Welcome, Guest. Please login or register.

Author Topic: -Liberator Virus V5.1.  (Read 787 times)

Description:

0 Members and 1 Guest are viewing this topic.

Offline DrummerboyTopic starter

  • Hero Member
  • *****
  • Join Date: Jul 2003
  • Posts: 512
    • Show only replies by Drummerboy
-Liberator Virus V5.1.
« on: January 16, 2016, 06:20:59 AM »
Hi,

Loading some games from HXC unit on any A1200, seems infected the HD with Liberator Virus V5.01. Showing this message and not load the OS:

" Congratulations this disk has been liberated'
' of virus protection!!'
' Hello from the Liberator virus'
' v5.01 - Random Disaster'
'The anti-anti-virus is here again!'
'Lets play trash the hard disk'
' and ram the disk heads'
' The piracy curse'
'Liberator V - The future is near.'
'Look out for Liberator VI - The final nightmare ...'
'coming soon from a lame swapper near you!'
' Respect to the virus masters
Lamer Exterminator,crime & Contrast.'
'And remember - be excellent to each other!'
'The liberator 27/07/92'
'Virus Generation : ',0 "

So reading some info about this virus, The virus installs a .fastdir file. It seems, just need delete that file.
I found the .fastdir file, and deleted, but now just show a black screen and stop, not load the OS.

But anyway, if someone know, how delete the virus, please comment a i will apreciate.
And remember, take care with games downloaded from TOSECS, and other sources if you are using on any Amiga with HD.

Regards.
« Last Edit: January 17, 2016, 02:26:28 AM by Drummerboy »
Amiga 1000, 500, 600, 2000, 1200, 4000...

C= VIC 20 / 64 /SX64/ 128

Atari 600XL (SIC Cartdridge)
Atari 800XL (SIO2SD unit)

Jay Miner`s Atari 2600 - Wood front -

\\"Amiga, this Computer have a Own Live\\"--\\"Silence When the Drums are Talking\\".... DrummerBoy
 

Offline Minuous

Re: -Liberator Virus V5.1.
« Reply #1 on: January 16, 2016, 08:04:11 AM »
You are wrong, based on the text you quoted it is V5.01, not V5.1.
« Last Edit: January 16, 2016, 03:12:39 PM by Minuous »
 

Offline som99

  • Lifetime Member
  • Hero Member
  • *****
  • Join Date: Sep 2005
  • Posts: 1566
    • Show only replies by som99
    • http://www.som99.se
Re: -Liberator Virus V5.1.
« Reply #2 on: January 16, 2016, 08:12:46 AM »
What floppy on the official TOSEC had this? (if any in there, haven't found any infected ADF myself).
« Last Edit: January 16, 2016, 08:18:43 AM by som99 »
 

Offline DrummerboyTopic starter

  • Hero Member
  • *****
  • Join Date: Jul 2003
  • Posts: 512
    • Show only replies by Drummerboy
Re: -Liberator Virus V5.1.
« Reply #3 on: January 17, 2016, 02:26:52 AM »
Quote from: Minuous;802248
You are wrong, based on the text you quoted it is V5.01, not V5.1.


Yeah, was a type error.
Amiga 1000, 500, 600, 2000, 1200, 4000...

C= VIC 20 / 64 /SX64/ 128

Atari 600XL (SIC Cartdridge)
Atari 800XL (SIO2SD unit)

Jay Miner`s Atari 2600 - Wood front -

\\"Amiga, this Computer have a Own Live\\"--\\"Silence When the Drums are Talking\\".... DrummerBoy
 

Offline DrummerboyTopic starter

  • Hero Member
  • *****
  • Join Date: Jul 2003
  • Posts: 512
    • Show only replies by Drummerboy
Re: -Liberator Virus V5.1.
« Reply #4 on: January 17, 2016, 08:06:08 AM »
Solved.

The virus modifies, the User-Startup secuence and write on C two files.

Just delete some User-Startup script modification: the first instruction "pvy ;" and "br c:pvy ".

On C must be deleted the files "br" and "pvy".

And thats all. The virus is gone.

I scanned with Virus Checker II, and found the possible "infection source": "Creator Trojan Virus" in .adf file "Dinamic Studio" from "Dinamic Drums" aplication.
Amiga 1000, 500, 600, 2000, 1200, 4000...

C= VIC 20 / 64 /SX64/ 128

Atari 600XL (SIC Cartdridge)
Atari 800XL (SIO2SD unit)

Jay Miner`s Atari 2600 - Wood front -

\\"Amiga, this Computer have a Own Live\\"--\\"Silence When the Drums are Talking\\".... DrummerBoy
 

Offline DrummerboyTopic starter

  • Hero Member
  • *****
  • Join Date: Jul 2003
  • Posts: 512
    • Show only replies by Drummerboy
Re: -Liberator Virus V5.1.
« Reply #5 on: January 17, 2016, 08:07:03 AM »
Solved.

The virus modifies, the User-Startup secuence and write on C two files.

Just delete some User-Startup script modification: the first instructiĆ³n "pvy ;" and "br  c : pvy ".

On C must be deleted the files "br" and "pvy".

And thats all. The virus is gone.

I scanned with Virus Checker II, and found the possible "infection source": "Creator Trojan Virus" in .adf file "Dinamic Studio" from "Dinamic Drums" aplication.
Amiga 1000, 500, 600, 2000, 1200, 4000...

C= VIC 20 / 64 /SX64/ 128

Atari 600XL (SIC Cartdridge)
Atari 800XL (SIO2SD unit)

Jay Miner`s Atari 2600 - Wood front -

\\"Amiga, this Computer have a Own Live\\"--\\"Silence When the Drums are Talking\\".... DrummerBoy