Classic Workbench and virus danger

[chip]

Nice suggest Viceroy .... i will do that !

[Viceroy]

Originally Posted by chip

Nice suggest Viceroy .... i will do that !

It's only 1 file ;-)

[Misclegend]

Originally Posted by DamienD

That's not true; TOSEC still contains many disks that have viruses hence this flag:

they must delete those files or at least repair if possible to make free of virus
I don't know why they add viruses to the collection

[DamienD]

Originally Posted by Misclegend

they must delete those files or at least repair if possible to make free of virus
I don't know why they add viruses to the collection

Good luck with getting the TOSEC team to do that

...there's been numerous discussion about this in the past years; they include everything, even if infected by viruses.

[Misclegend]

Originally Posted by DamienD

Good luck with getting the TOSEC team to do that

...there's been numerous discussion about this in the past years; they include everything, even if infected by viruses.

I have been checking tosec stuff and it seems they included some disks infected with saddam virus ( a very old virus from the beginning of the 90s)

The saddam virus is inoffensive for hardisks but very dangerous for floppies
it start infecting the bootblock, then destroy all sectors if you try to run diskdoctor or any other disk repair tool

When some Amiga is infected with saddam virus any non write protected floppy you insert there becomes infected and impossible to repair without lost of some data

[daxb]

As far as I know Saddam Virus doesn't install on FFS floppies and on >= OS 2.0. I.e. works only on very old systems.

[Minuous]

Someone should fix those old viruses so they work on newer Amigas!! :-D

(Only joking of course...)

[Misclegend]

Originally Posted by daxb

As far as I know Saddam Virus doesn't install on FFS floppies and on >= OS 2.0. I.e. works only on very old systems.

saddam virus destroys anything which is on floppy, specially the boot block and certain sectors
it does not check if the disk is formatted on OFS or FFS

you get a workbench advice "volume xxx on DF0 is not validated" and start to spin and spin and never ends

[mrprawns]

Saddam seems to be 1.2/1.3 only : http://agn-www.informatik.uni-hambur...l/saddamor.htm

[daxb]

Originally Posted by Misclegend

it does not check if the disk is formatted on OFS or FFS

See link from mrprawns or other source. Seems the virus was written in <=1991. At that time only OS <=1.3 exists.

Particularities: 1) No infection occurs when using FastFilingSystems or running AmigaOS Version 2.0. 2) Virus uses direct Dos.Library Jumps. Encrypts itself with pseudo random number upon infection. 3) Virus installs a message port which called "mycon.write".

Maybe you can verify this.

[Hedeon]

Saddam does not destroy anything. It encrypts sectors which only can be read when the virus is active. Also, since 2.0 the validator is in ROM and no longer on the disk, meaning Saddam no longer gets activated.

[Misclegend]

Originally Posted by mrprawns

Saddam seems to be 1.2/1.3 only : http://agn-www.informatik.uni-hambur...l/saddamor.htm

you are confused
saddam virus corrupt any floppy bootblock no matter if the disk is FFS or OFS or not DOS

in the link says :

Storage Media affected: Any floppy disk (every trackdisk.device)

[rabidgerry]

Hate to resurrect this thread "Night of the Living Thread" style, but it suits my questions perfectly so I may as well add to the original poster query.

So I have had some trouble recently with a partition (DH3: ) recently with crashes etc running various software and I was told to look for a virus just in case. Running VirusZ III from ClassicWB 3.1 Full crashed when I tried to search this DH3:. I then replaced that version with the latest version of VirusZ III and also the xvs.library. Not sure if I got through a search or not that time but I know I ended up having to install Virus Executor. I was able to search with this and found Happy New Year 96 virus three times in three files associated with my Payback install and the Payback install. Now I think I got rid of these but I am now wondering after reading this thread, has the virus done any lasting damage to my system? Might I add that Virus Executor also crashed a few times but this was after a few successful scans of various partitions.

I believe someone said some posts back it can infect your ram and mess with your partitions is that right?

I just want to make sure that this virus issue is now resolved and also to eliminate it from some system crashes I have been having lately. If this turns out to be the cause that is fair enough but since I haven't a clue about Amiga Virus I thought best ask people with more experience than me.