Amiga.org

Amiga News and Community Announcements => Amiga News and Community Announcements => Amiga Software News => Topic started by: Art on July 10, 2013, 04:41:53 AM

Title: New ADF Virus Checker Demo
Post by: Art on July 10, 2013, 04:41:53 AM
Hi Guys,
Here's a demo of my new ADF bootblock virus checker for Windows...

(http://img.photobucket.com/albums/v186/ArtArt/LExTerminator_zpsfae2821e.png)

It looks for virus definitions as done traditionally, but can also use
known virus decryption algorithms to brute force decrypt new virus
variants that it doesn't have definitions for.
An undocumented Lamer Exterminator variant was found this way.

Right now the demo can only check one Amiga Disk File at a time,
and is limited to checking for The LAMER Exterminator !!! virus,
but updates should follow.

NEW LINK IN POST!!

Cheers, Art.
Title: Re: New ADF Virus Checker Demo
Post by: VingtTrois on July 10, 2013, 09:43:40 PM
Avast report: Win32:Virtob!!!! :confused:
...when I try the link to download "Click here to start download from sendspace"
Title: Re: New ADF Virus Checker Demo
Post by: Art on July 11, 2013, 12:00:02 AM
Quote from: VingtTrois;740511
Avast report: Win32:Virtob!!!! :confused:
...when I try the link to download "Click here to start download from sendspace"

My PC was indeed infected, and it hit the exe right when it was compiled.
I tried to have this post pulled before it was approved,
and have now moved the project to a clean Windows install:

http://www.sendspace.com/file/x74lqd
http://www.sendspace.com/file/nl9wts

I don't like Windows very much :D
Title: Re: New ADF Virus Checker Demo
Post by: jj on July 11, 2013, 12:38:48 PM
Guessing compiling on machine you been testing virus checking on not the best paln
Title: Re: New ADF Virus Checker Demo
Post by: LoadWB on July 11, 2013, 01:23:01 PM
Quote from: JJ;740548
Guessing compiling on machine you been testing virus checking on not the best paln


Who knew Amiga viruses were zoonotic?
Title: Re: New ADF Virus Checker Demo
Post by: Art on July 11, 2013, 04:09:22 PM
It was a PC virus, and totally my fault for being there.
The program contains LEx decrypt routines in asm and ported to C,
and I thought the virus being detected just shared the same routines and that's what was being identified.
So then I started selectively removing them, and Avast was never satisfied.

Kind of embarrassing to make a virus checker come bundled with a working virus.

There are some Windows programs that check for LEx and could report this.
Interestingly, there is a Sony PSP bricker that makes the list also,
I think it's Nortons that looks for that one.
Title: Re: New ADF Virus Checker Demo
Post by: TheMagicM on July 11, 2013, 04:49:11 PM
@Art

it made me chuckle..