English Amiga Board

Go Back   English Amiga Board > Main > Retrogaming General Discussion

Thread Tools
Old 17 October 2001, 14:36   #1
Zone Friend
Join Date: Jun 2001
Location: Germany
Age: 44
Posts: 5,858
Send a message via ICQ to andreas Send a message via AIM to andreas
Question Can anyone explain this kind of virus to me?


looking through another private collection, I found LOTS of "broken" disks which could be easily fixed in a blink of an eye, so that they work 100% afterwards.
Each disk had a provoked checksum error on Block 2.
(Codetapper, that's the same kind of thing that "infected" the Gridiron disk you cracked months ago).
The "fix" is trivial: just take a disk editor and change the 00000000 ( = nothing) at the beginning of the block to 00000008 (= data block).
There are NO OTHER modifications needed, even the checksum is the same like before, which means that some "routine" must obviously have been programmed to aim directly on block 2 and thus overwrite the data block signature with eight zeroes, whilst leaving every other stuff untouched. After that, the disk works without any further problems.
This must definitely be a common virus, but which?

Last edited by andreas; 17 October 2001 at 15:47.
andreas is offline  
AdSense AdSense  
Old 17 October 2001, 14:42   #2
Zone Friend
Join Date: Jun 2001
Location: Germany
Age: 44
Posts: 5,858
Send a message via ICQ to andreas Send a message via AIM to andreas
s4murai, I believe it can be removed with DiskSalv as well, but that's not why I started this thread. I'd like to know the exact name of that beast (..... virus). Which viruskiller do you know that can definitely tell me more about this?
andreas is offline  
Old 17 October 2001, 15:04   #3
Registered User
RetroMan's Avatar
Join Date: Aug 2001
Location: Germany
Age: 45
Posts: 3,704

I would mail the guys from Virus Help Denmark ( http://home4.inet.tele.dk/vht-dk/amiga/amiga.htm ), they may have a clue to your quest ..... also there are some Utils for download (like Virus Checker) which donĀ“t kill the Virus, but identify them ..... and they also have a superb Amiga Virus Database on their site
RetroMan is offline  
Old 17 October 2001, 15:44   #4
Zone Friend
Join Date: Jun 2001
Location: Germany
Age: 44
Posts: 5,858
Send a message via ICQ to andreas Send a message via AIM to andreas
thanks for the link first of all.
It's a pain that I'm currently on Linux here and can't use webspider-like tools (eg Offline Explorer). Because, if I download the virus encyclopaedia, then I'm gonna get the whole one at a time.
andreas is offline  
Old 17 October 2001, 21:40   #5
Registered User

Akira's Avatar
Join Date: May 2001
Location: New York
Posts: 19,265
Yes, VirusChecker has a nice database. I wold also recommend BootX, I think this one is not developed anymore.
Akira is offline  
Old 18 October 2001, 01:03   #6
Commodore Collector
Join Date: Aug 2001
Location: Austria
Age: 47
Posts: 824
I remember this virus called 'Lamer Exterminator' which I think didn't really do anything harmful, but nevertheless made disks sometimes unusable.
The funny thing however was that once the virus got removed from the bootblock, the disk would work again !
Maybe your virus is something similar ?
Overdoc is offline  
Old 18 October 2001, 01:26   #7
2 contact me: email only!

Codetapper's Avatar
Join Date: May 2001
Location: Auckland / New Zealand
Posts: 3,139
Question Possibly not a virus?

Although this could indeed be the work of a virus, it may also be a form of copy protection.

Do these disks with that checksum error on actually use that sector for any important data? It could be that the publishers put a deliberate error on a sector which isn't needed by the game purely so if someone tries to copy the disk, most copying programs will say "checksum error on track 0" and abort the copy.

The smarter programs would either automatically repair it or just copy it with the incorrect checksum.

My guess would be this situation occurs on the oldest games from around 1988 when people used to copy disks with the Workbench Disk Copy command. This deliberate error probably prevented that from working, thus possibly increasing sales of the original a bit.

The other thing to consider is if the game in question uses it's own MFM loader it can happily ignore all the checksum information and load the game anyway, knowing that it won't match. The checksum is only used by AmigaDos to verify the file is OK.

I assume from the investigation done that it does stuff up the games so they don't load, otherwise you probably wouldn't bother to post here.

I could be completely wrong of course and it maybe a virus but it seems to be a pretty stupid virus if that is all it does!
Codetapper is offline  
Old 18 October 2001, 09:58   #8
Junior Member
MethodGit's Avatar
Join Date: Dec 2002
Location: The Streets
Age: 34
Posts: 2,723
Speaking of checksum-modifying, is there any way to manually fix ADFs made from disk2fdi which are mostly riddled with tons of checksum errors (some kind of fault on the imaging process there I think)? The games appear to load and play as if they're absolutely OK, but when it comes to trying the copy the files to hard-disk (that is if the disk is dos-formatted, of course ), you will be denied from copying most of them because the system complains of a checksum error in them.
MethodGit is offline  
Old 22 October 2001, 13:28   #9
Zone Friend
Join Date: Jun 2001
Location: Germany
Age: 44
Posts: 5,858
Send a message via ICQ to andreas Send a message via AIM to andreas
I know Lamer Exterminator very well.
But Lamer came in two main types: the one made a random block UNUSABLE by filling it with LAMER!LAMER!LAMER!... crap.
As far as I remember, the block data previously contained in it was irreparably lost (unless it was an unused block, lucky you!).
The other type altered the boot-code: it changed the disk from bootable to non-bootable, making the WB hand show up at the start. If you installed a fresh AmigaDOS bootblock on it, it booted again.


Well, sorta stupid virus it is, undoubtedly.
But I do NOT think this has something to do with copy-protection. I repeat again: the checksum IS CORRECT, the error happens because block #11 (for example) has a pointer to the next block, which is block #2 in this example! And as you know, if the data block chain (example: 11 - 2 - 3 - 4) gets broken up by an NON-DATA block (00000000, thus treated as "unreadable" [in this case block #2]!), AmigaDOS spits out a checksum error.
And I say it again, just change the 00000000 to 00000008 and the disk works again. without having to modify ANYTHING ELSE (including the checksum).

I assume from the investigation done that it does stuff up the games so they don't load
Exactly. And they load again if you "repair" the block by giving the "data block status" back to it. Well you cracked Gridiron back then, so just look at the uncracked disk image originally posted here. It's the same thing as with the disks I'm currently checking.

This is either a virus OR it was a means in the past by cracking groups to make disks unreadable for others (yes that's a verified true story, I did get some disks into my hands from a (former) group member that had an intentional checksum error on block #881 - all the Amigas of the group members were equipped with a PATCHED (!) kickstart ROM).

Last edited by andreas; 27 October 2001 at 23:03.
andreas is offline  
AdSense AdSense  

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
Thread Tools

Similar Threads
Thread Thread Starter Forum Replies Last Post
Can anyone explain this? trydowave support.Hardware 13 20 August 2013 18:22
Illegal Slave - can someone pls explain? DC33 project.WHDLoad 29 19 February 2009 15:09
If it doesn't exist, how do you explain this? mgman1 Amiga scene 65 10 February 2008 11:20
can you explain the different quality in this games?? JudasEZT Retrogaming General Discussion 2 17 May 2004 12:12
Explain this Pixel Amiga scene 9 18 May 2002 21:27

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

All times are GMT +2. The time now is 07:26.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2018, vBulletin Solutions Inc.
Page generated in 0.06814 seconds with 12 queries