home *** CD-ROM | disk | FTP | other *** search
- What's new in this release?
- ---------------------------
-
- This is a major overhaul of Perforin. Numerous features are added,
- scanning and disinfection code optimized and improved, documentation
- beefed up, and so on. Signature database from previous releases is not
- compatible with the 2.0 release. Perforin checks the version number and
- warns the user if it is necessary to get a newer signature database.
-
- Features available only in the registered copy are marked with an
- asterisk (*).
-
-
- 2.0a
- ----
-
- -Rewrote major sections of scanning and cleaning code. Speed is improved
- by 60% in some cases. The new implementation also makes it possible to
- load a very large number of virus entries in the database without slowing
- down Perforin's operation noticably.
-
- -Added reliable polymorphic macro virus scan.
-
- -In some rare cases, the macro table was not parsed correctly. Fixed.
-
- -Added detection and removal for about 400 new variants. That brings the
- variant count to over 1000 in mid-June 1997.
-
- *-Added capability to scan inside password protected documents. If a document
- is infected, or disinfected, the password will be displayed next to the
- virus name both on the screen and in the log file. Perforin does not
- decrypt user documents. It uses StripSearch(tm) technology to scan and
- disinfect in a transparent manner. (registered copy only)
-
- -Added user-adjustable heuristics. Higher level settings are prone to
- false alarms. We are working to improve Perforin in this area.
-
- -Improved variant identification and eliminated false hits due to snatched
- macros found in some antivirus macro-based solutions.
-
- -Changed the default file search algorithm to skip files known usually
- not to be documents, such as EXE and DLL files. Perforin goes thru drives
- much faster now. Note that this differs than common implementations that
- will miss viruses in files that do not have a .DOT or .DOC extension.
-
- -Added an option to force Perforin to scan all files. This may be desirable
- when you actually discover a virus infection during the regular scan mode.
-
- -Enhanced removal algorithm to automatically switch to "remove all" mode
- if the found virus requires such a method. You don't need to change
- the cleaning mode to "remove all macros" for viruses like Cap. Perforin
- knows how to handle each viruses properly.
-
- -Simplified and enhanced ExamineDoc to report viruses that contain a certain
- macro. Our research indicates that only 25% of the macros found in known
- viruses are different. The rest are borrowed from each other or innocent
- macro packages. You can see a list of similar viruses easily.
-
- *-ExamineDoc can now display the source code of the macro, even if the
- document is password protected using the StripSearch(tm) technology.
- Note: StripSearch is disabled in the trial copy. Source code will be
- displayed if and only if the macros are not encrypted. We do not release
- the fully enabled ExamineDoc at this time due to potential misuse.
-
- -Improved the multiple virus report capability. Even polymorphic + other
- virus combinations are reported properly.
-
- -Added family variant detection to discover minor variants of known viruses.
- This new scanning method does not use signatures, and it was very reliable
- in our tests.
-
- -Added an option to show all documents that have macros in them even if
- no known virus is found.
-
- -Added reload signatures command to update the virus signatures without
- exiting Perforin. This dynamic update feature will be extended in the
- future to check a location on a server periodically and apply the necessary
- updates transparently.
-
- -Added a command to launch the default browser so that users can visit
- our website easily.
-
- -Added support for Korean Word 6/7 documents.
-
-
-