History, Revisions: __________________ 1.05d (3) (15/06/95) (This Version) 1. Added FULL support for Stacker compressed drives (Thanks Hugh). This means that Stacker compressed drives are automatically detected and handled correctly. 2. Added FULL suppport for OS/2 Boot Manager 3. Disposed of GETPART.EXE (The equivalent code in now inside ChekMate.EXE) 4. Added Polymorphic Security Envelopes (another layer of protection) to: ChekMate.EXE, SETUP.EXE & MD5.EXE 5. Added a Setup/Configuration utility for changing the FILELIST.INI settings. In many cases this utility will supply the correct settings for DOS Base Memory Size & Command Processor (taken from COMSPEC). 6. Added an ERROR logging routine. Any changes will be written out to ERROR.LOG as well as to the screen. 7. Fixed NAV false alarm (MtE) and TBAV false alarm. ___________________________________________________________________________ 1.05c (02/03/95) 1. Added MD5 to increase the level of detection that ChekMate offers. Now even the odd heavily stealthed viruses that ChekMate occasionaly missed should now be caught. *** This now makes ChekMate more difficult to fool *** 2. Restructered the code, to make it smaller & easier to maintain. 3. ChekMate now checks ChekMate.EXE, GetPart.EXE and MD5.EXE before proceeding to check other files/areas. 4. Fixed the COMMAND PROCESSOR fingerprint routine (little bug!) 5. Added test routines to check to see if the directory specified for ChekMate actualy exists. Same for the COMMAND PROCESSOR. 6. Added extra error reporting routines. 7. Heavily BETA tested the changes. (Thanks Ed) ___________________________________________________________________________ 1.05b (06/02/95) 1. Fixed the NOEXPOSURE (/NOEXP) switch so that the Boot Sector, Partition Table, COMMAND.COM and CHEKMATE.EXE gets checked when this switch is used (little bug!). 2. Added support for MONO monitors. 3. Added option for disabling memory test. Mainly for OS/2. 4. Tested with OS/2 Warp 3.0, works fine in a DOS box. 5. Added support for NDOS & 4DOS command processors. 6. Compiled CHEKMATE.EXE for 8086/8088 rather than 286. ___________________________________________________________________________ 1.05a (14/12/94) 1. Added memory checking routine to detect some memory resident viruses that change the DOS base 640Kb boundry when they install themselves. FORM is now detected in memory! 2. Added extra file-size change detection routines. 3. Tidied up some internal routines. 4. PKLITE packed the CHEKMATE.EXE file. 5. Added the ability to run ChekMate from any directory. 6. Added ERRORLEVEL exit codes. 7. Added 8088/8086/V20/V30 CHEKMATE.EXE File (CHEK8088.EXE) ______________________________________________________________________ 1.04e (26/11/94) 1. Fixed the 'Parity Boot.B' detection. It will now detect it fine. 2. Changed the file access routines to make them more efficient. 3. Added checking of 'Boot Sectors' on up to 3 more physical/logical drives. Now supports up to drive 'F:' This will be of most use to those using disk compression products where the drive letters are swapped. Many 'Boot Sector' viruses will infect the 'ORIGINAL' C: drive. The disk compression program usually changes this to the highest drive letter after your existing drive(s). Eg Original Drive C: (You have 2 Drives C: & D: before compression) after compression installed C: becomes E: (compressed drive E: becomes C:) Boot sector virus infects system, drive E: (originaly C:). ChekMate can now detect the infected 'Boot Sector' on drive E:. ____________________________________________________________________________ 1.04d (23/11/94) Internal test version (Not Released) 1. Tested & modified the improved file access routines. ____________________________________________________________________________ 1.04c (11/11/94) First public release. ____________________________________________________________________________ 1.00 - 1.04b & Others Beta versions, used personally and by Beta-testers. ____________________________________________________________________________