Re: [ql-users] Is there was any virus on QL ?
On 12 Feb 2007, at 12:13, Dilwyn Jones wrote: QL jobs have a JMP.L job_start_address instruction in the first few bytes, to jump past the $4AFB flag and job name. This could in theory (never tried this part) be hacked to jump to an extra bit of code tacked onto the end of a program to run a 'virus', which ends with the original JMP.L job_start_address to run the program from its original execution address. I *HOPE* I am wrong and this cannot be done. But I'm also optimistic that nobody on the QL scene would even dream of trying to write a working virus! Adrian Dickens in his QL Advanced User Guide shows how to set up a self-cloning program. (See 4.4.2) His program drew a set of coloured blobs across the screen. This went on until one of the blob sets hit the edge of the screen at which time all the programs committed suicide. This is not strictly a virus since you yourself have to start it going in the first place, but it gives an indication of what can be done. George ___ QL-Users Mailing List http://www.q-v-d.demon.co.uk/smsqe.htm
Re: [ql-users] Is there was any virus on QL ?
Yours answers are interesting, and Per as made an article that can teach simply on how it's possible to make a virus. See www.witteware.com/knoware : 2007/02/12 Addition | Virus - Article and listing: Anatomy of a virus. New. Now I will consider that is possible to get viruses on QL, but at this time there is no real virus on QL instead of there is some on PC, Amiga, ... I please to see that on QL there is no virus and hope there is no in the future. I will use the example of Per (if Per is agree of course) for my presentation at the side of a program of us that stealth browsed URL behind Internet Explorer, and another program that can shutdown without any wait a computer. They made to help to understand concepts. Jimmy. -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de George Gwilt Envoyé : mardi 13 février 2007 11:56 À : [EMAIL PROTECTED] Objet : Re: [ql-users] Is there was any virus on QL ? On 12 Feb 2007, at 12:13, Dilwyn Jones wrote: QL jobs have a JMP.L job_start_address instruction in the first few bytes, to jump past the $4AFB flag and job name. This could in theory (never tried this part) be hacked to jump to an extra bit of code tacked onto the end of a program to run a 'virus', which ends with the original JMP.L job_start_address to run the program from its original execution address. I *HOPE* I am wrong and this cannot be done. But I'm also optimistic that nobody on the QL scene would even dream of trying to write a working virus! Adrian Dickens in his QL Advanced User Guide shows how to set up a self-cloning program. (See 4.4.2) His program drew a set of coloured blobs across the screen. This went on until one of the blob sets hit the edge of the screen at which time all the programs committed suicide. This is not strictly a virus since you yourself have to start it going in the first place, but it gives an indication of what can be done. George ___ QL-Users Mailing List http://www.q-v-d.demon.co.uk/smsqe.htm ___ QL-Users Mailing List http://www.q-v-d.demon.co.uk/smsqe.htm
Re: [ql-users] Is there was any virus on QL ?
Jimmy Montesinos wrote: I'm currently working on computer viruses history, and I remember that I had met some viruses on Apple II, C64, and Amiga but I don't remember if there was some on QL.. So is there any viruses on QL ? I would appreciate any screenshots or details in order to add a small paragraph in my french presentation? I have a little experience with this! I did look at the possibility of a QL virus style of program a few years ago (as Geoff Wicks knows to his QXL's cost!), by adding direct commands to the end of a boot program. The idea was to simply LRUN another program called (a single space, which was not too easily seen in a DIR listing) which in turn looked for any other BASIC programs and tacked it onto the end. It wasn't malicious, it only replicated itself and announced its presence - it wasn't intended to be malicious, just testing if it could be done. Sadly, it was badly written and trashed Geoff's QXL by mistake, so realising I'd been a very naughty boy (not to mention embarrassment and visions of Just Words retribution) I immediately erased all copies of it and never tried again. Although not a virus, there was a Pointer Pranks routines which was a harmless April Fool joke (which did not copy itself) which simply did annoying things like randomly zap a pointer driven program into the button frame or picking random jobs to the top (one moment you'd be happily typing away in Quill then all of a sudden a QPAC2 files menu appears out of nowhere). Another harmless piece of fun was what Ron Dunnett, Joe Haftke and I did at a Quanta workshop years ago. Our QLs were networked together and we played pranks on each other by opening windows on each other's screens and either typing naughty messages or simply clearing the screen, something like this: OPEN#3,n1_SCR_512x256a0x0:CLS #3:INPUT#3,'Your QL has a virus, press ENTER';z$:CLOSE#3 Except that Joe Haftke responded with the same commands, but instead the INPUT string was: INPUT #3,'Press ENTER to completely erase your hard disk';z$ (from memory, might not work, but you'll see what I mean). Having managed to annoy Ron with this type of thing, his revenge was swift. I noticed my QL slowing right down until it was unusable. I guessed it might be Ron, but didn't know what he'd done until he explained that he used WCOPY to transfer hundreds of files over the network to fill up ramdisks on my QL, which slowed it right down and made it run out of memory. There never was AFAIK a finished virus for the QL, but in priciple it could probably be done. QL jobs have a JMP.L job_start_address instruction in the first few bytes, to jump past the $4AFB flag and job name. This could in theory (never tried this part) be hacked to jump to an extra bit of code tacked onto the end of a program to run a 'virus', which ends with the original JMP.L job_start_address to run the program from its original execution address. I *HOPE* I am wrong and this cannot be done. But I'm also optimistic that nobody on the QL scene would even dream of trying to write a working virus! The above pranks were bad enough without getting as far as a real virus. -- Dilwyn Jones ___ QL-Users Mailing List http://www.q-v-d.demon.co.uk/smsqe.htm
Re: [ql-users] Is there was any virus on QL ?
Hi Jimmy, See www.witteware.com/knoware : 2007/02/12 Addition Virus - Article and listing: Anatomy of a virus. New. Per donning flame-proof underwear QL2K wrote: Hi all, I'm currently working on computer viruses history, and I remember that I had met some viruses on Apple II, C64, and Amiga but I don't remember if there was some on QL.. So is there any viruses on QL ? I would appreciate any screenshots or details in order to add a small paragraph in my french presentation? Thanks, Jimmy. ___ QL-Users Mailing List http://www.q-v-d.demon.co.uk/smsqe.htm ___ QL-Users Mailing List http://www.q-v-d.demon.co.uk/smsqe.htm
[ql-users] Is there was any virus on QL ?
Hi all, I'm currently working on computer viruses history, and I remember that I had met some viruses on Apple II, C64, and Amiga but I don't remember if there was some on QL.. So is there any viruses on QL ? I would appreciate any screenshots or details in order to add a small paragraph in my french presentation? Thanks, Jimmy. ___ QL-Users Mailing List http://www.q-v-d.demon.co.uk/smsqe.htm
Re: [ql-users] Is there was any virus on QL ?
I remember briefly that one or some Germans which were member of QUASAR wrote at least parts which could be used to build a virus. Those parts adressed infection of an _exe and once such an _exe was started (EXEC) randomly infection of other _exe on the disk occured. As far as I remember infected _exe were some bytes longer than uninfected ones. Binary compare of such files showed that the startup code in the _exe was modified and at the end of the file the virus was in place. I would love to get a hand on this code/source/documentation. Not to build bad things but to play with and understand in my lab. Urs Ursprüngliche Nachricht Von: [EMAIL PROTECTED] Datum: 11.02.2007 08:23 An: [EMAIL PROTECTED] Betreff: [ql-users] Is there was any virus on QL ? Hi all, I'm currently working on computer viruses history, and I remember that I had met some viruses on Apple II, C64, and Amiga but I don't remember if there was some on QL.. So is there any viruses on QL ? I would appreciate any screenshots or details in order to add a small paragraph in my french presentation? Thanks, Jimmy. ___ QL-Users Mailing List a href=http://www.q-v-d.demon.co.uk/smsqe.htm; target=_BLANK http://www.q-v-d.demon.co.uk/smsqe.htm/a ___ QL-Users Mailing List http://www.q-v-d.demon.co.uk/smsqe.htm
