PCFPROT.RVW Note: this is an older generation than the current versions of F-Prot. It is not likely to be widely available and, of course, the scanner component will be outdated. It is, however, included because of the excellent suite of utilities it contained which are no longer available in the current version. (Because of overzealous housecleaning on my part, this review has had to be recreated for the book manuscript, and may not match the original.) Company: Frisk Software International Address: Postholf 7180, IS-127 Reykjavik, Iceland Phone: +354-5-617273 Fax: +354-5-617274 Sales: see Command Software, Data Fellows and SafetyNet; German version +49-40-6932033 or percomp@infohh.rmi.de Contact: Fridrik Skulason, Vesselin Bontchev Email: sales@complex.is, support@complex.is Product: F-PROT v. 1.xx Virus utilities Rating (1-4, 1 = poor, 4 = very good) "Friendliness" Installation 2 Ease of use 3 Help systems 2 Compatibility 4 Company Stability 2 Support 3 Documentation 2 Hardware required 4 Performance 3 Availability 3 Local Support ? General Description: Of the five classes of anti-viral systems, the only one that FPROT does not provide for is encryption. It provides vaccine (F-LOCK), change detection (F-OSCHK, F-XLOCK), operation restricting (F-DLOCK, F-XCHK) and scanning (F-DRIVER.SYS, F-FCHK, F-DISINF, F-SYSCHK) protection. The package also includes various system information utilities Comparison of features and specifications User Friendliness Installation The installation of FPROT is not a one step process, since the package contains a number of different programs for different protective purposes. The user must decide which programs to use, and therefore the installation must be done in stages. There is no installation program, but the documentation does have a separate installation file. This file states that the user should have a knowledge of MS-DOS, and that is likely necessary. The installation process, however, is described clearly, and is quite complete. The package is distributed as "shareware", and therefore any user who obtains it is likely to have the necessary skills for its installation. The installation procedure does "allow" one possible point of infection if the computer is infected when the program is installed, but the program will immediately detect the infection unless it is not found in the signature file. Since the program is "posted" in archived format, the user should be able to clear the infection and start with fresh files. Ease of use All the functions of FPROT are found in different programs, and all are invoked from the command line, so when a user knows what function is desired it is a simple matter to obtain it. Only two of the programs have any "switches" other than file or path specification. Help systems As all packages are invoked from the command line for a single function, there is no need for "online" help. When programs are called without necessary file or path specifications, a message explaining what is needed appears. Compatibility The various programs have been tested on a wide variety of computers, and have not created any problems with hardware, even on systems that have serious problems with TSR programs. The documentation lists a number of "contra-indicated" software packages and systems which may conflict with program operations. However, in six months of testing, no normal character based program or TSR has been found to conflict with any FPROT program. Company Stability See F-Prot version 2.xx. Company Support No problems have been encountered with the program so far. Fridrik Skulason is available through the Internet, and replies to queries can be expected within a week or less. Documentation Being shareware, the package has no printed documentation. The text files included with the programs are very clear and thorough, and provide an excellent primer on virus functions and protection. Novice users may, however, find the USAGE.TXT document to be daunting. Fortunately only the INSTALL.TXT document is required to use the product. The virus listings are comprehensive as to the number of viral programs, if somewhat less technical and detailed than the Brunnstein and Hoffman listings. Hardware Requirements No special hardware is required. Performance During testing, FPROT has consistently identified more viral programs than the "current release" of any other product. It has occasionally given a "false positive", but only in the case of identifying a definite virus with two different names, or when scanning another virus scanning product. FPROT is generally slower at scanning, and the separate signature file renders it slower still, but the separate file also allows new signatures to be added without waiting for a product upgrade. The user is in control of FPROT at all times, with the exception that F-DRIVER.SYS will not allow the boot sequence to continue in the case of a boot sector infection at startup. FPROT, in six months of testing, has not given a false positive alarm on any normal program, nor has it interfered with any normal program operation. Local Support Since FPROT is shareware, there are no local dealers to obtain support from. FPROT has fewer users of this older version in North America than SCAN, and so local help may be harder to obtain, but the documentation should make up any deficiencies. Support Requirements In a situation where technical support is available for the user base, installation may best be performed by the support group. A corporate environment will likely wish to have security policies, and support for the package in addition to installation would best be coordinated by this group. copyright Robert M. Slade, 1990, 1996 PCFPROT.RVW ====================== roberts@decus.ca rslade@vcn.bc.ca slade@freenet.victoria.bc.ca Friends help you move. Real friends help you move bodies. Author "Robert Slade's Guide to Computer Viruses" 0-387-94663-2 (800-SPRINGER)