Possible new virus

Crashdisk · 06 August 2012, 02:07

Hi,
i found a virus that is not detected by antivirus software that I tested. It seems to be called "Nightmare Loader". Please avoid:
"Tracker Pro v1.0 - songs 1.adf"
crc e9ae08d8

"Tracker Pro v1.0 - songs 2.adf"
crc ae4c343a

I.Did · 09 August 2012, 14:25

Okay

which antivirus program do you use?

s2325 · 09 August 2012, 14:32

I think it should be in bootblock as there should be only music files on disks.

Crashdisk · 19 August 2012, 01:55

It's a bootblock virus :

Code:

Amiga Bootblock Reader v2.00       KO
adfchk v0.22                       KO
adfscan v1.9b1                     KO

BootX v5.23 Recog v1.74            KO
MasterVirusKiller v3.1378          KO
Siegfried Antivirus Pro v1.4       KO
VT v3.17                           KO
VirusExecutor v2.34                KO
VirusWorkshop v6.9                 KO
VirusZ III v1.02 (XVS v33.42)      KO
Xtruder v3.7 (bootblock.lib v1.09) KO

http://www.teyko.com               KO
http://www.vht-dk.dk               KO

mai · 23 August 2012, 18:54

I have a bootblock on a disk, which causes GURU.
My Antivir cant recognize a virus.
hexview:

Crashdisk · 23 August 2012, 20:25

It's a bootloader but with a copy loop ...?!
I found four disk in TOSEC with this bootblock
Interesting!

06 August 2012, 02:07	#1
Crashdisk Registered User Join Date: Jun 2009 Location: France Age: 35 Posts: 588	Possible new virus Hi, i found a virus that is not detected by antivirus software that I tested. It seems to be called "Nightmare Loader". Please avoid: "Tracker Pro v1.0 - songs 1.adf" crc e9ae08d8 "Tracker Pro v1.0 - songs 2.adf" crc ae4c343a

09 August 2012, 14:25	#2
I.Did in retromode Join Date: Feb 2012 Location: Scandinavia Posts: 72	Okay which antivirus program do you use? __________________ Config: 5 x A500 1 x A1011 3 x A1200 2 x A1200 KS 3.0 w/ 84 Mb HD and Blizzard 1230 Mk-IV w/ 128 Mb RAM the other w/Blizzard 1230 Mk-IV w/ 8 Mb RAM. 1 x A2000 Several 4 and 8 GB SanDisk CF Cards. Several other external FD's, both 3.5" and 5.25" Some 5500+ floppy's for Amiga. 3 x C=128D. 2 x C=128 w/ 2 x 1571. 3 x C64 w/ 4 x 1541. 1 x C=1581 Some 3900+ floppy's for C=64/C=128. Collecting stuff for an A1000 now... Who said Commodore-Fan-Boy? ... I'll punch your nose !!

23 August 2012, 18:54	#5
mai ModCollector TOSEC member Join Date: Feb 2008 Location: Stendal/Germany Age: 45 Posts: 3,619	I have a bootblock on a disk, which causes GURU. My Antivir cant recognize a virus. hexview: Attached Thumbnails __________________ A1200, Blizzard 68030/50, 32MB Fast, Kick 3.1, 2GB IDE>CF-Card, 4GB PCMCIA CF-Card

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Virus	Stab Master	support.Games	14	21 January 2011 18:07
Various problems, maybe virus.	Thorham	support.Other	4	20 November 2008 17:39
T-Zero virus	DDNI	support.Games	11	30 March 2007 04:06
Possible Virus on WB	Tonycrew	Retrogaming General Discussion	4	13 June 2002 14:03

09 August 2012, 14:32	#3
s2325 Zone Friend Join Date: Jun 2006 Location: Gargore Age: 32 Posts: 11,273	I think it should be in bootblock as there should be only music files on disks.

23 August 2012, 20:25	#6
Crashdisk Registered User Join Date: Jun 2009 Location: France Age: 35 Posts: 588	It's a bootloader but with a copy loop ...?! I found four disk in TOSEC with this bootblock Interesting!

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)