11 Dec
2012
11 Dec
'12
2:12 p.m.
Message: 1
Date: Mon, 10 Dec 2012 06:28:44 -0800 (PST)
From: geneb < geneb at deltasoft.com >
Subject: Don Maslin's archive...
The whole file is now available at:
http://www.retroarchive.org/maslin/maslin_archive.zip
When time allows I'll break the disk and ROM image collections down by
vendor and get new pages created for them.
Many thanks to Al for recovering this!
g.
I'd also like to offer my thanks to those involved. It's good to see a happy
ending to this saga.
Just an FYI, it looks like I will have to download the file at home, because when I try at
work, the anti-virus software in our SonicWall firewall appliance blocks the download,
saying it detects the "Dos.Cursor" trojan.
Bob
11 Dec
11 Dec
3:51 p.m.
I also had an antivirus complaint with one of the files with DOS/Stoned or
something similar, I just remember it was "Stoned". I wasn't too worried
about it as 16-bit DOS virus on 64-bit Windows can't do anything.
--
C:\win
Bad Command Or File Name
C:\
12 Dec
12 Dec
3:19 a.m.
has a copy of windows 95 on floppy thats infected hehehe
On Tue, Dec 11, 2012 at 2:51 PM, Christopher Satterfield <
christopher1400 at gmail.com> wrote:
I also had an antivirus complaint with one of the
files with DOS/Stoned or
something similar, I just remember it was "Stoned". I wasn't too worried
about it as 16-bit DOS virus on 64-bit Windows can't do anything.
--
C:\win
Bad Command Or File Name
C:\
12:12 p.m.
On 12/12/2012 12:19 AM, Adrian Stoness wrote:
has a copy of windows 95 on floppy thats infected
hehehe
The win 95 makes more sense because the sequences that AV scanners look
for besides a huge list of signatures are system calls and operations
between them that may enter known buggy areas of the Windows kernel in
odd ways. Win95 is the first version of Windows which was protected on
"top" and 'real mode bottom', in that the system went protected much
earlier than before.
A lot of it was still implemented big real, so the code would jump back
and forth to the real mode with sequences which look suspicious to virus
scanners which assume the programs are for later windows, such as xp,
and later.
the hits on the maslin archive should not contain any x86 code unless it
is for something like an Atrona which has dual boards. And in that case
I don't think that it has any protected mode supporting processors, that
is an 8086 running msdos as a co-operating system.
I'd be interested if any of the protected mode standalone environment
code would pass AV scrutiny w/o complaint as well if the AV scanners
identified it as executable code.
On Tue, Dec 11, 2012 at 2:51 PM, Christopher
Satterfield <
christopher1400 at gmail.com> wrote:
I also had an antivirus complaint with one of the
files with DOS/Stoned or
something similar, I just remember it was "Stoned". I wasn't too worried
about it as 16-bit DOS virus on 64-bit Windows can't do anything.
--
C:\win
Bad Command Or File Name
C:\
6:26 p.m.
>> I also had an antivirus complaint with one of
the files with DOS/Stoned or
>> something similar, I just remember it was "Stoned". I wasn't too
worried
>> about it as 16-bit DOS virus on 64-bit Windows can't do anything.
> has a copy of windows 95 on floppy thats infected hehehe
On Wed, 12 Dec 2012, jim s wrote:
The win 95 makes more sense because the sequences that
AV scanners look
for besides a huge list of signatures are system calls and operations
between them that may enter known buggy areas of the Windows kernel in
odd ways. Win95 is the first version of Windows which was protected on
"top" and 'real mode bottom', in that the system went protected much
earlier than before.
"Stoned" is a boot sector virus. If a Windoze95 machine gets booted from
a DOS OR WINDOZE95 floppy that is infected, then it will infect the boot
sector of Windoze95.
HOWEVER, A "floppy boot" of Windoze95, after seeing the floppy (and maybe
being infected by it), will then ALSO use the hard disk boot sector,
thereby making it DIFFICULT to do a "clean floppy boot" from a known
NOT-infected disk. The solution was to set the CMOS to boot from the hard
disk, even when there is a floppy in the drive. THAT was not available on
all machines.
with sequences which look suspicious to virus
scanners
. . .
the hits on the maslin archive should not contain any x86 code unless it
is for something like an Atrona which has dual boards. And in that case
There are plenty of MS-DOS disk images in Don's collection (where else
would you go to get an image of an 8" MS-DOS?). It is likely that they
are NOT all false-positives.
So, check the boot sectors of any MS-DOS disks that you make from images.
AND, scan all executables for malware that was NOT boot-sector.
--
Grumpy Ol' Fred cisin at xenosoft.com
12:34 p.m.
On 12/11/2012 12:51 PM, Christopher Satterfield wrote:
I also had an antivirus complaint with one of the
files with DOS/Stoned or
something similar, I just remember it was "Stoned". I wasn't too worried
about it as 16-bit DOS virus on 64-bit Windows can't do anything.
Yup, it seems to be on the disks for a Sharp PC-7000. So beware.
Fortunately most of the image files in Don's archive are for CP/M
systems, so no problem there.
--Chuck
4246
days inactive
4247
days old
5 comments
6 participants
participants (6)
-
cclist＠sydex.com -
christopher1400＠gmail.com -
cisin＠xenosoft.com -
feldman.r＠comcast.net -
jwsmail＠jwsss.com -
tdk.knight＠gmail.com