Home » Archimedes archive » Archimedes World » AW-1993-01.adf » AWJan93 » !AWJan93/Goodies/ModVir/!Help

!AWJan93/Goodies/ModVir/!Help

This website contains an archive of files for the Acorn Electron, BBC Micro, Acorn Archimedes, Commodore 16 and Commodore 64 computers, which Dominic Ford has rescued from his private collection of floppy disks and cassettes.

Some of these files were originally commercial releases in the 1980s and 1990s, but they are now widely available online. I assume that copyright over them is no longer being asserted. If you own the copyright and would like files to be removed, please contact me.

Tape/disk: Home » Archimedes archive » Archimedes World » AW-1993-01.adf » AWJan93
Filename: !AWJan93/Goodies/ModVir/!Help
Read OK:
File size: 06F2 bytes
Load address: 0000
Exec address: 0000
File contents
                             Program : !FixVirMod

                     Version : 1.00 (8th September 1992)
                              
                              Author  : Carl Shaw
                    
                   Purpose : Removes "6th September" Virus
                           
                           (C) Archimedes World 1992



This application allows the user to scan a disc to see if any of the modules
have been affected by the "6th September" virus.  This virus displays a
harmless but very annoying message after the 6th September.
  The virus spreads to relocatable modules (such as those in the !System
application) by redirecting the initialisation, finalisation and service
call offsets to point to its own routines (control is passed back to the
original routines after it has done its work, making it hard to detect by
making the routines transparent).

!FixVirMod will check all modules to make such that they don't contain this
virus and if they do, it will reinstate the offsets to their original values
and remove the offending code from the end of the module.

The desktop interface is very simple, allowing the user to specify the ADFS
drive or even the filing system.  The process of scanning a disc for viruses
can be interrupted at any stage by clicking on "Abort".

Modules greater than 300K will not be loaded in by the program and the
message "** NO ROOM ** will be displayed in the "Reparing :" icon box, but
it is rare to find a module this size anyway.  More memory could be
allocated by changing the WIMPSLOT command in the !Run file and then
changing the variable BufferSize% in the BASIC program !RunImage. 

It should be noted that running this program will clear all RAM based
relocatable modules as a precaution.







00000000  0a 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |.               |
00000010  20 20 20 20 20 20 20 20  20 20 20 20 20 20 50 72  |              Pr|
00000020  6f 67 72 61 6d 20 3a 20  21 46 69 78 56 69 72 4d  |ogram : !FixVirM|
00000030  6f 64 0a 0a 20 20 20 20  20 20 20 20 20 20 20 20  |od..            |
00000040  20 20 20 20 20 20 20 20  20 56 65 72 73 69 6f 6e  |         Version|
00000050  20 3a 20 31 2e 30 30 20  28 38 74 68 20 53 65 70  | : 1.00 (8th Sep|
00000060  74 65 6d 62 65 72 20 31  39 39 32 29 0a 20 20 20  |tember 1992).   |
00000070  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000080  20 20 20 20 20 20 20 20  20 20 20 0a 20 20 20 20  |           .    |
00000090  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
000000a0  20 20 20 20 20 20 20 20  20 20 41 75 74 68 6f 72  |          Author|
000000b0  20 20 3a 20 43 61 72 6c  20 53 68 61 77 0a 20 20  |  : Carl Shaw.  |
000000c0  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
000000d0  20 20 0a 20 20 20 20 20  20 20 20 20 20 20 20 20  |  .             |
000000e0  20 20 20 20 20 20 50 75  72 70 6f 73 65 20 3a 20  |      Purpose : |
000000f0  52 65 6d 6f 76 65 73 20  22 36 74 68 20 53 65 70  |Removes "6th Sep|
00000100  74 65 6d 62 65 72 22 20  56 69 72 75 73 0a 20 20  |tember" Virus.  |
00000110  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000120  20 20 20 20 20 20 20 20  20 0a 20 20 20 20 20 20  |         .      |
00000130  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000140  20 20 20 20 20 28 43 29  20 41 72 63 68 69 6d 65  |     (C) Archime|
00000150  64 65 73 20 57 6f 72 6c  64 20 31 39 39 32 0a 0a  |des World 1992..|
00000160  0a 0a 54 68 69 73 20 61  70 70 6c 69 63 61 74 69  |..This applicati|
00000170  6f 6e 20 61 6c 6c 6f 77  73 20 74 68 65 20 75 73  |on allows the us|
00000180  65 72 20 74 6f 20 73 63  61 6e 20 61 20 64 69 73  |er to scan a dis|
00000190  63 20 74 6f 20 73 65 65  20 69 66 20 61 6e 79 20  |c to see if any |
000001a0  6f 66 20 74 68 65 20 6d  6f 64 75 6c 65 73 0a 68  |of the modules.h|
000001b0  61 76 65 20 62 65 65 6e  20 61 66 66 65 63 74 65  |ave been affecte|
000001c0  64 20 62 79 20 74 68 65  20 22 36 74 68 20 53 65  |d by the "6th Se|
000001d0  70 74 65 6d 62 65 72 22  20 76 69 72 75 73 2e 20  |ptember" virus. |
000001e0  20 54 68 69 73 20 76 69  72 75 73 20 64 69 73 70  | This virus disp|
000001f0  6c 61 79 73 20 61 0a 68  61 72 6d 6c 65 73 73 20  |lays a.harmless |
00000200  62 75 74 20 76 65 72 79  20 61 6e 6e 6f 79 69 6e  |but very annoyin|
00000210  67 20 6d 65 73 73 61 67  65 20 61 66 74 65 72 20  |g message after |
00000220  74 68 65 20 36 74 68 20  53 65 70 74 65 6d 62 65  |the 6th Septembe|
00000230  72 2e 0a 20 20 54 68 65  20 76 69 72 75 73 20 73  |r..  The virus s|
00000240  70 72 65 61 64 73 20 74  6f 20 72 65 6c 6f 63 61  |preads to reloca|
00000250  74 61 62 6c 65 20 6d 6f  64 75 6c 65 73 20 28 73  |table modules (s|
00000260  75 63 68 20 61 73 20 74  68 6f 73 65 20 69 6e 20  |uch as those in |
00000270  74 68 65 20 21 53 79 73  74 65 6d 0a 61 70 70 6c  |the !System.appl|
00000280  69 63 61 74 69 6f 6e 29  20 62 79 20 72 65 64 69  |ication) by redi|
00000290  72 65 63 74 69 6e 67 20  74 68 65 20 69 6e 69 74  |recting the init|
000002a0  69 61 6c 69 73 61 74 69  6f 6e 2c 20 66 69 6e 61  |ialisation, fina|
000002b0  6c 69 73 61 74 69 6f 6e  20 61 6e 64 20 73 65 72  |lisation and ser|
000002c0  76 69 63 65 0a 63 61 6c  6c 20 6f 66 66 73 65 74  |vice.call offset|
000002d0  73 20 74 6f 20 70 6f 69  6e 74 20 74 6f 20 69 74  |s to point to it|
000002e0  73 20 6f 77 6e 20 72 6f  75 74 69 6e 65 73 20 28  |s own routines (|
000002f0  63 6f 6e 74 72 6f 6c 20  69 73 20 70 61 73 73 65  |control is passe|
00000300  64 20 62 61 63 6b 20 74  6f 20 74 68 65 0a 6f 72  |d back to the.or|
00000310  69 67 69 6e 61 6c 20 72  6f 75 74 69 6e 65 73 20  |iginal routines |
00000320  61 66 74 65 72 20 69 74  20 68 61 73 20 64 6f 6e  |after it has don|
00000330  65 20 69 74 73 20 77 6f  72 6b 2c 20 6d 61 6b 69  |e its work, maki|
00000340  6e 67 20 69 74 20 68 61  72 64 20 74 6f 20 64 65  |ng it hard to de|
00000350  74 65 63 74 20 62 79 0a  6d 61 6b 69 6e 67 20 74  |tect by.making t|
00000360  68 65 20 72 6f 75 74 69  6e 65 73 20 74 72 61 6e  |he routines tran|
00000370  73 70 61 72 65 6e 74 29  2e 0a 0a 21 46 69 78 56  |sparent)...!FixV|
00000380  69 72 4d 6f 64 20 77 69  6c 6c 20 63 68 65 63 6b  |irMod will check|
00000390  20 61 6c 6c 20 6d 6f 64  75 6c 65 73 20 74 6f 20  | all modules to |
000003a0  6d 61 6b 65 20 73 75 63  68 20 74 68 61 74 20 74  |make such that t|
000003b0  68 65 79 20 64 6f 6e 27  74 20 63 6f 6e 74 61 69  |hey don't contai|
000003c0  6e 20 74 68 69 73 0a 76  69 72 75 73 20 61 6e 64  |n this.virus and|
000003d0  20 69 66 20 74 68 65 79  20 64 6f 2c 20 69 74 20  | if they do, it |
000003e0  77 69 6c 6c 20 72 65 69  6e 73 74 61 74 65 20 74  |will reinstate t|
000003f0  68 65 20 6f 66 66 73 65  74 73 20 74 6f 20 74 68  |he offsets to th|
00000400  65 69 72 20 6f 72 69 67  69 6e 61 6c 20 76 61 6c  |eir original val|
00000410  75 65 73 0a 61 6e 64 20  72 65 6d 6f 76 65 20 74  |ues.and remove t|
00000420  68 65 20 6f 66 66 65 6e  64 69 6e 67 20 63 6f 64  |he offending cod|
00000430  65 20 66 72 6f 6d 20 74  68 65 20 65 6e 64 20 6f  |e from the end o|
00000440  66 20 74 68 65 20 6d 6f  64 75 6c 65 2e 0a 0a 54  |f the module...T|
00000450  68 65 20 64 65 73 6b 74  6f 70 20 69 6e 74 65 72  |he desktop inter|
00000460  66 61 63 65 20 69 73 20  76 65 72 79 20 73 69 6d  |face is very sim|
00000470  70 6c 65 2c 20 61 6c 6c  6f 77 69 6e 67 20 74 68  |ple, allowing th|
00000480  65 20 75 73 65 72 20 74  6f 20 73 70 65 63 69 66  |e user to specif|
00000490  79 20 74 68 65 20 41 44  46 53 0a 64 72 69 76 65  |y the ADFS.drive|
000004a0  20 6f 72 20 65 76 65 6e  20 74 68 65 20 66 69 6c  | or even the fil|
000004b0  69 6e 67 20 73 79 73 74  65 6d 2e 20 20 54 68 65  |ing system.  The|
000004c0  20 70 72 6f 63 65 73 73  20 6f 66 20 73 63 61 6e  | process of scan|
000004d0  6e 69 6e 67 20 61 20 64  69 73 63 20 66 6f 72 20  |ning a disc for |
000004e0  76 69 72 75 73 65 73 0a  63 61 6e 20 62 65 20 69  |viruses.can be i|
000004f0  6e 74 65 72 72 75 70 74  65 64 20 61 74 20 61 6e  |nterrupted at an|
00000500  79 20 73 74 61 67 65 20  62 79 20 63 6c 69 63 6b  |y stage by click|
00000510  69 6e 67 20 6f 6e 20 22  41 62 6f 72 74 22 2e 0a  |ing on "Abort"..|
00000520  0a 4d 6f 64 75 6c 65 73  20 67 72 65 61 74 65 72  |.Modules greater|
00000530  20 74 68 61 6e 20 33 30  30 4b 20 77 69 6c 6c 20  | than 300K will |
00000540  6e 6f 74 20 62 65 20 6c  6f 61 64 65 64 20 69 6e  |not be loaded in|
00000550  20 62 79 20 74 68 65 20  70 72 6f 67 72 61 6d 20  | by the program |
00000560  61 6e 64 20 74 68 65 0a  6d 65 73 73 61 67 65 20  |and the.message |
00000570  22 2a 2a 20 4e 4f 20 52  4f 4f 4d 20 2a 2a 20 77  |"** NO ROOM ** w|
00000580  69 6c 6c 20 62 65 20 64  69 73 70 6c 61 79 65 64  |ill be displayed|
00000590  20 69 6e 20 74 68 65 20  22 52 65 70 61 72 69 6e  | in the "Reparin|
000005a0  67 20 3a 22 20 69 63 6f  6e 20 62 6f 78 2c 20 62  |g :" icon box, b|
000005b0  75 74 0a 69 74 20 69 73  20 72 61 72 65 20 74 6f  |ut.it is rare to|
000005c0  20 66 69 6e 64 20 61 20  6d 6f 64 75 6c 65 20 74  | find a module t|
000005d0  68 69 73 20 73 69 7a 65  20 61 6e 79 77 61 79 2e  |his size anyway.|
000005e0  20 20 4d 6f 72 65 20 6d  65 6d 6f 72 79 20 63 6f  |  More memory co|
000005f0  75 6c 64 20 62 65 0a 61  6c 6c 6f 63 61 74 65 64  |uld be.allocated|
00000600  20 62 79 20 63 68 61 6e  67 69 6e 67 20 74 68 65  | by changing the|
00000610  20 57 49 4d 50 53 4c 4f  54 20 63 6f 6d 6d 61 6e  | WIMPSLOT comman|
00000620  64 20 69 6e 20 74 68 65  20 21 52 75 6e 20 66 69  |d in the !Run fi|
00000630  6c 65 20 61 6e 64 20 74  68 65 6e 0a 63 68 61 6e  |le and then.chan|
00000640  67 69 6e 67 20 74 68 65  20 76 61 72 69 61 62 6c  |ging the variabl|
00000650  65 20 42 75 66 66 65 72  53 69 7a 65 25 20 69 6e  |e BufferSize% in|
00000660  20 74 68 65 20 42 41 53  49 43 20 70 72 6f 67 72  | the BASIC progr|
00000670  61 6d 20 21 52 75 6e 49  6d 61 67 65 2e 20 0a 0a  |am !RunImage. ..|
00000680  49 74 20 73 68 6f 75 6c  64 20 62 65 20 6e 6f 74  |It should be not|
00000690  65 64 20 74 68 61 74 20  72 75 6e 6e 69 6e 67 20  |ed that running |
000006a0  74 68 69 73 20 70 72 6f  67 72 61 6d 20 77 69 6c  |this program wil|
000006b0  6c 20 63 6c 65 61 72 20  61 6c 6c 20 52 41 4d 20  |l clear all RAM |
000006c0  62 61 73 65 64 0a 72 65  6c 6f 63 61 74 61 62 6c  |based.relocatabl|
000006d0  65 20 6d 6f 64 75 6c 65  73 20 61 73 20 61 20 70  |e modules as a p|
000006e0  72 65 63 61 75 74 69 6f  6e 2e 0a 0a 0a 0a 0a 0a  |recaution.......|
000006f0  0a 0a                                             |..|
000006f2