Miscellaneous - Viruses on the Spectrum and their detection.

<b>Miscellaneous</b> - Viruses on the Spectrum and their detection.

        Well, I am sure!


                    (C) ZMAN
________________________________



  Dozhilis, already on the Spectrum
began to appear "viruses"!
 In any case, one is already there,
and wrote his "coders heroes" of the
Group "HACKERS SQUAD", with which I
and I congratulate them, but advised
them to write a useful program, and not pull any out there
stuff (viruses have in mind) with
IBM's Spectrum ...

  So, apparently the virus does
not manifest itself, and I probably him and would not have 
noticed, but I was interested in the following:


1. When you run the "BASIC" files
"Head" flop once again goes to
directory of the disk, then something
does on the CD, and finally loads the BASIC. If
you have many files on the disk, then
Loading of such slow
1,5 - 2 times ...

2. Arbitrarily changing the length of BASIC: If the file has 
been TASM with a length of 40 bytes, it was 2062!

Where, one asks, there were 2022 extra bytes?


  "Infect" I'm the virus from
File "LAST_BAT" - a game LAST
BATTLE by HACKERS SQUAD (very
clever on their part, given the popularity of this game is not 
difficult imagine the consequences!)

so be careful!

             . . .

 Having dealt with the work program of the virus, I can say the 
following: 

  The virus can "infect"
only the "BASIC" files, with the condition
they do not will integrate with the files
such as "CODE", ie have little long.

  An infected program, if it
run is looking for a directory of the CD "healthy" BASIC, ship 
it in memory, it appends to the virus body, makes the necessary

changes to normal operation
virus, and writes it on the platter first free track and
sector of the disk with a length of 8 sectors
plus the length of the BASIC.
 Next, the virus modifies the directory
data on the disk location
Former "healthy" BASIC,
its length, and changes in the system directory sector number 
of the first free track and sector thereby protecting 
themselves from the mash, then the virus continues to load the 
program you specify. 

  The virus was written on November 7
1993, and as it turned out, not
brings great harm: does
that takes away from your memory
disk, and the time to download ...
 If you found yourself in such a
virus, do not panic - Protect
Viral drive on the record - it's
stop its 'reproduction' of
disk, and if you find some other, then send it
Received ZX POWER.

              . . .


  In the Appendix you will find programulku "AIDTEST", written 
by I have, it will help you identify

infected files ...

P.S. In Vtorma issue of our
magazine, we will try to tell you about a new, recently 
appeared, the virus "Poltergeist." 


        Bye!
________________________________


          Well, I am sure!

(C) ZMAN
-------------------------------