                  
                                  
                                     
                                   
                    
                                        
                  

߰
                   holy beast productions (c)opyright 1995                   
ܰ


Information about F-MANZON


This is just a killer for the MANZON virus released in the PETRA-RM.ZIP
package. I did this one mostly because I was asked by a close friend.
Nothing special about it.

Most important of all, you are using this program at your own risc and
nothing is guranteed. But I have tried it on 1000 samples of the
virus.

How to use F-MANZON


Just run F-MANZON.EXE and it will search the current directory and all
it's subdirectories for the MANZON virus, and clean all infected files
(you won't be prompted). If you want to search a specific directory or
drive simply apply the path as parameter to F-MANZON :

Ex.  F-MANZON A:\

If you want to break the program just press CONTROL-BREAK.

How to use F-BLOCK


Execute F-BLOCK and it will CRC check itself and if it has been changed, 
it will write a msg on the screen and halt. If the CRC is sucessful
it will go TSR and if you run an MANZON infected file it will write a dummy
msg on the screen and block the virus, this means you can run all infected
files and you won't get infected.

About MANZON


This is a POLYMORPHIC COM/EXE infector with variable size. No payloads found
(destructive procedures) but it might sometimes fail to infect files and that
will make the file invalid. It won't infect files called :
F-*.*, SC*.*, TB*.*, FV*.*, FI*.*, VI*.*, K-*.*

(now you know why the main files are called F-MANZON.EXE / F-BLOCK.EXE, 
 because F stands for Fairlight .... not)

Technical Information about F-MANZON


When you execute F-MANZON it will perform diffrent checks :

 32-Bit CheckSum Check
 Search Memory for Manzon
 Search for the virus in EXE/COM files using algorithms (no scan strings)
 Clean all infected files (no prompting)

To break the program just press CNTRL-BRK when ever you want.

Technical Information about F-BLOCK


 32-Bit CheckSum Check
 Look for the virus in memory
 Go resident
 If an infected file is executed it will pop up an uggly msg box on the 
  screen and after that the virus will be blocked, this means you can run
  infected files without having to worry about virus infected.


Other information

I have used my previous virus interface with this scanner/cleaner, I know
there is many functions that could be added and I would have added them
if I had any time, but the most important thing is that it can clean the
viruses. There is no diffrence in last version of my MANZON cleaner except
that this one includes this funky documentation.

         
          Fairlight Friendly Coders - When your dreams come true!
                             hOly BeAST 1995
         

