06.Mar.2025
|
Antivirus software: xvs.library version 33.48
Georg Wittmann provides version 33.48 of the external virus scanner library xvs.library. Changes since the last release:
- Fixed recognition of 'Disk-Doktors' and 'Suicide Machine' boot viruses to avoid false alarms with harmless bootblocks. The new pattern for 'Disk-Doktors' recognizes all clones too, therefore removed entries 'Disk Doktors BJH', 'Disk Doktors NoFast' and 'Magic Ultra'. Thanks to Jan Andersen of VHT-DK for the sample bootblocks.
- Added 'Mosh 3.0' bootvirus. Thanks to Crashdisk for sending it.
- Added 'Silicon Penetration' bootvirus (actually just a malicious bootblock formatting the disk). Thanks again to Crashdisk for sending that stuff.
- Fixed recognition of 'Xeno' linkviruses to find modified copies too. Thanks again to Crashdisk for the report and an example file.
- Fixed recognition of 'Traveling Jack' linkvirus, the shortest strain hasn't been detected correctly. Thanks once again to Crashdisk for the example file.
- Removed 'Adam Brierley' from the bootvirus brain. This bootblock actually is just some kind of boot-loader and harmless. Thanks to Jan Andersen for the report.
- Fixed recognition of 'VKill' bootvirus to detect damaged copies too that will crash, but at least install parts in memory. Thanks again to Jan Andersen for the example bootblock.
- Added 'Disk-Doktors 2' bootvirus. This is a fixed version of the original virus that works with all Kickstart releases. Thanks to Crashdisk again for the sample.
- Fixed recognition of 'XCopy2' bootvirus to detect modified copies too. Actually this isn't a real virus as it cannot spread, but it modifies pointers and though can be harmful for other programs. Thanks to Crashdisk once again for sending the sample.
- Added 'Nemesis' bootvirus. This one I got from Crashdisk too.
- Added 'Warhawk 1 Aniga' bootvirus, another Warhawk clone found by Crashdisk.
(cg)
[News message: 06. Mar. 2025, 21:42] [Comments: 0]
[Send via e-mail] [Print version] [ASCII version]
|
