Information about F-MANZON
��������������������������
This is just a killer for the MANZON virus released in the PETRA-RM.ZIP
package. I did this one mostly because I was asked by a close friend.
Nothing special about it.
Most important of all, you are using this program at your own risc and
nothing is guranteed. But I have tried it on 1000 samples of the
virus.
How to use F-MANZON
�������������������
Just run F-MANZON.EXE and it will search the current directory and all
it's subdirectories for the MANZON virus, and clean all infected files
(you won't be prompted). If you want to search a specific directory or
drive simply apply the path as parameter to F-MANZON :
Ex. F-MANZON A:\
If you want to break the program just press CONTROL-BREAK.
How to use F-BLOCK
������������������
Execute F-BLOCK and it will CRC check itself and if it has been changed,
it will write a msg on the screen and halt. If the CRC is sucessful
it will go TSR and if you run an MANZON infected file it will write a dummy
msg on the screen and block the virus, this means you can run all infected
files and you won't get infected.
About MANZON
������������
This is a POLYMORPHIC COM/EXE infector with variable size. No payloads found
(destructive procedures) but it might sometimes fail to infect files and that
will make the file invalid. It won't infect files called :
F-*.*, SC*.*, TB*.*, FV*.*, FI*.*, VI*.*, K-*.*
(now you know why the main files are called F-MANZON.EXE / F-BLOCK.EXE,
because F stands for Fairlight .... not)
Technical Information about F-MANZON
������������������������������������
When you execute F-MANZON it will perform diffrent checks :
� 32-Bit CheckSum Check
� Search Memory for Manzon
� Search for the virus in EXE/COM files using algorithms (no scan strings)
� Clean all infected files (no prompting)
To break the program just press CNTRL-BRK when ever you want.
Technical Information about F-BLOCK
�����������������������������������
� 32-Bit CheckSum Check
� Look for the virus in memory
� Go resident
� If an infected file is executed it will pop up an uggly msg box on the
screen and after that the virus will be blocked, this means you can run
infected files without having to worry about virus infected.
Other information
�����������������
I have used my previous virus interface with this scanner/cleaner, I know
there is many functions that could be added and I would have added them
if I had any time, but the most important thing is that it can clean the
viruses. There is no diffrence in last version of my MANZON cleaner except
that this one includes this funky documentation.
���������������������������������������������������������
Fairlight Friendly Coders - When your dreams come true!
hOly BeAST 1995
���������������������������������������������������������
