home *** CD-ROM | disk | FTP | other *** search
- ---------Version 2.27a
-
- This version primarily includes an improved F-MACROW program. Note
- that the database used by this version is incompatible with older
- databases.
-
- In addition detection/disinfection of a few hundred new viruses was added
- to F-PROT itself.
-
- ---------Version 2.27
-
- We apologize for version 2.27 being late. The major reason is that we
- wanted to add proper detection of Office '97 Word and Excel macro viruses,
- as contrary to what you might have been led to believe, the anti-virus
- features added to the latest version of Word do not make it virus-proof.
-
- Getting the required information from Microsoft took much longer than
- anticipated, and we were forced to spend a considerable part of our
- developers' time on reverse-engineering certain parts of the file format.
-
- Version 2.27 - major changes:
-
- There are no major changes in 2.27, which will probably be the last
- version of the scanner using our "old" technology, as we have been
- busy creating an improved product: F-PROT 3.0, which among other
- things will combine the F-PROT and F-MACROW programs into one.
-
- Most of the new viruses added to this version are macro viruses.
- We added detection/disinfection of over 600 Word and Excel viruses
- since version 2.26 was released - those viruses are all handled by
- the F-MACROW program, not F-PROT itself.
-
- Version 2.27 - the following problems were found and corrected:
-
- No problems were reported to us that needed correction.
-
- Version 2.27 - the following false alarms were fixed:
-
- INSTALL.COM Possibly a new variant of Creator
- PEAS.COM Possibly a new variant of Creator
- REDIR.COM Possibly a new variant of Darth_Vader
- SERVER.COM Possibly a new variant of Darth_Vader
- MUM.EXE New or modified variant of Jerusalem
- SUCH.EXE Possibly a new variant of Cascade
-
- Version 2.27 - minor improvements and changes:
-
- The .DOC files that were included with F-PROT have been renamed and
- given a .TXT extension, as they are just plain ASCII files.
-
- The DISTRIB.TXT file now states it clearly that we consider the
- Virus Simulator from Rosenthal Engineering a virus-construction tool,
- and any site offering that program is therefore not permitted to offer
- F-PROT. Restricting the distribution of our program this way may seem
- strange, but we consider this an ethical issue - we do not wish to
- support the creation of viruses in any way, and allowing F-PROT to
- be distributed together with viruses or virus-construction tools could
- be interpreted as support for virus development.
-
- Version 2.27 - new viruses:
-
- The following 6 viruses are now identified, but can not be removed as
- they overwrite or corrupt infected files. Some of them were detected by
- earlier versions of F-PROT, but not identified accurately.
-
- HFR.702
- HLLO (4184, 4476 and 5071)
- Phile.210
- Trivial.32.H
-
- The following 54 new viruses can now be removed. Many of them were
- detected by earlier versions, but are now identified accurately.
-
- _839
- _6153
- Badsector.3150.B
- BW.753
- CheapExe.828
- Countdown (1300 and 1363)
- Cuareim.800.B
- Danish_tiny.333.E
- Eco.B
- Eel.360
- ExVC (507, 514, 659 and 777)
- FairGround.813
- Gobot.2099
- Hector.548
- Hippie
- HLLC (8304 and Bizarre)
- HLLP (4496, 7981, 10224 and 11840)
- Immortal.2174.F
- Inferno.1800
- Int_7F
- Istanbul.1367
- IVP (608, 614, 648.B and 669)
- MainMan (200 and 213)
- Major (1644.B and 1644.C)
- Mercury.831
- NYB.B
- Raubkopie.1888.C
- Revenge_II.2816
- Small_comp.101.C
- Spanska (1120.B and 1500)
- Spic.990
- Tere.370
- Tiffany.440
- Tricky.218
- Vacsina (1206.C and 1212.C)
- Vienna (433 and 444)
- Wolleh
- Zwick.505
-
- Additionally, as mentioned above, detection and disinfection of
- over 600 macro viruses was added.
-
- The following 30 new viruses are now detected and identified but can not
- yet be removed.
-
- Blotus.2470
- Cordobes.3294
- Corea.1809
- ExVC (504.B, 507.B, 532, 672 and 686)
- Happy_Professor.506
- HLLP (5850.A, 5850.B, 5850.C, 5850.D and Weed.7072)
- IVP (744.B and 892)
- KrK.800
- Major.908
- MBD.1317
- Mephisto (446, 1140 and 1223)
- NRLG (651, 659, 760 and 945)
- Olivia (2152 and 2374)
- President.1504
- Small_comp.101.D
-
- The following 1 virus which was identified by earlier versions can
- now be removed.
-
- Johnny.826
-
- The following viruses have been renamed:
-
- HLLP.4080 -> HLLP.Weed.4080
- IVP.648 -> IVP.648.A
- NYB -> NYB.A
- Sierra.A-D -> NYB.B-E
-