Path: utzoo!utgpu!jarvis.csri.toronto.edu!rutgers!tut.cis.ohio-state.edu!unmvax!ncar!tank!eecae!netnews.upenn.edu!vax1.cc.lehigh.edu!ubu.cc.lehigh.edu!virus-l From: RCSTRN@HEITUE5.BITNET (ROB_NAUTA) Newsgroups: comp.virus Subject: virus desinfecting Message-ID: <0005.8906072021.AA00932@ubu.CC.Lehigh.EDU> Date: 7 Jun 89 19:51:00 GMT Sender: Virus Discussion List Reply-To: VIRUS-L@IBM1.CC.Lehigh.EDU Lines: 20 Approved: virus-l@ubu.cc.lehigh.edu I got nobrain.c, a program that removes a Brain virus from a diskette, and antidote, which removes the pingpong virus from a disk. These tools made me wonder, is there a program that recognises viruses for the PC ? Mac antiviral programmes do, because everytime a new virus is found the tools can't help and a new version comes out, extended to recognise that one as well. Is there a program that says 'this disk (or COM or EXE file) is infected by ......' ?? I know FluShot+ warns if you boot from a Lehigh-infected disk. Furthermore, is there a program that desinfects COM or EXE files that were infected by, say, the 1701/1704, TSR virus etc ?? At the moment everybody says 'install your software from your backups and start with a clean system' but seeing how fast I can clear the Pingpong from a disk makes me interested to find out if there are programs that restore program files... If those programs don't exist, I may start writing my own tool for it, I will need some info then how I can recognise known viruses and how I can reconstruct the file (delete the first 1701 or 1704 bytes seems logical in that case, but is it correct, and what about the others??) I hope someone can help me, thanks in advance Rob J. Nauta - Fidelio Software