Re: DNS calls to Ukraine destinations

From: "Stephen Howe" <sjhoweATdialDOTpipexDOTcom>

Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe
|
| Is there a version number for this David?
| I can't see anything on the URLs you show
|
| Thanks
|
| Stephen Howe
|

In what respect ?

Each AV module has its version tied to the AV vendor. Each time you run a respective module
it will download the latest Engine and/or Signature files of that vendor as needed.

As for the Multi AV front-end utility, the version is not published. It is available only
by running the menu and hitting the letter "v" or "V" which will show the current version
such as; Multi-AV v4.05. The included README.TXT has revison information (posted at the
end of this reply). This is the first time since the release of my utility this topic has
come up. If this is something that could have some value, I can have Ian Kenefick (web
master and host of my utilities at http://IK-CS.Com ) update the web site to post the
version and revision information.

----------------------------

v2.0
- Corrected a problem where on some platforms the script did not properly identify that
it was running in Normal Mode of operation.

v2.1
- Added the ability to scan a folder or particular location for both the McAfee and Sophos
scanners.
{ not availble in Sophos scanner in Win9x/ME }

v2.2
- Added Sophos scanner for Win9x/ME

v2.21
- Improved the Sophos scanner's capability in Win9x/ME

v2.22
- Added the ability to scan a folder or particular location in Sophos for Win9x/ME

v2.23
- Added simplistic TEMP and TIF file clearing capabilities.
- The Folders in the TIF cache will not be deleted but the files will be deleted.
- The files in the root of the TEMP folder will be deleted but not files in subfolders.

v2.24
- Due to problems encountered on a Win98SE PC, added a WMI verification process to the
scripts in case WMI is not installed or working properly.

v2.25
- Due to problems encountered by some individuals with their FireWall software using the
native OS based FTP.EXE utility for the McAfee module, the scripts were recoded to use the
WGET.EXE utility to perform the needed FTP operation.

v2.26
- Trend Micro changed the URL that pointed to the latest Pattern File and thus the latest
Pattern File was not being downloaded. Updated the script for the new URL to reflect that
change by Trend Micro.

v2.27
- Updated the Multi AV Scanner PDF Help File.

v2.28
- Optimized the coding for downloading engine and signature files for the Trend Micro and
Sophos modules.

v3.00
- Added the Kaspersky scanner to the menu of available scanners.

v3.01
- Added a the ability to repair; EXE, COM, BAT file associations and REG and SCR loading
fixes as well as some local System and Explorer policy repairs.

v3.02
- Added the ability to repair the Registsry settings for WinXP if the WinXP System Restore
cache has been disabled by malware.
- Updated the Multi AV Scanner PDF Help File.

v3.11
- Added the ability examine the WIN.INI and SYSTEM.INI and Registry locations for malware
being loaded and to kill the processes found.

v3.15
- Updated the Kaspersky script for the 'extended database folder'.

v4.00
- For NT based platforms, added a GUI based "browse" capability when choosing a specific
location to scan.
- Updated the Multi AV Scanner PDF Help File.

v4.01
- Updated the McAfee module with a HTTP fallback. If FTP fails it will perform a HTTP get
process.

v4.05
- Updated PDF Help File.
- Added a "fix" for WMI on NT if the Boot State comes back "Undetermined".
- Fixed bug in using Sophos Sweep.exe on NT Based OS.



--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


.