English Amiga Board

English Amiga Board (https://eab.abime.net/index.php)
-   News (https://eab.abime.net/forumdisplay.php?f=29)
-   -   Amiga Bootblock Reader v2 (https://eab.abime.net/showthread.php?t=64476)

jasonver2.0 29 May 2012 06:34

Amiga Bootblock Reader v2
 
5 Attachment(s)
Hi all, im releasing a new version of my program Amiga Bootblock Reader as i now have very little time to work on it due to getting married etc :) and my old version is a buggy mess and so..

Changes include:

- 1107 Bootblocks now recognized
- Bootblock installer with 687 bootblocks
(No viruses and most non-standalone bootblocks removed)
- Rewritten directory scanner, now multithreaded
- Bootblock ripper to allow ripping of bootblock code from amiga programs without installing
- Revamped interface with pics drawn by me :)
- So many changes i have forgotten lol

WIP:
- Brain file manager


Program: Attachment 31753 (.NET 3.0 Required)

Please post any changes you wish to make to the brainfile to this thread or attach the 'bb.brainfile' file to a post at the end :)
Attachment 31749Attachment 31750Attachment 31751Attachment 31752

kamelito 29 May 2012 13:44

Quote:

Originally Posted by jasonver2.0 (Post 820632)
Hi all, im releasing a new version of my program Amiga Bootblock Reader as i now have very little time to work on it due to getting married etc :) and my old version is a buggy mess and so..

Changes include:

- 1107 Bootblocks now recognized
- Bootblock installer with 687 bootblocks
(No viruses and most non-standalone bootblocks removed)
- Rewritten directory scanner, now multithreaded
- Bootblock ripper to allow ripping of bootblock code from amiga programs without installing
- Revamped interface with pics drawn by me :)
- So many changes i have forgotten lol

WIP:
- Import brainfile
- Bootblock compare (not happy with present state)
- More bootblock pictures


Attachment 31753

For bootblock pictures download:
http://www.box.net/shared/m2y5vzraj4

I would like very much that if you learn any new bootblocks / make changes to your brainfile please upload to this thread in attachment or PM me ('bb.brainfile' in the A.B.R path). This includes if you used the old version and have learned or made changes to the brainfile. Thanks :)

Attachment 31749Attachment 31750Attachment 31751Attachment 31752

How about a disassembly function?

Crashdisk 12 July 2012 16:39

Very good work. Some bugs but your program is very usefull.

some suggestions:
Quarterback detection is not very good
Code:

Quarterback Backup DIsk (Possible),1,98,2,48,5,0,1,98,5,0,1,98,5,0,s,,0
Quarterback Backup DIsk (Possible),1,98,6,0,1,98,6,0,1,98,6,0,1,98,s,,0

=>
Code:

Quarterback Backup Disk (Possible),0,81,1,66,5,0,6,0,7,0,10,0,11,0,s,,0
Quarterback Backup Disk (Possible),0,81,1,98,5,0,6,0,7,0,10,0,11,0,s,,0

Bad name:
Mortiville Manor Boot v1.0
=> Mortville Manor Boot v1.0

UAE Bootblock
=> UAE Extended ADF

AmigaDOS Standard - 2.0 FFS International DirCache
=> AmigaDOS Standard - 3.0 FFS International DirCache

asymetrix 29 July 2012 14:24

Interesting project !

great work

I was just thinking if one could export a bootblock to BinHex, we could save bootblocks as text files.

If MD5 for each Bootblock is known, we know we have a authenticated way to recreate disks.

Can one imagine a whole DMS/ADF converted to XML format ;-)

jasonver2.0 07 August 2012 05:41

@Crashdisk - Thank you for your corrections :) - im only a hobbyist programmer and am happy to stand corrected :)

p.s. What bugs are you referring too? I want to try and fix them :)

@asymetrix - Thanks :)

Crashdisk 07 August 2012 10:57

hi jasonver2.0
your program does not check that the file is not locked by another application before reading / writing
eg:
"Test Run in WinUAE BB" if %temp%/temp.adf is already used by WinUAE

Since my previous post I found many errors in the database but I did not take notes, sorry. Overall, you forget that the virus (80%) mutate after each contamination...:sad

If you like challenges, there is a very rare virus, which has so far never been identified (not sure :nervous). His name is "Nightmare-Loader". good search :spin

prowler 07 August 2012 17:58

Quote:

Originally Posted by Crashdisk (Post 832667)
If you like challenges, there is a very rare virus, which has so far never been identified (not sure :nervous). His name is "Nightmare-Loader". good search :spin

Quite. ;) http://eab.abime.net/showthread.php?t=65302

Crashdisk 07 August 2012 18:03

Oh no, it's not funny that! :crying
However they must find the famous disks

prowler 07 August 2012 18:25

Quote:

Originally Posted by Crashdisk (Post 832738)
Oh no, it's not funny that! :crying

Oh, sorry. ;)

Quote:

Originally Posted by Crashdisk (Post 832738)
However they must find the famous disks

Don't you have them? :nervous

Crashdisk 07 August 2012 18:33

Quote:

Originally Posted by prowler (Post 832744)
Don't you have them? :nervous

Yes, but I do not share ... for now ^^

jasonver2.0 08 August 2012 08:33

Quote:

Originally Posted by Crashdisk (Post 832667)
hi jasonver2.0
your program does not check that the file is not locked by another application before reading / writing
eg:
"Test Run in WinUAE BB" if %temp%/temp.adf is already used by WinUAE

Since my previous post I found many errors in the database but I did not take notes, sorry. Overall, you forget that the virus (80%) mutate after each contamination...:sad

If you like challenges, there is a very rare virus, which has so far never been identified (not sure :nervous). His name is "Nightmare-Loader". good search :spin

1. Ok ill fix that :)

2. I have scanned virus bootblocks from many different sources and all have come up accurate (as far as i know:) ) - some bootblocks have been hard to pin down such as Lamers, Tai-Pan and others, I presume these are the kind of bootblocks you speak of. I need many examples of the same bootblock in order to find commonality for detection. If you could tell me which ones do this i will remove them from the brainfile as the detection will be useless

3. Ok lol

Crashdisk 08 August 2012 08:55

Cool, I'll be back in about two weeks, we can share our collections if you wish (completely unfinished, however :nervous)

jasonver2.0 09 February 2013 12:22

--

Crashdisk 09 February 2013 12:33

Sad news because I use your program regularly. I hope someone will take over. You plan to provide your bootblock collection too?
In any case thank you, you helped me a lot for my own program ^^

Crashdisk 09 February 2013 14:21

Thank you very much :bowdown. I hope it will be useful and used!

Crashdisk 19 February 2013 17:09

Hi Jason,
you allow me to spread database updated here?

jasonver2.0 20 February 2013 03:34

Yeah no problems mate :)

Crashdisk 23 February 2013 12:54

Here is a small update for ABR:
- Fix some typo
- Change classe for some "bad" bootblock
- Change the name for some virus clones common

bb.brainfile [2013-02-23] removed

Crashdisk 25 February 2013 10:34

New update:
- The detection of the entire family of viruses "Lamer Exterminator" has been reworked (decoded version removed!)
Note: Numbering based on VirusZ III
- Changed the name for many virus clones common
- Remove some unnecessary space characters
- Some unimportant things ^^
- Alphabetical sorting of the database

If these changes cause regressions, thank you for the report here.

bb.brainfile [2013-02-25] removed

DDNI 25 February 2013 10:39

Thanks to Jason for his program and to crashdisk for your continued work on it.


All times are GMT +2. The time now is 12:01.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.

Page generated in 0.04954 seconds with 11 queries