Log inRegister an accountBrowse CSDbHelp & documentationFacts & StatisticsThe forumsAvailable RSS-feeds on CSDbSupport CSDb Commodore 64 Scene Database
You are not logged in - nap
CSDb User Forums


Forums > C64 Productions > Making a Virus Scanner - info needed
2007-06-03 09:46
chatGPZ

Registered: Dec 2001
Posts: 11088
Making a Virus Scanner - info needed

as some of you might know i made a little util to scan the disks i transfered for errors (D64scan V0.2). now after reading latest discussions about various virii on the c64 i thought it would be a useful feature to add virus detection (and possibly elimination) to that tool aswell...

so the question is, who has detailed info on that subject? useful info would be
- what virii do exist
- how did said virii work
- what are existing scanners/cleaners, and how do they work
- how do those virii "initially" install (i only know about that bhp virus "installer")

...etc.

at the very least, i'd need a bunch of "infected" disks (or well, d64s of them), but ofcourse any further info would make things a lot easier :)

anyone?
 
... 57 posts hidden. Click here to view all posts....
 
2015-04-19 02:21
The Phantom
Account closed

Registered: Jan 2004
Posts: 358
The PDF looks to be the same Scout posted at the start.
2015-04-20 19:22
Danzig

Registered: Jun 2002
Posts: 428
Anyone ever faced a "virus" that copied 2 files on a disk namely ">" and "<". It then changed track 18 so that load"$",8 list just returns load">",8,1.
if you place the cursor on that line and press return you get the directory listing with always the same diskname (something like "visual soft works" or the like, dunno remember exactly). IIRC you can just move the cursor on an entry and press return to load the file. And IIRRC it was also turbo loader.

1.) if you insert another disk into the drive it gets "infected" immediate
2.) it could also lead to "broken disks". I once inserted Zak McCracken into the drive for testing purpose and it mangled the disk.
3.) only way to remove the "virus" was to repair the directory with a disk monitor.
4.) It hides the files ">" and "<" while listing the directory

Anyone?
2015-05-01 14:39
AlexC

Registered: Jan 2008
Posts: 293
Ok, so I've been able to locate most of infected disk/prgs: I'm still missing those two:

HIV2
Starfire

I'm also looking for more sample of HIV1 virus. I know I could download the source code from codebase64 but I don't want to create new variants by accident so I'd prefer to find disk images or prgs. If anyone has those file please share. Thanks in advance.
2015-05-02 11:59
iAN CooG

Registered: May 2002
Posts: 3128
Candyland
ALL mirrors have the prg infected with HIV. Grab it while it lasts, needs to be replaced with a cleaned prg /me rolls eyes
No idea about HIV2 anyway.
2015-05-02 12:25
bugjam

Registered: Apr 2003
Posts: 2467
@Danzig: That one sounds pretty cool, I hope it will be found.
2015-05-22 08:03
Danzig

Registered: Jun 2002
Posts: 428
Quote: Anyone ever faced a "virus" that copied 2 files on a disk namely ">" and "<". It then changed track 18 so that load"$",8 list just returns load">",8,1.
if you place the cursor on that line and press return you get the directory listing with always the same diskname (something like "visual soft works" or the like, dunno remember exactly). IIRC you can just move the cursor on an entry and press return to load the file. And IIRRC it was also turbo loader.

1.) if you insert another disk into the drive it gets "infected" immediate
2.) it could also lead to "broken disks". I once inserted Zak McCracken into the drive for testing purpose and it mangled the disk.
3.) only way to remove the "virus" was to repair the directory with a disk monitor.
4.) It hides the files ">" and "<" while listing the directory

Anyone?


Yeah, sometimes things just don't let you sleep :D

I found the fucker on an old .D64 of mine (after manually checking ~700 Disks, hints for a good search tool are welcome ;) ).. So if anyone is interested, leave me a pm. I can isolate the 2 files and send it via e-mail!

I hope someone can shed some light on it (who did it, when was it done (my guess: somewhen 1987?)).

Cheers!
2015-05-22 16:18
bugjam

Registered: Apr 2003
Posts: 2467
Cool. :-)
2015-05-23 20:21
Danzig

Registered: Jun 2002
Posts: 428
I copied the 2 files to an empty .d64 and "activated" it by executing load">",8,1.
It says Visual--Arts in the header. So I created an entry for the group and the Virus

Edit: Why did I create a new group entry? Because I have no doubt: this was not released by Visual Arts
2015-10-10 17:52
bugjam

Registered: Apr 2003
Posts: 2467
Is it known which one is the virus mentioned here Virus Warning!?
2015-12-18 15:38
Scan

Registered: Dec 2015
Posts: 110
Not sure whether you people are still interested in Commodore 64 viruses, but here you can download a new one. The zip file contains the fully documented source code (64tass compatible) and a .d64 image on which the 2nd file (with the picture of the trollface) is infected.

Bit Addict Virus
Previous - 1 | 2 | 3 | 4 | 5 | 6 | 7 - Next
RefreshSubscribe to this thread:

You need to be logged in to post in the forum.

Search the forum:
Search   for   in  
All times are CET.
Search CSDb
Advanced
Users Online
Matt
Didi/Laxity
Exile/Anubis
jmin
deetsay
krissz
DeeKay/Crest
Zeus
Guests online: 350
Top Demos
1 Next Level  (9.8)
2 Mojo  (9.7)
3 Coma Light 13  (9.7)
4 Edge of Disgrace  (9.6)
5 No Bounds  (9.6)
6 Comaland 100%  (9.6)
7 Uncensored  (9.6)
8 The Ghost  (9.6)
9 Wonderland XIV  (9.6)
10 Bromance  (9.6)
Top onefile Demos
1 Party Elk 2  (9.7)
2 Cubic Dream  (9.6)
3 Copper Booze  (9.5)
4 Rainbow Connection  (9.5)
5 TRSAC, Gabber & Pebe..  (9.5)
6 Onscreen 5k  (9.5)
7 Dawnfall V1.1  (9.5)
8 Quadrants  (9.5)
9 Daah, Those Acid Pil..  (9.5)
10 Birth of a Flower  (9.5)
Top Groups
1 Booze Design  (9.3)
2 Nostalgia  (9.3)
3 Oxyron  (9.3)
4 Censor Design  (9.3)
5 Crest  (9.3)
Top Graphicians
1 Sulevi  (10)
2 Mirage  (9.8)
3 Lobo  (9.7)
4 Mikael  (9.7)
5 Archmage  (9.7)

Home - Disclaimer
Copyright © No Name 2001-2024
Page generated in: 0.059 sec.