Virus Source Code Database :: find1701.doc

VSCDB Home

Index

0 a b c d e f g h 
i j k l m n o p q 
r s t u v w x y z 

f-word.txt(384)
f1.cvb(199)
faces.asm(201)
faces.asm(161)
faces_80.scr(184)
fade.asm(189)
fade.asm(170)
faerie.asm(174)
faerie.asm(155)
faren121_exe.uue(175)
fat.lst(177)
fatfuck.doc(277)
fatman.asm(182)
fatman_.asm(144)
fatsave.doc(165)
faust.rpt(146)
faxvirus.doc(165)
fculture(264)
femifbia.pas(149)
femifbia.pas(143)
femifbia.pas(158)
ferguson.txt(162)
ff-topo.txt(171)
ffire.asm(177)
ffire.asm(169)
fgt.cvb(166)
fichv.cvb(151)
filehide.cvb(146)
find1701.doc(144)
find1701.txt(152)
firecide.asm(149)
firecide.asm(147)
firecris.asm(151)
firecrpt.asm(149)
firefly.asm(148)
firefly.doc(187)
firefly.nfo(187)
firefly.scr(172)
firefly.txt(160)
firetbav.lst(146)
fire_exe.uue(159)
fish.asm(163)
fish.asm(169)
fish.lst(155)
fish6.rpt(155)
fish9.rpt(170)
fish_.asm(158)
fish__.asm(153)
flagyll.asm(170)
flagyll.asm(171)

*** WARNING ***
The Virus Source Code Database (VSCDB) is for information purposes only, for researchers and computer virus or programming enthusiasts. No warranty is given or to be implied for any software listings contained herein. You take full responsibility for any damages caused by compiling, running, or sharing this information. Be aware that running any malicious code on another's computer or computer network might be a criminal act. Use at your own risk!
 

 
==============================================================================
                                 FIND1701
==============================================================================

This is a single purpose program, than will search out the unique signature
of a virus that we have named "1701" because it increases the size of the
infected file 1,701 bytes after it infects it.


          Usage:   FIND1701 [ /switch ... [d:]] ...

          where you list the drives you want to find viruses on.
          Switch can be H to heal infected COM files, Q to quarantine
          them, C to only look in current directory.

          The default is to heal the file.


          Examples:

            FIND1701 A:        Finds and heals all viruses on Drive A:

            FIND1701 /Q  A:    Quarantines viruses on Drive A:

            FIND1701 /Q /C     Quarantines viruses in current directory.

            FIND1701 /Q A: /H B: C: D:
                               Quarantines viruses in drive A, heals the
                               ones in drive B, C, and D.


The program will search the requested drive for all .COM files larger than
1701 bytes, and check then check for a unique signature. If it finds the
correct signature  141$FLu at the correct offset, and if the "Q" switch is
used it will rename the file to *.VIR and indicate that the file is infected.
At the end of the program it will tally up all of the infected files, if any,
and if there are any we suggest you re-boot your computer from a fresh DOS
Master, re-install the system files, and COMMAND.COM and replace the files
that have been renamed *.VIR.


If you do not supply any switches and just specify the drive, the program
will find all occurances of the virus, "heal" the infected files, and your
programs will be left in the same working state before they were infected.


The scrolling is continuous, so you might want to re-direct the output to
a file by:   FIND1701 C: /Q > VIRUS.TXT, and then examine the file to see
which, if any files were infected.  The listing has the filename, and the
directory, so you should be able to locate them pretty easily. Just erase
all the *.VIR files and replace them with know good copies. Or you can run
the program again without the /Q switch and "heal" the infected programs.


This program was written by Thomas Tuerke, SysOp of Gravesend BBS in
Novato California (415-897-1301). If you use this program to help you
stamp out this virus you might want to give Thomas a call and let him
know that it was of value.



X-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-X

 Another file downloaded from:                               NIRVANAnet(tm)

 & the Temple of the Screaming Electron   Jeff Hunter          510-935-5845
 Rat Head                                 Ratsnatcher          510-524-3649
 Burn This Flag                           Zardoz               408-363-9766
 realitycheck                             Poindexter Fortran   415-567-7043
 Lies Unlimited                           Mick Freen           415-583-4102

   Specializing in conversations, obscure information, high explosives,
       arcane knowledge, political extremism, diversive sexuality,
       insane speculation, and wild rumours. ALL-TEXT BBS SYSTEMS.

  Full access for first-time callers.  We don't want to know who you are,
   where you live, or what your phone number is. We are not Big Brother.

                          "Raw Data for Raw Nerves"

X-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-X

 

Site Design ©2006, Sean W Ellis, Totally Geek