English Amiga Board


Go Back   English Amiga Board > Main > Amiga scene

 
 
Thread Tools
Old 13 September 2020, 23:19   #1
Aladin
Registered User
 
Join Date: Nov 2016
Location: France
Posts: 611
Geo's quest 3 virus Happy New Year 96

attention the archive http://aminet.net/package/game/role/GQ3
from 2020-09-13 was infected

As a reminder, the GQ2 archive was also infected
http://aminet.net/package/game/role/GQ2
The virus file was in the GracPlayer2 executable

Ok for:
http://aminet.net/package/game/role/GQ



WHDLG non-virus version:
GeoQuest3-WHDL.lha
GeoQuest2-WHDL.lha
GeoQuest1-WHDL.lha

Last edited by Aladin; 08 March 2021 at 17:11.
Aladin is offline  
Old 14 September 2020, 00:22   #2
Quagliarulo
Registered User
Quagliarulo's Avatar
 
Join Date: Mar 2010
Location: Napoli, Italia
Posts: 57
Did you warn the webmasters (aminet@aminet.net)?
Quagliarulo is offline  
Old 14 September 2020, 00:59   #3
AMIGASYSTEM
Registered User
AMIGASYSTEM's Avatar
 
Join Date: Aug 2014
Location: Brindisi (Italy)
Posts: 6,620
Virus Checker II intercepted it as "Ebola Virus" while Virus Z III, identified it as "Happy New Year 96"

Last edited by AMIGASYSTEM; 16 September 2020 at 13:26.
AMIGASYSTEM is offline  
Old 14 September 2020, 01:35   #4
Aladin
Registered User
 
Join Date: Nov 2016
Location: France
Posts: 611
Quote:
Originally Posted by Quagliarulo View Post
Did you warn the webmasters (aminet@aminet.net)?
I just did it
Aladin is offline  
Old 14 September 2020, 02:22   #5
Storm
SYS64738

Storm's Avatar
 
Join Date: Oct 2014
Location: Australia
Age: 47
Posts: 82
I've had one of my systems in the past infected with the Happy New Year 96 virus and let me tell you it didn't make me happy at all.
Storm is offline  
Old 14 September 2020, 12:23   #6
Seiya
Registered User

Seiya's Avatar
 
Join Date: Nov 2014
Location: Italy
Posts: 1,206
Happy new year 96 destroy any comands that is launched in the Startup-sequence. At least with 68040 a 68040 processor makes several damages and you are force to reinstall from scratch Operating System. With 68020-30 you don't see the damages because the system continue working very good.
Seiya is offline  
Old 14 September 2020, 15:05   #7
Quagliarulo
Registered User
Quagliarulo's Avatar
 
Join Date: Mar 2010
Location: Napoli, Italia
Posts: 57
Those archives are still there.
Quagliarulo is offline  
Old 14 September 2020, 15:12   #8
AMIGASYSTEM
Registered User
AMIGASYSTEM's Avatar
 
Join Date: Aug 2014
Location: Brindisi (Italy)
Posts: 6,620
"Happy new year 96" infected any OS and CPU, tested with "GracPlayer2" and all the files executed after its boot, when rebooting the system were infected by "Happy New Year 96" the RAM was infected by Ebola Virus.
AMIGASYSTEM is offline  
Old 14 September 2020, 17:32   #9
PeterK
Registered User
 
Join Date: Apr 2005
Location: Hangover
Posts: 2,908
More than 15 years ago I once downloaded an HDF image based on OS 3.9 from a French website and found 113 files on it infected with Ebola, removed them ... and then looked for more usable things on it ...
PeterK is offline  
Old 16 September 2020, 14:35   #10
pngcan
Registered User

 
Join Date: Apr 2020
Location: USA
Posts: 22
Hello, can anyone tell me how this occurred. I used the Grac2 archive for GQ2 and 3 from Aminet, and I used the original Grac2 disk I bought from F1 way back when for GQ1. I also scan my computer frequently and AVG did not ever find these viruses. Is there anyway of removing it, as I am working on the 2nd and 3rd chapters of GQ3? I am sorry if this has caused any problems.

Last edited by pngcan; 17 September 2020 at 00:30.
pngcan is offline  
Old 16 September 2020, 14:52   #11
StingRay
move.l #$c0ff33,throat

StingRay's Avatar
 
Join Date: Dec 2005
Location: Berlin/Joymoney
Posts: 6,652
Quote:
Originally Posted by AMIGASYSTEM View Post
Virus Checker II intercepted it as "Ebola Virus" while Virus Z III, identified it as "Happy New Year 96"

Ebola is correct.
Attached Thumbnails
Click image for larger version

Name:	036.png
Views:	186
Size:	17.7 KB
ID:	68880  
StingRay is offline  
Old 16 September 2020, 15:35   #12
Quagliarulo
Registered User
Quagliarulo's Avatar
 
Join Date: Mar 2010
Location: Napoli, Italia
Posts: 57
Quote:
Originally Posted by pngcan View Post
Hello, can anyone tell me how this ocurred. Is there anyway of removing it?
God knows how and when it happened that the virus began spreading into your files. You should boot your Amiga from a clean antivirus disk and scan all your disks, hard drives, hardfiles, archives, CDs, everything. Go through your DVD and CD backups, scan everything Amiga-related stuff that's inside, then destroy and re-author the disc if it's infected.
The Virus Help Team provides up to date disk images for the job.
Quagliarulo is offline  
Old 16 September 2020, 22:38   #13
redblade
Zone Friend

redblade's Avatar
 
Join Date: Mar 2004
Location: Middle Earth
Age: 37
Posts: 1,743
Hi.

I normally use Virus Checker V6.28 (Single binary) as a basic virus checker. Is their a small binary one (small memory footprint) for the happy new year virus?

Thanks.
redblade is offline  
Old 16 September 2020, 22:44   #14
Predseda
Puttymoon inhabitant
Predseda's Avatar
 
Join Date: Mar 2007
Location: The City of Townsville
Age: 43
Posts: 6,485
Send a message via ICQ to Predseda
Nasty HNY96 returns again and again. Most known virus in Amiga community I think.
Predseda is online now  
Old 17 September 2020, 00:32   #15
pngcan
Registered User

 
Join Date: Apr 2020
Location: USA
Posts: 22
I do not use an Amiga any longer (since 2000) I have been coding these on my Mac Airbook with an emulator. The GRAC2 program was downloaded from Aminet.
pngcan is offline  
Old 17 September 2020, 01:41   #16
AMIGASYSTEM
Registered User
AMIGASYSTEM's Avatar
 
Join Date: Aug 2014
Location: Brindisi (Italy)
Posts: 6,620
Quote:
Originally Posted by pngcan View Post
Hello, can anyone tell me how this occurred. I used the Grac2 archive for GQ2 and 3 from Aminet, and I used the original Grac2 disk I bought from F1 way back when for GQ1. I also scan my computer frequently and AVG did not ever find these viruses. Is there anyway of removing it, as I am working on the 2nd and 3rd chapters of GQ3? I am sorry if this has caused any problems.
When your system has been infected with "Happy New Year 96", all the files you run will be infected, so it is difficult to know which file was the first infected file.

AVG like other PC/MAC Antivirus cannot detect Amiga Virus, you have to scan your "Amiga" system and all your Amiga files with an Amiga Antivirus HERE find "VirusZ III" and "VirusChecker II" but also others.
AMIGASYSTEM is offline  
Old 17 September 2020, 14:17   #17
Quagliarulo
Registered User
Quagliarulo's Avatar
 
Join Date: Mar 2010
Location: Napoli, Italia
Posts: 57
Quote:
Originally Posted by pngcan View Post
I do not use an Amiga any longer (since 2000) I have been coding these on my Mac Airbook with an emulator. The GRAC2 program was downloaded from Aminet.
It could well have started when you were still using real hardware, so you should also check all your real media (HDD's and floppies, for example). While you can access physical hard drives via UAE, in order to check your floppies you are forced to either use a real Amiga or make images and scan those in the emulator.
Quagliarulo is offline  
Old 17 September 2020, 14:24   #18
Aladin
Registered User
 
Join Date: Nov 2016
Location: France
Posts: 611
According to your archives on aminet:

In 2001, Geo's Quest 1 was not yet infected
http://aminet.net/package/game/role/GQ

In 2010, Geo's Quest 2 was infected

Last edited by Aladin; 07 March 2021 at 02:09.
Aladin is offline  
Old 18 September 2020, 03:56   #19
pngcan
Registered User

 
Join Date: Apr 2020
Location: USA
Posts: 22
Quote:
Originally Posted by AMIGASYSTEM View Post
When your system has been infected with "Happy New Year 96", all the files you run will be infected, so it is difficult to know which file was the first infected file.

AVG like other PC/MAC Antivirus cannot detect Amiga Virus, you have to scan your "Amiga" system and all your Amiga files with an Amiga Antivirus HERE find "VirusZ III" and "VirusChecker II" but also others.

Yes that worked. I downloaded Virus_Checker 2 and ran it on my UAE emulator on my Mac and indeed it indicated my memory was infected with Happy New Year & Ebola. I ran the program and repaired/disabled/removed the virus. I copied the gracplayer2 from GQ1 to GQ2 and GQ3. I see Aminet has removed both GQ2 & GQ3. I contacted them to see if I can now re-upload the files as cleaned by Virus_Check 2. Thanks to all for the help, especially aladin21. Now that I am retired I would like to create more games, and I am nearly done Chapter 2 of GQ3. I sure do miss the Amiga (although its only emulated now for me, the experience is still fun) Thanks again friends.

pngcan is offline  
Old 18 September 2020, 04:06   #20
pngcan
Registered User

 
Join Date: Apr 2020
Location: USA
Posts: 22
Quote:
Originally Posted by AMIGASYSTEM View Post
When your system has been infected with "Happy New Year 96", all the files you run will be infected, so it is difficult to know which file was the first infected file.

AVG like other PC/MAC Antivirus cannot detect Amiga Virus, you have to scan your "Amiga" system and all your Amiga files with an Amiga Antivirus HERE find "VirusZ III" and "VirusChecker II" but also others.
Quote:
Originally Posted by Aladin View Post
According to your archives on aminet:

In 2001, Geo's Quest 1 was not yet infected
http://aminet.net/package/game/role/GQ

In 2010, Geo's Quest 2 was indected

Yes that makes sense. In 2001 I was still using my A1200 and the Grac2 floppy from F1 installed on my harddrive. Much of GQ2 was also coded on the A1200 in 2002 then I just got too busy and never finished it.I burnt a CD with all the GQ2 files and stored it. I sold my 1200 in and around 2005/6 as I never used since 2001. In 2007, missing my Amiga I purchased Amiga Forever (can't remember the version then), copied the GQ2 files to the Work directory and then off and on worked on it. BUT I had to download Grac2 from Aminet to finish it as I no longer had the F1 disk. I wonder if it was that download that did it? I uploaded GQ2 first in 2007, then again in 2010 with some bug fixes, removing the 2007 file. Could have been then. I ran Virus Check 2 and indeed the Grac2 file in my Work dir was infected. (Over the years I copied my Amiga folder to an external drive and then copied the file to my new macs as I upgraded). So the Grac2 file I used for GQ3 was indeed still the one I downloaded back in 2007. I downloaded a new Grac2 today from Aminet, ran Virus Check and the new Grac2 was clean. Thanks again for all the help Aladin
pngcan is offline  
 


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Similar Threads
Thread Thread Starter Forum Replies Last Post
Happy Christmas & Happy New Year from Amiga Kit Amiga Store amigakit.com News 12 10 January 2018 19:07
Happy New Year, Amigans!! viddi project.EAB 32 03 January 2008 00:54

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 20:26.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2021, vBulletin Solutions Inc.
Page generated in 0.10523 seconds with 16 queries