[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference hydra::amiga_v1

Title:AMIGA NOTES
Notice:Join us in the *NEW* conference - HYDRA::AMIGA_V2
Moderator:HYDRA::MOORE
Created:Sat Apr 26 1986
Last Modified:Wed Feb 05 1992
Last Successful Update:Fri Jun 06 1997
Number of topics:5378
Total number of notes:38326

4810.0. "Virus killer for hard drives?" by BAHTAT::BAHTAT::HILTON (How's it going royal ugly dudes?) Tue Jun 11 1991 05:30

    Which is the best virus killer for hard drives?
    
    I've always used virus x, but that only seems to check floppies, or am
    I missing something? I suppose you could argue that if all floppies are
    clean you'd never get a virus onto your hard disk. 
    
    I'm sure some smart alex virus writer would have sussed that anyhow!
    
    
    Cheers,
    
    Greg
T.RTitleUserPersonal
Name
DateLines
4810.1Help is at hand.....VIVIAN::D_VISTUERTue Jun 11 1991 06:589
    Greg,
    	Have a look at the files I uploaded in note 4798.0. There is a
    program called CHk_virus517.lzh (or something like that) .It checks for
    various linkable viruses on floppies, Ramdisk or harddrives.
    
    Have fun.
    
    Dave V.
    
4810.2BOMBE::MOOREAmiga: Where 'multimedia' REALLY beganTue Jun 11 1991 16:233
    Also note that boot block viruses are usually not an issue on hard
    drives because their booting process is different and does not execute
    any code from there.
4810.3Could I be infected?OZROCK::BATHSay NO to Streamline.Thu Sep 19 1991 09:1923
    I've just run up ZeroVirus (off a fish disk, via decwrl::) and it
    complains that my...
    
    ColdCapture vector is $0fe7b0, should be 0.
    
    It then goes on to state that some legit. programs do use these
    vectors, and that this may or may not be a virus, and finally, it gives
    you the option of clearing it, or leaving it the way it is.
    
    I commented all the "specials" (e.g. dmouse etc.)  out of my
    startup-sequence and rebooted.  ZeroVirus was then the first program I
    ran.  Again it made the same complaint.  If I boot off floppy, it would
    seem my ColdCapture vector stays at 0 (i.e. no complaints), but 
    whenever I boot off the hd it complains.
    
    What is a ColdCapture vector?
    Is this likely to be a *real* virus, or a false alarm?
    Does anyone else out there use ZeroVirus, and if so, do they have this
    problem?  (in case it's relevant, I have a 2000 HD)
    
    thanks in advance,
    
    dB.
4810.4VirusX to the rescueOZROCK::BATHSay NO to Streamline.Thu Sep 19 1991 09:3821
    Hmmm... VirusX may have an answer.  If I run it up, it complains of the
    same thing, but if I use the -r option:
    
         -r   Use this if you've 1 meg Chip RAM and using SetPatch -r
    
    (which I do) then it is quite happy.  Strangely enough, ZeroVirus
    claims to be able to cope with this...
    
    ----------------------------------------------------------------------------
    -                                                                           
                                                                                
                                    Changes v1.15                               
                                                                                
    ZeroVirus now recognises the changes to system vectors made by SetPatch
    r on 
    machines with the super Agnus chip, and does not complain about them.       
                                                                                
    ---------------------------------------------------------------------------
    
    
    Maybe there's some ZeroVirus switch I don't know about?
4810.5exitLODGE::LENDavid M. LenThu Sep 19 1991 10:243
    VirusX complains about the "Cold capture" whenever I do a warm reboot
    with a RAD disk mounted.  Are you using a "recoverable ram disk" of
    some kind?
4810.6No, only non-recoverable I think.OZROCK::BATHSay NO to Streamline.Thu Sep 19 1991 11:0712
    I don't think so, but then I'm a bit new to all this AmigaDOS stuff.
    I take it there are non-recoverable (RAM:) and recoverable (RAD:)   
    disks?  In that case, I only seem to have the non-recoverable one   
    mounted:                                                            
                                                                        
    2.Workbench:test info                                              
                                                                        
    Mounted disks:                                                      
    Unit      Size    Used    Free Full Errs   Status   Name            
    DF0:      880K       7    1751   0%   0  Read/Write Empty           
    RAM:        2K       4       0 100%   0  Read/Write RAM DISK        
    DH0:       51M   35189   66876  34%   0  Read/Write Workbench