home *** CD-ROM | disk | FTP | other *** search
- ;%
- ;% This is a sample signature file to test the behaviour of TbScan and TbScanX
- ;% when they detect a signature in a file or boot sector.
- ;%
- ;% These examples are NOT viruses, but instead normal code that appears in
- ;% many files and boot sectors.
- ;%
- ;% Read the contents of the TEST.DAT file for additional notes and comments!
- ;%
-
-
- ; To test TbScan, enter:
- ; TbScan [<path>] -data test.dat
- ;
- ;
- ; To test TbScanX, enter:
- ; TbScanX -data test.dat -allexec
- ; Then try to copy or unarchive files, execute files, and access a diskette.
-
-
- ; NOTE! It is normal that TbScan detects more "Fake file viruses" if you
- ; specify the -analyze option. This does NOT apply to real viruses, the
- ; difference is that real viruses are linked to the start-up code of a
- ; file, where the code of the Fake virus is not linked to the start-up
- ; code and can appear everywhere!
-
-
- ;File signature
- ;--------------
- ; This signature contains code that asks the DOS version number.
- ; It is likely that a file will carry this "signature".
-
- Fake file "virus"
- COM EXE
- B430CD21
-
-
-
- ;Bootsector signature
- ;--------------------
- ; This signature contains the last part of a normal bootsector.
- ; It is likely that a bootsector contains this "signature".
-
- Fake boot sector "virus"
- BOOT
- 2020434F4D%F55AA
-
- Fake boot sector "virus"
- BOOT
- 2020535953%F55AA
-
-
- ;Validation code: 3DC2
-
-