| Title: | AMIGA NOTES | 
| Notice: | Join us in the *NEW* conference - HYDRA::AMIGA_V2 | 
| Moderator: | HYDRA::MOORE | 
| Created: | Sat Apr 26 1986 | 
| Last Modified: | Wed Feb 05 1992 | 
| Last Successful Update: | Fri Jun 06 1997 | 
| Number of topics: | 5378 | 
| Total number of notes: | 38326 | 
    Which is the best virus killer for hard drives?
    
    I've always used virus x, but that only seems to check floppies, or am
    I missing something? I suppose you could argue that if all floppies are
    clean you'd never get a virus onto your hard disk. 
    
    I'm sure some smart alex virus writer would have sussed that anyhow!
    
    
    Cheers,
    
    Greg
| T.R | Title | User | Personal Name | Date | Lines | 
|---|---|---|---|---|---|
| 4810.1 | Help is at hand..... | VIVIAN::D_VISTUER | Tue Jun 11 1991 05:58 | 9 | |
|     Greg,
    	Have a look at the files I uploaded in note 4798.0. There is a
    program called CHk_virus517.lzh (or something like that) .It checks for
    various linkable viruses on floppies, Ramdisk or harddrives.
    
    Have fun.
    
    Dave V.
    
 | |||||
| 4810.2 | BOMBE::MOORE | Amiga: Where 'multimedia' REALLY began | Tue Jun 11 1991 15:23 | 3 | |
|     Also note that boot block viruses are usually not an issue on hard
    drives because their booting process is different and does not execute
    any code from there.
 | |||||
| 4810.3 | Could I be infected? | OZROCK::BATH | Say NO to Streamline. | Thu Sep 19 1991 08:19 | 23 | 
|     I've just run up ZeroVirus (off a fish disk, via decwrl::) and it
    complains that my...
    
    ColdCapture vector is $0fe7b0, should be 0.
    
    It then goes on to state that some legit. programs do use these
    vectors, and that this may or may not be a virus, and finally, it gives
    you the option of clearing it, or leaving it the way it is.
    
    I commented all the "specials" (e.g. dmouse etc.)  out of my
    startup-sequence and rebooted.  ZeroVirus was then the first program I
    ran.  Again it made the same complaint.  If I boot off floppy, it would
    seem my ColdCapture vector stays at 0 (i.e. no complaints), but 
    whenever I boot off the hd it complains.
    
    What is a ColdCapture vector?
    Is this likely to be a *real* virus, or a false alarm?
    Does anyone else out there use ZeroVirus, and if so, do they have this
    problem?  (in case it's relevant, I have a 2000 HD)
    
    thanks in advance,
    
    dB.
 | |||||
| 4810.4 | VirusX to the rescue | OZROCK::BATH | Say NO to Streamline. | Thu Sep 19 1991 08:38 | 21 | 
|     Hmmm... VirusX may have an answer.  If I run it up, it complains of the
    same thing, but if I use the -r option:
    
         -r   Use this if you've 1 meg Chip RAM and using SetPatch -r
    
    (which I do) then it is quite happy.  Strangely enough, ZeroVirus
    claims to be able to cope with this...
    
    ----------------------------------------------------------------------------
    -                                                                           
                                                                                
                                    Changes v1.15                               
                                                                                
    ZeroVirus now recognises the changes to system vectors made by SetPatch
    r on 
    machines with the super Agnus chip, and does not complain about them.       
                                                                                
    ---------------------------------------------------------------------------
    
    
    Maybe there's some ZeroVirus switch I don't know about?
 | |||||
| 4810.5 | exit | LODGE::LEN | David M. Len | Thu Sep 19 1991 09:24 | 3 | 
|     VirusX complains about the "Cold capture" whenever I do a warm reboot
    with a RAD disk mounted.  Are you using a "recoverable ram disk" of
    some kind?
 | |||||
| 4810.6 | No, only non-recoverable I think. | OZROCK::BATH | Say NO to Streamline. | Thu Sep 19 1991 10:07 | 12 | 
|     I don't think so, but then I'm a bit new to all this AmigaDOS stuff.
    I take it there are non-recoverable (RAM:) and recoverable (RAD:)   
    disks?  In that case, I only seem to have the non-recoverable one   
    mounted:                                                            
                                                                        
    2.Workbench:test info                                              
                                                                        
    Mounted disks:                                                      
    Unit      Size    Used    Free Full Errs   Status   Name            
    DF0:      880K       7    1751   0%   0  Read/Write Empty           
    RAM:        2K       4       0 100%   0  Read/Write RAM DISK        
    DH0:       51M   35189   66876  34%   0  Read/Write Workbench
 | |||||