From: frisk@complex.is (Fridrik Skulason)
Newsgroups: comp.virus
Subject: F-PROT new version announcement (PC)
Date: 27 Aug 92 03:36:18 GMT

I just released a new major version of F-PROT - 2.05.  It has been
uploaded to WSMR-SIMTEL20.army.mil, and should be available on other
major archive sites, such as OAK and GARBO (in Finland) within a few
days.

Version 2.05 - major changes:

    The number of encrypted viruses that F-PROT can now disinfect (without
    harming the original program, of course) has been increased considerably.

Version 2.05 - the following problems were found and corrected.

    If the SHARE program was loaded, version 2.04 would display an "error
    opening ENGLISH.TX0" when that file was scanned.  A similar error
    message could also be produced during installation.

    Version 2.04 would occasionally incorrectly report that a Dark Avenger
    or SVC-infected file had been modified by adding some extra bytes.

    The virus names reported by the scanner did not always agree 100%
    with the virus information database - SADAM vs SADDAM, for example.

    If the /NOPACKED switch is used, the program no longer produces
    a warning about the files it skips.

Version 2.05 - minor improvements:

   The following command line switches have been added to F-PROT:

	/PAGE - used to make the program pause after each page of
	output (only in command-line mode)

	/OLD - disables the "This version of the program is rather old"
	message.  A corresponding switch was added to the virstop program.

   A /DISK command-line switch has been added to the VIRSTOP program, to
   allow it to swap signatures in from disk as necessary.  Note: This
   must not be used if VIRSTOP is run from a diskette, which is later
   removed.  This feature is new, and not fully tested yet - use with
   care.

   F-PROT now identifies Jerusalem-inoculated virus samples as such,
   instead of just reporting "Modified (5 bytes added)"

   F-PROT will now exit, if a virus signature is found in memory.  As this
   might be a false alarm, it is possible to use the /NOMEM switch to
   skip the memory scan.

   The PRICING.DOC file has been renamed to ORDER.DOC, and includes
   more information than before on how to order the program.

Version 2.05 - new viruses:

   The following 11 new viruses can now be detected but not removed,
   only deleted.  This is because they overwrite infected files, or
   damage them irreversibly.

	FCB
	Leprosy-Silver Dollar
	MSK (Blaze and MSK)
	Reboot Patcher
	SHHS-B
	Tiny Hunter
	Trivial (16, 42, 50 and Hanger)

   The following 109 new viruses can now be detected and removed.

	_302
	_334
	_439
	66A
	Ash (280 and 743)
	Astra-976
	Atas (384 and 400)
	Athens
	Backfont-900
	BFD (A and B)
	Bljec-Sad
	Baobab
	Capital
	Cascade-1701-D
	CC-145
	Chad
	Cinderella-B
	Cossiga-Friends-B
	Cracky
	Crooked
	Dark Avenger-Father
	DM-400-1.04
	End of
	Finnish-357
	Flower
	Freddy
	Friday the 13th-ENET 37
	Funeral
	Fungus
	Globe
	Hafenstrasse-1191
	Happy
	Happy Monday (A, B and C)
	Hellween-1182
	Hi
	Horror-1112
	Irus
	Jerusalem-Timor
	Junior
	Keypress-1232-B
	Kinnison
	Lazy-B
	Lesson I
	Lesson II (358 and 360)
	Little Girl
	Little Brother-300
	Magnitogorsk (2048-B and 2560-C)
	Mud
	Nov 17-768
	Npox
	Number 1-Fiis
	Old Yankee-Black Peter
	Parity Boot
	PCBB (1650, 1652, 1658 and 1701)
	Pif-paf
	Pixel (297 and 342)
	Plutto
	Prime
	Protect (1157 and 1355)
	PS-MPC (644)
	Quake
	Reboot
	Russian Tiny-131
	Screaming Fist (732, II-B and II-C)
	Siskin (Goodbye, 948 and 1017)
	Sistor-1000
	Stanco
	Stupid-SADAM-FF
	Suicidal
	Suriv 1-Dad
	Sux
	SVC (5.0-B and 6.01-4661)
	Swiss Phoenix
	Tired
	Vacsina-Penza
	VCL (Code Zero, Donatello, Earthday, Enun, Kinison, Venom and
	     Yankee-tune)
	VCS-Post
	Vienna (415, 744 and Vengeance)
	Vote (A and B)
	Yankee (1712 and 2968)
	Youth (640 and Futhark)
	ZZ

   The following 14 new viruses can now be detected but not yet removed.

	Andryushka (A and B)
	Astra-1010
	Ear (Quake and Suicide)
	Emmie
	MtE (Cryptlab and Groove)
	Otto
	Slovakia (2.02 and 3.0)
	XPEH (3600, 3840 and 4048)
	Youth-Silence

   The following 47 viruses that could be detected but not removed with
   earlier versions of F-PROT can now be disinfected.

	Cheeba-(1.0 and 1.1)
	Cod
	Crew-2
	Danish Tiny-Stigmata
	Demolition
	DM-330
	Diskspoiler
	Doomsday
	Eastern Digital
	Eddie (MIR and Ps!ko)
	EMF
	EUPM
	Filedate 11
	Hafenstrasse (781, 809, 818, 1641 and 1689)
	HH&H
	Horror (1137 and 1182)
	Keyboard Bug (709, 1598 and 1722)
        Lozinsky (1882, 1958, 2968 and 2970)
	Marauder (560 and 860)
	Mix-2
	Munich
	Pathhunt
	Phalcon (Cloud and Ministry)
	Rape-2.2
	Screaming Fist-Stranger
	Siskin-Resurrect
	Stahlplatte
	SVC-5.0-A
	Syslock-Advent
	Thursday 12
	Vacsina TP-16 Multi
	Vienna (Dr.Q-1161, Dr.Q-1028 and 712)

   The following viruses have been renamed or re-classified.

	Plaice --> PCBB
	Russian Mutant --> Keyboard Bug-907
	Resurrect --> Siskin-Resurrect
	Hero-394 --> Siskin-394
	Hero-506 --> Siskin-506
	Scion --> Doomsday
	Vacsina-Rybka --> Vacsina TP-16 Multi