[comp.sys.amiga] viruses rumors

olva@geocub.UUCP (Olivier Vayssettes ) (02/23/89)

Organization : Universite de Bordeaux - France


There is in France a lot of of rumors about viruses and we are the target
of every new virus. (the ANTI virus on mac appeared first in Marseilles)

I have been told about a clock virus that stays in the clock memory.
Some other said that a new virus could write on disks, even if write-protected.

I hope, while reading this, you :-):-):-):-):-):-):-):-):-):-):-)
but I am not a hardware specialist.

I am particularly waiting for a reply from Commodore people.
Thanks in advance.

                              
<olva@geocub.greco-prog.fr>
                                      Olivier Vayssettes
                                Universite de Bordeaux - France

higgin@cbmvax.UUCP (Paul Higginbottom MKT) (02/24/89)

In article <976@geocub.UUCP> olva@geocub.UUCP (Olivier Vayssettes ) writes:
$I have been told about a clock virus that stays in the clock memory.
$Some other said that a new virus could write on disks, even if write-protected.
$I am particularly waiting for a reply from Commodore people.
$Thanks in advance.

I too have heard this rumor.  However I fail to see how a virus program
could live in the clock.  As far as I am aware, there's no NVR in the Amiga
except for the clock registers themselves, which are CHANGING constantly (as
time passes).

I know it's not a definitive answer, but I hope it helps a bit.

	Paul.

jac423@leah.Albany.Edu (J.Cisek) (02/25/89)

In article <6077@cbmvax.UUCP>, higgin@cbmvax.UUCP (Paul Higginbottom MKT) writes:
> [...] I fail to see how a virus program
> could live in the clock.  As far as I am aware, there's no NVR in the Amiga
> except for the clock registers themselves, which are CHANGING constantly (as
> time passes).

I think you're absolutely correct. My guess is that this myth  grew  out
of  the  problems  with  the A501 clock and that very strange 4--88 date
stamp bug. I can't see ANY way that a program of any kind could  sit  in
the  clock  registers.  I heard rumours even more rediculous. There were
those who claimed that the virus sits inside the clock BATTERY! Give  me
a break...
-- 
  //Another    Julius Andrew Cisek          jac423@leah.albany.edu
\X/ Amiga      Box 199, 325 Western Ave.    jac423@rachel.albany.edu
    Maniac     Albany, NY  12203            spcfan@ai.ai.mit.edu

bryce@cbmvax.UUCP (Bryce Nesbitt) (02/25/89)

In article <976@geocub.UUCP> olva@geocub.UUCP (Olivier Vayssettes ) writes:
>
>I have been told about a clock virus that stays in the clock memory.
>Some other said that a new virus could write on disks, even if write-protected.
>...I am particularly waiting for a reply from Commodore people.
>Thanks in advance.

Both rumors are totally false.  There is no space in the clock for
a virus.  Even if there was space, we never execute the clock :-),
so the virus could never get started.

Write protection is handled BY THE DISK DRIVE UNIT.  Even if a virus tasks
direct control of the disk hardware, it can not modify the data on a disk.


-- 
|\_/|  . ACK!, NAK!, EOT!, SOH!
{O o} .     Bryce Nesbitt
 (")        BIX: bnesbitt
  U	    USENET: cbmvax!bryce@uunet.uu.NET -or- rutgers!cbmvax!bryce
Disclaimer: I'm not an official, and this is not an official opinion.

FelineGrace@cup.portal.com (Dana B Bourgeois) (02/26/89)

Here is what I remember about the clock virus rumors.  These rumors showed
up within a few onths of the a2000 release and the symptoms were odd
happenings with the clock ranging from wrong times to poor time-keeping to
shut-down.  People were pulling the batteries out so as to "clear out the 
virus".  The official word is that the clock had a bug and that caused the
odd symptoms.  There is no place for a virus to exist in the clockand the 
rumor was started because:
	1. The SCA virus had just shown up and everybody was more than a 
	   bit nervous.
and
	2. Messages were posted theorizing the clock hardware had some EEPROM
	   in it where the virus could reside until powered down.

I hope this rambling answer can help clear up the clock virus rumors(again).

Dana		"Amiga, the computer for the best of the rest of us"

davidg@killer.DALLAS.TX.US (David Guntner) (02/26/89)

From article <976@geocub.UUCP>, by olva@geocub.UUCP (Olivier Vayssettes ):
> Some other said that a new virus could write on disks, even if 
> write-protected.

To the best of my knowledge, unless there's a defect in the hardware, it is
physically impossible for a program of any kind, even a virus, to write
to the disk.  So, I don't think you have to worry too much.
                     --Dave

-- 
        David Guntner  UUCP: {ames, mit-eddie}!killer!davidg
                       INET: davidg@killer.DALLAS.TX.US
"...New ship, but she's got the right name. ...Treat     --Admiral L. McCoy
 her like a lady, and she'll always bring you home."   "Encounter at Farpoint"

trantow@csd4.milw.wisc.edu (Jerry J Trantow) (02/28/89)

In article <7323@killer.DALLAS.TX.US> davidg@killer.DALLAS.TX.US (David Guntner) writes:
>From article <976@geocub.UUCP>, by olva@geocub.UUCP (Olivier Vayssettes ):
>> Some other said that a new virus could write on disks, even if 
>> write-protected.
>
>To the best of my knowledge, unless there's a defect in the hardware, it is
>physically impossible for a program of any kind, even a virus, to write
>to the disk.  So, I don't think you have to worry too much.
>                     --Dave
>
>        David Guntner 
If you go back to the original posting, I believe the concern was that even
if the disk is permanently write protected (by removing the tab, or glued in
place with super glue)  Some deranged soul can still write to the disk by
inserting a flat object (credit card) in the disk slot which will override
the disk write protection by covering the little slot.  Why anyone would WANT
to do this is definately outside the realm of this group.

_____________________________________________________________________________
Jerry J. Trantow          | What infinite delight would there be in conversing
1560 A. East Irving Place | with the dead in another world and asking 
Milwaukee, Wi 53202-1460  | questions! In another world they do not put a man
(414) 289-0503       | to death for asking questions, assuredly not! Socrates
_____________________________________________________________________________

davidg@killer.DALLAS.TX.US (David Guntner) (02/28/89)

From article <1317@csd4.milw.wisc.edu), by trantow@csd4.milw.wisc.edu (Jerry J Trantow):
) In article <7323@killer.DALLAS.TX.US> davidg@killer.DALLAS.TX.US (David Guntner) writes:
)>From article <976@geocub.UUCP>, by olva@geocub.UUCP (Olivier Vayssettes ):
)>> Some other said that a new virus could write on disks, even if 
)>> write-protected.
)>
)>To the best of my knowledge, unless there's a defect in the hardware, it is
)>physically impossible for a program of any kind, even a virus, to write
)>to the disk.  So, I don't think you have to worry too much.
)
) If you go back to the original posting, I believe the concern was that even
) if the disk is permanently write protected (by removing the tab, or glued in
) place with super glue)  Some deranged soul can still write to the disk by
) inserting a flat object (credit card) in the disk slot which will override
) the disk write protection by covering the little slot.  Why anyone would WANT
) to do this is definately outside the realm of this group.

No, I don't think that's what he was talking about.  Take a look at the text
of his article, which I included in that article (above) again.  It says,
"Some other said that a new virus could write on disks, even if write-
protected."  That has nothing to do with inserting flat things into disk
drives, etc.  That is, unless they've started issuing credit cards to
viruses.... :-)
                          --Dave

-- 
        David Guntner  UUCP: {ames, mit-eddie}!killer!davidg
                       INET: davidg@killer.DALLAS.TX.US
"...New ship, but she's got the right name. ...Treat     --Admiral L. McCoy
 her like a lady, and she'll always bring you home."   "Encounter at Farpoint"

kevin@uts.amdahl.com (Kevin Clague) (02/28/89)

In article <7346@killer.DALLAS.TX.US> davidg@killer.DALLAS.TX.US (David Guntner) writes:
>From article <1317@csd4.milw.wisc.edu), by trantow@csd4.milw.wisc.edu (Jerry J Trantow):
>) In article <7323@killer.DALLAS.TX.US> davidg@killer.DALLAS.TX.US (David Guntner) writes:
>-- 
>        David Guntner  UUCP: {ames, mit-eddie}!killer!davidg
>                       INET: davidg@killer.DALLAS.TX.US
>"...New ship, but she's got the right name. ...Treat     --Admiral L. McCoy
> her like a lady, and she'll always bring you home."   "Encounter at Farpoint"

Please take this discussion to comp.sys.amiga.tech.  I would rather Jimm
NOT stop reading this newsgroup.  This is NOT what this newsgroup is for.

The comp.sys.amiga.tech-subject-matter police.
-- 
UUCP:  kevin@uts.amdahl.com
  or:  {sun,decwrl,hplabs,pyramid,seismo,oliveb}!amdahl!kevin
DDD:   408-737-5481
USPS:  Amdahl Corp.  M/S 249,  1250 E. Arques Av,  Sunnyvale, CA 94086

[  Any thoughts or opinions which may or may not have been expressed  ]
[  herein are my own.  They are not necessarily those of my employer. ]

kevin@uts.amdahl.com (Kevin Clague) (03/01/89)

In article <04sKQbd7501010O7dNk@amdahl.uts.amdahl.com> kevin@amdahl.uts.amdahl.com (Kevin Clague) writes:
>
>Please take this discussion to comp.sys.amiga.tech.  I would rather Jimm
                                               SH*T!!!
                                I mean comp.sys.amiga.

>
>The comp.sys.amiga.tech-subject-matter police.

>-- 
>UUCP:  kevin@uts.amdahl.com
>  or:  {sun,decwrl,hplabs,pyramid,seismo,oliveb}!amdahl!kevin
>DDD:   408-737-5481
>USPS:  Amdahl Corp.  M/S 249,  1250 E. Arques Av,  Sunnyvale, CA 94086
>
>[  Any thoughts or opinions which may or may not have been expressed  ]
>[  herein are my own.  They are not necessarily those of my employer. ]
>


-- 
UUCP:  kevin@uts.amdahl.com
  or:  {sun,decwrl,hplabs,pyramid,seismo,oliveb}!amdahl!kevin
DDD:   408-737-5481
USPS:  Amdahl Corp.  M/S 249,  1250 E. Arques Av,  Sunnyvale, CA 94086

[  Any thoughts or opinions which may or may not have been expressed  ]
[  herein are my own.  They are not necessarily those of my employer. ]

bryce@cbmvax.UUCP (Bryce Nesbitt) (03/01/89)

>It says,
>"Some other said that a new virus could write on disks, even if write-
>protected."

To make this very clear: It is impossible for software to write
to a write-protected floppy disk on the Amiga.  Period.

If there are any disk drives that will write to a write-protected disk,
they are either broken or have had the protection interlock defeated
intentionally.

-- 
|\_/|  . ACK!, NAK!, EOT!, SOH!
{O o} .     Bryce Nesbitt
 (")        BIX: bnesbitt
  U	    USENET: cbmvax!bryce@uunet.uu.NET -or- rutgers!cbmvax!bryce
Lawyers: America's untapped export market.

paolucci@snll-arpagw.UUCP (Sam Paolucci) (03/01/89)

In article <04sKQbd7501010O7dNk@amdahl.uts.amdahl.com> kevin@amdahl.uts.amdahl.com (Kevin Clague) writes:
->In article <7346@killer.DALLAS.TX.US> davidg@killer.DALLAS.TX.US (David Guntner) writes:
->>From article <1317@csd4.milw.wisc.edu), by trantow@csd4.milw.wisc.edu (Jerry J Trantow):
->>) In article <7323@killer.DALLAS.TX.US> davidg@killer.DALLAS.TX.US (David Guntner) writes:
->>-- 
->>        David Guntner  UUCP: {ames, mit-eddie}!killer!davidg
->>                       INET: davidg@killer.DALLAS.TX.US
->>"...New ship, but she's got the right name. ...Treat     --Admiral L. McCoy
->> her like a lady, and she'll always bring you home."   "Encounter at Farpoint"
->
->Please take this discussion to comp.sys.amiga.tech.  I would rather Jimm
                                                ^^^^
->NOT stop reading this newsgroup.  This is NOT what this newsgroup is for.
->
->The comp.sys.amiga.tech-subject-matter police.

I think you mean to take this discussion to comp.sys.amiga and leave
virus discussions out of the tech area.
-- 
					-+= SAM =+-
"the best things in life are free"

				ARPA: paolucci@snll-arpagw.llnl.gov

zuber@unigs.CH (Zuberbuehler Ueli) (03/04/89)

Write protection should be handled by the disk drive unit.
Most disk drives do not handle this correctly. All what they do is to set
a signal to controller that this disk is write protected. If the software
doesn`t check this line, then you could write data on a write protected
disk.

cmcmanis%pepper@Sun.COM (Chuck McManis) (03/07/89)

In article <123@unigs.CH> zuber@unigs.CH (Zuberbuehler Ueli) writes:
>Write protection should be handled by the disk drive unit.
>Most disk drives do not handle this correctly. All what they do is to set
>a signal to controller that this disk is write protected. If the software
>doesn`t check this line, then you could write data on a write protected
>disk.

Pure baloney. I wouldn't put it past *some* disk drives to do this, but
in fact *most* disk drives _disable_ the write current when a disk is
write protected. Why? Because all it takes is one frigging gate (actually
it can even be done with only one wire, no silicon required) and that
is how everyone expects disk to work. If you could name *one* manufacturer
who does it the way you suggest, please do so. And be prepared to back
up your claim with either schematics or a test case. This kind of 
disinformation is some of the worst kind because it preys on novices
who don't understand how disk drives work. Why not talk to the Mega
Mighty SCA and ask them, those dweebs probably know something about 
how a disk works.

--Chuck McManis
uucp: {anywhere}!sun!cmcmanis   BIX: cmcmanis  ARPAnet: cmcmanis@sun.com
These opinions are my own and no one elses, but you knew that didn't you.

bryce@cbmvax.UUCP (Bryce Nesbitt) (03/07/89)

In article <123@unigs.CH> zuber@unigs.CH (Zuberbuehler Ueli) writ
es:
>Write protection should be handled by the disk drive unit.

Write protection IS handled by the disk unit!!!!


>Most disk drives do not handle this correctly. All what they do is to set
>a signal to controller that this disk is write protected. If the software
>doesn`t check this line, then you could write data on a write protected
>disk.

Wrong, wrong, wrong and wrong!  Please do not spread this false rummor
any more.  Every disk drive unit Commodore has ever purchased for
use in the Amiga has HARDWARE write protection.  If the write-protect
sensor indicates the disk is protected, NO SOFTWARE ACTION CAN
WRITE TO THE DISK.


The ONLY way to write to a disk is to move the little tab on the disk,
or physically defeat or break the sensor. 

-- 
|\_/|  . ACK!, NAK!, EOT!, SOH!
{O o} .     Bryce Nesbitt, Commodore-Amiga, Inc.
 (")        BIX: bnesbitt
  U	    USENET: cbmvax!bryce@uunet.uu.NET -or- rutgers!cbmvax!bryce
Lawyers: America's untapped export market.

jms@antares.UUCP (Joe Smith) (03/07/89)

In article <123@unigs.CH> zuber@unigs.CH (Zuberbuehler Ueli) writes:
>Write protection should be handled by the disk drive unit.
>Most disk drives do not handle this correctly. All what they do is to set
>a signal to controller that this disk is write protected. If the software
>doesn`t check this line, then you could write data on a write protected
>disk.

The "controller" you are referring to is the printed circuit board that
is mounted on the disk.  When the disk is write protected, the hardware
prevents writes to the disk, REGARDLESS OF WHAT THE CPU TRIES TO DO.

To repeat: Unless your disk hardware is seriously broken, there is nothing
the software can do to override the write protect switch.
-- 
Joe Smith (408)922-6220 | jms@antares.Tymnet.COM or jms@opus.Tymnet.COM
McDonnell Douglas FSCO  | UUCP: ...!{ames,pyramid}!oliveb!tymix!antares!jms
PO Box 49019, MS-D21    | PDP-10:JMS@F74.Tymnet.COM  CA license plate:"POPJ P,"
San Jose, CA 95161-9019 | narrator.device: "I didn't say that, my Amiga did!"