Home » Archimedes archive » Archimedes World » AW-1991-05.adf » May91 » !AWMay91/Goodies/PD/!VKiller/!help
!AWMay91/Goodies/PD/!VKiller/!help
This website contains an archive of files for the Acorn Electron, BBC Micro, Acorn Archimedes, Commodore 16 and Commodore 64 computers, which Dominic Ford has rescued from his private collection of floppy disks and cassettes.
Some of these files were originally commercial releases in the 1980s and 1990s, but they are now widely available online. I assume that copyright over them is no longer being asserted. If you own the copyright and would like files to be removed, please contact me.
Tape/disk: | Home » Archimedes archive » Archimedes World » AW-1991-05.adf » May91 |
Filename: | !AWMay91/Goodies/PD/!VKiller/!help |
Read OK: | ✔ |
File size: | 3001 bytes |
Load address: | 0000 |
Exec address: | 0000 |
File contents
All code and documentation is exclusively (C) Richard K. Lloyd 1990. It is freely distributable. Documentation for VKiller 1.10 - The Extend Virus killer/innoculator -------------------------------------------------------------------- Introduction ------------ This is a virus warning to all Archimedes owners, especially those who favour using the Desktop to run programs. A virus has been written by an anonymous author to infect the !Boot file of any application run by double-clicking on the application directory inside the Desktop. It also claims, and never releases, 1K of RMA every time any file or directory is double-clicked on. Hence, the system will eventually crash with an RMA shortage. Extend Virus technical information ---------------------------------- It's a module which can go under 8 different filenames (the name is picked at random using the current time as a seed): MonitorRM, CheckMod, ExtendRM, OSextend, ColourRM, Fastmod, CodeRM or MemRM. Nowever, the module itself has the following title string: Extend 1.56 (08 Jul 1989) and is always known as "Extend" in the module list. For reference purposes, I shall refer to it as the "Extend Virus". The date seems to imply that it has been around for some 16 months, which is a worrying thought indeed. It is 940 (&3AC) bytes long and initialises itself as a nameless Wimp task which then looks for Wimp Message 5 (double-click). It attempts to either create an !Boot in the application directory or append to an already existing one with the following lines: IconSprites <Obey$Dir>.!Sprites<&0D> RMEnsure Extend 0 RMRun <Obey$Dir>.ModName<&0D> ||<&FF> The "IconSprites" line is omitted if it is appended to an existing !Boot. "ModName" is one of the 8 possible filenames. The Extend Virus uses the <&FF> (i.e. decimal 255) byte at the end as a self-check to see if has infected the !Boot file already. Of course, it copies itself to the new name inside the application directory as you would expect. Note the incorrect use of <&0D> (decimal 13) to terminate the lines, rather than the more correct <&0A> (decimal 10). A shift-double-click does NOT cause an infection, but it DOES claim yet another 1K of never-to-be-released RMA. I have gone through the entire code and the only destructive thing it does, apart from wasting disk space with copies of itself, is to claim the 1K of RMA for every double-clicked file or directory (eventually crashing the system). Extend Virus Execution Count ---------------------------- There was one bit of the Extend Virus module code that perplexed me - why would someone increment a memory location within the module and never use it ? At first I skipped this code, but, remembering some viruses on the Amiga, I suddenly realised that the incremented value would be copied whenever the module duplicated itself during a new infection. Now if the original author was smart, he would have incremented the counter IF AND ONLY IF there was a completely successful new infection (in fact, he would have incremented it prior to the new infection and decremented it if the infection failed). However, the Extend Virus module actually increments the counter whenever it is first started (usually via the *RMEnsure appended to the !Boot)...thus the counter does not correlate to the number of infections so far. Because of this, I've decided to call it the "Execution Count" from now on. Deliberately faulty virus coding ? ---------------------------------- When the Extend Virus initialises itself as a nameless task, it does not save its task handle. Hence, when it comes to execute Wimp_CloseDown (only via a *RMKill - it cannot be killed by the Task Manager) it does NOT supply a valid task handle. Thus, opening up the Task Manager afterwards causes it to fatally crash...which isn't nice. I have managed to solve this problem 50% of the time, but the other half is down to Acorn's omission of a way of getting a task handle when supplied with a task name (null string in this case). The upshot of this all is that if VKiller is run BEFORE the Extend Virus is, then VKiller will patch the active virus in RMA so that it shuts down with a proper task handle and the Task Manager can still be safely used. However, should the Extend Virus already be present when VKiller is run, then the Task Manager will fatally crash the Desktop if it is opened (or is already open when VKiller is run). The solutions to all this are simple: 1. Close the Task Manager before running VKiller. 2. Do not open the Task Manager after VKiller has RMKilled the Extend Virus. My advice is to scan/innoculate the infected disk or disks and then hard reset the machine. Hopefully someone out there in the Public Domain will be able to fill in the 'missing' code - see the FNgettaskhand() function in the !RunImage source code for more details. If this happens, then the precautions won't be so elaborate in future releases. Innoculation ------------ VKiller can innoculate a !Boot file. This involves fooling the Extend Virus that it has already infected that !Boot file by attaching the following to the end of the file: IconSprites <Obey$Dir>.!Sprites<&0A> | This file has been innoculated against the Extend Virus<&0A> ||<&FF> The IconSprites line is only included if a new !Boot is created from scratch AND if the application directory contains an !Sprites file with the Sprite filetype. If the original !Boot was not properly terminated by a linefeed (<&0A>), then a linefeed will be appended prior to the addition of any innoculation lines. Note the critical difference between the Extend Virus infection and the innoculation: the penultimate line is terminated by <&0A> and not <&0D>. This is how VKiller can differentiate between innoculations and infections. Please note that creating new innoculated !Boot files from scratch will cause the double-click action to open a directory window to take longer because the applications inside that window have these new !Boot files. How do I use VKiller ? ---------------------- Double-click on the !VKiller application icon to install an icon bar icon. [N.B. The !Boot in the !VKiller directory has itself been innoculated to prevent infection of its own directory.] Once the icon bar icon appears you may press the middle button to get the usual Info and Quit options and the left or right button to display the VKiller dialogue box. When VKiller is first installed, it checks for the existence of the Extend Virus module in RMA. If found, it will kill it if possible and warn you of the fact. The Execution Count for the module will also be displayed. From then on, whenever an application is started with a null task name the RMA is re-scanned for the Extend Virus module. The dialogue box has the following options... Filing System: Click on the yellow button to cycle through the available filing systems. VKiller will usually start up with adfs as the default, but the cycle order is in filing system number order. Drive: Click on one of the available drives to select it (shown with a yellow background). The drive is initially set to the default one (e.g. for adfs, it would be the *Configure Drive option). Dir Scan: This line displays which directory the Drive Scan has got to. The only exception to this is when it is used to display the Execution Count when the Extend Virus module is found. Status: General brief messages are displayed here. The next four fields are self-explanatory and are counters for the number of times the Extend Virus was encountered in RMA or on disk, the number of new innoculations and the number of Drive Scans so far. Start Drive Scan: Clicking on this will start a Drive Scan (and the highlighted button label becomes "Stop Drive Scan"). It may be stopped at any time by clicking on the (relabelled) button again, but this does not increment the Drive Scan counter. Innoculate During Scan: Clicking on this will toggle the option to innoculate ALL !Boot files with the Obey (&FEB) filetype encountered during the scan. If it is not selected, then any !Boot files infected with the Extend Virus will still be innoculated anyway. Notes about the Drive Scan -------------------------- The Drive Scan is fully multi-tasking and the VKiller dialogue box does NOT need to be open during the scan. If the dialogue box is closed during a scan, then it will be automatically re-opened (or brought to the front if it is already open) when an infection is found or the Drive Scan has finished. If the Extend Virus module is run mid-way through a Drive Scan, then the module will be automatically killed and the dialogue box will be re-opened (as it would be if the Extend Virus module was run at any time) with a suitable message. At the end of that Drive Scan, you are advised that the drive may still be infected, in which case you should re-scan that drive (and the drive that caused the infection in the first place). Due to a bug in BASIC V (the space claimed by LOCALly DIMmed memory arrays is not released when the procedure exits), I have had to impose the following (very generous) restrictions: !Boot (Obey) files longer than 5K will be skipped (a message is displayed). Dirs nested deeper than 8 levels will be skipped (also displays message). I have never come across any application that exceeds these values, but if someone has one that does, please tell me, so I can modify the limits. Request For Viruses ------------------- Yes, this is a strange thing to ask, but could people in possesion of a virus please send it to the address at the end of this document ? Please mark the disc (or e-mail !) clearly that it contains a virus. I would like VKiller to evolve to cope with other viruses (I know that there a few others floating around, so I'd appreciate anyone's assistance in tracking them down). Credits ------- * Simon Burrows for supplying me with the Extend Virus module (and clearly marked as so, unlike certain other contacts I have :-) ). Revision History of VKiller --------------------------- V1.10 (December 1990) --------------------- * Now multi-tasks with a dialogue box to select options. Code substantially reworked to support the WIMP (and it took longer than the guts of V1.00 did !). * New patch code to fix Extend Virus 'bug' - now provides safer Wimp_CloseDown calls for 50% of the time. Despite this, RMKilling the module is still riskier than it was with V1.00. * !Boot files to be innoculated that are not terminated by a linefeed (<&0A>) now have that missing linefeed added prior to innoculation. * Extend Virus Execution Count is now displayed just before the module is deleted from the infected disk or killed from the RMA. * Only !Boot files that have the Obey (&FEB) filetype can now be innoculated against the Extend Virus because this is only filetype that makes any 'sense' in the context of the innoculation. * If an innoculated !Boot file is being created from scratch and there is no !Sprites file in the directory (with the Sprite filetype), then the IconSprites <Obey$Dir>.!Sprites line is no longer added. V1.00 (November 1990) --------------------- * Written as a plain single-tasking BASIC program which could also innoculate !Boot files against the Extend Virus. * Recurses down directories (to a maximum level of 8) and displays various messages in garish red, green or yellow. * Can remove the Extend Virus RMA module, disk module or infection of an !Boot. Future Enhancements to VKiller ------------------------------ * Find a way to get a task handle given that task's name (this will make the RMKilling of the Extend Virus module a lot safer from the Desktop). * Add support for killing (or innoculating against) other viruses. Where to send your viruses, bug reports, fixes, enhancements etc. ----------------------------------------------------------------- Snail Mail: JANET e-mail: Richard K. Lloyd, rkl@uk.ac.liv.cs.and 1, Banks Road, Lower Heswall, Wirral, Merseyside, Great Britain L60 9JS
00000000 41 6c 6c 20 63 6f 64 65 20 61 6e 64 20 64 6f 63 |All code and doc| 00000010 75 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 65 78 |umentation is ex| 00000020 63 6c 75 73 69 76 65 6c 79 20 28 43 29 20 52 69 |clusively (C) Ri| 00000030 63 68 61 72 64 20 4b 2e 20 4c 6c 6f 79 64 20 31 |chard K. Lloyd 1| 00000040 39 39 30 2e 0a 49 74 20 69 73 20 66 72 65 65 6c |990..It is freel| 00000050 79 20 64 69 73 74 72 69 62 75 74 61 62 6c 65 2e |y distributable.| 00000060 0a 0a 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 |..Documentation | 00000070 66 6f 72 20 56 4b 69 6c 6c 65 72 20 31 2e 31 30 |for VKiller 1.10| 00000080 20 2d 20 54 68 65 20 45 78 74 65 6e 64 20 56 69 | - The Extend Vi| 00000090 72 75 73 20 6b 69 6c 6c 65 72 2f 69 6e 6e 6f 63 |rus killer/innoc| 000000a0 75 6c 61 74 6f 72 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d |ulator.---------| 000000b0 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |----------------| * 000000e0 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 49 6e 74 |-----------..Int| 000000f0 72 6f 64 75 63 74 69 6f 6e 0a 2d 2d 2d 2d 2d 2d |roduction.------| 00000100 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 69 73 20 |------..This is | 00000110 61 20 76 69 72 75 73 20 77 61 72 6e 69 6e 67 20 |a virus warning | 00000120 74 6f 20 61 6c 6c 20 41 72 63 68 69 6d 65 64 65 |to all Archimede| 00000130 73 20 6f 77 6e 65 72 73 2c 20 65 73 70 65 63 69 |s owners, especi| 00000140 61 6c 6c 79 20 74 68 6f 73 65 20 77 68 6f 20 66 |ally those who f| 00000150 61 76 6f 75 72 0a 75 73 69 6e 67 20 74 68 65 20 |avour.using the | 00000160 44 65 73 6b 74 6f 70 20 74 6f 20 72 75 6e 20 70 |Desktop to run p| 00000170 72 6f 67 72 61 6d 73 2e 0a 0a 41 20 76 69 72 75 |rograms...A viru| 00000180 73 20 68 61 73 20 62 65 65 6e 20 77 72 69 74 74 |s has been writt| 00000190 65 6e 20 62 79 20 61 6e 20 61 6e 6f 6e 79 6d 6f |en by an anonymo| 000001a0 75 73 20 61 75 74 68 6f 72 20 74 6f 20 69 6e 66 |us author to inf| 000001b0 65 63 74 20 74 68 65 20 21 42 6f 6f 74 20 66 69 |ect the !Boot fi| 000001c0 6c 65 20 6f 66 0a 61 6e 79 20 61 70 70 6c 69 63 |le of.any applic| 000001d0 61 74 69 6f 6e 20 72 75 6e 20 62 79 20 64 6f 75 |ation run by dou| 000001e0 62 6c 65 2d 63 6c 69 63 6b 69 6e 67 20 6f 6e 20 |ble-clicking on | 000001f0 74 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 |the application | 00000200 64 69 72 65 63 74 6f 72 79 20 69 6e 73 69 64 65 |directory inside| 00000210 0a 74 68 65 20 44 65 73 6b 74 6f 70 2e 20 49 74 |.the Desktop. It| 00000220 20 61 6c 73 6f 20 63 6c 61 69 6d 73 2c 20 61 6e | also claims, an| 00000230 64 20 6e 65 76 65 72 20 72 65 6c 65 61 73 65 73 |d never releases| 00000240 2c 20 31 4b 20 6f 66 20 52 4d 41 20 65 76 65 72 |, 1K of RMA ever| 00000250 79 20 74 69 6d 65 20 61 6e 79 0a 66 69 6c 65 20 |y time any.file | 00000260 6f 72 20 64 69 72 65 63 74 6f 72 79 20 69 73 20 |or directory is | 00000270 64 6f 75 62 6c 65 2d 63 6c 69 63 6b 65 64 20 6f |double-clicked o| 00000280 6e 2e 20 48 65 6e 63 65 2c 20 74 68 65 20 73 79 |n. Hence, the sy| 00000290 73 74 65 6d 20 77 69 6c 6c 20 65 76 65 6e 74 75 |stem will eventu| 000002a0 61 6c 6c 79 0a 63 72 61 73 68 20 77 69 74 68 20 |ally.crash with | 000002b0 61 6e 20 52 4d 41 20 73 68 6f 72 74 61 67 65 2e |an RMA shortage.| 000002c0 0a 0a 45 78 74 65 6e 64 20 56 69 72 75 73 20 74 |..Extend Virus t| 000002d0 65 63 68 6e 69 63 61 6c 20 69 6e 66 6f 72 6d 61 |echnical informa| 000002e0 74 69 6f 6e 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |tion.-----------| 000002f0 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |----------------| 00000300 2d 2d 2d 2d 2d 2d 2d 0a 0a 49 74 27 73 20 61 20 |-------..It's a | 00000310 6d 6f 64 75 6c 65 20 77 68 69 63 68 20 63 61 6e |module which can| 00000320 20 67 6f 20 75 6e 64 65 72 20 38 20 64 69 66 66 | go under 8 diff| 00000330 65 72 65 6e 74 20 66 69 6c 65 6e 61 6d 65 73 20 |erent filenames | 00000340 28 74 68 65 20 6e 61 6d 65 20 69 73 20 70 69 63 |(the name is pic| 00000350 6b 65 64 20 61 74 0a 72 61 6e 64 6f 6d 20 75 73 |ked at.random us| 00000360 69 6e 67 20 74 68 65 20 63 75 72 72 65 6e 74 20 |ing the current | 00000370 74 69 6d 65 20 61 73 20 61 20 73 65 65 64 29 3a |time as a seed):| 00000380 0a 0a 4d 6f 6e 69 74 6f 72 52 4d 2c 20 43 68 65 |..MonitorRM, Che| 00000390 63 6b 4d 6f 64 2c 20 45 78 74 65 6e 64 52 4d 2c |ckMod, ExtendRM,| 000003a0 20 4f 53 65 78 74 65 6e 64 2c 20 43 6f 6c 6f 75 | OSextend, Colou| 000003b0 72 52 4d 2c 20 46 61 73 74 6d 6f 64 2c 20 43 6f |rRM, Fastmod, Co| 000003c0 64 65 52 4d 20 6f 72 20 4d 65 6d 52 4d 2e 0a 0a |deRM or MemRM...| 000003d0 4e 6f 77 65 76 65 72 2c 20 74 68 65 20 6d 6f 64 |Nowever, the mod| 000003e0 75 6c 65 20 69 74 73 65 6c 66 20 68 61 73 20 74 |ule itself has t| 000003f0 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 69 74 |he following tit| 00000400 6c 65 20 73 74 72 69 6e 67 3a 0a 0a 45 78 74 65 |le string:..Exte| 00000410 6e 64 20 31 2e 35 36 20 28 30 38 20 4a 75 6c 20 |nd 1.56 (08 Jul | 00000420 31 39 38 39 29 0a 0a 61 6e 64 20 69 73 20 61 6c |1989)..and is al| 00000430 77 61 79 73 20 6b 6e 6f 77 6e 20 61 73 20 22 45 |ways known as "E| 00000440 78 74 65 6e 64 22 20 69 6e 20 74 68 65 20 6d 6f |xtend" in the mo| 00000450 64 75 6c 65 20 6c 69 73 74 2e 20 46 6f 72 20 72 |dule list. For r| 00000460 65 66 65 72 65 6e 63 65 20 70 75 72 70 6f 73 65 |eference purpose| 00000470 73 2c 0a 49 20 73 68 61 6c 6c 20 72 65 66 65 72 |s,.I shall refer| 00000480 20 74 6f 20 69 74 20 61 73 20 74 68 65 20 22 45 | to it as the "E| 00000490 78 74 65 6e 64 20 56 69 72 75 73 22 2e 0a 0a 54 |xtend Virus"...T| 000004a0 68 65 20 64 61 74 65 20 73 65 65 6d 73 20 74 6f |he date seems to| 000004b0 20 69 6d 70 6c 79 20 74 68 61 74 20 69 74 20 68 | imply that it h| 000004c0 61 73 20 62 65 65 6e 20 61 72 6f 75 6e 64 20 66 |as been around f| 000004d0 6f 72 20 73 6f 6d 65 20 31 36 20 6d 6f 6e 74 68 |or some 16 month| 000004e0 73 2c 20 77 68 69 63 68 20 69 73 0a 61 20 77 6f |s, which is.a wo| 000004f0 72 72 79 69 6e 67 20 74 68 6f 75 67 68 74 20 69 |rrying thought i| 00000500 6e 64 65 65 64 2e 20 49 74 20 69 73 20 39 34 30 |ndeed. It is 940| 00000510 20 28 26 33 41 43 29 20 62 79 74 65 73 20 6c 6f | (&3AC) bytes lo| 00000520 6e 67 20 61 6e 64 20 69 6e 69 74 69 61 6c 69 73 |ng and initialis| 00000530 65 73 20 69 74 73 65 6c 66 0a 61 73 20 61 20 6e |es itself.as a n| 00000540 61 6d 65 6c 65 73 73 20 57 69 6d 70 20 74 61 73 |ameless Wimp tas| 00000550 6b 20 77 68 69 63 68 20 74 68 65 6e 20 6c 6f 6f |k which then loo| 00000560 6b 73 20 66 6f 72 20 57 69 6d 70 20 4d 65 73 73 |ks for Wimp Mess| 00000570 61 67 65 20 35 20 28 64 6f 75 62 6c 65 2d 63 6c |age 5 (double-cl| 00000580 69 63 6b 29 2e 0a 49 74 20 61 74 74 65 6d 70 74 |ick)..It attempt| 00000590 73 20 74 6f 20 65 69 74 68 65 72 20 63 72 65 61 |s to either crea| 000005a0 74 65 20 61 6e 20 21 42 6f 6f 74 20 69 6e 20 74 |te an !Boot in t| 000005b0 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 64 |he application d| 000005c0 69 72 65 63 74 6f 72 79 20 6f 72 20 61 70 70 65 |irectory or appe| 000005d0 6e 64 0a 74 6f 20 61 6e 20 61 6c 72 65 61 64 79 |nd.to an already| 000005e0 20 65 78 69 73 74 69 6e 67 20 6f 6e 65 20 77 69 | existing one wi| 000005f0 74 68 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 |th the following| 00000600 20 6c 69 6e 65 73 3a 0a 0a 49 63 6f 6e 53 70 72 | lines:..IconSpr| 00000610 69 74 65 73 20 3c 4f 62 65 79 24 44 69 72 3e 2e |ites <Obey$Dir>.| 00000620 21 53 70 72 69 74 65 73 3c 26 30 44 3e 0a 52 4d |!Sprites<&0D>.RM| 00000630 45 6e 73 75 72 65 20 45 78 74 65 6e 64 20 30 20 |Ensure Extend 0 | 00000640 52 4d 52 75 6e 20 3c 4f 62 65 79 24 44 69 72 3e |RMRun <Obey$Dir>| 00000650 2e 4d 6f 64 4e 61 6d 65 3c 26 30 44 3e 0a 7c 7c |.ModName<&0D>.||| 00000660 3c 26 46 46 3e 0a 0a 54 68 65 20 22 49 63 6f 6e |<&FF>..The "Icon| 00000670 53 70 72 69 74 65 73 22 20 6c 69 6e 65 20 69 73 |Sprites" line is| 00000680 20 6f 6d 69 74 74 65 64 20 69 66 20 69 74 20 69 | omitted if it i| 00000690 73 20 61 70 70 65 6e 64 65 64 20 74 6f 20 61 6e |s appended to an| 000006a0 20 65 78 69 73 74 69 6e 67 20 21 42 6f 6f 74 2e | existing !Boot.| 000006b0 0a 22 4d 6f 64 4e 61 6d 65 22 20 69 73 20 6f 6e |."ModName" is on| 000006c0 65 20 6f 66 20 74 68 65 20 38 20 70 6f 73 73 69 |e of the 8 possi| 000006d0 62 6c 65 20 66 69 6c 65 6e 61 6d 65 73 2e 20 54 |ble filenames. T| 000006e0 68 65 20 45 78 74 65 6e 64 20 56 69 72 75 73 20 |he Extend Virus | 000006f0 75 73 65 73 20 74 68 65 20 3c 26 46 46 3e 0a 28 |uses the <&FF>.(| 00000700 69 2e 65 2e 20 64 65 63 69 6d 61 6c 20 32 35 35 |i.e. decimal 255| 00000710 29 20 62 79 74 65 20 61 74 20 74 68 65 20 65 6e |) byte at the en| 00000720 64 20 61 73 20 61 20 73 65 6c 66 2d 63 68 65 63 |d as a self-chec| 00000730 6b 20 74 6f 20 73 65 65 20 69 66 20 68 61 73 20 |k to see if has | 00000740 69 6e 66 65 63 74 65 64 20 74 68 65 0a 21 42 6f |infected the.!Bo| 00000750 6f 74 20 66 69 6c 65 20 61 6c 72 65 61 64 79 2e |ot file already.| 00000760 20 4f 66 20 63 6f 75 72 73 65 2c 20 69 74 20 63 | Of course, it c| 00000770 6f 70 69 65 73 20 69 74 73 65 6c 66 20 74 6f 20 |opies itself to | 00000780 74 68 65 20 6e 65 77 20 6e 61 6d 65 20 69 6e 73 |the new name ins| 00000790 69 64 65 0a 74 68 65 20 61 70 70 6c 69 63 61 74 |ide.the applicat| 000007a0 69 6f 6e 20 64 69 72 65 63 74 6f 72 79 20 61 73 |ion directory as| 000007b0 20 79 6f 75 20 77 6f 75 6c 64 20 65 78 70 65 63 | you would expec| 000007c0 74 2e 20 4e 6f 74 65 20 74 68 65 20 69 6e 63 6f |t. Note the inco| 000007d0 72 72 65 63 74 20 75 73 65 20 6f 66 0a 3c 26 30 |rrect use of.<&0| 000007e0 44 3e 20 28 64 65 63 69 6d 61 6c 20 31 33 29 20 |D> (decimal 13) | 000007f0 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 |to terminate the| 00000800 20 6c 69 6e 65 73 2c 20 72 61 74 68 65 72 20 74 | lines, rather t| 00000810 68 61 6e 20 74 68 65 20 6d 6f 72 65 20 63 6f 72 |han the more cor| 00000820 72 65 63 74 0a 3c 26 30 41 3e 20 28 64 65 63 69 |rect.<&0A> (deci| 00000830 6d 61 6c 20 31 30 29 2e 0a 0a 41 20 73 68 69 66 |mal 10)...A shif| 00000840 74 2d 64 6f 75 62 6c 65 2d 63 6c 69 63 6b 20 64 |t-double-click d| 00000850 6f 65 73 20 4e 4f 54 20 63 61 75 73 65 20 61 6e |oes NOT cause an| 00000860 20 69 6e 66 65 63 74 69 6f 6e 2c 20 62 75 74 20 | infection, but | 00000870 69 74 20 44 4f 45 53 20 63 6c 61 69 6d 20 79 65 |it DOES claim ye| 00000880 74 0a 61 6e 6f 74 68 65 72 20 31 4b 20 6f 66 20 |t.another 1K of | 00000890 6e 65 76 65 72 2d 74 6f 2d 62 65 2d 72 65 6c 65 |never-to-be-rele| 000008a0 61 73 65 64 20 52 4d 41 2e 0a 0a 49 20 68 61 76 |ased RMA...I hav| 000008b0 65 20 67 6f 6e 65 20 74 68 72 6f 75 67 68 20 74 |e gone through t| 000008c0 68 65 20 65 6e 74 69 72 65 20 63 6f 64 65 20 61 |he entire code a| 000008d0 6e 64 20 74 68 65 20 6f 6e 6c 79 20 64 65 73 74 |nd the only dest| 000008e0 72 75 63 74 69 76 65 20 74 68 69 6e 67 20 69 74 |ructive thing it| 000008f0 20 64 6f 65 73 2c 0a 61 70 61 72 74 20 66 72 6f | does,.apart fro| 00000900 6d 20 77 61 73 74 69 6e 67 20 64 69 73 6b 20 73 |m wasting disk s| 00000910 70 61 63 65 20 77 69 74 68 20 63 6f 70 69 65 73 |pace with copies| 00000920 20 6f 66 20 69 74 73 65 6c 66 2c 20 69 73 20 74 | of itself, is t| 00000930 6f 20 63 6c 61 69 6d 20 74 68 65 20 31 4b 20 6f |o claim the 1K o| 00000940 66 0a 52 4d 41 20 66 6f 72 20 65 76 65 72 79 20 |f.RMA for every | 00000950 64 6f 75 62 6c 65 2d 63 6c 69 63 6b 65 64 20 66 |double-clicked f| 00000960 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 |ile or directory| 00000970 20 28 65 76 65 6e 74 75 61 6c 6c 79 20 63 72 61 | (eventually cra| 00000980 73 68 69 6e 67 20 74 68 65 0a 73 79 73 74 65 6d |shing the.system| 00000990 29 2e 0a 0a 45 78 74 65 6e 64 20 56 69 72 75 73 |)...Extend Virus| 000009a0 20 45 78 65 63 75 74 69 6f 6e 20 43 6f 75 6e 74 | Execution Count| 000009b0 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |.---------------| 000009c0 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 |-------------..T| 000009d0 68 65 72 65 20 77 61 73 20 6f 6e 65 20 62 69 74 |here was one bit| 000009e0 20 6f 66 20 74 68 65 20 45 78 74 65 6e 64 20 56 | of the Extend V| 000009f0 69 72 75 73 20 6d 6f 64 75 6c 65 20 63 6f 64 65 |irus module code| 00000a00 20 74 68 61 74 20 70 65 72 70 6c 65 78 65 64 20 | that perplexed | 00000a10 6d 65 20 2d 20 77 68 79 0a 77 6f 75 6c 64 20 73 |me - why.would s| 00000a20 6f 6d 65 6f 6e 65 20 69 6e 63 72 65 6d 65 6e 74 |omeone increment| 00000a30 20 61 20 6d 65 6d 6f 72 79 20 6c 6f 63 61 74 69 | a memory locati| 00000a40 6f 6e 20 77 69 74 68 69 6e 20 74 68 65 20 6d 6f |on within the mo| 00000a50 64 75 6c 65 20 61 6e 64 20 6e 65 76 65 72 20 75 |dule and never u| 00000a60 73 65 20 69 74 20 3f 0a 41 74 20 66 69 72 73 74 |se it ?.At first| 00000a70 20 49 20 73 6b 69 70 70 65 64 20 74 68 69 73 20 | I skipped this | 00000a80 63 6f 64 65 2c 20 62 75 74 2c 20 72 65 6d 65 6d |code, but, remem| 00000a90 62 65 72 69 6e 67 20 73 6f 6d 65 20 76 69 72 75 |bering some viru| 00000aa0 73 65 73 20 6f 6e 20 74 68 65 20 41 6d 69 67 61 |ses on the Amiga| 00000ab0 2c 20 49 0a 73 75 64 64 65 6e 6c 79 20 72 65 61 |, I.suddenly rea| 00000ac0 6c 69 73 65 64 20 74 68 61 74 20 74 68 65 20 69 |lised that the i| 00000ad0 6e 63 72 65 6d 65 6e 74 65 64 20 76 61 6c 75 65 |ncremented value| 00000ae0 20 77 6f 75 6c 64 20 62 65 20 63 6f 70 69 65 64 | would be copied| 00000af0 20 77 68 65 6e 65 76 65 72 20 74 68 65 0a 6d 6f | whenever the.mo| 00000b00 64 75 6c 65 20 64 75 70 6c 69 63 61 74 65 64 20 |dule duplicated | 00000b10 69 74 73 65 6c 66 20 64 75 72 69 6e 67 20 61 20 |itself during a | 00000b20 6e 65 77 20 69 6e 66 65 63 74 69 6f 6e 2e 20 4e |new infection. N| 00000b30 6f 77 20 69 66 20 74 68 65 20 6f 72 69 67 69 6e |ow if the origin| 00000b40 61 6c 20 61 75 74 68 6f 72 0a 77 61 73 20 73 6d |al author.was sm| 00000b50 61 72 74 2c 20 68 65 20 77 6f 75 6c 64 20 68 61 |art, he would ha| 00000b60 76 65 20 69 6e 63 72 65 6d 65 6e 74 65 64 20 74 |ve incremented t| 00000b70 68 65 20 63 6f 75 6e 74 65 72 20 49 46 20 41 4e |he counter IF AN| 00000b80 44 20 4f 4e 4c 59 20 49 46 20 74 68 65 72 65 20 |D ONLY IF there | 00000b90 77 61 73 0a 61 20 63 6f 6d 70 6c 65 74 65 6c 79 |was.a completely| 00000ba0 20 73 75 63 63 65 73 73 66 75 6c 20 6e 65 77 20 | successful new | 00000bb0 69 6e 66 65 63 74 69 6f 6e 20 28 69 6e 20 66 61 |infection (in fa| 00000bc0 63 74 2c 20 68 65 20 77 6f 75 6c 64 20 68 61 76 |ct, he would hav| 00000bd0 65 20 69 6e 63 72 65 6d 65 6e 74 65 64 20 69 74 |e incremented it| 00000be0 0a 70 72 69 6f 72 20 74 6f 20 74 68 65 20 6e 65 |.prior to the ne| 00000bf0 77 20 69 6e 66 65 63 74 69 6f 6e 20 61 6e 64 20 |w infection and | 00000c00 64 65 63 72 65 6d 65 6e 74 65 64 20 69 74 20 69 |decremented it i| 00000c10 66 20 74 68 65 20 69 6e 66 65 63 74 69 6f 6e 20 |f the infection | 00000c20 66 61 69 6c 65 64 29 2e 0a 48 6f 77 65 76 65 72 |failed)..However| 00000c30 2c 20 74 68 65 20 45 78 74 65 6e 64 20 56 69 72 |, the Extend Vir| 00000c40 75 73 20 6d 6f 64 75 6c 65 20 61 63 74 75 61 6c |us module actual| 00000c50 6c 79 20 69 6e 63 72 65 6d 65 6e 74 73 20 74 68 |ly increments th| 00000c60 65 20 63 6f 75 6e 74 65 72 20 77 68 65 6e 65 76 |e counter whenev| 00000c70 65 72 20 69 74 20 69 73 0a 66 69 72 73 74 20 73 |er it is.first s| 00000c80 74 61 72 74 65 64 20 28 75 73 75 61 6c 6c 79 20 |tarted (usually | 00000c90 76 69 61 20 74 68 65 20 2a 52 4d 45 6e 73 75 72 |via the *RMEnsur| 00000ca0 65 20 61 70 70 65 6e 64 65 64 20 74 6f 20 74 68 |e appended to th| 00000cb0 65 20 21 42 6f 6f 74 29 2e 2e 2e 74 68 75 73 20 |e !Boot)...thus | 00000cc0 74 68 65 0a 63 6f 75 6e 74 65 72 20 64 6f 65 73 |the.counter does| 00000cd0 20 6e 6f 74 20 63 6f 72 72 65 6c 61 74 65 20 74 | not correlate t| 00000ce0 6f 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 |o the number of | 00000cf0 69 6e 66 65 63 74 69 6f 6e 73 20 73 6f 20 66 61 |infections so fa| 00000d00 72 2e 20 42 65 63 61 75 73 65 20 6f 66 20 74 68 |r. Because of th| 00000d10 69 73 2c 0a 49 27 76 65 20 64 65 63 69 64 65 64 |is,.I've decided| 00000d20 20 74 6f 20 63 61 6c 6c 20 69 74 20 74 68 65 20 | to call it the | 00000d30 22 45 78 65 63 75 74 69 6f 6e 20 43 6f 75 6e 74 |"Execution Count| 00000d40 22 20 66 72 6f 6d 20 6e 6f 77 20 6f 6e 2e 0a 0a |" from now on...| 00000d50 44 65 6c 69 62 65 72 61 74 65 6c 79 20 66 61 75 |Deliberately fau| 00000d60 6c 74 79 20 76 69 72 75 73 20 63 6f 64 69 6e 67 |lty virus coding| 00000d70 20 3f 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d | ?.-------------| 00000d80 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |----------------| 00000d90 2d 2d 2d 2d 2d 0a 0a 57 68 65 6e 20 74 68 65 20 |-----..When the | 00000da0 45 78 74 65 6e 64 20 56 69 72 75 73 20 69 6e 69 |Extend Virus ini| 00000db0 74 69 61 6c 69 73 65 73 20 69 74 73 65 6c 66 20 |tialises itself | 00000dc0 61 73 20 61 20 6e 61 6d 65 6c 65 73 73 20 74 61 |as a nameless ta| 00000dd0 73 6b 2c 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 |sk, it does not | 00000de0 73 61 76 65 0a 69 74 73 20 74 61 73 6b 20 68 61 |save.its task ha| 00000df0 6e 64 6c 65 2e 20 48 65 6e 63 65 2c 20 77 68 65 |ndle. Hence, whe| 00000e00 6e 20 69 74 20 63 6f 6d 65 73 20 74 6f 20 65 78 |n it comes to ex| 00000e10 65 63 75 74 65 20 57 69 6d 70 5f 43 6c 6f 73 65 |ecute Wimp_Close| 00000e20 44 6f 77 6e 20 28 6f 6e 6c 79 20 76 69 61 20 61 |Down (only via a| 00000e30 0a 2a 52 4d 4b 69 6c 6c 20 2d 20 69 74 20 63 61 |.*RMKill - it ca| 00000e40 6e 6e 6f 74 20 62 65 20 6b 69 6c 6c 65 64 20 62 |nnot be killed b| 00000e50 79 20 74 68 65 20 54 61 73 6b 20 4d 61 6e 61 67 |y the Task Manag| 00000e60 65 72 29 20 69 74 20 64 6f 65 73 20 4e 4f 54 20 |er) it does NOT | 00000e70 73 75 70 70 6c 79 20 61 20 76 61 6c 69 64 0a 74 |supply a valid.t| 00000e80 61 73 6b 20 68 61 6e 64 6c 65 2e 20 54 68 75 73 |ask handle. Thus| 00000e90 2c 20 6f 70 65 6e 69 6e 67 20 75 70 20 74 68 65 |, opening up the| 00000ea0 20 54 61 73 6b 20 4d 61 6e 61 67 65 72 20 61 66 | Task Manager af| 00000eb0 74 65 72 77 61 72 64 73 20 63 61 75 73 65 73 20 |terwards causes | 00000ec0 69 74 20 74 6f 20 66 61 74 61 6c 6c 79 0a 63 72 |it to fatally.cr| 00000ed0 61 73 68 2e 2e 2e 77 68 69 63 68 20 69 73 6e 27 |ash...which isn'| 00000ee0 74 20 6e 69 63 65 2e 20 49 20 68 61 76 65 20 6d |t nice. I have m| 00000ef0 61 6e 61 67 65 64 20 74 6f 20 73 6f 6c 76 65 20 |anaged to solve | 00000f00 74 68 69 73 20 70 72 6f 62 6c 65 6d 20 35 30 25 |this problem 50%| 00000f10 20 6f 66 20 74 68 65 20 74 69 6d 65 2c 0a 62 75 | of the time,.bu| 00000f20 74 20 74 68 65 20 6f 74 68 65 72 20 68 61 6c 66 |t the other half| 00000f30 20 69 73 20 64 6f 77 6e 20 74 6f 20 41 63 6f 72 | is down to Acor| 00000f40 6e 27 73 20 6f 6d 69 73 73 69 6f 6e 20 6f 66 20 |n's omission of | 00000f50 61 20 77 61 79 20 6f 66 20 67 65 74 74 69 6e 67 |a way of getting| 00000f60 20 61 20 74 61 73 6b 0a 68 61 6e 64 6c 65 20 77 | a task.handle w| 00000f70 68 65 6e 20 73 75 70 70 6c 69 65 64 20 77 69 74 |hen supplied wit| 00000f80 68 20 61 20 74 61 73 6b 20 6e 61 6d 65 20 28 6e |h a task name (n| 00000f90 75 6c 6c 20 73 74 72 69 6e 67 20 69 6e 20 74 68 |ull string in th| 00000fa0 69 73 20 63 61 73 65 29 2e 0a 0a 54 68 65 20 75 |is case)...The u| 00000fb0 70 73 68 6f 74 20 6f 66 20 74 68 69 73 20 61 6c |pshot of this al| 00000fc0 6c 20 69 73 20 74 68 61 74 20 69 66 20 56 4b 69 |l is that if VKi| 00000fd0 6c 6c 65 72 20 69 73 20 72 75 6e 20 42 45 46 4f |ller is run BEFO| 00000fe0 52 45 20 74 68 65 20 45 78 74 65 6e 64 20 56 69 |RE the Extend Vi| 00000ff0 72 75 73 20 69 73 2c 0a 74 68 65 6e 20 56 4b 69 |rus is,.then VKi| 00001000 6c 6c 65 72 20 77 69 6c 6c 20 70 61 74 63 68 20 |ller will patch | 00001010 74 68 65 20 61 63 74 69 76 65 20 76 69 72 75 73 |the active virus| 00001020 20 69 6e 20 52 4d 41 20 73 6f 20 74 68 61 74 20 | in RMA so that | 00001030 69 74 20 73 68 75 74 73 20 64 6f 77 6e 20 77 69 |it shuts down wi| 00001040 74 68 20 61 0a 70 72 6f 70 65 72 20 74 61 73 6b |th a.proper task| 00001050 20 68 61 6e 64 6c 65 20 61 6e 64 20 74 68 65 20 | handle and the | 00001060 54 61 73 6b 20 4d 61 6e 61 67 65 72 20 63 61 6e |Task Manager can| 00001070 20 73 74 69 6c 6c 20 62 65 20 73 61 66 65 6c 79 | still be safely| 00001080 20 75 73 65 64 2e 20 48 6f 77 65 76 65 72 2c 0a | used. However,.| 00001090 73 68 6f 75 6c 64 20 74 68 65 20 45 78 74 65 6e |should the Exten| 000010a0 64 20 56 69 72 75 73 20 61 6c 72 65 61 64 79 20 |d Virus already | 000010b0 62 65 20 70 72 65 73 65 6e 74 20 77 68 65 6e 20 |be present when | 000010c0 56 4b 69 6c 6c 65 72 20 69 73 20 72 75 6e 2c 20 |VKiller is run, | 000010d0 74 68 65 6e 20 74 68 65 0a 54 61 73 6b 20 4d 61 |then the.Task Ma| 000010e0 6e 61 67 65 72 20 77 69 6c 6c 20 66 61 74 61 6c |nager will fatal| 000010f0 6c 79 20 63 72 61 73 68 20 74 68 65 20 44 65 73 |ly crash the Des| 00001100 6b 74 6f 70 20 69 66 20 69 74 20 69 73 20 6f 70 |ktop if it is op| 00001110 65 6e 65 64 20 28 6f 72 20 69 73 20 61 6c 72 65 |ened (or is alre| 00001120 61 64 79 0a 6f 70 65 6e 20 77 68 65 6e 20 56 4b |ady.open when VK| 00001130 69 6c 6c 65 72 20 69 73 20 72 75 6e 29 2e 0a 0a |iller is run)...| 00001140 54 68 65 20 73 6f 6c 75 74 69 6f 6e 73 20 74 6f |The solutions to| 00001150 20 61 6c 6c 20 74 68 69 73 20 61 72 65 20 73 69 | all this are si| 00001160 6d 70 6c 65 3a 0a 0a 31 2e 20 43 6c 6f 73 65 20 |mple:..1. Close | 00001170 74 68 65 20 54 61 73 6b 20 4d 61 6e 61 67 65 72 |the Task Manager| 00001180 20 62 65 66 6f 72 65 20 72 75 6e 6e 69 6e 67 20 | before running | 00001190 56 4b 69 6c 6c 65 72 2e 0a 0a 32 2e 20 44 6f 20 |VKiller...2. Do | 000011a0 6e 6f 74 20 6f 70 65 6e 20 74 68 65 20 54 61 73 |not open the Tas| 000011b0 6b 20 4d 61 6e 61 67 65 72 20 61 66 74 65 72 20 |k Manager after | 000011c0 56 4b 69 6c 6c 65 72 20 68 61 73 20 52 4d 4b 69 |VKiller has RMKi| 000011d0 6c 6c 65 64 20 74 68 65 20 45 78 74 65 6e 64 20 |lled the Extend | 000011e0 56 69 72 75 73 2e 0a 20 20 20 4d 79 20 61 64 76 |Virus.. My adv| 000011f0 69 63 65 20 69 73 20 74 6f 20 73 63 61 6e 2f 69 |ice is to scan/i| 00001200 6e 6e 6f 63 75 6c 61 74 65 20 74 68 65 20 69 6e |nnoculate the in| 00001210 66 65 63 74 65 64 20 64 69 73 6b 20 6f 72 20 64 |fected disk or d| 00001220 69 73 6b 73 20 61 6e 64 20 74 68 65 6e 20 68 61 |isks and then ha| 00001230 72 64 0a 20 20 20 72 65 73 65 74 20 74 68 65 20 |rd. reset the | 00001240 6d 61 63 68 69 6e 65 2e 0a 0a 48 6f 70 65 66 75 |machine...Hopefu| 00001250 6c 6c 79 20 73 6f 6d 65 6f 6e 65 20 6f 75 74 20 |lly someone out | 00001260 74 68 65 72 65 20 69 6e 20 74 68 65 20 50 75 62 |there in the Pub| 00001270 6c 69 63 20 44 6f 6d 61 69 6e 20 77 69 6c 6c 20 |lic Domain will | 00001280 62 65 20 61 62 6c 65 20 74 6f 20 66 69 6c 6c 20 |be able to fill | 00001290 69 6e 20 74 68 65 0a 27 6d 69 73 73 69 6e 67 27 |in the.'missing'| 000012a0 20 63 6f 64 65 20 2d 20 73 65 65 20 74 68 65 20 | code - see the | 000012b0 46 4e 67 65 74 74 61 73 6b 68 61 6e 64 28 29 20 |FNgettaskhand() | 000012c0 66 75 6e 63 74 69 6f 6e 20 69 6e 20 74 68 65 20 |function in the | 000012d0 21 52 75 6e 49 6d 61 67 65 20 73 6f 75 72 63 65 |!RunImage source| 000012e0 20 63 6f 64 65 0a 66 6f 72 20 6d 6f 72 65 20 64 | code.for more d| 000012f0 65 74 61 69 6c 73 2e 20 49 66 20 74 68 69 73 20 |etails. If this | 00001300 68 61 70 70 65 6e 73 2c 20 74 68 65 6e 20 74 68 |happens, then th| 00001310 65 20 70 72 65 63 61 75 74 69 6f 6e 73 20 77 6f |e precautions wo| 00001320 6e 27 74 20 62 65 20 73 6f 20 65 6c 61 62 6f 72 |n't be so elabor| 00001330 61 74 65 0a 69 6e 20 66 75 74 75 72 65 20 72 65 |ate.in future re| 00001340 6c 65 61 73 65 73 2e 0a 0a 49 6e 6e 6f 63 75 6c |leases...Innocul| 00001350 61 74 69 6f 6e 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |ation.----------| 00001360 2d 2d 0a 0a 56 4b 69 6c 6c 65 72 20 63 61 6e 20 |--..VKiller can | 00001370 69 6e 6e 6f 63 75 6c 61 74 65 20 61 20 21 42 6f |innoculate a !Bo| 00001380 6f 74 20 66 69 6c 65 2e 20 54 68 69 73 20 69 6e |ot file. This in| 00001390 76 6f 6c 76 65 73 20 66 6f 6f 6c 69 6e 67 20 74 |volves fooling t| 000013a0 68 65 20 45 78 74 65 6e 64 20 56 69 72 75 73 0a |he Extend Virus.| 000013b0 74 68 61 74 20 69 74 20 68 61 73 20 61 6c 72 65 |that it has alre| 000013c0 61 64 79 20 69 6e 66 65 63 74 65 64 20 74 68 61 |ady infected tha| 000013d0 74 20 21 42 6f 6f 74 20 66 69 6c 65 20 62 79 20 |t !Boot file by | 000013e0 61 74 74 61 63 68 69 6e 67 20 74 68 65 20 66 6f |attaching the fo| 000013f0 6c 6c 6f 77 69 6e 67 0a 74 6f 20 74 68 65 20 65 |llowing.to the e| 00001400 6e 64 20 6f 66 20 74 68 65 20 66 69 6c 65 3a 0a |nd of the file:.| 00001410 0a 49 63 6f 6e 53 70 72 69 74 65 73 20 3c 4f 62 |.IconSprites <Ob| 00001420 65 79 24 44 69 72 3e 2e 21 53 70 72 69 74 65 73 |ey$Dir>.!Sprites| 00001430 3c 26 30 41 3e 0a 7c 20 54 68 69 73 20 66 69 6c |<&0A>.| This fil| 00001440 65 20 68 61 73 20 62 65 65 6e 20 69 6e 6e 6f 63 |e has been innoc| 00001450 75 6c 61 74 65 64 20 61 67 61 69 6e 73 74 20 74 |ulated against t| 00001460 68 65 20 45 78 74 65 6e 64 20 56 69 72 75 73 3c |he Extend Virus<| 00001470 26 30 41 3e 0a 7c 7c 3c 26 46 46 3e 0a 0a 54 68 |&0A>.||<&FF>..Th| 00001480 65 20 49 63 6f 6e 53 70 72 69 74 65 73 20 6c 69 |e IconSprites li| 00001490 6e 65 20 69 73 20 6f 6e 6c 79 20 69 6e 63 6c 75 |ne is only inclu| 000014a0 64 65 64 20 69 66 20 61 20 6e 65 77 20 21 42 6f |ded if a new !Bo| 000014b0 6f 74 20 69 73 20 63 72 65 61 74 65 64 20 66 72 |ot is created fr| 000014c0 6f 6d 20 73 63 72 61 74 63 68 0a 41 4e 44 20 69 |om scratch.AND i| 000014d0 66 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 6f |f the applicatio| 000014e0 6e 20 64 69 72 65 63 74 6f 72 79 20 63 6f 6e 74 |n directory cont| 000014f0 61 69 6e 73 20 61 6e 20 21 53 70 72 69 74 65 73 |ains an !Sprites| 00001500 20 66 69 6c 65 20 77 69 74 68 20 74 68 65 20 53 | file with the S| 00001510 70 72 69 74 65 0a 66 69 6c 65 74 79 70 65 2e 20 |prite.filetype. | 00001520 49 66 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 |If the original | 00001530 21 42 6f 6f 74 20 77 61 73 20 6e 6f 74 20 70 72 |!Boot was not pr| 00001540 6f 70 65 72 6c 79 20 74 65 72 6d 69 6e 61 74 65 |operly terminate| 00001550 64 20 62 79 20 61 20 6c 69 6e 65 66 65 65 64 0a |d by a linefeed.| 00001560 28 3c 26 30 41 3e 29 2c 20 74 68 65 6e 20 61 20 |(<&0A>), then a | 00001570 6c 69 6e 65 66 65 65 64 20 77 69 6c 6c 20 62 65 |linefeed will be| 00001580 20 61 70 70 65 6e 64 65 64 20 70 72 69 6f 72 20 | appended prior | 00001590 74 6f 20 74 68 65 20 61 64 64 69 74 69 6f 6e 20 |to the addition | 000015a0 6f 66 20 61 6e 79 0a 69 6e 6e 6f 63 75 6c 61 74 |of any.innoculat| 000015b0 69 6f 6e 20 6c 69 6e 65 73 2e 20 4e 6f 74 65 20 |ion lines. Note | 000015c0 74 68 65 20 63 72 69 74 69 63 61 6c 20 64 69 66 |the critical dif| 000015d0 66 65 72 65 6e 63 65 20 62 65 74 77 65 65 6e 20 |ference between | 000015e0 74 68 65 20 45 78 74 65 6e 64 20 56 69 72 75 73 |the Extend Virus| 000015f0 0a 69 6e 66 65 63 74 69 6f 6e 20 61 6e 64 20 74 |.infection and t| 00001600 68 65 20 69 6e 6e 6f 63 75 6c 61 74 69 6f 6e 3a |he innoculation:| 00001610 20 74 68 65 20 70 65 6e 75 6c 74 69 6d 61 74 65 | the penultimate| 00001620 20 6c 69 6e 65 20 69 73 20 74 65 72 6d 69 6e 61 | line is termina| 00001630 74 65 64 20 62 79 20 3c 26 30 41 3e 0a 61 6e 64 |ted by <&0A>.and| 00001640 20 6e 6f 74 20 3c 26 30 44 3e 2e 20 54 68 69 73 | not <&0D>. This| 00001650 20 69 73 20 68 6f 77 20 56 4b 69 6c 6c 65 72 20 | is how VKiller | 00001660 63 61 6e 20 64 69 66 66 65 72 65 6e 74 69 61 74 |can differentiat| 00001670 65 20 62 65 74 77 65 65 6e 20 69 6e 6e 6f 63 75 |e between innocu| 00001680 6c 61 74 69 6f 6e 73 0a 61 6e 64 20 69 6e 66 65 |lations.and infe| 00001690 63 74 69 6f 6e 73 2e 0a 0a 50 6c 65 61 73 65 20 |ctions...Please | 000016a0 6e 6f 74 65 20 74 68 61 74 20 63 72 65 61 74 69 |note that creati| 000016b0 6e 67 20 6e 65 77 20 69 6e 6e 6f 63 75 6c 61 74 |ng new innoculat| 000016c0 65 64 20 21 42 6f 6f 74 20 66 69 6c 65 73 20 66 |ed !Boot files f| 000016d0 72 6f 6d 20 73 63 72 61 74 63 68 20 77 69 6c 6c |rom scratch will| 000016e0 20 63 61 75 73 65 0a 74 68 65 20 64 6f 75 62 6c | cause.the doubl| 000016f0 65 2d 63 6c 69 63 6b 20 61 63 74 69 6f 6e 20 74 |e-click action t| 00001700 6f 20 6f 70 65 6e 20 61 20 64 69 72 65 63 74 6f |o open a directo| 00001710 72 79 20 77 69 6e 64 6f 77 20 74 6f 20 74 61 6b |ry window to tak| 00001720 65 20 6c 6f 6e 67 65 72 20 62 65 63 61 75 73 65 |e longer because| 00001730 20 74 68 65 0a 61 70 70 6c 69 63 61 74 69 6f 6e | the.application| 00001740 73 20 69 6e 73 69 64 65 20 74 68 61 74 20 77 69 |s inside that wi| 00001750 6e 64 6f 77 20 68 61 76 65 20 74 68 65 73 65 20 |ndow have these | 00001760 6e 65 77 20 21 42 6f 6f 74 20 66 69 6c 65 73 2e |new !Boot files.| 00001770 0a 0a 48 6f 77 20 64 6f 20 49 20 75 73 65 20 56 |..How do I use V| 00001780 4b 69 6c 6c 65 72 20 3f 0a 2d 2d 2d 2d 2d 2d 2d |Killer ?.-------| 00001790 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a |---------------.| 000017a0 0a 44 6f 75 62 6c 65 2d 63 6c 69 63 6b 20 6f 6e |.Double-click on| 000017b0 20 74 68 65 20 21 56 4b 69 6c 6c 65 72 20 61 70 | the !VKiller ap| 000017c0 70 6c 69 63 61 74 69 6f 6e 20 69 63 6f 6e 20 74 |plication icon t| 000017d0 6f 20 69 6e 73 74 61 6c 6c 20 61 6e 20 69 63 6f |o install an ico| 000017e0 6e 20 62 61 72 20 69 63 6f 6e 2e 0a 5b 4e 2e 42 |n bar icon..[N.B| 000017f0 2e 20 54 68 65 20 21 42 6f 6f 74 20 69 6e 20 74 |. The !Boot in t| 00001800 68 65 20 21 56 4b 69 6c 6c 65 72 20 64 69 72 65 |he !VKiller dire| 00001810 63 74 6f 72 79 20 68 61 73 20 69 74 73 65 6c 66 |ctory has itself| 00001820 20 62 65 65 6e 20 69 6e 6e 6f 63 75 6c 61 74 65 | been innoculate| 00001830 64 0a 20 20 20 20 20 20 74 6f 20 70 72 65 76 65 |d. to preve| 00001840 6e 74 20 69 6e 66 65 63 74 69 6f 6e 20 6f 66 20 |nt infection of | 00001850 69 74 73 20 6f 77 6e 20 64 69 72 65 63 74 6f 72 |its own director| 00001860 79 2e 5d 0a 0a 4f 6e 63 65 20 74 68 65 20 69 63 |y.]..Once the ic| 00001870 6f 6e 20 62 61 72 20 69 63 6f 6e 20 61 70 70 65 |on bar icon appe| 00001880 61 72 73 20 79 6f 75 20 6d 61 79 20 70 72 65 73 |ars you may pres| 00001890 73 20 74 68 65 20 6d 69 64 64 6c 65 20 62 75 74 |s the middle but| 000018a0 74 6f 6e 20 74 6f 20 67 65 74 20 74 68 65 0a 75 |ton to get the.u| 000018b0 73 75 61 6c 20 49 6e 66 6f 20 61 6e 64 20 51 75 |sual Info and Qu| 000018c0 69 74 20 6f 70 74 69 6f 6e 73 20 61 6e 64 20 74 |it options and t| 000018d0 68 65 20 6c 65 66 74 20 6f 72 20 72 69 67 68 74 |he left or right| 000018e0 20 62 75 74 74 6f 6e 20 74 6f 20 64 69 73 70 6c | button to displ| 000018f0 61 79 20 74 68 65 0a 56 4b 69 6c 6c 65 72 20 64 |ay the.VKiller d| 00001900 69 61 6c 6f 67 75 65 20 62 6f 78 2e 20 57 68 65 |ialogue box. Whe| 00001910 6e 20 56 4b 69 6c 6c 65 72 20 69 73 20 66 69 72 |n VKiller is fir| 00001920 73 74 20 69 6e 73 74 61 6c 6c 65 64 2c 20 69 74 |st installed, it| 00001930 20 63 68 65 63 6b 73 20 66 6f 72 20 74 68 65 0a | checks for the.| 00001940 65 78 69 73 74 65 6e 63 65 20 6f 66 20 74 68 65 |existence of the| 00001950 20 45 78 74 65 6e 64 20 56 69 72 75 73 20 6d 6f | Extend Virus mo| 00001960 64 75 6c 65 20 69 6e 20 52 4d 41 2e 20 49 66 20 |dule in RMA. If | 00001970 66 6f 75 6e 64 2c 20 69 74 20 77 69 6c 6c 20 6b |found, it will k| 00001980 69 6c 6c 20 69 74 20 69 66 0a 70 6f 73 73 69 62 |ill it if.possib| 00001990 6c 65 20 61 6e 64 20 77 61 72 6e 20 79 6f 75 20 |le and warn you | 000019a0 6f 66 20 74 68 65 20 66 61 63 74 2e 20 54 68 65 |of the fact. The| 000019b0 20 45 78 65 63 75 74 69 6f 6e 20 43 6f 75 6e 74 | Execution Count| 000019c0 20 66 6f 72 20 74 68 65 20 6d 6f 64 75 6c 65 20 | for the module | 000019d0 77 69 6c 6c 0a 61 6c 73 6f 20 62 65 20 64 69 73 |will.also be dis| 000019e0 70 6c 61 79 65 64 2e 20 46 72 6f 6d 20 74 68 65 |played. From the| 000019f0 6e 20 6f 6e 2c 20 77 68 65 6e 65 76 65 72 20 61 |n on, whenever a| 00001a00 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 69 73 |n application is| 00001a10 20 73 74 61 72 74 65 64 20 77 69 74 68 0a 61 20 | started with.a | 00001a20 6e 75 6c 6c 20 74 61 73 6b 20 6e 61 6d 65 20 74 |null task name t| 00001a30 68 65 20 52 4d 41 20 69 73 20 72 65 2d 73 63 61 |he RMA is re-sca| 00001a40 6e 6e 65 64 20 66 6f 72 20 74 68 65 20 45 78 74 |nned for the Ext| 00001a50 65 6e 64 20 56 69 72 75 73 20 6d 6f 64 75 6c 65 |end Virus module| 00001a60 2e 0a 0a 54 68 65 20 64 69 61 6c 6f 67 75 65 20 |...The dialogue | 00001a70 62 6f 78 20 68 61 73 20 74 68 65 20 66 6f 6c 6c |box has the foll| 00001a80 6f 77 69 6e 67 20 6f 70 74 69 6f 6e 73 2e 2e 2e |owing options...| 00001a90 0a 0a 46 69 6c 69 6e 67 20 53 79 73 74 65 6d 3a |..Filing System:| 00001aa0 20 43 6c 69 63 6b 20 6f 6e 20 74 68 65 20 79 65 | Click on the ye| 00001ab0 6c 6c 6f 77 20 62 75 74 74 6f 6e 20 74 6f 20 63 |llow button to c| 00001ac0 79 63 6c 65 20 74 68 72 6f 75 67 68 20 74 68 65 |ycle through the| 00001ad0 20 61 76 61 69 6c 61 62 6c 65 0a 20 20 20 20 20 | available. | 00001ae0 20 20 20 20 20 20 20 20 20 20 66 69 6c 69 6e 67 | filing| 00001af0 20 73 79 73 74 65 6d 73 2e 20 56 4b 69 6c 6c 65 | systems. VKille| 00001b00 72 20 77 69 6c 6c 20 75 73 75 61 6c 6c 79 20 73 |r will usually s| 00001b10 74 61 72 74 20 75 70 20 77 69 74 68 20 61 64 66 |tart up with adf| 00001b20 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 |s. | 00001b30 20 61 73 20 74 68 65 20 64 65 66 61 75 6c 74 2c | as the default,| 00001b40 20 62 75 74 20 74 68 65 20 63 79 63 6c 65 20 6f | but the cycle o| 00001b50 72 64 65 72 20 69 73 20 69 6e 20 66 69 6c 69 6e |rder is in filin| 00001b60 67 20 73 79 73 74 65 6d 0a 20 20 20 20 20 20 20 |g system. | 00001b70 20 20 20 20 20 20 20 20 6e 75 6d 62 65 72 20 6f | number o| 00001b80 72 64 65 72 2e 0a 0a 44 72 69 76 65 3a 20 20 43 |rder...Drive: C| 00001b90 6c 69 63 6b 20 6f 6e 20 6f 6e 65 20 6f 66 20 74 |lick on one of t| 00001ba0 68 65 20 61 76 61 69 6c 61 62 6c 65 20 64 72 69 |he available dri| 00001bb0 76 65 73 20 74 6f 20 73 65 6c 65 63 74 20 69 74 |ves to select it| 00001bc0 20 28 73 68 6f 77 6e 20 77 69 74 68 20 61 0a 20 | (shown with a. | 00001bd0 20 20 20 20 20 20 20 79 65 6c 6c 6f 77 20 62 61 | yellow ba| 00001be0 63 6b 67 72 6f 75 6e 64 29 2e 20 54 68 65 20 64 |ckground). The d| 00001bf0 72 69 76 65 20 69 73 20 69 6e 69 74 69 61 6c 6c |rive is initiall| 00001c00 79 20 73 65 74 20 74 6f 20 74 68 65 20 64 65 66 |y set to the def| 00001c10 61 75 6c 74 20 6f 6e 65 0a 20 20 20 20 20 20 20 |ault one. | 00001c20 20 28 65 2e 67 2e 20 66 6f 72 20 61 64 66 73 2c | (e.g. for adfs,| 00001c30 20 69 74 20 77 6f 75 6c 64 20 62 65 20 74 68 65 | it would be the| 00001c40 20 2a 43 6f 6e 66 69 67 75 72 65 20 44 72 69 76 | *Configure Driv| 00001c50 65 20 6f 70 74 69 6f 6e 29 2e 0a 0a 44 69 72 20 |e option)...Dir | 00001c60 53 63 61 6e 3a 20 54 68 69 73 20 6c 69 6e 65 20 |Scan: This line | 00001c70 64 69 73 70 6c 61 79 73 20 77 68 69 63 68 20 64 |displays which d| 00001c80 69 72 65 63 74 6f 72 79 20 74 68 65 20 44 72 69 |irectory the Dri| 00001c90 76 65 20 53 63 61 6e 20 68 61 73 20 67 6f 74 20 |ve Scan has got | 00001ca0 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 54 68 |to.. Th| 00001cb0 65 20 6f 6e 6c 79 20 65 78 63 65 70 74 69 6f 6e |e only exception| 00001cc0 20 74 6f 20 74 68 69 73 20 69 73 20 77 68 65 6e | to this is when| 00001cd0 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 | it is used to d| 00001ce0 69 73 70 6c 61 79 20 74 68 65 0a 20 20 20 20 20 |isplay the. | 00001cf0 20 20 20 20 20 45 78 65 63 75 74 69 6f 6e 20 43 | Execution C| 00001d00 6f 75 6e 74 20 77 68 65 6e 20 74 68 65 20 45 78 |ount when the Ex| 00001d10 74 65 6e 64 20 56 69 72 75 73 20 6d 6f 64 75 6c |tend Virus modul| 00001d20 65 20 69 73 20 66 6f 75 6e 64 2e 0a 0a 53 74 61 |e is found...Sta| 00001d30 74 75 73 3a 20 20 20 47 65 6e 65 72 61 6c 20 62 |tus: General b| 00001d40 72 69 65 66 20 6d 65 73 73 61 67 65 73 20 61 72 |rief messages ar| 00001d50 65 20 64 69 73 70 6c 61 79 65 64 20 68 65 72 65 |e displayed here| 00001d60 2e 0a 0a 54 68 65 20 6e 65 78 74 20 66 6f 75 72 |...The next four| 00001d70 20 66 69 65 6c 64 73 20 61 72 65 20 73 65 6c 66 | fields are self| 00001d80 2d 65 78 70 6c 61 6e 61 74 6f 72 79 20 61 6e 64 |-explanatory and| 00001d90 20 61 72 65 20 63 6f 75 6e 74 65 72 73 20 66 6f | are counters fo| 00001da0 72 20 74 68 65 20 6e 75 6d 62 65 72 0a 6f 66 20 |r the number.of | 00001db0 74 69 6d 65 73 20 74 68 65 20 45 78 74 65 6e 64 |times the Extend| 00001dc0 20 56 69 72 75 73 20 77 61 73 20 65 6e 63 6f 75 | Virus was encou| 00001dd0 6e 74 65 72 65 64 20 69 6e 20 52 4d 41 20 6f 72 |ntered in RMA or| 00001de0 20 6f 6e 20 64 69 73 6b 2c 20 74 68 65 20 6e 75 | on disk, the nu| 00001df0 6d 62 65 72 20 6f 66 0a 6e 65 77 20 69 6e 6e 6f |mber of.new inno| 00001e00 63 75 6c 61 74 69 6f 6e 73 20 61 6e 64 20 74 68 |culations and th| 00001e10 65 20 6e 75 6d 62 65 72 20 6f 66 20 44 72 69 76 |e number of Driv| 00001e20 65 20 53 63 61 6e 73 20 73 6f 20 66 61 72 2e 0a |e Scans so far..| 00001e30 0a 53 74 61 72 74 20 44 72 69 76 65 20 53 63 61 |.Start Drive Sca| 00001e40 6e 3a 20 43 6c 69 63 6b 69 6e 67 20 6f 6e 20 74 |n: Clicking on t| 00001e50 68 69 73 20 77 69 6c 6c 20 73 74 61 72 74 20 61 |his will start a| 00001e60 20 44 72 69 76 65 20 53 63 61 6e 20 28 61 6e 64 | Drive Scan (and| 00001e70 20 74 68 65 20 68 69 67 68 6c 69 67 68 74 65 64 | the highlighted| 00001e80 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 |. | 00001e90 20 20 20 62 75 74 74 6f 6e 20 6c 61 62 65 6c 20 | button label | 00001ea0 62 65 63 6f 6d 65 73 20 22 53 74 6f 70 20 44 72 |becomes "Stop Dr| 00001eb0 69 76 65 20 53 63 61 6e 22 29 2e 20 49 74 20 6d |ive Scan"). It m| 00001ec0 61 79 20 62 65 20 73 74 6f 70 70 65 64 0a 20 20 |ay be stopped. | 00001ed0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | | 00001ee0 61 74 20 61 6e 79 20 74 69 6d 65 20 62 79 20 63 |at any time by c| 00001ef0 6c 69 63 6b 69 6e 67 20 6f 6e 20 74 68 65 20 28 |licking on the (| 00001f00 72 65 6c 61 62 65 6c 6c 65 64 29 20 62 75 74 74 |relabelled) butt| 00001f10 6f 6e 20 61 67 61 69 6e 2c 0a 20 20 20 20 20 20 |on again,. | 00001f20 20 20 20 20 20 20 20 20 20 20 20 20 62 75 74 20 | but | 00001f30 74 68 69 73 20 64 6f 65 73 20 6e 6f 74 20 69 6e |this does not in| 00001f40 63 72 65 6d 65 6e 74 20 74 68 65 20 44 72 69 76 |crement the Driv| 00001f50 65 20 53 63 61 6e 20 63 6f 75 6e 74 65 72 2e 0a |e Scan counter..| 00001f60 0a 49 6e 6e 6f 63 75 6c 61 74 65 20 44 75 72 69 |.Innoculate Duri| 00001f70 6e 67 20 53 63 61 6e 3a 20 43 6c 69 63 6b 69 6e |ng Scan: Clickin| 00001f80 67 20 6f 6e 20 74 68 69 73 20 77 69 6c 6c 20 74 |g on this will t| 00001f90 6f 67 67 6c 65 20 74 68 65 20 6f 70 74 69 6f 6e |oggle the option| 00001fa0 20 74 6f 20 69 6e 6e 6f 63 75 6c 61 74 65 0a 20 | to innoculate. | 00001fb0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | | 00001fc0 20 20 20 20 20 20 20 41 4c 4c 20 21 42 6f 6f 74 | ALL !Boot| 00001fd0 20 66 69 6c 65 73 20 77 69 74 68 20 74 68 65 20 | files with the | 00001fe0 4f 62 65 79 20 28 26 46 45 42 29 20 66 69 6c 65 |Obey (&FEB) file| 00001ff0 74 79 70 65 0a 20 20 20 20 20 20 20 20 20 20 20 |type. | 00002000 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 63 | enc| 00002010 6f 75 6e 74 65 72 65 64 20 64 75 72 69 6e 67 20 |ountered during | 00002020 74 68 65 20 73 63 61 6e 2e 20 49 66 20 69 74 20 |the scan. If it | 00002030 69 73 20 6e 6f 74 20 73 65 6c 65 63 74 65 64 2c |is not selected,| 00002040 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 |. | 00002050 20 20 20 20 20 20 20 20 20 74 68 65 6e 20 61 6e | then an| 00002060 79 20 21 42 6f 6f 74 20 66 69 6c 65 73 20 69 6e |y !Boot files in| 00002070 66 65 63 74 65 64 20 77 69 74 68 20 74 68 65 20 |fected with the | 00002080 45 78 74 65 6e 64 20 56 69 72 75 73 0a 20 20 20 |Extend Virus. | 00002090 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | | 000020a0 20 20 20 20 20 77 69 6c 6c 20 73 74 69 6c 6c 20 | will still | 000020b0 62 65 20 69 6e 6e 6f 63 75 6c 61 74 65 64 20 61 |be innoculated a| 000020c0 6e 79 77 61 79 2e 0a 0a 4e 6f 74 65 73 20 61 62 |nyway...Notes ab| 000020d0 6f 75 74 20 74 68 65 20 44 72 69 76 65 20 53 63 |out the Drive Sc| 000020e0 61 6e 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |an.-------------| 000020f0 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 |-------------..T| 00002100 68 65 20 44 72 69 76 65 20 53 63 61 6e 20 69 73 |he Drive Scan is| 00002110 20 66 75 6c 6c 79 20 6d 75 6c 74 69 2d 74 61 73 | fully multi-tas| 00002120 6b 69 6e 67 20 61 6e 64 20 74 68 65 20 56 4b 69 |king and the VKi| 00002130 6c 6c 65 72 20 64 69 61 6c 6f 67 75 65 20 62 6f |ller dialogue bo| 00002140 78 20 64 6f 65 73 20 4e 4f 54 0a 6e 65 65 64 20 |x does NOT.need | 00002150 74 6f 20 62 65 20 6f 70 65 6e 20 64 75 72 69 6e |to be open durin| 00002160 67 20 74 68 65 20 73 63 61 6e 2e 20 49 66 20 74 |g the scan. If t| 00002170 68 65 20 64 69 61 6c 6f 67 75 65 20 62 6f 78 20 |he dialogue box | 00002180 69 73 20 63 6c 6f 73 65 64 20 64 75 72 69 6e 67 |is closed during| 00002190 20 61 20 73 63 61 6e 2c 0a 74 68 65 6e 20 69 74 | a scan,.then it| 000021a0 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 | will be automat| 000021b0 69 63 61 6c 6c 79 20 72 65 2d 6f 70 65 6e 65 64 |ically re-opened| 000021c0 20 28 6f 72 20 62 72 6f 75 67 68 74 20 74 6f 20 | (or brought to | 000021d0 74 68 65 20 66 72 6f 6e 74 20 69 66 20 69 74 20 |the front if it | 000021e0 69 73 0a 61 6c 72 65 61 64 79 20 6f 70 65 6e 29 |is.already open)| 000021f0 20 77 68 65 6e 20 61 6e 20 69 6e 66 65 63 74 69 | when an infecti| 00002200 6f 6e 20 69 73 20 66 6f 75 6e 64 20 6f 72 20 74 |on is found or t| 00002210 68 65 20 44 72 69 76 65 20 53 63 61 6e 20 68 61 |he Drive Scan ha| 00002220 73 20 66 69 6e 69 73 68 65 64 2e 0a 0a 49 66 20 |s finished...If | 00002230 74 68 65 20 45 78 74 65 6e 64 20 56 69 72 75 73 |the Extend Virus| 00002240 20 6d 6f 64 75 6c 65 20 69 73 20 72 75 6e 20 6d | module is run m| 00002250 69 64 2d 77 61 79 20 74 68 72 6f 75 67 68 20 61 |id-way through a| 00002260 20 44 72 69 76 65 20 53 63 61 6e 2c 20 74 68 65 | Drive Scan, the| 00002270 6e 20 74 68 65 0a 6d 6f 64 75 6c 65 20 77 69 6c |n the.module wil| 00002280 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c |l be automatical| 00002290 6c 79 20 6b 69 6c 6c 65 64 20 61 6e 64 20 74 68 |ly killed and th| 000022a0 65 20 64 69 61 6c 6f 67 75 65 20 62 6f 78 20 77 |e dialogue box w| 000022b0 69 6c 6c 20 62 65 20 72 65 2d 6f 70 65 6e 65 64 |ill be re-opened| 000022c0 0a 28 61 73 20 69 74 20 77 6f 75 6c 64 20 62 65 |.(as it would be| 000022d0 20 69 66 20 74 68 65 20 45 78 74 65 6e 64 20 56 | if the Extend V| 000022e0 69 72 75 73 20 6d 6f 64 75 6c 65 20 77 61 73 20 |irus module was | 000022f0 72 75 6e 20 61 74 20 61 6e 79 20 74 69 6d 65 29 |run at any time)| 00002300 20 77 69 74 68 20 61 0a 73 75 69 74 61 62 6c 65 | with a.suitable| 00002310 20 6d 65 73 73 61 67 65 2e 20 41 74 20 74 68 65 | message. At the| 00002320 20 65 6e 64 20 6f 66 20 74 68 61 74 20 44 72 69 | end of that Dri| 00002330 76 65 20 53 63 61 6e 2c 20 79 6f 75 20 61 72 65 |ve Scan, you are| 00002340 20 61 64 76 69 73 65 64 20 74 68 61 74 20 74 68 | advised that th| 00002350 65 0a 64 72 69 76 65 20 6d 61 79 20 73 74 69 6c |e.drive may stil| 00002360 6c 20 62 65 20 69 6e 66 65 63 74 65 64 2c 20 69 |l be infected, i| 00002370 6e 20 77 68 69 63 68 20 63 61 73 65 20 79 6f 75 |n which case you| 00002380 20 73 68 6f 75 6c 64 20 72 65 2d 73 63 61 6e 20 | should re-scan | 00002390 74 68 61 74 20 64 72 69 76 65 0a 28 61 6e 64 20 |that drive.(and | 000023a0 74 68 65 20 64 72 69 76 65 20 74 68 61 74 20 63 |the drive that c| 000023b0 61 75 73 65 64 20 74 68 65 20 69 6e 66 65 63 74 |aused the infect| 000023c0 69 6f 6e 20 69 6e 20 74 68 65 20 66 69 72 73 74 |ion in the first| 000023d0 20 70 6c 61 63 65 29 2e 0a 0a 44 75 65 20 74 6f | place)...Due to| 000023e0 20 61 20 62 75 67 20 69 6e 20 42 41 53 49 43 20 | a bug in BASIC | 000023f0 56 20 28 74 68 65 20 73 70 61 63 65 20 63 6c 61 |V (the space cla| 00002400 69 6d 65 64 20 62 79 20 4c 4f 43 41 4c 6c 79 20 |imed by LOCALly | 00002410 44 49 4d 6d 65 64 20 6d 65 6d 6f 72 79 20 61 72 |DIMmed memory ar| 00002420 72 61 79 73 0a 69 73 20 6e 6f 74 20 72 65 6c 65 |rays.is not rele| 00002430 61 73 65 64 20 77 68 65 6e 20 74 68 65 20 70 72 |ased when the pr| 00002440 6f 63 65 64 75 72 65 20 65 78 69 74 73 29 2c 20 |ocedure exits), | 00002450 49 20 68 61 76 65 20 68 61 64 20 74 6f 20 69 6d |I have had to im| 00002460 70 6f 73 65 20 74 68 65 0a 66 6f 6c 6c 6f 77 69 |pose the.followi| 00002470 6e 67 20 28 76 65 72 79 20 67 65 6e 65 72 6f 75 |ng (very generou| 00002480 73 29 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a |s) restrictions:| 00002490 0a 0a 21 42 6f 6f 74 20 28 4f 62 65 79 29 20 66 |..!Boot (Obey) f| 000024a0 69 6c 65 73 20 6c 6f 6e 67 65 72 20 74 68 61 6e |iles longer than| 000024b0 20 35 4b 20 77 69 6c 6c 20 62 65 20 73 6b 69 70 | 5K will be skip| 000024c0 70 65 64 20 28 61 20 6d 65 73 73 61 67 65 20 69 |ped (a message i| 000024d0 73 20 64 69 73 70 6c 61 79 65 64 29 2e 0a 44 69 |s displayed)..Di| 000024e0 72 73 20 6e 65 73 74 65 64 20 64 65 65 70 65 72 |rs nested deeper| 000024f0 20 74 68 61 6e 20 38 20 6c 65 76 65 6c 73 20 77 | than 8 levels w| 00002500 69 6c 6c 20 62 65 20 73 6b 69 70 70 65 64 20 28 |ill be skipped (| 00002510 61 6c 73 6f 20 64 69 73 70 6c 61 79 73 20 6d 65 |also displays me| 00002520 73 73 61 67 65 29 2e 0a 0a 49 20 68 61 76 65 20 |ssage)...I have | 00002530 6e 65 76 65 72 20 63 6f 6d 65 20 61 63 72 6f 73 |never come acros| 00002540 73 20 61 6e 79 20 61 70 70 6c 69 63 61 74 69 6f |s any applicatio| 00002550 6e 20 74 68 61 74 20 65 78 63 65 65 64 73 20 74 |n that exceeds t| 00002560 68 65 73 65 20 76 61 6c 75 65 73 2c 20 62 75 74 |hese values, but| 00002570 0a 69 66 20 73 6f 6d 65 6f 6e 65 20 68 61 73 20 |.if someone has | 00002580 6f 6e 65 20 74 68 61 74 20 64 6f 65 73 2c 20 70 |one that does, p| 00002590 6c 65 61 73 65 20 74 65 6c 6c 20 6d 65 2c 20 73 |lease tell me, s| 000025a0 6f 20 49 20 63 61 6e 20 6d 6f 64 69 66 79 20 74 |o I can modify t| 000025b0 68 65 20 6c 69 6d 69 74 73 2e 0a 0a 52 65 71 75 |he limits...Requ| 000025c0 65 73 74 20 46 6f 72 20 56 69 72 75 73 65 73 0a |est For Viruses.| 000025d0 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |----------------| 000025e0 2d 2d 2d 0a 0a 59 65 73 2c 20 74 68 69 73 20 69 |---..Yes, this i| 000025f0 73 20 61 20 73 74 72 61 6e 67 65 20 74 68 69 6e |s a strange thin| 00002600 67 20 74 6f 20 61 73 6b 2c 20 62 75 74 20 63 6f |g to ask, but co| 00002610 75 6c 64 20 70 65 6f 70 6c 65 20 69 6e 20 70 6f |uld people in po| 00002620 73 73 65 73 69 6f 6e 20 6f 66 20 61 20 76 69 72 |ssesion of a vir| 00002630 75 73 0a 70 6c 65 61 73 65 20 73 65 6e 64 20 69 |us.please send i| 00002640 74 20 74 6f 20 74 68 65 20 61 64 64 72 65 73 73 |t to the address| 00002650 20 61 74 20 74 68 65 20 65 6e 64 20 6f 66 20 74 | at the end of t| 00002660 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 3f 20 50 |his document ? P| 00002670 6c 65 61 73 65 20 6d 61 72 6b 20 74 68 65 0a 64 |lease mark the.d| 00002680 69 73 63 20 28 6f 72 20 65 2d 6d 61 69 6c 20 21 |isc (or e-mail !| 00002690 29 20 63 6c 65 61 72 6c 79 20 74 68 61 74 20 69 |) clearly that i| 000026a0 74 20 63 6f 6e 74 61 69 6e 73 20 61 20 76 69 72 |t contains a vir| 000026b0 75 73 2e 20 49 20 77 6f 75 6c 64 20 6c 69 6b 65 |us. I would like| 000026c0 20 56 4b 69 6c 6c 65 72 20 74 6f 0a 65 76 6f 6c | VKiller to.evol| 000026d0 76 65 20 74 6f 20 63 6f 70 65 20 77 69 74 68 20 |ve to cope with | 000026e0 6f 74 68 65 72 20 76 69 72 75 73 65 73 20 28 49 |other viruses (I| 000026f0 20 6b 6e 6f 77 20 74 68 61 74 20 74 68 65 72 65 | know that there| 00002700 20 61 20 66 65 77 20 6f 74 68 65 72 73 20 66 6c | a few others fl| 00002710 6f 61 74 69 6e 67 0a 61 72 6f 75 6e 64 2c 20 73 |oating.around, s| 00002720 6f 20 49 27 64 20 61 70 70 72 65 63 69 61 74 65 |o I'd appreciate| 00002730 20 61 6e 79 6f 6e 65 27 73 20 61 73 73 69 73 74 | anyone's assist| 00002740 61 6e 63 65 20 69 6e 20 74 72 61 63 6b 69 6e 67 |ance in tracking| 00002750 20 74 68 65 6d 20 64 6f 77 6e 29 2e 0a 0a 43 72 | them down)...Cr| 00002760 65 64 69 74 73 0a 2d 2d 2d 2d 2d 2d 2d 0a 0a 2a |edits.-------..*| 00002770 20 53 69 6d 6f 6e 20 42 75 72 72 6f 77 73 20 66 | Simon Burrows f| 00002780 6f 72 20 73 75 70 70 6c 79 69 6e 67 20 6d 65 20 |or supplying me | 00002790 77 69 74 68 20 74 68 65 20 45 78 74 65 6e 64 20 |with the Extend | 000027a0 56 69 72 75 73 20 6d 6f 64 75 6c 65 20 28 61 6e |Virus module (an| 000027b0 64 20 63 6c 65 61 72 6c 79 0a 20 20 6d 61 72 6b |d clearly. mark| 000027c0 65 64 20 61 73 20 73 6f 2c 20 75 6e 6c 69 6b 65 |ed as so, unlike| 000027d0 20 63 65 72 74 61 69 6e 20 6f 74 68 65 72 20 63 | certain other c| 000027e0 6f 6e 74 61 63 74 73 20 49 20 68 61 76 65 20 3a |ontacts I have :| 000027f0 2d 29 20 29 2e 0a 0a 52 65 76 69 73 69 6f 6e 20 |-) )...Revision | 00002800 48 69 73 74 6f 72 79 20 6f 66 20 56 4b 69 6c 6c |History of VKill| 00002810 65 72 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |er.-------------| 00002820 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a |--------------..| 00002830 56 31 2e 31 30 20 28 44 65 63 65 6d 62 65 72 20 |V1.10 (December | 00002840 31 39 39 30 29 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |1990).----------| 00002850 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 2a 20 4e |-----------..* N| 00002860 6f 77 20 6d 75 6c 74 69 2d 74 61 73 6b 73 20 77 |ow multi-tasks w| 00002870 69 74 68 20 61 20 64 69 61 6c 6f 67 75 65 20 62 |ith a dialogue b| 00002880 6f 78 20 74 6f 20 73 65 6c 65 63 74 20 6f 70 74 |ox to select opt| 00002890 69 6f 6e 73 2e 20 43 6f 64 65 20 73 75 62 73 74 |ions. Code subst| 000028a0 61 6e 74 69 61 6c 6c 79 0a 20 20 72 65 77 6f 72 |antially. rewor| 000028b0 6b 65 64 20 74 6f 20 73 75 70 70 6f 72 74 20 74 |ked to support t| 000028c0 68 65 20 57 49 4d 50 20 28 61 6e 64 20 69 74 20 |he WIMP (and it | 000028d0 74 6f 6f 6b 20 6c 6f 6e 67 65 72 20 74 68 61 6e |took longer than| 000028e0 20 74 68 65 20 67 75 74 73 20 6f 66 20 56 31 2e | the guts of V1.| 000028f0 30 30 0a 20 20 64 69 64 20 21 29 2e 0a 0a 2a 20 |00. did !)...* | 00002900 4e 65 77 20 70 61 74 63 68 20 63 6f 64 65 20 74 |New patch code t| 00002910 6f 20 66 69 78 20 45 78 74 65 6e 64 20 56 69 72 |o fix Extend Vir| 00002920 75 73 20 27 62 75 67 27 20 2d 20 6e 6f 77 20 70 |us 'bug' - now p| 00002930 72 6f 76 69 64 65 73 20 73 61 66 65 72 20 57 69 |rovides safer Wi| 00002940 6d 70 5f 43 6c 6f 73 65 44 6f 77 6e 0a 20 20 63 |mp_CloseDown. c| 00002950 61 6c 6c 73 20 66 6f 72 20 35 30 25 20 6f 66 20 |alls for 50% of | 00002960 74 68 65 20 74 69 6d 65 2e 20 44 65 73 70 69 74 |the time. Despit| 00002970 65 20 74 68 69 73 2c 20 52 4d 4b 69 6c 6c 69 6e |e this, RMKillin| 00002980 67 20 74 68 65 20 6d 6f 64 75 6c 65 20 69 73 20 |g the module is | 00002990 73 74 69 6c 6c 0a 20 20 72 69 73 6b 69 65 72 20 |still. riskier | 000029a0 74 68 61 6e 20 69 74 20 77 61 73 20 77 69 74 68 |than it was with| 000029b0 20 56 31 2e 30 30 2e 0a 0a 2a 20 21 42 6f 6f 74 | V1.00...* !Boot| 000029c0 20 66 69 6c 65 73 20 74 6f 20 62 65 20 69 6e 6e | files to be inn| 000029d0 6f 63 75 6c 61 74 65 64 20 74 68 61 74 20 61 72 |oculated that ar| 000029e0 65 20 6e 6f 74 20 74 65 72 6d 69 6e 61 74 65 64 |e not terminated| 000029f0 20 62 79 20 61 20 6c 69 6e 65 66 65 65 64 20 28 | by a linefeed (| 00002a00 3c 26 30 41 3e 29 0a 20 20 6e 6f 77 20 68 61 76 |<&0A>). now hav| 00002a10 65 20 74 68 61 74 20 6d 69 73 73 69 6e 67 20 6c |e that missing l| 00002a20 69 6e 65 66 65 65 64 20 61 64 64 65 64 20 70 72 |inefeed added pr| 00002a30 69 6f 72 20 74 6f 20 69 6e 6e 6f 63 75 6c 61 74 |ior to innoculat| 00002a40 69 6f 6e 2e 0a 0a 2a 20 45 78 74 65 6e 64 20 56 |ion...* Extend V| 00002a50 69 72 75 73 20 45 78 65 63 75 74 69 6f 6e 20 43 |irus Execution C| 00002a60 6f 75 6e 74 20 69 73 20 6e 6f 77 20 64 69 73 70 |ount is now disp| 00002a70 6c 61 79 65 64 20 6a 75 73 74 20 62 65 66 6f 72 |layed just befor| 00002a80 65 20 74 68 65 20 6d 6f 64 75 6c 65 20 69 73 0a |e the module is.| 00002a90 20 20 64 65 6c 65 74 65 64 20 66 72 6f 6d 20 74 | deleted from t| 00002aa0 68 65 20 69 6e 66 65 63 74 65 64 20 64 69 73 6b |he infected disk| 00002ab0 20 6f 72 20 6b 69 6c 6c 65 64 20 66 72 6f 6d 20 | or killed from | 00002ac0 74 68 65 20 52 4d 41 2e 0a 0a 2a 20 4f 6e 6c 79 |the RMA...* Only| 00002ad0 20 21 42 6f 6f 74 20 66 69 6c 65 73 20 74 68 61 | !Boot files tha| 00002ae0 74 20 68 61 76 65 20 74 68 65 20 4f 62 65 79 20 |t have the Obey | 00002af0 28 26 46 45 42 29 20 66 69 6c 65 74 79 70 65 20 |(&FEB) filetype | 00002b00 63 61 6e 20 6e 6f 77 20 62 65 20 69 6e 6e 6f 63 |can now be innoc| 00002b10 75 6c 61 74 65 64 0a 20 20 61 67 61 69 6e 73 74 |ulated. against| 00002b20 20 74 68 65 20 45 78 74 65 6e 64 20 56 69 72 75 | the Extend Viru| 00002b30 73 20 62 65 63 61 75 73 65 20 74 68 69 73 20 69 |s because this i| 00002b40 73 20 6f 6e 6c 79 20 66 69 6c 65 74 79 70 65 20 |s only filetype | 00002b50 74 68 61 74 20 6d 61 6b 65 73 20 61 6e 79 20 27 |that makes any '| 00002b60 73 65 6e 73 65 27 0a 20 20 69 6e 20 74 68 65 20 |sense'. in the | 00002b70 63 6f 6e 74 65 78 74 20 6f 66 20 74 68 65 20 69 |context of the i| 00002b80 6e 6e 6f 63 75 6c 61 74 69 6f 6e 2e 0a 0a 2a 20 |nnoculation...* | 00002b90 49 66 20 61 6e 20 69 6e 6e 6f 63 75 6c 61 74 65 |If an innoculate| 00002ba0 64 20 21 42 6f 6f 74 20 66 69 6c 65 20 69 73 20 |d !Boot file is | 00002bb0 62 65 69 6e 67 20 63 72 65 61 74 65 64 20 66 72 |being created fr| 00002bc0 6f 6d 20 73 63 72 61 74 63 68 20 61 6e 64 20 74 |om scratch and t| 00002bd0 68 65 72 65 20 69 73 0a 20 20 6e 6f 20 21 53 70 |here is. no !Sp| 00002be0 72 69 74 65 73 20 66 69 6c 65 20 69 6e 20 74 68 |rites file in th| 00002bf0 65 20 64 69 72 65 63 74 6f 72 79 20 28 77 69 74 |e directory (wit| 00002c00 68 20 74 68 65 20 53 70 72 69 74 65 20 66 69 6c |h the Sprite fil| 00002c10 65 74 79 70 65 29 2c 20 74 68 65 6e 20 74 68 65 |etype), then the| 00002c20 0a 20 20 49 63 6f 6e 53 70 72 69 74 65 73 20 3c |. IconSprites <| 00002c30 4f 62 65 79 24 44 69 72 3e 2e 21 53 70 72 69 74 |Obey$Dir>.!Sprit| 00002c40 65 73 20 6c 69 6e 65 20 69 73 20 6e 6f 20 6c 6f |es line is no lo| 00002c50 6e 67 65 72 20 61 64 64 65 64 2e 0a 0a 56 31 2e |nger added...V1.| 00002c60 30 30 20 28 4e 6f 76 65 6d 62 65 72 20 31 39 39 |00 (November 199| 00002c70 30 29 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |0).-------------| 00002c80 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 2a 20 57 72 69 74 |--------..* Writ| 00002c90 74 65 6e 20 61 73 20 61 20 70 6c 61 69 6e 20 73 |ten as a plain s| 00002ca0 69 6e 67 6c 65 2d 74 61 73 6b 69 6e 67 20 42 41 |ingle-tasking BA| 00002cb0 53 49 43 20 70 72 6f 67 72 61 6d 20 77 68 69 63 |SIC program whic| 00002cc0 68 20 63 6f 75 6c 64 20 61 6c 73 6f 20 69 6e 6e |h could also inn| 00002cd0 6f 63 75 6c 61 74 65 0a 20 20 21 42 6f 6f 74 20 |oculate. !Boot | 00002ce0 66 69 6c 65 73 20 61 67 61 69 6e 73 74 20 74 68 |files against th| 00002cf0 65 20 45 78 74 65 6e 64 20 56 69 72 75 73 2e 0a |e Extend Virus..| 00002d00 0a 2a 20 52 65 63 75 72 73 65 73 20 64 6f 77 6e |.* Recurses down| 00002d10 20 64 69 72 65 63 74 6f 72 69 65 73 20 28 74 6f | directories (to| 00002d20 20 61 20 6d 61 78 69 6d 75 6d 20 6c 65 76 65 6c | a maximum level| 00002d30 20 6f 66 20 38 29 20 61 6e 64 20 64 69 73 70 6c | of 8) and displ| 00002d40 61 79 73 20 76 61 72 69 6f 75 73 0a 20 20 6d 65 |ays various. me| 00002d50 73 73 61 67 65 73 20 69 6e 20 67 61 72 69 73 68 |ssages in garish| 00002d60 20 72 65 64 2c 20 67 72 65 65 6e 20 6f 72 20 79 | red, green or y| 00002d70 65 6c 6c 6f 77 2e 0a 0a 2a 20 43 61 6e 20 72 65 |ellow...* Can re| 00002d80 6d 6f 76 65 20 74 68 65 20 45 78 74 65 6e 64 20 |move the Extend | 00002d90 56 69 72 75 73 20 52 4d 41 20 6d 6f 64 75 6c 65 |Virus RMA module| 00002da0 2c 20 64 69 73 6b 20 6d 6f 64 75 6c 65 20 6f 72 |, disk module or| 00002db0 20 69 6e 66 65 63 74 69 6f 6e 20 6f 66 20 61 6e | infection of an| 00002dc0 20 21 42 6f 6f 74 2e 0a 0a 46 75 74 75 72 65 20 | !Boot...Future | 00002dd0 45 6e 68 61 6e 63 65 6d 65 6e 74 73 20 74 6f 20 |Enhancements to | 00002de0 56 4b 69 6c 6c 65 72 0a 2d 2d 2d 2d 2d 2d 2d 2d |VKiller.--------| 00002df0 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |----------------| 00002e00 2d 2d 2d 2d 2d 2d 0a 0a 2a 20 46 69 6e 64 20 61 |------..* Find a| 00002e10 20 77 61 79 20 74 6f 20 67 65 74 20 61 20 74 61 | way to get a ta| 00002e20 73 6b 20 68 61 6e 64 6c 65 20 67 69 76 65 6e 20 |sk handle given | 00002e30 74 68 61 74 20 74 61 73 6b 27 73 20 6e 61 6d 65 |that task's name| 00002e40 20 28 74 68 69 73 20 77 69 6c 6c 20 6d 61 6b 65 | (this will make| 00002e50 20 74 68 65 0a 20 20 52 4d 4b 69 6c 6c 69 6e 67 | the. RMKilling| 00002e60 20 6f 66 20 74 68 65 20 45 78 74 65 6e 64 20 56 | of the Extend V| 00002e70 69 72 75 73 20 6d 6f 64 75 6c 65 20 61 20 6c 6f |irus module a lo| 00002e80 74 20 73 61 66 65 72 20 66 72 6f 6d 20 74 68 65 |t safer from the| 00002e90 20 44 65 73 6b 74 6f 70 29 2e 0a 0a 2a 20 41 64 | Desktop)...* Ad| 00002ea0 64 20 73 75 70 70 6f 72 74 20 66 6f 72 20 6b 69 |d support for ki| 00002eb0 6c 6c 69 6e 67 20 28 6f 72 20 69 6e 6e 6f 63 75 |lling (or innocu| 00002ec0 6c 61 74 69 6e 67 20 61 67 61 69 6e 73 74 29 20 |lating against) | 00002ed0 6f 74 68 65 72 20 76 69 72 75 73 65 73 2e 0a 0a |other viruses...| 00002ee0 57 68 65 72 65 20 74 6f 20 73 65 6e 64 20 79 6f |Where to send yo| 00002ef0 75 72 20 76 69 72 75 73 65 73 2c 20 62 75 67 20 |ur viruses, bug | 00002f00 72 65 70 6f 72 74 73 2c 20 66 69 78 65 73 2c 20 |reports, fixes, | 00002f10 65 6e 68 61 6e 63 65 6d 65 6e 74 73 20 65 74 63 |enhancements etc| 00002f20 2e 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |..--------------| 00002f30 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d |----------------| * 00002f60 2d 2d 2d 0a 0a 53 6e 61 69 6c 20 4d 61 69 6c 3a |---..Snail Mail:| 00002f70 20 20 20 20 20 20 20 20 20 20 20 20 20 4a 41 4e | JAN| 00002f80 45 54 20 65 2d 6d 61 69 6c 3a 0a 0a 52 69 63 68 |ET e-mail:..Rich| 00002f90 61 72 64 20 4b 2e 20 4c 6c 6f 79 64 2c 20 20 20 |ard K. Lloyd, | 00002fa0 20 20 20 20 72 6b 6c 40 75 6b 2e 61 63 2e 6c 69 | rkl@uk.ac.li| 00002fb0 76 2e 63 73 2e 61 6e 64 0a 31 2c 20 42 61 6e 6b |v.cs.and.1, Bank| 00002fc0 73 20 52 6f 61 64 2c 0a 4c 6f 77 65 72 20 48 65 |s Road,.Lower He| 00002fd0 73 77 61 6c 6c 2c 0a 57 69 72 72 61 6c 2c 0a 4d |swall,.Wirral,.M| 00002fe0 65 72 73 65 79 73 69 64 65 2c 0a 47 72 65 61 74 |erseyside,.Great| 00002ff0 20 42 72 69 74 61 69 6e 0a 4c 36 30 20 39 4a 53 | Britain.L60 9JS| 00003000 0a |.| 00003001