Amiga.org

Amiga computer related discussion => Amiga Software Issues and Discussion => Topic started by: Drummerboy on January 16, 2016, 06:20:59 AM

Title: -Liberator Virus V5.1.
Post by: Drummerboy on January 16, 2016, 06:20:59 AM
Hi,

Loading some games from HXC unit on any A1200, seems infected the HD with Liberator Virus V5.01. Showing this message and not load the OS:

" Congratulations this disk has been liberated'
' of virus protection!!'
' Hello from the Liberator virus'
' v5.01 - Random Disaster'
'The anti-anti-virus is here again!'
'Lets play trash the hard disk'
' and ram the disk heads'
' The piracy curse'
'Liberator V - The future is near.'
'Look out for Liberator VI - The final nightmare ...'
'coming soon from a lame swapper near you!'
' Respect to the virus masters
Lamer Exterminator,crime & Contrast.'
'And remember - be excellent to each other!'
'The liberator 27/07/92'
'Virus Generation : ',0 "

So reading some info about this virus, The virus installs a .fastdir file. It seems, just need delete that file.
I found the .fastdir file, and deleted, but now just show a black screen and stop, not load the OS.

But anyway, if someone know, how delete the virus, please comment a i will apreciate.
And remember, take care with games downloaded from TOSECS, and other sources if you are using on any Amiga with HD.

Regards.
Title: Re: -Liberator Virus V5.1.
Post by: Minuous on January 16, 2016, 08:04:11 AM
You are wrong, based on the text you quoted it is V5.01, not V5.1.
Title: Re: -Liberator Virus V5.1.
Post by: som99 on January 16, 2016, 08:12:46 AM
What floppy on the official TOSEC had this? (if any in there, haven't found any infected ADF myself).
Title: Re: -Liberator Virus V5.1.
Post by: Drummerboy on January 17, 2016, 02:26:52 AM
Quote from: Minuous;802248
You are wrong, based on the text you quoted it is V5.01, not V5.1.


Yeah, was a type error.
Title: Re: -Liberator Virus V5.1.
Post by: Drummerboy on January 17, 2016, 08:06:08 AM
Solved.

The virus modifies, the User-Startup secuence and write on C two files.

Just delete some User-Startup script modification: the first instruction "pvy ;" and "br c:pvy ".

On C must be deleted the files "br" and "pvy".

And thats all. The virus is gone.

I scanned with Virus Checker II, and found the possible "infection source": "Creator Trojan Virus" in .adf file "Dinamic Studio" from "Dinamic Drums" aplication.
Title: Re: -Liberator Virus V5.1.
Post by: Drummerboy on January 17, 2016, 08:07:03 AM
Solved.

The virus modifies, the User-Startup secuence and write on C two files.

Just delete some User-Startup script modification: the first instructión "pvy ;" and "br  c : pvy ".

On C must be deleted the files "br" and "pvy".

And thats all. The virus is gone.

I scanned with Virus Checker II, and found the possible "infection source": "Creator Trojan Virus" in .adf file "Dinamic Studio" from "Dinamic Drums" aplication.