F-TRICKL - Scanner and disinfector for the Tentatrickle virus Copyright (c) 1996 Data Fellows Ltd OVERVIEW F-TRICKL will detect and disinfect the Tentatrickle virus. This document gives a brief description of the Tentacle virus and explains how to use F-TRICKL to detect and disinfect this virus. ABOUT THE TENTATRICKLE VIRUS This DOS-based virus was found in the wild in September 1996. The virus infects only DOS executables (MZ). The virus adds a new segment to the executable and modifies the structure of the file. The author of this virus also wrote the Tentacle and Shell viruses. SYMPTOMS Tentacle causes no obvious symptoms, except slowing the PC down (the infection process is slow). For this reason it is recommended that suspect PCs be scanned using the F-TRICKL utility. HOW TO USE F-TRICKL Run F-TRICKL with the drive letter of directory as a parameter. For example: F-TRICKL C: F-TRICKL Z:\USERS If F-TRICKL finds the virus, you will be notified. Then, type F-TRICKL /DISINF, and F-TRICKL will disinfect any infected files. WHAT ABOUT FLOPPIES? Since infected files may have been copied to floppy diskettes, you will want to scan your floppy diskettes as well. To do this, invoke F-TRICKL using the /MULTI switch (eg F-TRICKL A: /MULTI). -- F-TRICKL by Peter Szor, Data Fellows F-PROT Professional Development. F-TRICKL is protected by international copyright laws. F-TRICKL is (c) 1996 Data Fellows Ltd, and it is not in public domain or freeware, but you are free to use and share this software with no charges in non-commercial private use. Use of this software in other environments is not allowed in Europe, Asia and Africa without a license to F-PROT Professional or a current license from Frisk Software International. To purchase a license, contact your local distributor listed in PRO.DOC. Please redistribute F-TRICKL only with this documentation. You are not allowed to resell this software for your own profit (normal copying costs excluded) or claim to hold rights to this software. Although you may have the right to use F-TRICKL, it will remain the exclusive property of Data Fellows. Data Fellows does not warrant that the software is error free and we will not cover any costs created by function or malfunction of this program. Data Fellows also disclaims liability for possible consequential damages. If you cannot agree to these restrictions, you should not use F-TRICKL. Copyright (c) 1996 Data Fellows Ltd, Finland Data Fellows Ltd Paivantaite 8 FIN-02210 ESPOO FINLAND tel: +358-9-478 444 fax: +358-9-478 44 599 e-mail: F-PROT-Support@DataFellows.com www: http://www.DataFellows.com/