check that the file is in fact the same one I released. Below you will find my signed public key. Save this to a file and then enter pgp to add it to your keyring. Follow the PGP instructions to add it. If you do not trust this key (it can be substituted by someone) then get my current key from one of the @{"pgp key servers" link "PGP Key servers" 0} Or from one of the UBS bulletin systems in the Netherlands. You can always get my pgp from me personally through e-mail. To check that the signature matches the file simply do PGP .sig PGP will warn you if the signature does not match the file. An example of this is a the hoax version of 6.6 which quick formats drives. If you had done the test above it would have told you it was fake. Virus_Checker II also has it's own internal checking for changes as well. Again this is not 100% but guards against the simple changing of version numbers. It also means it takes a better hacker to change the checksums. Virus_Checker II will warn you of both checksum errors on itself and on the file VirusChecker.brain which holds the most recent virus recog and removing routines. Public Key details: Type Bits/KeyID Date User ID pub 1024/F47EFCF1 1997/12/25 Alex M. H. van Niel -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i Comment: Requires PGP version 2.6 or later. mQCNAzSiq38AAAEEAK6uPZPDGxhgKfZqIbFWstCt5QsSRQGLlF++E/rlAbWWWaip a8vSfQDcy96+QOcmFMWIkL58YJis1wZj06Fenw+8WrDsPcizWsSORX+8h8opjqop R3oO133uI4EnmczpyjI8GhA75D46fHiI1KyZrarBKfdmUXHSP4GFUWH0fvzxAAUR tCNBbGV4IE0uIEguIHZhbiBOaWVsIDxwaW5raWVAZGRzLm5sPokAlQMFEDSiq4CB hVFh9H788QEB87AD/0YTqzc7JhUH05Ll5OkHciep8keTg893xe+zAMNhB9ssa9yM NMXZ+GYQ3mzzZTLCB/9E8E542KVLMZ5Cevdb/nilKJyR4CUuWjQo7BnUuBnESbLA vK1M0Bfu3rEkKUY786ZupzBMNEjA2cWyq8szApPDbO9bLw3AtTDKcCPDrQkD =bxon -----END PGP PUBLIC KEY BLOCK----- @endnode @node "PGP Key servers" "PGP Key servers" PGP Public Keyservers --------------------- There are PGP public key servers which allow one to exchange public keys running through the Internet and UUCP mail systems. NOTE! This service is NOT supported in any way whatsoever by the schools or organizations on which these servers run. It is here only to help transfer keys between PGP users. It does NOT attempt to guarantee that a key is a valid key; use the signators on a key for that kind of security. This service can be discontinued at any time without prior notification. Each keyserver processes requests in the form of mail messages. The commands for the server are entered on the Subject: line. To: pgp-public-keys@pgp.mit.edu From: johndoe@some.site.edu Subject: help Sending your key to ONE server is enough. After it processes your key, it will forward your add request to other servers automagically. For example, to add your key to the keyserver, or to update your key if it is already there, send a message similar to the following to any server: To: pgp-public-keys@pgp.mit.edu From: johndoe@some.site.edu Subject: add -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2i -----END PGP PUBLIC KEY BLOCK----- COMPROMISED KEYS: Create a Key Revocation Certificate (read the PGP docs on how to do that) and mail your key to the server once again, with the ADD command. Valid commands are: Command Message body contains -------------------------------------------------------------------- ADD Your PGP public key (key to add is body of msg) (-ka) INDEX List all PGP keys the server knows about (-kv) VERBOSE INDEX List all PGP keys, verbose format (-kvv) GET Get the whole public key ring (-kxa *) GET Get just that one key (-kxa ) MGET Get all keys which match LAST Get all keys uploaded during last days -------------------------------------------------------------------- Examples for the MGET command: MGET michael Gets all keys which have "michael" in them MGET iastate All keys which contain "iastate" MGET 0AF605A5|683A738B Those two keyids If you wish to get the entire key ring and have access to FTP, it would be a lot more efficient to use FTP rather than e-mail. Using e-mail, the entire key ring can generate a many part message, which you will have to reconstruct into a single file before adding it to your key ring. As of 21-Apr-95, these sites are running this system: pgp-public-keys@pgp.mit.edu Derek Atkins pgp-public-keys@pgp.iastate.edu Michael Graff pgp-public-keys@burn.ucsd.edu Andy Howard pgp-public-keys@fbihh.informatik.uni-hamburg.de Vesselin V. Bontchev public-key-server@martigny.ai.mit.edu Brian A. LaMacchia pgp-public-keys@pgp.ox.ac.uk Paul Leyland pgp-public-keys@dsi.unimi.it David Vincenzetti pgp-public-keys@kub.nl Teun Nijssen pgp-public-keys@ext221.sra.co.jp Hironobu Suzuki pgp-public-keys@sw.oz.au Jeremy Fitzhardinge pgp-public-keys@kiae.su pgp-public-keys@srce.hr Cedomir Igaly pgp-public-keys@pgp.pipex.net Mark Turner Sites accessible via WWW: http://martigny.ai.mit.edu/~bal/pks-toplev.html http://ibd.ar.com/PublicKeys.html Key server keyrings accessible via FTP: ftp://pgp.iastate.edu/pub/pgp/public-keys.pgp ftp://pgp.mit.edu/pub/keys/public-keys.pgp ftp://burn.ucsd.edu/Crypto/public-keys.pgp ftp://alex.sp.cs.cmu.edu/links/security/pubring.pgp ftp://ftp.informatik.uni-hamburg.de/pub/virus/misc/pubkring.pgp ftp://ftp.dsi.unimi.it/pub/security/crypt/PGP/public-keys.pgp @endnode @node "VCPrefs" "VC Preferences" VCPrefs v1.05 (c)Copyright 1999 by Alex van Niel VCPrefs is part of this package and is intended to replace the internal Options Window of VC. You have to use this program to change the settings since the Options Window has been removed. This has been done for both size and speed reason as well as future plans. If VC would continue to grow like it is doing right now, the amount of new features would soon make the options window too big and even PAL users wouldn`t be able to open the Options Window anymore. Especially for Charlene McNulty (wink, wink) the GUI of the preferences program has been kept small so it should work on NTSC machines as well. VCPrefs has been designed that, when VC was running before VCPrefs was started, the active config (saved or not) will be read from VirusCheckerII itself. Every changes made using VCPrefs are send to VC immediately and are used instantly. It also will ask VC where it can find the config file. If you want some other config to be edited, you need to quit VC, quit VCPrefs and start VCPrefs again. (this might get changed in the future) If VCPrefs was started before VC was started or when VC wasn`t started at all, (which is theoretically the same :) ) then VCPrefs will pop an asl requester and ask you where the config is. If you cancel this requester, a standard configuration is presented to you and you can change that one and save it. Saving is done virtually the same way, if VC can`t supply the name of the config and it`s location then a asl requester will appear again, asking you to select a drawer. @{"Menus " link "VCPMenus" 0} @{"Switches " link "VCPSwitches" 0} @{"Files/Drawers " link "VCPFilesDrawers" 0} * @{"Registered Users " link "VCPSpecial" 0} * @{"Miscellaneous " link "VCPMiscellaneous" 0} Note: VCPrefs isn`t localised YET. It will be done for next versions but for now, you have to stick to the english language. Sorry about this. * = changed documentation @endnode @node "VCPMenus" "Menus" Project ------- @{b}Save Options@{ub} This should be pretty obvious. It saves the configuration to whereever VC told it to save it or to wherever you ordered it to save the config. @{b}About@{ub} Well, pretty obvious what it does as well. It tells you the version and author of this program. In the future more info will appear here, like current config location, if VC is running and if the port is available etc. @{b}Quit@{ub} This is wheer it all ends :) Remote ------ @{b}Send settings to VC@{ub} This function sends ALL settings from VCPrefs to VirusCheckerII. Not only the changed settings but ALL settings so that any changes made while VC wasn`t active are also send to VC and activated. @endnode @node "VCPSwitches" "Switches" @{b}Use XfdMaster@{ub} This setting enables/disables decrunching of crunched files during a filescan. It enables/disables the use of the xfdmaster library which handles a huge amount of file crunchers. This setting is recommended. @{b}Use XadMaster@{ub} This setting enables/disables the use of the @{"XAD master library" link "Xad Shareware" 0} which can handle various archives, disk images etc. It is an addition to the Archive Options in VC and to be able to use this library you need to be a registered user of VirusCheckerII For now VC will only handle file archives. Disk images like DMS will be supported in future versions of VirusCheckerII. You can offcourse also still use the Archive Options but this library could provide in the future a sollution for the problems with UnZip. To be able to use the @{"XAD master library" link "Xad Shareware" 0} you also need to set the @{b}Unpack & Check into archives@{ub} setting. (see below) @{b}Use Window@{ub} This setting enables/disables the use of VirusCheckerII's main window. This could be compared to something like hide in other programs. At startup the main window is not opened and so VC stays way in the background. @{b}Ignore BB Read Error@{ub} This setting let's you turn off those annoying requesters that popup when a disk checked for bootblock viruses isn`t AmigaDOS formatted. For instance a PC0 disk would report a read error. Turning this setting on would turn the requesters off. @{b}Unpack & Check into archives@{ub} This setting enables/disables scanning for virus of files in an archive. This setting will only be of any use for registered users of VirusCheckerII. To be able to use the @{"XAD master library" link "Xad Shareware" 0} you also need to set this setting. @{b}Check DFx BootBlock@{ub} These settings enable/disable checking for viruses in bootblocks of the relating floppy drives when inserted. @{b}Check DFx Full@{ub} These settings enable/disable checking of the rekating floppy drive for viruses on the complete disk. The disk is scanned for file and link viruses, bootblock viruses and blocks (saddam) viruses. In short, the disk is checked fully as the setting say. @{b}Scan Watch Change@{ub} This setting enables/disables scanning of the file/dir for viruses after the system reported that the file/dir had changed. @{b}Arexx Scan Window@{ub} This setting enables/disables the use of the scan window during a file scan initiated by an Arexx command. That way VirusCheckerII stays in the background. @{b}Start Iconified@{ub} This setting, when turned on, will only show a small title bar at the top of your screen. If turned off, the complete main window will pop up after startup. @{b}Ignore Capture Vectors@{ub} This setting, when turned on, will turn off the surveillance of the capture vectors, ColdCapture, CoolCapture, WarmCapture. This is not recommended and is actually only for those who constantly keep getting warnings that the captures have changed. It turns on/off the requesters asking what to do with the changed capture vector. @{b}Use Xvs.Library@{ub} This setting enables/disables the use of the xvs library. It adds a lot of new and old viruses to VirusCheckerII that the brain nor the main program have not had included. The library will be used to scan for link, file, memory and bootblock viruses. Disk viruses are still only handled by VirusCheckerII and the brainfile. This setting is recommended. @{b}Use Logfile@{ub} This setting enables/disbales the use of a logfile. To be able to use this, you need to specify a full name and path for this logfile in the @{"Files/Drawers" link "VCPFilesDrawers" 0} section, in the @{b}Path & Name of Logfile@{ub} gadget. @{b}AppIcon On@{ub} This setting turns the appicon of VirusCheckerII off/on. This will be done almost immediately after this setting has been turned on/off. @{b}Check files for BootBlock viruses@{ub} This setting is mainly intended for AV people. Normally users wouldn`t need a feature that also checks for bootblock viruses in normal files. AV people can by turning this setting on, check if a file is "infected" with a particular bootblock virus, that way there is no need to check hundreds of different floppy disks. @endnode @node "VCPFilesDrawers" "Files/Drawers" @{b}Path & Name of Logfile@{ub} This string gadget should contain the full path and name of the logfile if you want to be able to use the logfile feature. Also be sure to set the @{b}Use Logfile@{ub} setting in the @{"Switches" link "VCPSwitches" 0} section. @{b}Temporary Directory@{ub} This string gadget should contain a temporary directory where all the unpacked files can go for scanning. WARNING! This drawer MUST be empty because the features using this drawer will empty it completely. It is not very smart to use your root drawer as your temporary directrory. You might discover that your computer won`t start normally ;) @{b}Default Scan Path@{ub} This string gadget should contain a drawer on which the ASL requester should open on by default for the first time. If you have one drawer which you scan everytime then you might want to put that drawer in here. After a scan, the drawer of the last scan is remembered. @{b}Move ScanWatch to@{ub} This string gadget is part of an experimental feature and will be removed in the future to be part of the Watch function that will be extended. If this string gadget is left empty, the feature is turned off. This drawer, if this string is not empty, will be the destination drawer of every file in the watch fucntion. To use this, remove everything from the watch function, then add just one drawer in which you often get downloads, or other files that you don`t trust. Turn the @{b}Scan Watch Change@{ub} on and put the destination drawer in this string. If a file enters the drawer you specified in the watch function window, the file is scanned and after scanning it is moved to the drawer you specified here. If you want to use this, I recommend you use it with just one drawer since every file in that drawer will be moved to the drawer specified here. If you don`t know how to use this exactly but do want to use it, then PLEASE contact me first if in doubt. @endnode @node "VCPSPecial" "Registered Users" @{b}Auto Repair@{ub} This setting enables/disables all requesters asking for input after a file has been found infected. The Link section enables you to specify if you want files with link viruses to be deleted, fixed, or ignored by default. No requester asking for this info will pop up. The File section enables you to specify if you want files with file viruses to be deleted, fixed, or ignored by default. No requester asking for this information will pop up. These settings will not disable any requesters asking for the removal of write protection or an error requester. @{b}Disable Requesters during File Scan@{ub} This setting will enable you to turn off almost every (write protection not included) requester during a file scan. @{b}Disable Requesters of Watch Function@{ub} This setting enables you to turn off almost every requester during a watch function activity. @{b}Delete Protection@{ub} This setting enables/disables the protection against deleting files. In the past there have been some viruses that started deleting a whole directory tree. This feature gives you control over which files get deleted. For now it just bars almost every delete action. (RAM: and Ram Disk: deletes will be granted since those are mainly temporary files) In the future you will be able to accept or reject every delete command for every file if you want. @{b}Format Protection@{ub} This setting enables/disables the use of format protection. ATTENTION: Multiple times enabling and disabling this feature might result in serious system problems. It might cause crashes and even loss of damage. Just be sure to reset your computer after changing these setting a few times. Without anything inside @{b}Device name@{ub} this feature will not work. So be sure to enter something here. Device name has to contain a LEGAL device name of a storage medium. scsi.device could be a valid entry, but serial.device for example is NOT! a valid entry. Also, there isn`t any possibilty to specify the number of the device because the WHOLE device is then protected. Next to the string gadget you will find a button. Pressing this button opens a window which holds all the devices loaded and availble in your system. Clicking on one of them removes any previous Format Protection and protects the selected device against formatting. If the device isn`t a legal storage device, the feature might be disabled. Thus resulting in a non-flagged feature. @{b}No Bootwrite@{ub} will guard you from formatting the bootsector. On a HD this most of the time means that, if this setting is not turned on the RDB (rigid disk block) which contains all info on your HD partitions and names, is destroyed. Turn this on and your Boot sector is protected. This would even work for the trackdisk.device (tested! ;-) ). @{b}No Quick Format@{ub} enables you to protect the device from quick formats. Not only the ones "legally" initiated by programs like Format but should also be protecting you against non-legal formats like avoiding the offcial format protocol. @endnode @node "VCPMiscellaneous" "Miscellaneous" @{b}PopUp Hotkey@{ub} This string gadget can contain a key combination that will, when VC is somewhere way in the background, enable you to call VC to the front like your private puppy. ;) @{b}Memory Check Delay@{ub} This number gadget enables you to specify how long VC will wait until it does a full scale memory check. This is not in seconds but in cycles. Five is a balanced delay (often enough and still not too long a wait) but you can set it to 0 till 255. Anything more then 255 will be put to 255. Anything smaller then 0 will be put to 0. Too small a delay might clog up your system (modem transfer problems are an example of this) , too big a delay will heighten the risc of memory virus infection. @{b}SnapShot Full Window@{ub} This button and the number gadgets enable you to specify exactly where the main window of VC with all the gadgets is positioned. @{b}SnapShot Icon Window@{ub} This button and the number gadgets enable you to specify exactly where the icon window of VC (small title bar) is positioned. This may be different or the same as the full window position. This way you can have the full window pop up in the middle of your screen and the icon window somewhere discrete at the bottom or top of your screen. @{b}Set Scan Window@{ub} This button and the number gadgets enable you to specify exactly where the scan window will open and how big it will be. This will fix the problem people that use a bigger screen then their display actually is have while scanning for viruses. The window normally would open on the full size of the screen, now you can specify it to be smaller. @endnode @node "MainWindow" "Main Window" Main Window and short intro =========================== When Virus_Checker II starts up it will do a number of things before you even see anything appear. First thing it does is initialise itself and then checks itself for changes that have been made. It then loads the files it needs and checks them. Next it checks memory for any infection. Next on the list is to see if the user gave it a file to scan. If yes then it scans these file/files. Next it checks the first file in s:startup-sequence for any viruses. This is a common place for infection. Last thing it does is check any floppy disks that may be in the drives. At this stage the main window will open. It will not open if you told it not to though. The main window can open in 2 states. Full or ICON mode. At this stage the main window will open. It will not open if you told it not to though. The main window can open in 2 states. @{" Icon Mode " link "IconMode" 0} @{" Full Mode " link "FullMode" 0} @endnode @node "IconMode" "Icon" ICON mode ŻŻŻŻŻŻŻŻŻ _______________________________________________ | | | | |[·]| Virus_Checker II 2.3 by Alex van Niel |[ ]| | | | | ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ The ICON state is basically just a TitleBar. Closebutton Clicking on the close gadget will make all the open Virus_Checker II windows close. This does not actually stop Virus_Checker II but just makes all the windows close. Virus_Checker II is still on guard. ToBack Clicking on the ToBack gadget will send the Virus_Checker II Main window behind all the other open windows. RMB There is no Zoom gadget however, clicking on an active Title Bar with RMB activates the Zoom gadget and opens the Title Bar in Full Mode. @endnode @node "FullMode" "Full" Full Mode ŻŻŻŻŻŻŻŻŻ ______________________________________________________ | | | | | |[·]| Virus_Checker II 2.3 by Alex van Niel |[ ]|[ ]| |---+-------------+----------------+-----------+---+---| | Show @{u}V@{uu}ectors | @{u}F@{uu}ile/DIR Watch | @{u}S@{uu}can Files | @{u}v@{uu} | |-----------------+----------------+---------------+---| | @{u}A@{uu}rchive Options | Check @{u}N@{uu}ow | @{u}Q@{uu}uit | |----------------------------------+-----------------+-| | |/| ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ @{" Show Vectors " link "VectorShow" 0}@{" File/Dir Watch " link "Watch" 0}@{" Scan Files " link "Scan" 0}@{" v " link "IconMode" 0} @{" Archive Options " link "Archive Options" 0}@{" Check Now " link "CheckNow" 0}@{" Quit " link "Quit" 0} @{b}MENUS@{ub} To access Menu, VC II must be in Full Mode. @{fg shine}Project/File Scan@{fg text} This menu will bring up the Scan Requester so that you can enter a file or directory name to scan for viruses. @{fg shine}Project/Full Memory Check@{fg text} This menu will cause Virus_Checker II to do another complete memory check. This is the same one that is done at start up. @{fg shine}Project/Show Vectors@{fg text} This menu will cause Virus_Checker II to open a scrollable window with information about the system vectors. See @{ "Vector Show Options" link "VectorShow" 0} for more information. @{fg shine}Project/Show Known Viruses@{fg text} This menu will cause Virus_CheckerII to open a window and show all the viruses it can recognise and handle. The brainfile, the internal tables of VC and the XVS library (if activated) are all used for this list. Because of some name differences between the viruses in the XVS library and the brainfile/internal tables, some names might appear twice although they are written a little bit different. This means that the number of viruses also moight not be 100% correct but it is close. I will be looking for a way to fix this though. @{fg shine}Project/Save Config@{fg text} This menu will cause Virus_Checker II to save it's current configuration to it's configure file. @{fg shine}Project/Stats@{fg text} This menu just gives you some data on the disks checked, files scanned and viruses found since it was started. @{fg shine}Project/About@{fg text} This menu tells you what version you are using of different things. @{fg shine}Project/Quit@{fg text} Causes Virus_Checker II to stop and remove itself from memory. @{fg shine}Window/Snapshot window@{fg text} This menu takes a snapshot of Virus_Checker II's current window position and saves it to it's internal data table. If you then select Save Config then Virus_Checker II will open up in the state that you snapshoted it in. @endnode @node "Watch" "Watch" Watch Files/Dirs ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ ______________________________________________________ | | | | | |[·]| Virus_Checker II Watch |[ ]|[ ]| |---+------------------------------------------+---+---| | @{u}F@{uu}iles Watched | |--------------------------------------------------+---| | :c/LoadWB |[ ]| | :c/assign |ŻŻŻ| | :c/conclip | | | :c/execute |___| | :c/iprefs | ^ | | :c/list | v | |--------------------------------------------------+---| | |[&]| |-------------+------------------+-----------------+---| | @{u}A@{uu}dd | @{u}R@{uu}emove | @{u}S@{uu}ave Options | |-------------+------------------+---------------------| | @{u}C@{uu}lose Window | |----------------------------------------------------+-| | |/| ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ @{" String Gadget " link "String" 0}@{" & " link "&" 0} @{" Add " link "Add" 0}@{" Remove " link "Remove" 0}@{" Save Options " link "Option Save" 0} @{" Close Window " link "Option CloseWind" 0} This File/DIR Watch facility is particularly useful to warn the user if ANYTHING alters ANY file on a hard drive whether it is a new virus or a badly written installer that adds something to the startup-sequence or over-writes a newer version of a library or handler etc. It is recommended that the following files in the hard drive C and S directories be added to File/DIR Watch so that in the event that a new link virus invades the system the user will be instantly notified. Being a new virus VC will not be able to deal with it BUT, if a note is made of the name/s of the infected file/s, the user can then save the files to disk and send them to @{" me " link "AuthorInfo" 0} and then replace the infected files on the hard drive from your original workbench disks. LoadWB - assign - conclip - execute - iprefs - list - mount Startup-Sequence - User-Startup It is also recommended that a selection of the most used programmes are included in the File/DIR Watch list. @endnode @node "string" "string" @{fg shine}string@{fg text} This string gadget is used to enter the name of the file or directory to be watched. If you selected a name in the ListView gadget then the name will automatically be put in here as well. @endnode @node "&" "&" @{fg shine}&@{fg text} This gadget will bring up the ASL File Requester and you can enter a file or directory to watch. Selecting it will automatically enable the string gadget and enter the dir/file name in there. Then simply hit the return key to enter the name. @endnode @node "Add" "Add" @{fg shine}Add@{fg text} Clicking on this gadget will activate the @{"string" link "string" 0} gadget above it and allow you to enter the name of a file or directory to watch @endnode @node "Remove" "Remove" @{fg shine}Remove@{fg text} Clicking on this gadget will delete the name from the list of watched files/directories that is specified in the @{"string" link "string" 0} gadget above it. @endnode @node "Option Save" "Option Save" @{fg shine}Save Options@{fg text} This will save all the options to the specific file. If this is done from the menu then the Virus_Checker.config will be saved. @endnode @node "Option CloseWind" "Option CloseWind" @{fg shine}Close Window@{fg text} Pretty obvious what this one does. Closes the window @endnode @node "Scan" "Scan" Scan Files ========== Clicking on this button will bring up the ASL Requester. You can then select a drive/directory/file to check for viruses. Clicking on cancel will cause the scan to be aborted. Click on Okay once you have selected what you want scanned. @endnode @node "Quit" "Quit" Quit ==== Pretty obvious what this button does @endnode @node "&" "&" @{fg shine}&@{fg text} This gadget will bring up the ASL File Requester and you can enter a file or diretory to watch. Selecting it will automatically enable the string gadget and enter the dir/file name in there. Then simply hit the return key to enter the name. @endnode @node "string" "string" This string gadget is used to enter the name of the file or directory to be watched. If you selected a name in the ListView gadget then the name will automatically be put in here as well. @endnode @node "Add" "Add" @{fg shine}Add@{fg text} Clicking on this gadget will activate the @{"string" link "string" 0} gadget above it and allow you to enter the name of a file or directory to watch @endnode @node "Remove" "Remove" @{fg shine}Remove@{fg text} Clicking on this gadget will delete the name from the list of watched files/directories that is specified in the @{"string" link "string" 0} gadget above it. @endnode @node "CheckNow" "CheckNow" Check Files Now ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ ______________________________________________________ | | | | | |[·]| Virus_Checker II CheckNow |[ ]|[ ]| |---+------------------------------------------+---+---| | | | | | | | |___| | | ^ | | | v | |--------------------------------------------------+---| | |[&]| |-------------+------------------+-----------------+---| | @{u}A@{uu}dd | @{u}R@{uu}emove | @{u}S@{uu}ave Options | |-------------+-----------+------+---------------------| | Check @{u}N@{uu}ow | @{u}C@{uu}lose Window | |-------------------------+--------------------------+-| | |/| ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ @{" String Gadget " link "String" 0}@{" & " link "&" 0} @{" Add " link "Add" 0}@{" Remove " link "Remove" 0}@{" Save Options " link "Option Save" 0} @{" Check Now " link "Check" 0}@{" Close Window " link "Option CloseWind" 0} @endnode @node "Check" "Check" @{fg shine}Check Now@{fg text} Selecting this gadget will start Virus_Checker II checking all files and directories listed in the Check Files Now Listview gadget. @endnode @node "VectorShow" "VectorShow" Vector Show =========== This is a new option which will during the developement of VirusChecker II be extended, updated and refined. This option has been added to the menu as well as to the main window for easy acces. It shows some important vectors and memory addresses that generally are frequently infected by viruses. Showing such an address does NOT mean that this position has been infected. For now just a few vectors are showed indifferent of a possible infection or not. In other words, these vectors are ALWAYS shown by VirusChecker II. This might soon change. It also enables some advanced users to check these vectors manually so that they can identify possible future virusses/problems etc. Remember, any serious problem like patching of LoadSeg() or DoIO() and the like are monitored and reported so there is little need to worry when finding different altered vectors. VectorShow also shows the complete TaskList, the tc_launch, tc_switch and pr_pktwait (if available offcourse) these are the fields that should most of the time be zero. VirusCheckerII will search the memory for known viruses if it detects that these fields aren't zero but won't report it since most of the time changes to these fields are made by normal user programs. One field that is not shown but IS watched is the $6c(process). This field is patched by the HANF virus. If this field doesn't point to the address of the process then VirusCheckerII will check the memory for virus but won't notify you of this change since it is likely that normal user programs changes this field. @endnode @node "Archive Options" "Archive Options" Archive Options ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ ___________________________________ | | | | | |[·]| Virus_Checker II Arch |[ ]|[ ]| |---+-----------------------+---+---| |-------------------------------+---| | LHA |[ ]| | LZX |ŻŻŻ| | |___| | | ^ | | | v | |-------------------------------+---| | |[&]| |----------------+------------------| | @{u}N@{uu}ew | @{u}R@{uu}emove | |----------------+------------------| | @{u}S@{uu}ave Options | @{u}C@{uu}lose Window | |----------------+----------------+-| | |/| ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ This button gives you access to the Archive Options window which contains four buttons and a scrolling list. This window is only accessible if you are a registered user. @{fg shine}New@{fg text} Clicking this button opens up another window with which you can add a new Archiver to the list. ___________________________ | | | | | |[·]| Virus_Checker |[ ]|[ ]| |---+---------------+---+---| |-----------------------+---| | Label [ ]| | Offset [0 ]| | ID String [ ]| | Cli Command [ ]| |--------------+------------| | @{u}A@{uu}ccept | A@{u}b@{uu}ort | |--------------+----------+-| | |/| ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ @{b}ATTENTION:@{ub} You do NOT have to put the strings between two quotes since Virus_CheckerII knows it is dealing with a string and it knows where it ends. @{fg shine}Label@{fg text} In this string gadget you can enter the label of the archiver entry. To add an archive entry successfully to the list this entry must be set. @{fg shine}Offset@{fg text} In this integer gadget you can enter the offset of the ID string in the file. LHA for instance has it's ID string at offset 2 and LZX at offset 0. This gadget defaults to 0 and does not have to be set. @{fg shine}ID String@{fg text} This string gadget has to be set to create a successful entry. It holds the ID string used to identify an archive. LHA for instance has as ID string -lh and LZX has as ID string LZX @{fg shine}Cli Command@{fg text} This string gadget must definitely be set since it is used to unpack the archive. LHA for instance can be unpacked with the following cli command: LHA x -m -M -q "%s" "%s" The first %s is the wildcard for the archive which has to be unpacked and the second %s is the destination directory. Make sure the wildcards are placed between two " else the unpack command might get confused when dealing with path names like: Ram Disk: @{fg shine}Accept@{fg text} Pressing this gadget will cause the data to be added to the list. If you forgot to set one or more string gadgets, Virus_Checker II will warn you and return you to the window with the data. @{fg shine}Abort@{fg text} Pressing this gadget will (obviously) stop configuring the archiver and discard all entered data. @{fg shine}Remove@{fg text} Pressing this gadget will cause a selected entry to be removed from the list. @{fg shine}Save Options@{fg text} Pressing this gadget causes the list to be saved to disc. BEWARE Do NOT adjust the list (Virus_Checker.Arc) since manual editing may cause Virus_Checker II to crash or something far worst. @{fg shine}Close Window@{fg text} Pressing this gadget causes the window to close. When you have added or removed an entry from the list, have not saved the list and cause Virus_Checker II to quit (one way or another), Virus_Checker II will ask if you want to save the list or ignore the changes. BEWARE! ŻŻŻŻŻŻŻ Although this code has been optimised a lot, it is possible that your machine gets slowed down pretty bad because of this function. This is very likely when you have entered a lot of entries in the list, and/or if you have some kind of debugging and/or snoop task running. If you this is the case, then you can of course turn if off in VCPrefs, or try to remove some of the entries, or quit the debugging/snoop task. @endnode @node "Auto Repair" "Auto Repair" Auto Repair ŻŻŻŻŻŻŻŻŻŻŻ ______________________________________________ | | | | | |[·]| Virus_Checker II Auto Repair |[ ]|[ ]| |---+----------------------------------+---+---| |[ ] Auto @{u}R@{uu}epair | |----------------- Link Check -----------------| | [@@@@] @{u}I@{uu}gnore | | [@@@@] @{u}D@{uu}elete | | [@@@@] @{u}R@{uu}emove Virus | |----------------- File Check -----------------| | [@@@@] @{u}I@{uu}gnore | | [@@@@] @{u}D@{uu}elete | |----------------------------------------------| |[ ] Disable Requesters during File Scan | |[ ] Disable Requester(s) of Watch Function | | -------------- | | | @{u}C@{uu}lose Window | | | -------------- | |ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ|/| ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ This feature is only available to registered users for now. It can be found in VCPrefs where this button gives you acces to a window with switches concerning the requesters and automatic handling of viruses. @{fg shine}Auto Repair@{fg text} As said, this button gives you acces to a window with various switches. @{fg shine}Auto Repair@{fg text} This switch enables or disables the automatic handling of viruses. When enabled, the switches for automatic Link and File check handling will be unghosted. This switch can turn on or can turn off the complete auto handling feature. When enabled it does not yet mean the automatic handling is active. The Other switches have to be set for automatic handling to get active. @{fg shine}Link Check@{fg text} @{fg shine}Ignore@{fg text} When this switch is enabled, all files that are infected with a Link virus (like "Happy New Year 98" and so on) will be ignored. No repairing of the infected file is done. If a directory is scanned, a scan window has been opened, the file with the type of infection will be put in this window. No requester will open asking you if you want to ignore, delete or remove the virus. @{fg shine}Delete@{fg text} The infected file will automatically be deleted and no requester will pop up when you enable this switch. @{fg shine}Remove@{fg text} When this switch is enabled, the infected file will be cleaned automatically. No requester will pop up. @{fg shine}File Check@{fg text} @{fg shine}Ignore@{fg text} An file that has been infected with a file virus, will be automatically ignored when this switch is enabled. No requester will pop up. @{fg shine}Delete@{fg text} An file that has been infected with a file virus will automatically be deleted when this switch is enabled. No requester will pop up. @{fg shine}Disable requesters during File Scan@{fg text} If this switch is enabled, all error requesters that can occur during a filescan will be disabled. If the scan window was not opened, a requester still pops up. If a scan window was opened, the file on which an error occured is put in the window and a standard error message is mentioned. If you want to know the exact error message, you should disable this switch. @{fg shine}Disable requester of Watch window@{fg text} If this switch is enabled, the requester that would normally pop up when a watched file is changed, will now be disabled. @endnode @node "CommandLineOptions" "Command Line Options" Command Line Options ====================== Usage: Virus_Checker II U=UNPACKOFF/S,NOPROGRESS/S,N=NOWINDOW/S, CBB=CHECKRADBB/S,XFD/S,STDOUT/S,AUTOSCAN/S,CX_POPKEY/K, A=APPICONNAME/K,QUIT/S,D=DIR/M Available options: ------------------ U=UNPACKOFF This option turns off the unpacking of the archives. This can be also turned off using VCPrefs NOPROGRESS This option turns off the progressbar at startup N=NOWINDOW This overrides the normal Virus_Checker II options and causes Virus_Checker II to run without opening it's window This option can be set in VCPrefs CBB=CHECKRADBB This option makes Virus_Checker II check the RAD: bootblock for any viruses. RAD: is a normal disk and can be infected as well. XFD This option turns on XFDMaster.library checking. It handles crunched files as well as linked files. STDOUT This option works in tandem with the D=DIR/M keyword. If you give this option then Virus_Checker II will output anything it would normally display through a requester out throught the shell it was started from. This includes virus information and error messages. AUTOSCAN This option affects what happens when Virus_Checker II gets a message from AmigaDOS that a file or directory has been changed. If this option is given then Virus_Checker II will automatically scan the file/dir before telling you that it changed. This option can be changed in VCPrefs CX_POPKEY Using this you can tell Virus_Checker II which key you wish to use to pop up the interface. A=APPICONNAME Using this you can tell Virus_Checker II what to use as a name for it's AppIcon QUIT This option can be used to make an already running Virus_Checker II quit DIR If you supply a directory or file using this option then Virus_Checker II will start scanning it as soon as it has started up. @endnode @node "WorkBench" "Icon ToolTypes" Workbench ToolTypes ====================== Virus_Checker II can also be started from Workbench either through it's icon or in the WBStartup drawer. In this case Virus_Checker II will then get it's commands through icon ToolTypes. All of the ToolTypes are already in the Virus_Checker II.info file. They have been disabled (except 1) by putting a () around them. To enable a ToolType simply remove the () and save it. ToolTypes available are DONOTWAIT This is a Workbench ToolType and is required to be left enabled so that Workbench does not wait for Virus_Checker II to finish. UNPACKOFF This option turns off the unpacking of archives. This can be also turned off using VCPrefs. NOWINDOW This overrides the normal Virus_Checker II options and causes Virus_Checker II to run without opening it's window This option can be set in VCPrefs XFD This turns on xfdmaster.library which handles uncrunching packed files and unlinking of linked files CHECKRADBB This option makes Virus_Checker II check the RAD: bootblock for any viruses. RAD: is a normal disk and can be infected as well. AUTOSCAN This option affects what happens when Virus_Checker II gets a message from AmigaDOS that a file or directory has been changed. If this option is given then Virus_Checker II will automatically scan the file/dir before telling you that it changed. This option can be changed in VCPrefs CX_POPKEY Using this you can tell Virus_Checker II which key you wish to use to pop up the interface. APPICONNAME Using this you can tell Virus_Checker II what to use as a name for it's AppIcon QUIT This tells Virus_Checker II to preform it's checks and quit as soon as it is done instead of hanging around. DIR If you supply a directory or file using this option then Virus_Checker II will start scanning it as soon as it has started up. NOPROGRESS This option turns off the progressbar at startup @endnode @node "AppIcon" "AppIcon" Virus_Checker II AppIcon ======================== If Workbench is running when Virus_Checker II starts up it will put an Application Icon on the main Workbench Window. The reason for this AppIcon is for Workbench users who want to check files. Simply select the files/dirs you want to check, then drag them over to the Virus_Checker II AppIcon and drop them on it. Virus_Checker II will immediately start checking those things dropped on it. @{b}*****NOTE******@{ub} If Virus_Checker II finds a file called Virus_Checker_AppIcon.info in it's PROGDIR: then it will use this icon for the AppIcon instead of it's internal default one. @{b}*****NOTE******@{ub} Included in this archive you will also find a small collection of NewIcons, these Icons have especially been designed for Virus_Checker II by Lyle Zapato, he holds the complete copyright of these icons. You will find, next to a few drawers and a few main executable icons, two AppIcons in NewIcon style. @endnode @node "Files" "Files" Files "required" by Virus_Checker II and where they hide ======================================================== Virus_Checker II needs quite a few other files to function. bgui.library This library is obviously needed since it handles the complete look of VirusCheckerII. It is the library that handles the GUI. This has a small side-effect however: it needs an additional library namely: IffParse.Library. It is beyond me why it would need this library but if you don`t have this library installed, then BGUI will not open. For size reasons I haven`t added it. But you might be able to find it on Aminet or some CD with Amiga software on it. xadmaster.library This library enables you to check into file archives and (as soon VirusCheckerII supports it) also disk images like DMS and such. @{"Xad is shareware" link "Xad Shareware" 0}, support the programmer in the way he would like you to support. xvs.library This library enables a lot of extra virus detection routines which Virus_CheckerII did not yet have. Virus_CheckerII is supposed to get those in the future but for now, this library will protect you against to hard and agressive viruses now also known by Virus_CheckerII. xfdmaster.library This library is used to uncrunch packed files and unlink linked files. If you want to use it then it must be in LIBS: as well. Also needed in LIBS: is the sub-directory XFD. This is where some of the decrunchers are held. Virus_Checker.config This holds the configuration data for Virus_Checker II. Once saved Virus_Checker II reads it on startup and sets it self up the way you tell it to. This file can be in one of 2 places. PROGDIR: or S:. Virus_Checker II knows where it loaded it from and will save it back there when told to. If the file does not exist at all and you save it it will be placed into PROGDIR: This file should NOT be changed manually but please use VCPrefs for altering the config file. Virus_Checker.watch This file is a text file and can be changed with just a normal text editor. It holds the names of the files/directories being watched for changes. This file does NOT have to be present for Virus_CheckerII to run. This file will be in either PROGDIR: or S: Again Virus_Checker II knows where it loaded it from and will save it there. If it did not exist then it is saved to PROGDIR: Virus_Checker.check This file is a plain textfile and can be changed with just a normal text editor. It holds the names of the files/directories beeing checked for virus upon start-up. This file does NOT have to be present for Virus_CheckerII to run. This file will be in either PROGDIR: or S: Again Virus_Checker II knows where it loaded it from and will save it there. If it did not exist then it is saved to PROGDIR: Virus_Checker.Arc This file contains by default the LHA, LZX and ZIP specifications needed and used by the archive checking of Virus_CheckerII and will contain all future specifications of other archivers you add to it. This file is NOT a plain textfile, it also contains binary and should NOT be edited manually! This file also doesn't have to be present for Virus_CheckerII to run, but if not found or found empty, Archive CHecking will not be possible. This file will be in either PROGDIR: or S: Again Virus_Checker II knows where it loaded it from and will save it there. If it did not exist then it is saved to PROGDIR: VirusChecker.brain This file contains the latest bootblock, link and file virus recognition streams, routines and removal codes. In fact, this file will probably be updated the most so that one does not have to download the complete archive everytime as is the case with some major viruskillers. This file should be put in either L: or PROGDIR: VCBrain This file is found in PROGDIR: or s: and holds the Bootblocks learned Virus_Checker.key This is the keyfile for Virus_Checker II and you should only have one of these if you have @{"registered" link "Shareware" 0}. It can be in one of 3 places. PROGDIR:, The directory pointed to by the ENV: variable KEYPATH or in S: VCPrefs This program can be found in SYS:Prefs/ if installed correctly and enables you to edit the settings of VirusCheckerII tabs.gadget This file should be placed in SYS:Classes/Gadgets/ or Libs:Gadgets/ It is required if you want to run VCPrefs @endnode @node "Locale" "Locale" Localization ============ Virus_Checker II is now localized and 200 odd text strings can be altered. If you wish to translate these strings into another language then please @{"contact me" link "AuthorInfo" 0} and I will send the information over to you. Locale already done are @{"Nederlands" link "Credits" 59} @{"Danish " link "Credits" 60} @{"Italian " link "Credits" 61} @{"French " link "Credits" 62} @{"German " link "Credits" 63} @{"Spanish " link "Credits" 64} @{"Serbian " link "Credits" 65} @{"Protugeese" link "Credits" 66} @{"Catalan " link "Credits" 67} If you plan to translate any of the strings, please contact me first so I can tell you if someone is already on this project and if not, to receive the latest catalog information. If you have translated the catalog, please send at least the .ct file (translated file) to me. If you are able to compile the catalog, feel free to do so. Be aware that I have from version 1.1 started at 1.00 with the catalog since a lot has changed and the catalog had not been changed dramatically. Now it has and the catalog also should be called Virus_CheckerII.catalog with at least version 1.00. Do NOT! rename the old Virus_Checker.catalog to Virus_CheckerII.catalog and change the version string, since side-effects could occur from strange enforcer hits to hard crashes which might scare even the most advanced users. @endnode @node "Installing" "How to install Virus_Checker II" Installing Virus_Checker II =========================== Virus_Checker II comes with it's own installer script. This installs Virus_Checker II onto the disk of your choice. It then asks where you want to run it from. The choices are S:User-Startup, SYS:WBStartup or Manually. It does NOT have to move files around anymore, it uses a project icon to start Virus_CheckerII from WBStartup. If the installer script doesn't work, or doesn't do everything it is supposed to do, please contact me and notify me about the problem, that way I will be able to fix the installer. If for some reason the installer doesn't work, or you don't want to use the installer, here is how and what you need to do to install VirusCheckerII manually: - First copy the complete VirusCheckerII directory (after unarchiving) to anywhere you like. Make sure you remember the full path to this directory. - Then, you need to decide if you want to have VirusCheckerII started from WBStartup, User-Startup, or not at all. - If you want it started from User-Startup, then you need to do the following: - Copy VirusChecker.brain to L: - Add [FullPathToVCII]/Virus_CheckerII to the s:User-Startup - If you want VirusCheckerII started from WBStartup, then you only have to do one thing: - Copy and edit the Project icon. In the VirusCheckerII directory you can find a 'VC_II_Project.info' icon. Put [FullPath]/Virus_CheckerII in the Default Tool and copy this icon to the WBStartup. - Then copy all the supplied libraries to Libs: Make sure you delete the old XFD slaves (so the best thing is to delete the XFD directory from Libs: and replace it with the XFD directory supplied with VirusCheckerII). - Copy the VCPrefs program and it`s icon to SYS:Prefs/ for easy acces... - If you want to use a translation of VirusCheckerII, then you also need to copy the desired language to the locale directory. Now, since there aren't many translated catalogs, it might be possible your language is not there. Choose the one closest, or just use the default (built-in) english language. If you want to have VirusCheckerII translated in your language, feel free to contact me. If you don't know how to install a catalog, please refer to your system documentation. - If you made it so far, then start to smile, because you have now succesfully installed VirusCheckerII @endnode @node "4eb9 Link Virus" "4eb9 Link Virus" Possible $4eb9 Link Virus ========================= This is a special check that is performed if you have turned off the XFDMaster library. With the XFDMaster library, the library checks if it is a so called 4eb9-linked file. If so, it unlinks both files and also tries to decrunch the linked files (since most linked files are also crunched). If you happen to have turned off the XFDMaster library (which I do not recommend since it would seriously degrade your safety as crunched files aren't checked and might contain viruses in the crunched part) Virus_CheckerII is still able to tell you if the file is a 'Possible $4eb9 Link File'. It warns you of a possible virus. The current practice in viruses is to use a normal program of some fame, link in a virus and then call it something new and better. The lzx, dopus, etc fakes are all examples of this. When you get this message come up it does not mean that the program is a virus but to be safe be extremely careful with it. Write protect all drives, switch off the computer for at least 30 seconds after you have finished running the program. You could also always turn on the XFDMaster library and check the file for linked/decrunched viruses. @endnode @node "Archives" "Archives" Checking into Archives =========================== This option is only possible if you are @{"registered" link "Shareware" 0}. Once registered you can get Virus_Checker II to look into these files. Virus_Checker II can not (yet) remove any viruses that are in the files but will warn you. When it finds one it will give a special out to the @{"Scan" link "Scan" 0} window or the @{"Arexx" link "Arexx" 0} varibles in the format Lhafile.lha -> infected.exe = SCA Virus The Lhafile.lha is the filename of the infected archive, which file is infected is shown after the '->'. You can now, with the help of the Archive Options window, have Virus_CheckerII check inside EVERY archive you desire. For now a few restrictions apply to the addition of new types. LHA and LZX archives are really easy so they have been added by default although they can be removed. Restrictions occur in the form of the command which is started to unpack an archive. You HAVE to have two %s wildcards in the command string and the first is always the wildcard that is replaced with the location and name of the archive. The second is always the wildcard that is replaced with the name of the destination directory. Using UnZip with the internal Archive Options is not recommended. Since UnZip is very unstable it might crash occasionally. However, now VirusCheckerII supports the @{"XADMaster.Library" link "Xad Shareware" 0}. Currently only file archives will be recognised and checked inside, but next versions of VC will also provide disk image checking. @endnode @node "Xad Shareware" "Xad Shareware" The xadmaster.library is Shareware with very special conditions. There are no usage restrictions (means this is no Crippleware!), and xadmaster.library use can be implemented into programs without any restrictions. Only the end users have to pay shareware, when using xadmaster.library. There are 3 forms of payment to get a registered user: - Send US $20 (or as DM) to my snail mail address or use any other more secure transfer system. - Make detailed bug reports about 3 currently unknown bugs. I decide whether a bug report is counted or not. Mainly this depends on two facts: - was the bug already reported - does the description help me to find the bug After the first report you will get a partly registered user :-) - You make an own external client and send me the source and the client for inclusion in next release. Some more are good as well! The last form is the most wanted! For programmers using xadmaster.library in own applications (f.e. in virus scanners): - It would be fine, if you would tell me suggestions or bugs, as implementing xadmaster.library use may show you some problems. - You must state above conditions in your distribution, at a place, where users can read it. - And please do not forget: Most time you are users as well, so think about above conditions. NOTE: This conditions only cover the xadmaster.library! External clients may have different legal state. For example LZX and Zoom both are Freeware. So expect clients to have any legal state. You need to check this for every client. Normally the version string in the client should tell you what type it is. IMPORTANT --------- Xad is a program by Dirk Stoecker! Any bug reports, comments or whatsoever on the xadmaster library should go to him. Any comments, problems, etc. about the support of the xadmaster library in VirusCheckerII should go to me (Alex van Niel). Dirk Stoecker can be contacted at: ************************************************************************ * snail-mail: * e-mail: * * Dirk Stoecker * stoecker@amigaworld.com * * Geschwister-Scholl-Str. 10 * dstoecker@gmx.de * * 01877 Bischofswerda * world wide web: * * GERMANY * http://home.pages.de/~Gremlin/ * * phone: * pgp key: * * GERMANY +49 (0)3594/706666 * get with finger or from WWW pages * ************************************************************************ @endnode @node "Arexx" "Arexx" Virus_Checker II Arexx commands =============================== Virus_Checker II does have an Arexx port and the name of the port is Virus_CheckerII. With this port you can get Virus_Checker II to do things from external programs. Commands supported so far are @{fg shine}QUIT@{fg text} eg. address 'Virus_CheckerII' 'quit' This causes Virus_CheckerII to shut down and quit @{fg shine}RELOADBRAIN@{fg text} eg address 'Virus_CheckerII' 'reloadbrain' This will cause Virus_Checker II to reload it's brain file. With this command you can update the brain and get Virus_Checker II to reload it without having to get Virus_Checker II to stop @{fg shine}SCAN@{fg text} eg address 'Virus_CheckerII' 'scan filename' This command causes Virus_Checker II to go out and scan the file or directory given. All requesters will be turned off so it can be used un-attended. The get the results back to the program Virus_Checker II sets some ARexx variables. These are a stem variable called VCHECK VCHECK.0.0 holds how many infected files where found. 0 = none. VCHECK.i.1 holds the file names of the files/archives infected VCHECK.i.2 holds the name of the virus that infected the file VCHECK.i.3 holds the infected filename in the checked archive (no paths) "" = this file is not an archive for example if Virus_Checker II found 2 files infected. 1. SYS:C/LIST infected with the SCA virus 2. SYS:WBStartup/runme infected with the Saddam virus 3. SYS:Download/Virus.lha (format.exe) infected with the HNY96 virus and SYS: was scanned the results would be VCHECK.0.0 = 3 VCHECK.1.1 = SYS:C/LIST VCHECK.1.2 = SCA VCHECK.1.3 = 0 VCHECK.2.1 = SYS:WBStartup/runme VCHECK.2.2 = Saddam VCHECK.2.3 = 0 VCHECK.3.1 = SYS:Download/Virus.lha VCHECK.3.2 = Happy New Year 96 VCHECK.3.3 = Format.exe @{fg shine}NOTIFYWATCH@{fg text} eg address 'Virus_CheckerII' 'NOTIFYWATCH password' This command and the next are very special. They work in conjunction with the file watch list. Whenever Virus_Checker II gets a signal that a file or directory that it is watching has changed it will warn you. If you have Autoscan turned on and give this command to Virus_Checker II it will report to you the results. The command will not return to you until something has happened and that is why the following command is for. If you need to cancel the notifywatch then you will need to use the following command to get it to release your script. This command is of ideal use for BBS systems. You could set Virus_Checker II to watch your uploads: directory and when a user uploads a file it will scan it and return the results to you. An example is /* Notifywatch example */ options results address 'Virus_CheckerII' 'NOTIFYWATCH Mypassword' if VCHECK.0.0 = 0 then do say 'No viruses found in scan' exit end say 'Viruses found: ='VCHECK.0.0 do i o 1 to VCHECK.0.0 say 'Filename was 'VCHECK.i.1' and virus was 'VCHECK.i.2 end exit @{fg shine}STOPNOTIFYWATCH@{fg text} eg. address 'Virus_CheckerII' 'STOPNOTIFYWATCH Mypassword' This command will free a watch started by the NOTIFYWATCH command. You only need to give it the password given in the command above. You will need to do it from a seperate script as the other one will be waiting for the return still. @{b}NOTE:@{ub} The password is case sensitive and needs to match the one given in the NOTIFYWATCH command @endnode @node "VC II Related" "VC II Related" Bulletin Boards: Virus Help Denmark's support BBS Name............: XPoint BBS SysOp...........: Benny Pedersen Phone Number....: +45 6381 8005 Open............: 24 Hours Modem type......: 33.600 v.34+ & ISDN Country.........: Denmark Request.........: Viruschecker Note............: Always the newest viruskillers. Modem users all over the world now know where they can find a clean copy of the newest VC_II. With magic request name _VIRUSCHECKER_ VirusCheckerII Dutch support BBS Name............: The Cube Sysop...........: Locutus Phone...........: +31(0)704150462 & +31(0)704150459 Open............: 24hrs Modem...........: 28k8 Country.........: Netherlands Request.........: Note............: A fast Amiga software board. Also hardware products can be bought here. A special conference for VirusCheckerII has been created here all latest official releases will be placed there as well. Official VirusCheckerII UK Registration Site Name............: Elevate BBS Sysop...........: Paul Compton Phone...........: +44 (0) 1329319028 Open............: 24hrs Modem...........: Country.........: United Kingdom Request.........: Note............: The official registration site for VirusChecker II for the United-Kingdom. If you are living in the UK and want to register the easy way, then try and contact this BBS. Internet: @{b}www.elevatebbs.freeserve.co.uk@{ub} Elevate BBS, Official UK Registration site for VirusCheckerII @{b}home4.inet.tele.dk/vht-dk@{ub} Home of Virus Help Team Denmark, free PC, Amiga and Mac AV utilities. You can also find the latest updates of VirusCheckerII and the brainfile here. @{b}www.welcome.to/vht-nl@{ub} Home of Virus Help Team Netherlands, free Amiga anti virus utilities. The latest versions of VirusCheckerII and VirusChecker.brain can also be found here. @{b}www.onelist.com@{ub} The place where you can find the mailinglist for VirusCheckerII/VHT-NL. Look for viruschecker2 and just subscribe to it. @{b}www.reg.net@{ub} The place to go when you want to register VirusCheckerII online and you have a credit card. You could search on RegNet for VirusCheckerII or just use the regnet number of VirusCheckerII : 5296 And at most Aminet mirrors offcourse. If you have any VirusChecker related addresses that are not on this list, please pass them through so that I can add them to the list after I have checked them out offcourse :). If you have any VirusCheckerII or virus related matters and you want to e-mail me, then please do that to vht-nl@dds.nl This address has been especially created for Virus Help Team NL and VirusCheckerII, so please use it. @endnode @node "FAQ" "FAQ" Frequently Asked Questions ========================== * How do I check multiple drives? Well, this is a pretty easy one, you just have to know it. It can althouh only be achieved when you have enabled the AppIcon. When you have enabled the AppIcon, multi-select the drives you want to check by holding down the SHIFT button and select them, then drag the drives over to the Appicon of Virus_CheckerII and all drives will be scanned. * How do I check multiple files? When you want to check a complete directory, no problem there. Enter the directory, don't select anything further and press ok. Virus_CheckerII will then detect that it is dealing with a directory and will immediately start scanning the directory. If you only want to select a few files then a small problem occurs. Virus_CheckerII does not yet support multi-selecting files in it's file requester. I hope to have this added in the near future. For now you can achieve this by using the AppIcon. Multi-select the files by pressing the SHIFT button and select them in the workbench. Then drag the selection to the AppIcon and Virus_CheckerII will automatically check these files. For Dopus 5 magellan version users, a slight problem will rise. You can't just drag these to the appicon. Since you can not drag the selection to the workbench when you are in names-mode, you should select Icon or Icon Action and if the file does not appear to be in the list, then also select the Show All option. Then Multi-select them by SHIFTing and drag the selection to the AppIcon. Virus_CheckerII will then automatically check these files. * Why doesn't the Window Snapshot work? Well, it does work, just open the window by pressing the right mouse-button. Then place the window where you would like to have it positioned. Then select 'Snapshot Window' (Window menu) from the menubar and select 'Save Config' (Project menu) from the same menubar. Then the position of the window has been stored and Virus_CheckerII will always try to open it's window on this position if it can. Or you could go to VCPrefs and adjust the position of both icon window and full window (which isn`t possible from within VC). You can do this by going to the Miscellaneous tab in VCPrefs. * How can I snapshot the position of the MWB appicon? Unfortunately, this isn't possible yet. If you want an appicon that can be positioned on your workbench, I suggest you use an external appicon. See @{"Workbench AppIcon" link "AppIcon"} on how to do use such an icon. More questions and answers will soon be added. @endnode @node "Disclaimer" "Disclaimer" Virus_Checker is (c) Copyright 1990-1995 by John Veldthuis, all rights reserved. Virus_Checker II is (c) Copyright 1997-1999 by Alex van Niel, all rights reserved. Any possesor of this version "Virus_Checker II" for the Amiga is hereby granted a non-exclusive license permitting its use and/or redistribution, subject to the following terms and conditions. Permission is hereby granted to freely redistribute this version of "Virus_Checker II" via electronic bulletin board systems (BBS's), freely redistributable disk collections (such as provided by Fred Fish), service bureaus (BiX, GEnie, CompuServe, etc), and networks such as USENET, BITNET, and Internet, provided that such distribution includes this unmodified License, and all of the documentation files (README and .doc files), in addition to the executable, and with all copyright notices intact. Access to the source code must also be available and allowed. This archive may be freely redistributed, but only in totally unchanged state, i.e. no files can be added, deleted, modified etc. All copyright notices in the program and its documentation must remain on their places. Also ".displayme" and other files, usually with "wonderful" ANSI graphics, so obvious at various BBS's, cannot be added. Without prior written permission from the author, it is prohibited to sell or otherwise convey this version of "Virus_Checker II" for monetary or other forms of compensation, other than the customery service and/or duplication fees as may be charged by the distribution mechanisms identified above. It is further prohibited, without prior written permission from the author, to include this version of "Virus_Checker II" in whole or in part, in the distribution of any commercial hardware or software package, or component thereof. This version of "Virus_Checker II" is provided "as is", without express or implied warranty. The author makes no claim or representation about the suitability of this software for any purpose. The author disclaims any and all warranties with regard to this software, including all implied warranties of merchantability and fitness. In no event shall the author be liable for any special, indirect, or consequential damages, or any damages whatsoever resulting from loss of use, data, or profits, whether in an action of contract, negligence, or other tortious action, arising out of or in connection with the use or performance of this software. --- AmigaGuide, AmigaGuide.info, amigaguide.library, WDisplay, WDisplay.info (c) Copyright 1992 Commodore-Amiga, Inc. All Rights Reserved. Reproduced and distributed under license from Commodore. AMIGAGUIDE SOFTWARE IS PROVIDED "AS-IS" AND SUBJECT TO CHANGE; NO WARRANTIES ARE MADE. ALL USE IS AT YOUR OWN RISK. NO LIABILITY OR RESPONSIBILITY IS ASSUMED. @endnode @node "Tips" "Hints & Tips" Hints & Tips ------------ This section of the manual contains a few hints and tips concerning the usage and configuration of VirusCheckerII. Some entries placed here can even be guides to undocumented features. @{b}1)@{ub} Having a default directory which VirusCheckerII opens everytime one starts a file/dir scan is really handy. It not only spares you the time of going through thousands of directories but also you can unpack files at that default directory and check the files without having to specially go to that directory. As from 1.9 you can now configure the default drawer for the requester. This can be done from VCPrefs, after having it configured you can save the options and every time the requester opens for checking a directory you will start in the default directory just configured. @{b}2)@{ub} For some reason updating VirusCheckerII from 1.8 to 1.9 caused a few problems for some users. If you also have updated VirusCheckerII from 1.8 to 1.9 and experience crashes during initialisation then try to remove Virus_CheckerII completely and re-install it. This worked for those people who had problems with it. Thanks to Jonathan Jackson for reporting the problem and supplying with this temporarily sollution. @{b}3)@{ub} For those of you who keep wondering what this Hochofen and Zakapior stuff is when you turn on SnoopDos, here is the deal. VirusCheckerII searches in memory for a certain portname. If that isn`t found, the virus is not considered active. So, as long as you see these routines fail, nothing is wrong. The only task that should result OK is the opening op de timer.device @{b}4)@{ub} At the WOA I got a question if VirusCheckerII could search also the KEYIFLE: assign for the VirusChecker keyfile. Here is how you could do this without VC needing to be updated: Create in a texteditor a file which contains the name of the assign you want VC to search for the keyfile. So if you have a drawer which has all your keyfiles, and i pointed to by an assign called KEYFILE: then this is exactly what you put in the file. Then save this file to ENVARC: and name it KEYPATH. Reset your computer and the keyfile will be read from KEYFILE: from now on (until you delete or alter the KEYPATH variable) @endnode @node "AuthorInfo" "Author Info" Here is, for fast reference, how to contact me, below I will tell something about myself and then some: Snail mail: Alex van Niel Billie Holiday str. 116 2551 WK Den Haag Netherlands Phone: +31(0)703682789 UUCP/Internet: pinkie@dds.nl vht-nl@dds.nl Well, it all started back then. When I was merely 8 years old and my dear ol' dad bought his first and last Amiga (who can blaim the damned and condemn the fool? I know better after having been touched by the PC and Mac... I RAN to the Amiga :) ) which was the Amiga 1000 which then was shipped with the 1.1 kickstart. Now that was real cool, we had had a c64 before but now we could use icons and press them and multitask and wow and so on. Well, a new world opened itself up and it did not take long before I was charmed by this delightfull electronical woman and had me so wound up around her finger that I learned English really fast. Like: say, Alex, what the hell are you doing? Shouldn't you be studying English or something like your other 10/11 year old classmates? Er, well miss, I have already finished. Say WHAT?... Er... well, go play then.. And I played a lot back then :) Anyway, basic was IT you know back then for me I could not wish for more. Although playing Larry (which kid didn't? :) ) and for 3 years SpaceQuest 1 (hey, you can't be a fast learner in EVERY field :) ), I realised I wanted to do the same, but with basic? Well, that gave me some disadvantages since AmigaBasic was the only shit I knew and assembler was something geniuses used. So I started making ascii games (damn, were they UGLY!) anyway, that was not enough so I bought Amos Classic a few years later (through a Magazine) and created some nice thingies, but GFX (strangely enough) in the computer I could not create (although I am studying animation right now which has something to do with that :) ). I somewhere got to know dudes from AGABBS. I started with a simple tool: AgaPoll. This tool would make it possible for MaxsBBS users (which I used at that time) and sysops to have MaxsBBS use an external mailer to call out and send it's mail. From there a lot of products followed, starting in Hisoft Basic which could be compiled but was slow, to programs in Amiga_E. Some have seen the public, some have seen a few systems and some have not even seen the light (my computer is very dark :) ). Not much later when I was working on DevilCheck and LiquidStyler, I realised that I had to buy Amiga_E because the demo version which could handle up to 32k source files could not handle my code anymore ( i had a some what old registered version which I got with a magazine but things get outdated and upgraded and bugfixed), so I bought it and was happily amused to see that my huge DVC code was compiled succesfully. However DevilCheck did not receive lot's of response so I lost my interest in that project (as had happened with a lot of other products) especially since most of the stuff I wanted in, myself, had been put in already. The DayDream BBS had been sold and the new author contacted me since something that I had created apparently had reached him (I had by then created a few DayDream BBS doors) and so I offered to help him. He said he could use some help in the Fidonet area since he had no idea what to do with this whatsoever. I myself was connected to a lot of networks at that time and so started to recode the DreamToss utility which handled importing and exporting of fidonet-compatible mail-packets since the old util had not been updated since the stone-age and a lot of bugs were still in there. I did not know anything about assembler at the time and since DreamToss was written in Asm I just HAD to recode it. Next to the fact that there were nearly NO comments in it. I realise now, that I might be able to figure it out at present (viruses don't come with handy comments you know :) ) but back then I had no clue. Well, I had been extremely active at school and with my hobby but two years ago this all changed. Things started to get really busy at our school. In the first year I had already had the pleasure of experiencing the pressure that comes with a deadline. 12 or 16 hour days were very common and two years ago this started again right after the summer vacation when I and a friend of mine started to animate two animations for the KRO (television station here in the Netherlands) not at the same time but had a deadline set at 3 weeks from the starting date. Well, this resulted in neglections of my projects and after this busy period, I had to recode a lot of DevilCheck and complete recode of TicMover (a tic file manager for a.o. DayDream BBS) since I forgot what most of the stuff did. TicMover had been finished but again no reaction, same as with the new update of DevilCheck which got a new feature and some bugfixes. Well, DreamToss was going very well but after a while I got bored with it since I could not fix a lot of problems occuring as a result of the difficult structure of fidonet stuff. Then last year Jan Andersen contacted Cor de Bruin who had heard fom us apparently and asked if we could create a new VHT here in the Netherlands adn if we could supply a coder. Well, we were glad to help and a coder was no problem. I gave ALL the code of DreamToss as well as ALL research material (5 mb or so) to Theofiel, a friend of again a new coder of DayDream BBS who had been waiting for the new DreamToss for a long time now. So this project I bounced and after ditching some other stuff I started doing some research on Assembler and started looking at some assembler stuff. At first I did not understand anything but as the days and weeks went by, I grew in to it and in (I guess) 3 months I learned myself to code in Assembler. Well, a little bit. When I got the Virus_Checker code I still did not understand a lot of it but after studying most of the things became apparent. Jaap v.d. Bos helped me a lot especially in mastering stuff on the binary level, but most of it I had to do myself. I still don't understand everything and I learn a lot each day as I go through the code and create a new feature (or bug, or both :) ) which causes the compiler to scream for longer jumps and causes me to go through the code again. But I am learning and with your help, I can become an experienced assembler coder. @endnode @node "Credits" "Credits" CREDITS ======= My thanks go out to... (in no particular order) Georg Hörmann For the inclusion of xfdmaster.library & for the Xvs Library. Leo Davidson For Arexx script for use with Virus_Checker II and DOpus 5 ARexx Developed on an Amiga 1000 and is a 100% Amiga product. Jan Andersen For sending all the viruses and helping me get information everywhere. For getting Macro68 for me, sending the manual of Macro68, getting translators for the catalogs, finding bugs, checking infections and recognitions and lots and lots and lots and lots and lots more.. :) Dave Jones For sending the removal and recognition code of: - ZIB virus - BOKOR 1.01/1.05/1.06/1.1 Information and help on the Happy New Year 96 virus. Help with the ShortenHunk code for removing viruses from Hunks and lots more. Michael Knoke For allowing me to have and use of his FormatProtection routines which were taken from his great program: Master Control Program Dave Dustin 90 percent of all my thanks go out to you offcourse for donating the VirusChecker source to the Virus Help Team DK. If it wasn't for you, VirusChecker would still be a two years old outdated virus hunting utility. So please accept my apologies for forgetting I won't pretend to have a lot of reasons, I just forgot. John Veldthuis Offcourse, for creating VirusChecker and supporting me with a lot of help and providing all the data I needed, especially for his help with Macro68 and the includes Jan v/d Baard For creating BGUI.library which gives VirusCheckerII it's great easy to use interface (although some think otherwise) Heiner Schneegold For help with HitchHiker 2.01, ZIB link virus, the HANF virus and some more info and hints/tips. Jim Buckley For his help with the guide and the great response he is giving me through his letters the new documentation on the buttons is all his doing for which I am really gratefull. John Marchant For his Arexx script VCTest.rexx (can be found in the Arexx drawer) and some helpfull tips and hints concerning the arexx interface/port. Paul Compton For his limitless support for VirusCheckerII and for his great promotion of VirusCheckerII in the UK and further. James Lowe For his support and webmastering :) of the VHT-NL homepage Charlene McNulty For her superb support, tips and hints on VirusCheckerII and it`s mailinglist, and offcourse all the entertaining messages :) Also a special thanks to all the guys and girls that supply me, Jan Andersen and all the other virus fighters with the virusses. Locale translations Nederlands Jan Hendrik Lots, Updated by Alex van Niel Danish Jacob Laursen & Niels Bache Italian Giacomo Magnini French Didier Giron German Dirk Stöcker Spanish Ignacio "Nacho" Garcia Cuadrado Serbian Petar Cuckovic Portuguese Jaoa Beleza Catalan Daniel Avella If this list isn't correct, please let me know. And especially to my Beta Testers who put up with me everytime. In no particular order Lars Kristensen Torben Danoe Jim Maciorowski Jan Andersen Henrik Lauridsen Giacomo Magnini Jonathan Jackson Hubert Maier jun. And further to all registered users for their loyalty, their help and their patience, and everybody I forgot... Alex van Niel ============= @endnode @node "History" "History" 2.5 Released 3 October 1999 Size 73.896 bytes Changed interface to VirusChecker.brain since I also changed it in the brainfile itself. Fixed problems with the 'Edit Settings' function. When run from Cli it would cause unexpected results sometimes even locking VirusCheckerII up. This function REQUIRES you have VCPrefs in SYS:Prefs/ In the near future this will be configurable. Fixed the lack of a task name of VirusCheckerII this was caused by the way VirusCheckerII is launched as sub-process. !WARNING! --------- This version of the VirusCheckerII REQUIRES version 3.0 or better of the brain. If you use any older version, this is totally at your own risc since unexpected errors and problems MIGHT occur! Which MIGHT cause loss of data. I am not and will never be responsible for any damage done. 2.4 Released 30 September 1999 Size 74.200 bytes Replaced "visible" checking for memory viruses with special routines (no more "Zakapior" , "Greetings to Hochofen" , etc, messages in Snoopdos) Made VirusCheckerII truely Y2K compatible. Logfile now shows Y2K compatible dates. Some internal fixes, optimisations and speed adjustments. Also fixed some keyfile problems. 2.3 Released 18 August 1999 Size 73.824 bytes Removed the "Unarchiving" and "Cleaning Up" window These messages are now displayed in the scan window itself if present. If no scanwindow is present then nothing will show you that something is beeing unarchived. Thanks to Paul Compton and a lot of others for this idea. Added new features! Delete Protection! You now can prevent viruses from deleting every important file on your HD Made memory check delay configurable Fixed some small glitches and potential bugs Localised VCPrefs (check VCPrefs.cd for translation) Some internal stuff in VCPrefs and VirusCheckerII redone, fixed and optimised 2.2 Released 18 July 1999 Size 73.976 bytes Heightened security on brain initialisation. Latest fix with timer.device could cause older versions to crash or malfunction. 2.1 Released 22 June 1999 Size 73.768 bytes Fixed 68000 related bug. When Xvs was turned on, VirusCheckerII would crash on 68000 machine upon file checking. This was caused by again some register copied wrongly. Fixed a few problems with Xad support routines. (softlink and directory handling) (to do: error handling better) Thanks to Dirk Stoecker for reporting this Fixed a bug for unregistered users: no file was scanned for virus (woops) Thanks to David Amies for reporting this New Feature: Icon Window can now also be positioned (separate from Main Window) and snapshotted. Use the preferences program to either snapshot the Icon Window settings or type them in manually. (Thanks to Paul Compton for this idea) VCPrefs: Fixed problems with loading of config from disk Thanks to a lot of users for reporting this :) Fixed Format Protection configuration Unreliable results sometimes caused the feature to be disabled and enabled on random Thanks to Pam for reporting this Added to Format Protection which holds all loaded devices available from which one can choose to protect against formatting New Feature: Snapshotting of IconWindow now possible. (Thanks to Paul Compton for this idea) Installer: Completely redone installer Made update feature smart Fixed version copy (CBM's Installer program not needed anymore) Thanks to several users and betatesters for reporting problems with the installer, especially Jonathan Jackson. 2.0 Released 10 April 1999 Size 73.492 bytes Removed the options window from the main program and created a separate preferences program for Virus_CheckerII. Added an experimental feature which moves files which are scanned after they have changed and were beeing watched. This feature will be changed a lot next version. It will then be possible to specify destination drawers per file/drawer. Added XAD support (checking in archives and disk images) file archive only for now Added the feature in the Project menu that will bring up a window showing all viruses VC can handle. Thanks for Jan Andersen for this idea. Optimised the Vector Show window. Removed some obsolete code. Added version reporting of xadmaster and xfdmaster library into the about window. Fixed a problem with the BGUI library and it`s reporting that it could not be opened. It appears BGUI also need the IffParse.Library. If that library is NOT present, BGUI will not open. Error reporting didn`t tell that BGUI failed but is now fixed. You still need the IffParse.Library. 1.12 Released 17 Februari 1999 Size 81.884 bytes Fixed a bug concerning files unavailable for reading. If a file was locked then three errors were given. I finally found the source. Fixed a few "bugs" with the OpenDevice() routine thanks to Hubert Maier jun. for finding these. 1.11 Released 12 January 1999 Size 81.824 bytes Added a new feature: Format Protection Fixed a few potential new bugs again :) Fixed a few bugs concerning the Capture Vectors. Thanks to Jonathan Jackson for reporting this. Cleaned up some of the messy code. Also made some code faster and more stable. 1.10 Released 9 December 1998 Size 79.080 bytes Added BootBlock Checking support for the XVS library Fixed some potential bugs in the XVS routines in VirusCheckerII Added spanish translation by Ignacio "Nacho" Garcia Cuadrado Added serbian translation by Petar Cuckovic 1.9 Released 4 November 1998 Size 78.956 bytes Added support for memory surveilance by Xvs Library routines Added support for file check and repair functions of Xvs Library Fixed a bug occuring with the Arexx port. VirusCheckerII didn`t report what file was infected with what. Fixed a bug occuring also with the Arexx port. When a file was scanned launched from a arexx script and a file was infected then a requester would pop up which isn`t supposed to happen. Thanks to Dr. Ice sEASONS and John Marchant for reporting these bugs. Fixed a minor bug in the Arexx port notification system. Now also the infected file in an infected archive is reported through the VCHECK variables. Fixed the Progress Indicator which pops up during initialisation Made the Default Scan Path editable. Added a third variable to the Arexx port. This will show the infected file in an infected archive. If no archive was checked, this variable should not contain anything. However, I am not that good in Arexx and found out that checking if the variables name is inside was a way to find out if there was a filename or 'nothing' inside. Check Virus_CheckerII.dopus5 and XVirusCheckerII.rexx in the Arexx directory for more info/help. Fixed logfile support. Everytime a scan was initiated, the log was overwritten, this isn`t the case anymore. Now you might end up having a really biiiig logfile and won`t loose the previous scan results. 1.8 Released 04 October 1998 Size 76.016 bytes Fixed some minor stuff Some cosmetic stuff done; inside and outside (some ghosted buttons are removed for now for instance) Preparing some new features for version 1.9 1.6 Released 05 July 1998 Size 76.120 bytes Fixed the malfunctioning centering in the requesters Fixed false virus recognitions Optimised decrunching Crunched and Linked files are now almost fully supported (first linked and then crunched files can now be handled) Speeded file checking up a little (because of fix 2) Fixed checking of broken/invalid executables (would lock up if not a real executable or illegale chars were present...) Fixed IRQ virus recognition. Thanks to Neil Bothwick for supplying the file on which VirusChecker did a false recognition. @endnode @node "Brain History" "Brain History" The history of the brain file is also changed. The latest version and changes will be put on top. 3.0 Released 3 October 1999 Size 22.956 Redone interface to the routines of the brain. For future compatibility and easy acces for third party developers. Fixed (again!) some bugs. A5 register mix-ups, return code problems etc etc Fixed fail recog of AMOS Joshua Trojan in memory It would detect normal AMOS programs, sorry to all those who had problems. Thanks to everyone that reported it. AMOS remains a bit strange to me. (No offence meant.) !WARNING! -------- This version of the brain REQUIRES version 2.5 or better of VirusCheckerII. If you use any older version, this is totally at your own risc since unexpected errors and problems WILL occur! I am not and will never be responsible for any damage done. 2.23 Released 30 September 1999 Size 23.128 Fixed some minor and potential bugs 2.22 Released 24 September 1999 Size 23.128 Quick bug fix: Zakapior was sometimes detected when not even in memory. This was caused by a tiny bug in the new and improved routines that look for the Trabbi Fuck and Zakapior virus. The routine works 100% now and thus will be implemented in the main program very soon. 2.21 Released 22 September 1999 Size 23.120 Added AMOS Joshua Clone Trojan, thanks to Christian Uceda for reporting this and supplying the virus. 2.20 Released 19 September 1999 Size 23.112 Added AMOS Joshua Trojan (MsxR, LoadWB & Workbench variants), thanks to "Starblazer" for reporting this to me. Internal searching for tasks touched up. Some serial I/O ports might still have problems, but that will be fixed soon. (Internal VirusCheckerII routines need update) 2.19 Released 05 August 1999 Size 22.656 Added Zakapior memory detection & removal forgot about that one... woops. 2.18 Released 18 July 1999 Size 22.604 Added Zakapior Trojan virus Added Doubledensity BootBlock virus Fixed dangerous security which "could" crash older versions of VirusCheckerII. NOTE! This version of the brain REQUIRES VirusCheckerII v2.2!!!! 2.17 Released 22 June 1999 Size 22.196 bytes Added WireFace/HDToolbox trojan virus Removed continuous call for Timer.device 2.16 Released 10 April 1999 Size 22.196 bytes Fixed again a small enforcer hit problem 2.15 Released 11 Februari 1999 Size 22.244 bytes Added Stdc#1 virus, thanks to David Knell. 2.14 Released 08 Februari 1999 Size 21.992 bytes Fixed a serious bug in the routines removing the virus. Added Vg1Rxk, Vg2Rxk & Vg3Rxk (tcp/ip backdoors) thanks to Jesper Svennevid. 2.13 Released 19 January 1999 Size 21.244 bytes Fixed a bug in Ebola recognition which caused a lot of trouble. Not only fail recogs but also crashes. 2.12 Released 12 January 1999 Size 21.240 bytes Added Datatype.library 45.4/5 fake/trojan thanks to Matthew Briggs 2.11 Released 9 December 1998 Size 20.756 bytes Added RSS bootblock virus. Thanks to Peter Lindberg for supplying this virus to Jan Andersen. Added Happy New Year 97. Thanks to Kaare Johansen for reporting this. Thanks to Jan Andersen for supplying a set of HNY97 infected files. 2.10 Released 4 November 1998 Size 20.400 bytes Added Acid Infector 1.5 thanks to Brad Rogers for supplying the virus and reporting VirusCheckerII didn`t detect the virus. 2.9 Released 04 October 1998 Size 20.156 Added Beol 96 Link Virus Added HitcHiker link virus Added UnpackJPEG (MaxsBBS) Trojan. Thanks to Jan Andersen and Dran/Chew-Z for this one. 2.8 Released 05 July 1998 Size 19.244 Fixed Repair Trojan recognition Fixed DLogger Trojan recognition Fixed IPrefs Conman Trojan Added Joker type B (Condom) Trojan Added Iprefs Conman Installer Trojan Added MaxSafe Trojan 2.7 Released 24 May 1998 Size 19.080 Anti-Trojan edition A lot of old trojans added (and some new) Around 25 trojans added this time (more will follow) Added all Biomechanic variations VC_II did not yet detect Added Cascade Dropper Trojan Added Conman HD Faker Added Istrip Trojan Added 3rd H.N.Y. Installer Added few variations/clones of the HNY96 link virus Added Firedom trojan Added C.O.P./Tetris Trojan Added Joker type A Trojan Added Lurad Trojan Added Pamela Show Trojan Added Phantom Trojan Added Susi Drive Stepper Added Swifter Trojan Added Trainer Trojan Added Commander Dropper Added Xtruder 3.5 Added Scarecrow Trojans Added Achtung Trojan Added Descriptor BBS Trojan Added BEOL 4 Dropper Added Degrad Trojan Added TrustNoOne Trojan Added WAWE Trojan Added Excreminator 1 Trojan 2.6 Released 19 April 1998 Size 17.748 Added Port-67 Trojan Added BEOL3 memory detection and removal Added HANF memory detection/removal Added Sepultura BootBlock virus Added Strange Atmosphere Installer virus (IconX and Assign files) Added the lame Shocked/Trick "joke" executable and archive Added Strange Atmosphere virus Freezing of system fixed Added AAA-Enhancer Trojan Added Amiblank Trojan Added BBS Ram Disk 2 Trojan Added Aibon 1 BBS Trojan Added M_Chat (ATX-Chat) BBS Trojan Added PB Party BBS Trojan Added Powertrader BBS Trojan Added Stockmarket BBS Trojan 2.5 Released 16 March 1998 Size 16112 Added file recog and removal for B.E.O.L 3 link virus Added Disaster Master 2 Installer Added ReOrgit Trojan virus Added Gotcha Trojan virus Added Gotcha 2 Trojan virus Added WireFire Trojan virus Added VirusHunter Trojan virus Added HANF Link Virus file recognition (NOT YET REMOVAL!!) Fixed all types of Wireface Trojan (a lot of false and fail recogs) Optimised HNY96 multi-hunk recog (doesn't crash on uneven hunks anymore). 2.4 Released 25 February 1998 Size 15456 Added MaxsBBS Trojan (in Amos programmed MaxsBBS destroyer) Type A, B, C & D Added Happy New Year 96 multi-hunk recognition. Now also recognises hunk 11 infections and other hunk infections off-course :) 2.3 Released 16 February 1998 Size 15232 Fixed 68000 bug also occuring in Brainfile. 2.2 Released 26 January 1998 Size 15284 Added HitchHiker 2.01 Installer Virus Added HitchHiker 2.01 Link Virus Added Lisa Fuckup v2.0 Trojan Virus Added Happy New Year 98 link and bootblock virus Fixed ZIB link virus removal for LoadWB files infected by the ZIB installer. Fixed some possible future bugs in HitchHiker 2.01 link virus removal. Fixed a few severe enforcer hits caused by Infiltrator virus check. Added ADO!-1-Trojan Virus to brain Added ADO!-2-Trojan Virus to brain Added ADO!-3-Trojan Virus to brain 2.1 Released 27 December 1997 Size 11788 Changed HNY Clone Installer detection, was sometimes claiming to find HNY Clone Installer when in fact the file was clean, sorry about that. Thanks to Karl P Schmidt for finding this bug, my apologies. 2.00 Released 26 December 1997 Size 11788 Added Happy New Year 96 link virus to brain Added LiSA FUCKUP v3.0 installer to brain Added BOKOR 1.01/1.05/1.06/1.1 Link Virus to brain Added ZIB Link virus to brain Added SPatch Trojan (ZIB Installer) to brain Added LoadWB infection removal code to brain Added HappyNewYear96 Installer to brain Added rapidly the HNY installer 2 and MUI fake patch. This will be added in a better way next release, sorry for now. @endnode @node "VCPrefs History" @endnode @node "Future" "Future" To Do List ========== Note: Any item that has been placed on this list will be implemented, although I can not be and will not be pressured to add such a feature any faster then I see fit. When I put any item in this list I am considering if I can already do some work in order to satisfy those who requested the feature or are waiting for it but I will do this only on free will. I can not and will not garuantee that a feature will be implemented in the next version unless I mention this somewhere and even then I can not be held responsible for not implementing a certain feature. You have to realise that coding VirusChecker II is purely a hobby of mine and although I throw myself sometimes for days on a row on VirusChecker II it mainly is something I like to do and so I don''t really like to be pushed. However, people that want to ask about or request a certain feature can always do so, even if the feature is already on the list I will answer any question/request/etc. To Do/Future developement ideas in no particular order: - More levels of archive checking (only one level supported now) - Vector Show expand and refined so that it contains at least the changed vectors and hides those which are considered "save". And add the showing of the KickMemList and KickTagList entries if present. - Multiple device format protection. - RDB backup - Add recognition for any version of Snoopdos so that the user will not be bothered with a requester asking to restore the LoadSeg. - Multiple file selection in the requester. Thanks Dale Frameli and others that suggested this to me. - New feature: watching of specific removable media (Zip drives and CDs for instance) (Thanks to Paul Compton for this idea) - Add MagicCX support (remove LoadSeg-change problem) If you have any suggestions or questions please write to @{"me" link "AuthorInfo" 0}. @endnode