[comp.sys.amiga] Amiga Viruses

c8847468@cc.nu.oz.au (10/12/90)

	
	I was wondering if anyone knows of where I can get some info on
some of the rarer Amiga viruses. The common ones such as 'Byte Warrior/Bandit'
and 'SCA' etc I can obtain info for, but there seems to be no information on
ones such as 'Butonic' and 'Greyhawk' etc. Could someone please help?

					Jonathan Coombes
					University of Newcastle
					Australia

					c8847468@cc.nu.oz.au

abair@turbinia.sps.mot.com (Alan Bair) (10/13/90)

With all the recent talk about viruses and the fact that I have
a new 3000 that I am acquiring software for, I would like to
ask a few questions about virus protection.

1. I have VirusX, but it only seems to check floppies, not my
	hard drive.  Is this common with other virus detection
	programs or am I doing something wrong?

2. If the programs only check floppies, how am I suppose to 
	check the programs I acquire, since most of them are
	obtained via downloads?  I suppose putting them directly
	on the HD is risky, but they can't cause any damage
	unless I actually run them.  Moving them to floppies
	for checking seems like a lot of work, but I suspect
	its less trouble than recovering from being infected.

3. Is it safe to assume that programs downloaded from abcfd or
	ux1 are virus free, excluding stuff in the incoming
	directories.  Does Fred Fish check the code he 
	distribrutes?

4. Finally, I already mentioned VirusX, what other virus 
	detection/removal programs should I have?

Your responses will hopefully help me keep my 3000 viral free :)
--
Alan Bair                 SPS CAD
Motorola, Inc.            Logic Simulation & Test
Austin, Texas             abair@turbinia.sps.mot.com

davidm@uunet.UU.NET (David S. Masterson) (10/14/90)

In article <ABAIR.90Oct12200103@turbinia.sps.mot.com> 
abair@turbinia.sps.mot.com (Alan Bair) writes:

   With all the recent talk about viruses and the fact that I have
   a new 3000 that I am acquiring software for, I would like to
   ask a few questions about virus protection.

   1. I have VirusX, but it only seems to check floppies, not my
	   hard drive.  Is this common with other virus detection
	   programs or am I doing something wrong?

VirusX is a good program that not only checks floppy boot blocks, but also
scans memory for any telltale signs of a virus in memory (active or dormant).
This seems to be as good a method as possible for stamping out viruses without
being overly protective.  The only thing is that VirusX must keep up with all
the viruses and how they look in memory.  A virus could get by this by being
newer than VirusX is prepared for and not being a bootblock virus (VirusX
automatically identifies altered bootblocks, even if it doesn't know why).

   4. Finally, I already mentioned VirusX, what other virus 
	   detection/removal programs should I have?

I think VirusX includes another program in its distribution that can help find
viruses that VirusX can't catch.  It makes the assumption that at the point
where you first use the program, you don't have any viruses.  It then analyzes
and remembers the sizes of all executables on your disks.  After that, it
compares the sizes of the executables with what it remembers and alerts you to
differences.  The idea is that VirusX will handle the bootblock viruses (which
booting from might start a virus in memory), so this program catches any
altered programs that might result in a virus being started.  This doesn't
catch any new programs you put on the disk that has a virus that tricks
VirusX. 
--
====================================================================
David Masterson					Consilium, Inc.
uunet!cimshop!davidm				Mtn. View, CA  94043
====================================================================
"If someone thinks they know what I said, then I didn't say it!"