home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Floppyshop 2
/
Floppyshop - 2.zip
/
Floppyshop - 2.iso
/
diskmags
/
4671-5.790
/
dmg-4690
/
virus.asc
< prev
next >
Wrap
Text File
|
1989-12-31
|
8KB
|
186 lines
============================
Viruses - Protect your disks
============================
We all claim it won't happen to us, but it does, at one time
or another. You put your favourite auto-booting game in the
disk drive and something weird happens. Instead of the game
loading like it usually does, bombs appear, you're returned
to the desktop, or maybe a message is displayed. Then you
realise what's happened. You've got a virus. It might have
spread to all your other disks and you still haven't got
that copy of UVK you meant to order a year ago. Not only
have you lost your favourite game, and more to come, but
also £30. Of course, you could have prevented it, but you
were too lazy.
Viruses are little programs, written by very strange people
with a very strange sense of humour, that install themselves
in memory and copy themselves onto disks. Once in memory or
on disks, they can do very nasty things like crashing
programs, deleting files or corrupting screens. They can't
survive when your ST is switched off, but many of them can
survive a reset. These ones are particularly nasty.
There are two different types of virus. Bootsector and link
viruses. Bootsector viruses are little programs that get
copied onto the bootsector of floppy disks. When you boot up
your ST with the infected disk in the drive, the virus is
loaded into memory and this is when the trouble starts.
From then on, every disk put in the drive gets the virus
passed on to it, and any information stored on the
bootsector of that disk is cleared. This is how games disks
are destroyed; often, their bootsectors contain information
to load the game. When this is destroyed, so is the whole
game.
Viruses often have a software counter which tells them how
many times they have copied themselves. Once a certain
number has been reached, they go into action crashing your
machine, eating files and writing rude messages to disks.
The most dangerous virus on the ST so far has to be the
Beilstein virus. It disguises itself as an MS-DOS disk which
means that many virus killers don't spot it. The Beilstein
virus also changes itself to prevent virus killers from
destroying it. The horrible thing about is is that it
actually keeps the bootsector in tact so you don't know if
you have it or not. In operation, it can wipe hard drive
partitions, corrupt the screen and delete files amongst many
other things. At the moment, only UVK v5.9 and 6.0 can
recognise and kill it.
Link viruses are the second type of viruses. They copy
themselves onto hard drives and attach themselves to
programs. They can do many dangerous things, but thankfully
there are only five know link viruses.
STOPPING VIRUSES
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
* Ideally you should keep all your floppy disks write
protected until you want to save info to them. If disks are
write protected, viruses can't copy to them.
* If you boot from your hard drive don't think you can't get
viruses. You can.
* Get a decent virus killer like UVK (£12.95 from Douglas
Communications). If you can't get UVk, get Sagrotan from the
PD.
* Always back up your floppy and hard disks. If you have a
back up of a floppy or hard disk destroyed by a virus,
you're money isn't lost.
* Buy an anti-virus. These work like viruses, but instead of
destroying your disksm, they prevent them from getting
attacked by a virus.
* Be careful not to use PD virus killers on games. You may
lose your game forever as it might not have been infected.
* Try an immunise your disks with UVK if possible.
Here are a list of several well-known bootsector viruses.
Although they are not all included here, there are about
eighty known bootsector viruses on the ST.
ASHTON NIRVANA VIRUS: Writes the word "ASHTON" to sectors on
a floppy disk, destroying data. Can't copy to hard drives
but can corrupt them badly.
BAT VIRUS: After it has copied itself several times, it
deletes the disk directory. After one hour, the mouse
pointer changes into a Batman logo. This virus is reset
proof.
CHOPIN VIRUS: Plays the "Death March" after copying itself
25 times and crashes your ST with a rude message.
COOKIE MONSTER VIRUS A: After copying itself 30 times, your
system is interrupted with the message "You know what? I
want a cookie!" If you type "COOKIE" you can continue until
it copies itself another 20 times.
DARKNESS VIRUS: Blanks the screen after eight copies are
made, and also corrupts nine sectors of a track on floppy
disks. It is reset proof.
EVIL VIRUS: This one inverts the screen display and freezes
your ST after copying 100 times. It can copy itself to a
hard drive and it is reset proof.
FLYING CHIMP VIRUS: After copying itself five times it
displays the message "Zapped by Waldo the Flying Chimp!" on
screen.
GHOST VIRUSES A - I: Different viruses but they all
basically do something nasty to the mouse pointer. They are
all reset proof.
GREEN GOBLIN VIRUS: After copying itself to 128 disks it
displays the message "The Green Goblin Strikes Again" and it
then corrups the screen. It is also reset proof.
HELP VIRUS: Fills the screen with bombs on boot-up.
MACUMBA 3.3 VIRUS: Disguises itself as an MS-DOS bootsector
and freezes the system. Reset proof.
MEDIA CHANGE VIRUS: Changes the text to the same colour as
the background after copying itself five times. It also
beeps and can be copied to a hard drive.
MENACE VIRUS: Writes a garbled message in the bootsector of
a floppy disk after copying itself ten times. Apparently the
garbled message is in the Elfish language created by JR
Tolkien, author of The Hobbit.
MERLIN'S MAD VIRUS: Corrupts the screen and beeps. Can't
copy itself.
OLI VIRUS: Prints "OLI virus installed" on-screen and then
your ST gets slowed down until it stops. It is also reset
proof.
PMS VIRUS: Prints "The Pirate Trap. Youre being watched. (C)
PMS 1987" after every fifty copies. The person who wrote it
doesn't seem to realise that Youre needs an apostrophe. PMS
virus is also reset proof.
RESET VIRUS: Prints the message "Ihr Rechner hat AIDS" on-
screen after three hours of switching on.
TEMPORARY MADNESS VIRUS: Inverts the mouse pointed for 15
seconds after every twenty two minutes. Makes you think
you're going mad. And it works.
UPSIDE DOWN VIRUS: A very noticeable virus because it turns
the screen upside down.
Now we've got the five known bootsector viruses for you to
look at. Here they are:
VIRUS CONSTRUCTION KIT PART 2: Written using the German
application "Virus Construction Kit Part 2". Has different
messages.
ULURU VIRUS: Infects every application in memory that is
over 10k in size.
CRASH VIRUS: It infects all programs loaded into memory.
Does nothing else.
GARFIELD AND PAPA VIRUS: Infects all programs loaded. Beeps,
leaves a pixel flashing on-screen and prints "Garfield and
Papa was here". Only works if you have 1 Meg or more of
memory.
MILZBRAND VIRUS: Clears the first track of floppy disks if
the date is set to 1987. It was a type-in program in a
German magazine.
Well, I hope you enjoyed this article. If you think you have
a virus, give us the details and we'll do our best to get
rid of it and find out what virus it is. Cheers!