F-SCRIPT
`F-Secure Script Viruses Detector and Eliminator
`Version 1.6
`Copyright (C) 1998-99 Data Fellows Corp.
`
`OVERVIEW
`
`F-SCRIPT is a DOS program that scans *.HTM, *.HTML, *.INF, *.VBS, *.JS, *.HTT,
`*.HTA, *.ASP, *.WBT, *.VBE and *.WSH files for known script viruses, trojans,
`worms and exploits. F-SCRIPT is able to disinfect them by removing virus code
`from the infected files and to delete files with malicious code inside
`(trojans, worms and exploits).
`
`TECHNOLOGY
`
`The F-SCRIPT scanning and disinfection technology was developed by Data Fellows
`Corp.
`
`USAGE
`
`General command line is: F-SCRIPT <path> <<option1 >> <<option ... n>> The <path>
`option allows to specify location for scanning. Scanning path should contain a
`valid drive letter. To scan current directory the'.' option should be
`specified. If no parameters are specified the help screen is output. Then any
`drive scanning is offered. If a valid drive letter is input the corresponding
`drive is scanned with options obtained from command line with disinfection and
`log options set by default. If no drive letter is specified the control is
`returned to the system.
`
`COMMAND LINE OPTIONS
`
`-automatic scan mode
`/A or /AUTO
`1- or /DISINF -disinfect infected files
`/D or /DELETE - delete infected files
`/E or /RENAME - rename infected files
`10 or /LIST
`- display OK for clean files
`IV or IVIRLIST- display the list of currently detected viruses
`/Lor /REPORT -create log file F-SCRIPT.LOG
`-scan all files (slow mode)
`I* or /DUMB
`/R or /NOSUB - do not scan subdirectories
`I? or /HELP
`- help screen
`/B
`- create backup copies for disinfected files
`- do not ask for confirmation on delete/disinfect
`IY
`/HARD
`- scan all available hard drives
`/FREEZE
`- confirm each delete/disinfect
`-force interactive mode
`/INTER
`
`NOTE:
`
`Blue Coat Systems - Exhibit 1023 Page 1
`
`
`F-Secure Script Viruses Detector and Eliminator
`Version 1.6
`Copyright (C) 1998-99 Data Fellows Corp.
`
`OVERVIEW
`
`F-SCRIPT is a DOS program that scans *.HTM, *.HTML, *.INF, *.VBS, *.JS, *.HTT,
`*.HTA, *.ASP, *.WBT, *.VBE and *.WSH files for known script viruses, trojans,
`worms and exploits. F-SCRIPT is able to disinfect them by removing virus code
`from the infected files and to delete files with malicious code inside
`(trojans, worms and exploits).
`
`TECHNOLOGY
`
`The F-SCRIPT scanning and disinfection technology was developed by Data Fellows
`Corp.
`
`USAGE
`
`General command line is: F-SCRIPT <path> <<option1 >> <<option ... n>> The <path>
`option allows to specify location for scanning. Scanning path should contain a
`valid drive letter. To scan current directory the'.' option should be
`specified. If no parameters are specified the help screen is output. Then any
`drive scanning is offered. If a valid drive letter is input the corresponding
`drive is scanned with options obtained from command line with disinfection and
`log options set by default. If no drive letter is specified the control is
`returned to the system.
`
`COMMAND LINE OPTIONS
`
`-automatic scan mode
`/A or /AUTO
`1- or /DISINF -disinfect infected files
`/D or /DELETE - delete infected files
`/E or /RENAME - rename infected files
`10 or /LIST
`- display OK for clean files
`IV or IVIRLIST- display the list of currently detected viruses
`/Lor /REPORT -create log file F-SCRIPT.LOG
`-scan all files (slow mode)
`I* or /DUMB
`/R or /NOSUB - do not scan subdirectories
`I? or /HELP
`- help screen
`/B
`- create backup copies for disinfected files
`- do not ask for confirmation on delete/disinfect
`IY
`/HARD
`- scan all available hard drives
`/FREEZE
`- confirm each delete/disinfect
`-force interactive mode
`/INTER
`
`NOTE:
`
`Blue Coat Systems - Exhibit 1023 Page 1
`
`
`
`The '/E', '/D' and '/B' parameters can't be used together.
`
`EXAMPLES:
`
`F-SCRIPT.
`F-SCRIPT C:
`F-SCRIPT D:\WINNT /- IY
`F-SCRIPT D:\TOOLS\ /* 10 IE /R
`
`F-SCRIPT returns following errorlevels:
`
`0: Normal program termination
`1: Incorrect command line parameter
`2: Too long command line parameter
`3: Log file creation error
`4: Incompatible options specified
`5: Error opening database file 'F-SCRIPT.DEF'
`6: Incompatible or corrupted database file 'F-SCRIPT.DEF'
`7: Error reading database file 'F-SCRIPT.DEF'
`8: Error manipulating database file pointer
`9: Not enough memory for database loading
`10: Not enough memory for service areas
`11: Not enough memory on startup
`
`other: Abnormal program termination.
`
`VIRUS LIST ATTRIBUTES
`
`Attributes of viruses in currently detected viruses list are given below. The
`general attribute output format is: NNN ...
`
`First attribute - type of infected files
`H = HTML, V = VBS, I= INF, J = JS, W- WBT
`
`Second attribute - type of infection
`V = virus, T =trojan, D = dropper, I = intended, W =worm
`
`Third attribute - type of virus (if a virus entry)
`0 = overwriting, A= appending, P = prepending, I = inserting,
`C = companion
`
`PRODUCT NOTES
`
`F-SCRIPT does NOT disinfect anything by default. You need to turn disinfection
`on by specifying the /- parameter. If you want all infected files to be renamed
`or deleted use /E or /D parameter respectively.
`
`We recommend you make a backup copy of important files before disinfecting
`them, just to be safe. You can specify /B option and disinfected files will be
`automatically backuped by F-SCRIPT.
`
`If you want to scan all files (not only *.HTM, *.HTML, *.INF, *.VBS, *.JS,
`*.HTT, *.HTA, *.ASP, *.WBT, *.VBE and *.WSH), use the/* parameter to switch
`
`Blue Coat Systems - Exhibit 1023 Page 2
`
`
`
`all files scanning mode. Note that this mode is slow.
`
`IMPORTANT: If you find a new variant of a script virus, trojan, worm or
`exploit, please send a suspected sample for closer analysis to Data Fellows.
`See the SUPPORT part below for more information.
`
`SUPPORT AND VIRUS SAMPLES
`
`For F-Script technical support and virus-related inquiries please contact:
`<F-SCRIPT-Support@DataFellows.com>. To send samples of new viruses or suspected
`files please use <Samples@DataFellows.com> address or upload them to our FTP
`site and send a note to 'samples':
`
`ftp://ftp.Europe.DataFellows.com/incoming
`
`UPDATES AND NEW VERSIONS
`
`Updates and new versions, when available, can be downloaded from the Data
`Fellows web and ftp sites at these locations:
`
`Web:
`http://www.DataFellows.com/download-purchase/
`http://www.europe.DataFellows.com/download-purchase/
`
`Ftp:
`ftp://ftp.datafellows.com/pub/anti-virus/tools/f-script.zip
`ftp://ftp.europe.datafellows.com/pub/anti-virus/tools/f-script.zip
`
`Normally only the F-SCRIPT.DEF definition file is updated. The latest
`F-SCRIPT.DEF is always inside the F-SCRIPT.ZIP file and can be also downloaded
`separately.
`
`The Data Fellows web site always has up-to-date descriptions on the operation
`and effects of viruses, see:
`
`http://www.datafellows.com/vir-info/
`http://www.europe.datafellows.com/vir-info/
`
`HISTORY
`
`1.0a: The first version ofF-Script is released. It is able to detect all
`known at the moment of release HTML, VBS, JS and INF viruses, droppers
`and trojans. The first polymorphic VBS virus is detected at 100% rate.
`Disinfection capabilities include deletion of overwriting viruses,
`droppers and trojans or renaming of all infected files.
`
`1.0b: Currently detected viruses list output added. Delete files key added.
`
`1.1 b: Disinfection of appending and prepending viruses added.
`
`1.2b: Disinfection of companion viruses added. More command line parameters
`added. F-PROT or/and AVP command line parameters can be specified.
`
`Blue Coat Systems - Exhibit 1023 Page 3
`
`
`
`1.3b: Minor bugs fixed. /HARD scan mode output info added.
`
`1.4:
`
`*.ASP files scanning added. Interface messages output modified.
`
`1.5: Worm object type scanning added, exact detection routines optimized.
`
`1.6:
`
`Detection, disinfection, file format recognition and directory tree
`scan routines were improved. Database format was changed (now 1.1) and
`a new F-Script database was created, database version check routine was
`added. The *.VBE, *.WBT and *.WSH files scan was added. Clean files
`number output was added into report generation routine. Minor bugs were
`fixed.
`
`LEGAL NOTES
`
`F-SCRIPT is protected by international copyright laws. F-SCRIPT is (C) 1998-99
`Data Fellows Corp., and it is not in public domain or freeware but you are free
`to use and share this software with no charges. You can not get the source code
`of this program. You are not allowed to decompile and reuse the program code of
`this application. You are not allowed to resell this software for your own
`profit (normal copying costs excluded) or claim to hold rights to this
`software. Although you may have the right to use F-SCRIPT, it will remain the
`exclusive property of Data Fellows. Data Fellows does not warrant that the
`software is error free and we will not cover any costs created by function or
`malfunction of this program. Data Fellows also disclaims liability for possible
`consequential damages. Please redistribute F-SCRIPT only with this
`documentation. If you cannot agree to these restrictions, you should not use
`F-SCRIPT.
`
`Copyright (C) 1998-99 Data Fellows Corp., Finland
`
`Blue Coat Systems - Exhibit 1023 Page 4
Accessing this document will incur an additional charge of $.
After purchase, you can access this document again without charge.
Accept $ Charge
Still Working On It
This document is taking longer than usual to download. This can happen if we need to contact the court directly to obtain the document and their servers are running slowly.
Give it another minute or two to complete, and then try the refresh button.
A few More Minutes ... Still Working
It can take up to 5 minutes for us to download a document if the court servers are running slowly.
Thank you for your continued patience.
This document could not be displayed.
We could not find this document within its docket. Please go back to the docket page and check the link. If that does not work, go back to the docket and refresh it to pull the newest information.
Your account does not support viewing this document.
You need a Paid Account to view this document. Click here to change your account type.
Your account does not support viewing this document.
Set your membership
status to view this document.
With a Docket Alarm membership, you'll
get a whole lot more, including:
- Up-to-date information for this case.
- Email alerts whenever there is an update.
- Full text search for other cases.
- Get email alerts whenever a new case matches your search.
One Moment Please
The filing “” is large (MB) and is being downloaded.
Please refresh this page in a few minutes to see if the filing has been downloaded. The filing will also be emailed to you when the download completes.
Your document is on its way!
If you do not receive the document in five minutes, contact support at support@docketalarm.com.
Sealed Document
We are unable to display this document, it may be under a court ordered seal.
If you have proper credentials to access the file, you may proceed directly to the court's system using your government issued username and password.
Access Government Site
