Amiga Virus Encyclopedia Project

[fuzzylogic]

Hello dudes,

just registered here to say please support the Amiga Virus Encyclopedia - a site dedicated to Amiga viruses. If you have a virus we are searching for please don't hesitate to send them over to us or if you want to inform youself about some of these nasty codepieces just visit us, too at http://ave.teyko.com.

Cheers!

[pmc]

Nice site fuzzylogic.

Hope I'm not missing something obvious - what does the column with the percentages far right indicate?

Also, as a bit of info for you, on your detailed description of the Disk Doctors boot block virus there's a code fragment with:

cmpi.w     #$101,$dff00c

which by my calculation is equivalent to holding forward *and* back on the joystick at the same time ie. an impossible combination.

Hope that helps...

[whiteb]

Originally Posted by pmc

Nice site fuzzylogic.

Hope I'm not missing something obvious - what does the column with the percentages far right indicate?

Relevance by user click rate.

[pmc]

OK whiteb, nice one. Thanks for that.

[EmuChicken]

Im a bit unsure as to WHY youd want to make an encyclopedia about Amiga viri

... Me for one HATES the people that makes these viri... I mean, wtfffff!?

[Fingerlickin_B]

Originally Posted by EmuChicken

Im a bit unsure as to WHY youd want to make an encyclopedia about Amiga viri

... Me for one HATES the people that makes these viri... I mean, wtfffff!?

Ummm, to know the enemy is to defeat the enemy...

PZ.

[pmc]

Originally Posted by EmuChicken

Im a bit unsure as to WHY youd want to make an encyclopedia about Amiga viri

... Me for one HATES the people that makes these viri... I mean, wtfffff!?

It's worth having the information in my opinion.

From the perspective of a coding challenge, coding a virus would be interesting - well, to me at least - purely in terms of making something that's difficult to detect and clever at hiding and duplicating itself.

I think I'd stop short of coding the bits that f*ck up people's disks and data though... Cos that's just bang out of order...

[Matt020]

It is unlawful and an offence to code a virus.

[pmc]

Originally Posted by Matt020

It is unlawful and an offence to code a virus.

LOL. I think you can rest easy, I was only expressing an opinion, not an intention!

[sneeker]

Very similar to this page :

http://www.vht-dk.dk/vhtdk/amiga/desc/all.htm

Has quite a bit of info on there too.

[fuzzylogic]

Originally Posted by EmuChicken

Im a bit unsure as to WHY youd want to make an encyclopedia about Amiga viri

... Me for one HATES the people that makes these viri... I mean, wtfffff!?

We are not into making viruses :-) - It is a preservation-project of old amiga viruses (see info on the site) also we are analyzing viruses for a good read (at least we hope so) :-)

You cannot find any info how to make viruses on the site of course.

[fuzzylogic]

Originally Posted by pmc

Nice site fuzzylogic.

cmpi.w     #$101,$dff00c

which by my calculation is equivalent to holding forward *and* back on the joystick at the same time ie. an impossible combination.

Hope that helps...

This is the whole code involved with above mentioned code, maybe this helps you?

  movea.l (4).l,a6
  jsr     -$78(a6)  ; Forbid
  clr.l   ($DFF036).l
  move.b  #$E0,($DFF034).l
  move.w  #$F,d0
.loop:
  dbf     d0,.loop
  cmpi.w  #$101,($DFF00C).l ; JOYDAT0
  bne.s   InstallVirus
  move.l  #$5FFFF,d0
.loop2:
  subq.l  #1,d0
  bne.s   .loop2
  move.b  #$A0,($DFF034).l
  bra.s   NormalBoot ; (no installation)

[cosmicfrog]

ist there a load of bootblock viruses somewhere on the eab file server ?

[Toni Wilen]

Originally Posted by pmc

cmpi.w     #$101,$dff00c

which by my calculation is equivalent to holding forward *and* back on the joystick at the same time ie. an impossible combination.

Correct but it is only impossible if you use standard joystick, some old and simple game dongles used similar "impossible" combinations. (Leaderboard dongle actually used above combination)

[Paul_s]

Originally Posted by Matt020

It is unlawful and an offence to code a virus.

In that case you should report Microsoft as they've made plently under the guise of 'Windows'

[pmc]

Originally Posted by Toni Wilen

Correct but it is only impossible if you use standard joystick, some old and simple game dongles used similar "impossible" combinations. (Leaderboard dongle actually used above combination)

Yes - obviously only impossible with a standard joystick.

I was going to add something like "the virus makers probably used some kind of dongle that held these joystick directions to stop themselves getting infected" but I didn't...

[pmc]

Originally Posted by fuzzylogic

You cannot find any info how to make viruses on the site of course.

But you can find out lots of interesting ideas that people who made the viruses came up with for keeping their virus hidden and resident and self replicating.

I found reading about that stuff interesting anyway...

[fuzzylogic]

Originally Posted by pmc

But you can find out lots of interesting ideas that people who made the viruses came up with for keeping their virus hidden and resident and self replicating.

I found reading about that stuff interesting anyway...

Hi pmc,

well actually 90% of the viruses out on amiga were not that well coded anyway(*). I think a good coder does not need ideas he knows how to do it since its simple.

Best regards ;-)

(*)There is infact stuff which is really clever and only a handful ppl are able to patch the system like this (i.e. using trap vectors to get access to interesting OS functions or intercepting dos traffic on packet level not needing the dos.library anymore) but all in all I think the Amiga itself isn't interesting anymore for virus writers the last virus discovered was 2001 if I remember right.

Thanks for your help on that joystick routine :-)

[pmc]

Originally Posted by fuzzylogic

There is infact stuff which is really clever and only a handful ppl are able to patch the system like this (i.e. using trap vectors to get access to interesting OS functions or intercepting dos traffic on packet level not needing the dos.library anymore)

That was the kind of stuff I was enjoying reading about.

Originally Posted by fuzzylogic

all in all I think the Amiga itself isn't interesting anymore for virus writers

Agreed. Not much notoriety in disrupting the lives of the, relatively speaking, handful of remaining users of an outdated machine.

Originally Posted by fuzzylogic

Thanks for your help on that joystick routine :-)

No problems man, happy to help.

Keep up the good work with the site.

EDIT: I've added the joystick test explanation as a comment to the Disk Doctors virus page on your site.