Hello everyone today
we're taking a look at the LivingDeath DOS virus. Now [it has a] scary name and equally scary Payload as
It is very destructive [and] today
We're going to do it a little differently and after I show you the virus and its activation and Payload and everything
[I'm] Going to show you how I clean up after it on a standalone computer which I'm using now. I'm using a Packard Bell
386 Circa 1990 [or] 1989, somewhere around then alright. Let's go ahead and run the virus
Is now present in memory and will infect files however
when the date is
December 27th
any year if I can hit the - (hyphen) key, there we go and
We'll restart the computer
We will see its Payload
[ok] no disks in the drop. Just got to make sure otherwise won't boot properly *386 noises*
Now instead of booting up to the dos prompt
*beep* we get this message [I]
I am the living death
I'm coding your hard disk now your FAT is destroyed and his copy is only in memory if
You set power off all your data will be lost
however even if you don't power off you this screen just stays here, [so]
Really your only choice is [to] power off it will get us zoom in on the message a little bit *camera grinding noise*
There we go
All right now. We're going to look at how to clean up after a virus like this
Yeah
Because while it does destroy the FAT, it also wipes the CMOS memory which contains
The computers information on the settings of the floppy disk drives, and how big the hard disk is and on a machine like this
That's so old it doesn't contain any routines to restore this information, so you have to do it manually which we will do now
[alright] CTRL+ALT+DEL are disabled or maybe not well actually work this time [all] right
So we're starting here
See what happens? *non-standard POST/seek test noise*
*beep* So you get a different sound there?
Because the machine failed to POST. So time of day clock stopped, invalid configuration information, time of day
*beep* Not set all [right] [run] the setup utility
around the BIOS screen here
[the] Standard CMOS checksum was invalid because it was wiped so the defaults were loaded
signature byte was Invalid chip set defaults were loaded, memory size are invalid [alright], so
We have two drives here diskette A:\ is most definitely not [a] five and a quarter inch drive it is
3.5 high Density and this B:\ Is installed it is a five and a quarter inch drive and hard disk
is a Type 34
[106] megabytes
Oh, 102 megabytes sorry
memory
Is going to be messed up? We'll get that error
Thanks, [the] video card is a CGA [80-Column] and this was common back [in] the early 1980s, but certainly not for a Packard Bell
We are using VGA so all right
Set up most of it now. We'll restart again
By the way if you haven't figured it out all of your data would be lost by now
So LivingDeath is a pain in the ass *normal POST test*
Well now it attacks the drives properly *2 beeps, invalid memory*
All right
Set up again
and now [the] memory has set properly, so
save settings and restart normally
We'll put the DOS diskette in the drive here if I can find it in the dark there we go *machine POSTing*
*386 beeps*
Move [that] camera a little bit go ahead and boot from the diskette.
Wait for it
*floppy drive clicking*
Come on
*continues clicking*
anytime now
*fainter clicking*
Oh right, okay here. there we go *louder clicking*
*more clicking*
We need to [e]X[it] out of install and for a virus like this. We need to reset up the partition table, so FDISK
We will delete the active partition
All right now we will create a new one
All right now a system will restart again, and we will format the drive, and then we will start installing DOS
*POSTing / beeping*
Okay, we're not going to wait for this to boot up again. Well
I'll just explain it to you like I just did once it moves up will format the disk can't be quick formatted it has to be
Regularly formatted which takes a few more minutes then the installation of DOS takes about 15 more minutes
So you're looking about 30 minutes of recovery time?
After a virus like that most of the time it is possible to do a quick format, so resetting the computer to its
basic State is not as
time [consuming] or difficult
However living death is quite complex. So that's about it for the living death DOS virus.*captioned by @fr3x31dev*