mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
b131106437
Rename several entries under db/MSDOS to include a category prefix (compiler_, extender_, immunizer_, installer_, loader_, protector_) for clearer organization. Affected files include Fitted_Modula-2.4, Lahey_Fortran.4, Lattice_C.4, PDC_Prolog.4, EMMXXXX0_check.0a, GameWizard_DOS_Extender.0a, File_Shield.1, GamBit_Pro_Library.1, DOS32_loader.0a, and Eliashim's_CodeTrack.1. This improves discoverability and groups records by type.
19 lines
No EOL
570 B
JavaScript
19 lines
No EOL
570 B
JavaScript
// Detect It Easy: detection rule file
|
|
// Author: hypn0 <hypn0@mail.ru>
|
|
|
|
meta("immunizer", "File Shield");
|
|
|
|
function detect() {
|
|
if (MSDOS.compareEP("50b430cd213c..7d..e9....e8$$$$b8....bb....b9....ba....cd212ec706........81fb....75..2ec706........2e8916")) {
|
|
sVersion = "1.2";
|
|
sOptions = "by McAfee";
|
|
bDetected = true;
|
|
}
|
|
else if (MSDOS.compareEP("501eeb$$2ea1....2e8b1e....2e8b0e....ba....2e8916....e8$$$$535051cd12")) {
|
|
sVersion = "1.5";
|
|
sOptions = "by McAfee";
|
|
bDetected = true;
|
|
}
|
|
|
|
return result();
|
|
} |