English Amiga Board


Go Back   English Amiga Board > Other Projects > project.WHDLoad

 
 
Thread Tools
Old 24 January 2010, 16:35   #1
mailman
Zone Friend

mailman's Avatar
 
Join Date: Jun 2005
Location: Warsaw/Poland
Age: 40
Posts: 2,307
Virus infected image under WHDLoad

Today I was thinking about such a possible situation. Let's imagine that I have a virus infected executable. It is stored on a diskette. I created an image of that diskette and managed to run it under WHDLoad using generic slave. Executable was run so the virus which was linked to that executable became resident in the memory. After quitting WHDLoad would it still be contagious for the rest of the system or is it only dangerous "inside WHDLoad emulation"?

I ask because recently I have been checking a lot scene ADFs which worked under WHDLoad. I didn't bother to check them for viruses and fortunately nothing in my system is infected. So this is much more out of curiosity.
mailman is offline  
Old 27 January 2010, 22:13   #2
Wepl
Moderator
Wepl's Avatar
 
Join Date: Nov 2001
Location: Germany
Posts: 690
starting whdload v16.9 the installed program cannot access (read/write) files outside the games (data) directory
in earlier whdload versions all files on the whole system could be written, but a for a virus to do this:
- must know about whdload
- must get the resload pointer to access whdload function which is usually stored in the slave
- must become active somehow and call resload functions

in your case, running the generic kickemu, the virus will only see the emulated aos and nothing of whdload
a old virus could infect other files in the data directory as long as no unsupported io functions (e.g. Rename) are used but not files outside

a new virus made to support whdload could infect all files before whdload v16.9, after this it would be only possible by modifying whdload itself

conclusion: if you download a whdload installed game from somewhere there is the same risk that your system gets infected as with any other downloaded program you execute
I hope nobody wastes his time on such developments.... better fix demos/games.
Wepl is offline  
Old 27 January 2010, 23:01   #3
mailman
Zone Friend

mailman's Avatar
 
Join Date: Jun 2005
Location: Warsaw/Poland
Age: 40
Posts: 2,307
Thanks for reply. I was thinking that it would not make much sense if the files executed within WHDLoad could do some damage to the real system but I needed some confirmation.
mailman is offline  
 


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Similar Threads
Thread Thread Starter Forum Replies Last Post
Invalid Kickstart Image WHDLOAD error TronPlayer support.Games 5 16 November 2010 21:59
Some Gamebase Discs infected with the Saddam Virus?? Gilbert project.MAGE 9 17 June 2006 04:49
WHDLoad problem with XPK packed disk image. oldpx support.Games 16 04 January 2005 23:11
StarRay 1612 - SCA Infected ? DeCreator project.SPS (was CAPS) 2 20 October 2004 15:34
WHDLoad: Requirement to have a KS 1.3 image to play WHD games andreas Amiga scene 6 14 May 2002 08:14

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 12:15.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2019, vBulletin Solutions Inc.
Page generated in 0.05792 seconds with 13 queries