Category : System Diagnostics for your computer
Archive : VCHECK.ZIP
Filename : VCHECK.FX
Output of file : VCHECK.FX contained in archive : VCHECK.ZIP
J"
Y EGVCHECK V1.1EFH-
Y ____________
Y
by Systemberatung A. Dunkel
J
Y
EGIntroduction:FH
Y
Y
As the danger of computer viruses rises from day to day,
Y
VCHECK.EXE was developed as a virus detection program for IBM
Y
(compatible) computers.
Y
Y
EGSyntax:FH
Y
Y
VCHECK
Y
Y
Options: /P
Y
/D
Y
/DL
Y
/DX
Y
/S : do only compare file sizes
Y
/SD : calculate check sums only if not yet
Y
done today
Y
Y
EGDescription:FH
Y
Y
VCHECK.EXE creates a database of all executable files (*.EXE and
Y
*.COM) and calculates check-sums of these files. Presumed that a
Y
virus has to change the code of a program in order to infect it,
Y
it is possible to detect the infection by either a change of the
Y
programs' size or by a change of its checksum. This work of
Y
watching and comparing file sizes/checksums is done by VCHECK.
Y
Y
On every invokation of VCHECK, the program will compare the data
Y
stored in the database with the current state of the files. If any
Y
differences occur, VCHECK will give a warning. In this case,
Y
VCHECK will also ask you to acknowledge the warnings by pressing a
Y
key.
Y
Y
The program can NOT decide, whether a given program is a virus,
Y
but it will recognize changes in present programs.
Y
Y
All recognized changes in programs will be documented in a
Y
documentation file; all changes will be listed there together with
Y
the date and time of the examination, affected file names, old and
Y
new sizes, and old and new checksums.
Y
Y
If the documentation file already exists, the new information will
Y
be appended to file. By doing this, you will always have a history
Y
of examinations and changes.
Y
Y
In case a program changes (especially if more than one program
Y
changes at one time) it is time to consider the possibility of the
Y
presence of a virus. One has to keep in mind that there are
Y
programs that change themself without being a virus- (e.g.
Y
_____________________
Y
configuration data).
Y
Y
If you come to the conclusion, that there is a virus present, then
Y
(to cut the matter short) reboot from a KNOWN DOS-disk, consider
Y
the list of affected files and delete/restore them.
Y
J
Y
(1)
J"
Y EGVCHECK V1.1EFH-
Y ____________
Y
by Systemberatung A. Dunkel
J
Y
EGAGAINFH: the program can NOT prevent any virus to infect other
Y
programs, so the most important thing is to EGkeep backupsFH of every
Y
program!
Y
Y
EGSyntax:FH
Y
Y
VCHECK
Y
Y
EG
Y
Y
VCHECK will examine all files in the given directory and its
Y
subdirectories. For example 'C:\' if you want all (executable)
Y
files on drive C: to be examined.
Y
Y
EG/P
Y
Y
VCHECK creates the file 'vcheck.dta' which will be used to store
Y
the present state (size/checksum) of the files. With option '/P'
Y
you may tell VCHECK in which directory to store this file.
Y
Y
EG/D[LX]
Y
Y
All recogniced changes will be written into the documentation
Y
file. If the file already exists, the new information will be
Y
appended to the file. The file will look like the the following:
Y
Y
Virus-Check V1.0E
Y
by Systemberatung Axel Dunkel
Y
Y
Check Sum Size
Y
Filename old new old new
Y
=======================================================================
Y
Date: 14.11.1988 Time: 9.26: No Changes
Y
Date: 14.11.1988 Time: 20.45: (No check-sums tested)
Y
D:\TMP\TEST.EXE - 00F6E8D2 - 158708
Y
Date: 14.11.1988 Time: 22.12: (No check-sums tested) No Changes
Y
Y
Y
The additional EGoption 'X'FH will tell VCHECK to delete the
Y
documentation file first if it already exists.
Y
Y
If you give the additional EGoption 'L'FH, ALL files will be listed in
Y
the documentation file, not only the one's that have changed.
Y
Y
Y
EG/S[D] :FH
Y
Y
VCHECK will only compare the file sizes and not calculate the
Y
checksums.
Y
Y
If you use the additional EGoption 'D'FH (daily), VCHECK will
Y
calculate checksums only if they were not yet calculated today.
Y
This is especially useful in the AUTOEXEC.BAT, so that every day
Y
the files will be checked completely once at startup, but not
Y
every time you reboot the system (time saver).
J
Y
(2)
J"
Y EGVCHECK V1.1EFH-
Y ____________
Y
by Systemberatung A. Dunkel
J
Y
EGDistribution of VCHECK:FH
Y
Y
This program is *NOT* public domain. It may be copied freely to
Y
anyone if done so without charge and together with this
Y
documentation. If you use VCHECK, send a registration of $25 to
Y
Y
Y EGSystemberatung Axel DunkelFH
Y
Y Robert-Schuman-Ring 37
Y
Y D 6239 Kriftel
Y
Y West Germany
Y
Y
You will then receive the next version of VCHECK, which will have
Y
some additional features like CRC-checks, etc. Please add
Y
information whether you need VCHECK on 5.25" or 3.5" disks.
Y
Y
There is also a german version of VCHECK available.
Y
Y
There isEG NO WARRENTYFH what-so-ever given by the author, it is
Y
especially not guaranteed that VCHECK will detect every virus that
Y
may come up.
Y
Y
EGRemarks:FH
Y
Y
- Comments and suggestions are welcome. Please mail them to:
Y
...!mcvax!unido!cosmo!ADSOFT or [email protected]
Y
Y
- Equipment: VCHECK was tested on an IBM PS/2 Model 60 with
Y
DOS 3.3
Y
Y
- VCHECK will also access hidden files (like IBMDOS.COM) and read-
Y
only files.
Y
Y
- Since the checksum is calculated as an 32-bit checksum, there is
Y
nearly no chance for a virus to modify a program without changing
Y
its checksum. However, there will be an additional CRC-check
Y
available in the next version of VCHECK.
Y
Y
- Speed: On an IBM PS/2 Model 60, VCHECK calculates the checksums
Y
of aprox. 5.4 MB/min or 90 KB/sec.
Y
Y
- Since viruses most likely will infect only EXE- and COM-files
Y
(so VCHECK itself can be infected as well) you may rename
Y
VCHECK.EXE to e.g. VCHECK.PG and rename it just before using the
Y
program. This will prevent viruses from trying to infect VCHECK.
Y
You may then write a batchfile like the following:
Y
Y
Y
rename vcheck.pg vcheck.exe
Y
Y
vcheck c:\ /P c:\vcheck /D c:\vcheck\check.doc /SD
Y
Y
rename vcheck.exe vcheck.pg
Y
Y
This will start VCHECK on drive C: in all directories, the data
Y
file will be placed in the directory c:\vcheck, the documentation
Y
will be appended to the file c:\vcheck\check.doc, and checksums
Y
will only be calculated if not yet done today (this may be used in
Y
your AUTOEXEC.BAT).
J
Y
(3)
Very nice! Thank you for this wonderful archive. I wonder why I found it only now. Long live the BBS file archives!
This is so awesome! 😀 I’d be cool if you could download an entire archive of this at once, though.
But one thing that puzzles me is the “mtswslnkmcjklsdlsbdmMICROSOFT” string. There is an article about it here. It is definitely worth a read: http://www.os2museum.com/wp/mtswslnk/