microsoft

Vista attacked by 13-year-old virus

Steven Parker   on 18 September 2007 - 10:20 · 46 comments & 37741 views

Advertisement (Why?)
A batch of laptops pre-installed with Windows Vista Home Premium was found to have been infected with a 13-year-old boot sector virus.Those of you with a long memory will vividly recall the year 1994: Nirvana's lead singer Kurt Cobain died, South Africa held its first multi-racial elections, and Tony Blair became leader of the Labour party. Oh, and Microsoft's operating system was the quaint, pre-NT Windows for Workgroups.

But it was a year that also saw the arrival of a boot sector computer virus known as Stoned.Angelina which moved the original master boot record to cylinder 0, head 0, sector 9.It would appear that this teenage virus has not yet been consigned to the history books.

According to Virus Bulletin, the consignment of infected Medion laptops – which could number anything up to 100,000 shipments – had been sold in Danish and German branches of retail giant Aldi.The computers had been loaded with Microsoft's latest operating system Vista and
Bullguard's anti-virus software, which failed to detect and remove the malware.

Although the infection itself is harmless, Stoned.Angelina will undoubtedly have left Microsoft and Bullguard execs blushing with embarrassment about the apparent flaws in their software which allowed an ancient virus to slip through the back door.

On its website Bullguard offered some reassurance to Medion customers hit by the virus:

"Stoned.Angelina is a low-risk boot virus that infects the MBR (Master Boot Record) of hard disks. This is a very old virus. Apart from its ability to spread from computer to computer, it carries no payload (damage) to the systems it infects."

Asked if this means we could see a resurgence of old viruses attacking new operating systems, Verduign said: "This is not so much a wake-up call but more a reminder" and added that it would be impossible to ever "completely eradicate a virus."

News source: El Reg

Post a comment · Send to friend Comments · There are 46 additional comments
#1 -Hiroshi- on 18 Sep 2007 - 10:21
LOL
(3 replies) #2 ahhell on 18 Sep 2007 - 10:34
The title is a bit sensationalist don't you think. Vista wasn't exactly "attacked" by that old virus.
#2.1 ntbnnt on 18 Sep 2007 - 10:45
I agree, definately sensationalist
#2.2 HawkMan on 18 Sep 2007 - 17:28
besies it's a boot sector virus and 13 year old. mostlu likely it was on the boot sector whee they made the disk image used on the laptops and thus spread that way.

I seriusly doubt a boot sector virus,muchless a 13 year old actually can ifnect Vista, or even 2k/XP.
#2.3 whocares78 on 19 Sep 2007 - 04:25
Quote - (HawkMan said @ #2.2)
besies it's a boot sector virus and 13 year old. mostlu likely it was on the boot sector whee they made the disk image used on the laptops and thus spread that way.

I seriusly doubt a boot sector virus,muchless a 13 year old actually can ifnect Vista, or even 2k/XP.


you really think they built the image on 13 year old hardware for a machine capable of running vista ??

i think not, but this is too damn funny
what makes me laugh is that the AV compies own software failed to recognise a 13 year old virus
(2 replies) #3 alsheron on 18 Sep 2007 - 10:43
I'm going back to stone tablets and a chisel.
#3.1 SkyyPunk on 18 Sep 2007 - 13:00
careful, you might get a viral infection...
#3.2 +Octol on 18 Sep 2007 - 14:29
Only if he cuts himself with the chisel.
(1 reply) #4 Budious on 18 Sep 2007 - 10:46
Wonder who put it on the master image to begin with... certainly a disgruntled employee with a CD full of legacy viruses looking to cause a little agony. It is amusing though but an old virus, and very few modern ones, have the ability to propagate to 100,000 units in the wild.
#4.1 GP007 on 18 Sep 2007 - 11:43
That's probably how it went down. The key thing here to remember is that, although it's there, it can't do anything aside from try and spread to another PC. The other key here is that the AV that they've installed and use didn't pick it up. That's gotta be a slap to the face, and I think whoever put it on knew about this before hand. Try to spread some bad PR.
#5 Ali Koubeissi on 18 Sep 2007 - 11:14
Vista ...
#6 Jugalator on 18 Sep 2007 - 11:19
Hahaha... I wonder if The Register planned another, much funnier, title first, because the URL to the story is different: "Vista hit by stoned Angelina".
#7 +Harlem39s Finest on 18 Sep 2007 - 11:57
lol
#8 selphj on 18 Sep 2007 - 12:04
Oh good grief. Anyone with knowledge of a Virus from this type would realize it would only spread before the OS is loaded. Generally it would be on an infected floppy, and the user would accidentally leave the infected floppy in the computer when it booted. The virus would have to be put in place before the computer had Vista even loaded. It says nothing about the OS in question. People now are just too spoiled to network based virus's and blaming the OS.
(5 replies) #9 C++ on 18 Sep 2007 - 12:27
This is a frickin' MBR virus... What the hell does it have to do with Vista?

Yea, let's all make fun of Microsoft because they haven't immunized Vista against problems outside of Vista's scope...

Guess what, guys! I smashed my computer with a hammer, and Vista won't boot anymore! LOL! WHAT A CRAPPY OS!
#9.1 nemo on 18 Sep 2007 - 14:23
lmfao
#9.2 black_death on 18 Sep 2007 - 20:42
Damn right.
#9.3 whocares78 on 19 Sep 2007 - 04:28
Quote - (black_death said @ #9.2)
Damn right.

+1 not a vista issue
#9.4 Pytten on 19 Sep 2007 - 13:44
Well put!
#9.5 iCeFuSiOn on 19 Sep 2007 - 16:05
Quote -
Guess what, guys! I smashed my computer with a hammer, and Vista won't boot anymore! LOL! WHAT A CRAPPY OS!

LMAO!
(1 reply) #10 PsiMoon314 on 18 Sep 2007 - 12:38
Hi,

The main issues here are the lack of quality control shown by Medion when building their laptops.

Normally Medion equipment is fairly good quality so this is something of a surprise.

The other issue is the Bullguard antivirus package which from experience is even worse than Mcafee or even Symantec/Norton products.

It does not surprise me that this package fails to detect an older virus.

I wonder how many Antivirus packages would have detected this virus?

Kind Regards

Simon


#10.1 Budious on 18 Sep 2007 - 13:23
Quote - (PsiMoon314 said @ #10)
I wonder how many Antivirus packages would have detected this virus?

Kind Regards

Simon


My thoughts exactly and why I speculated it was intentionally done by a disgruntled employee with a CD archive of viruses which he scanned to determine which were detected and which were not and then chose one of the undetected viruses to distribute through a master installation image.
(4 replies) #11 Azmodan on 18 Sep 2007 - 13:32
+1 to reasons why I keep using XP.
#11.1 ozzieXP on 18 Sep 2007 - 13:44
Quote - (Azmodan said @ #11)
+1 to reasons why I keep using XP.


umm... really? or is that your computer is outdated?
#11.2 jmc777 on 18 Sep 2007 - 14:31
Yeah, because everyone knows that XP is immune from boot sector viruses.
#11.3 HawkMan on 18 Sep 2007 - 17:31
of course a boot sector virus like this could just as well on a 98, xp, OS or Linux computers. And it was most definately infected through the image used to clone thlaptops, since... when was the last time you saw alaptop with a floppy drive ?
#11.4 whocares78 on 19 Sep 2007 - 04:31
-1 to use XP, cause it has nothing to do with OS

BOOT SECTOR virus http://kb.iu.edu/data/ahll.html
#12 +James7 on 18 Sep 2007 - 13:35
At least it's not one of those bad viruses....
(1 reply) #13 XerXis on 18 Sep 2007 - 13:47
how is a bootsector virus slipping through the production process the fault of microsoft, vista or bullguard?
#13.1 whocares78 on 19 Sep 2007 - 04:31
bull guard should have picked it up at some point
#14 David3k on 18 Sep 2007 - 14:11
Sensationalist alert.
(1 reply) #15 vetneufuse on 18 Sep 2007 - 14:46
this has NOTHING to do with vista... a MBR virus will affect ANY os... all you do is write it to the first sector of the first track... thats the first thing BIOS reads on boot... the OS isn't even loaded at this point!...
#15.1 roadwarrior on 18 Sep 2007 - 17:44
Close, but not quite. Macs don't use MBR, so they wouldn't be affected, even on Intel Macs.
#16 ThePitt on 18 Sep 2007 - 15:14
Quote -
Vista attacked by 13-year-old virus

Well thats older than the average age that uses vista (or neowin) LOL
(2 replies) #17 Croquant on 18 Sep 2007 - 16:01
#17.1 Tantawi on 18 Sep 2007 - 16:42
ROTFL!
#17.2 RAID 0 on 18 Sep 2007 - 18:11
Is this the virus?

The virus in question?
#18 TRC on 18 Sep 2007 - 19:40
Quote -
Oh, and Microsoft's operating system was the quaint, pre-NT Windows for Workgroups.


Windows NT 3.1 came out a year earlier actually.
(1 reply) #19 KSean on 18 Sep 2007 - 20:11
LOL, why would anyone buy a laptop from Aldi?
#19.1 Chicane-UK on 19 Sep 2007 - 07:32
Quote -
LOL, why would anyone buy a laptop from Aldi?


Have you never seen there stuff? Their computers always use very good quality branded components (i've seen em, i've read the spec sheet, and was pretty well stunned) and any stuff they sell like garage accessories for working on cars, etc are all german TUV approved. If something is TUV approved, it aint bad at all.

Don't dismiss them when you know nothing about them!
#20 Amodin on 18 Sep 2007 - 22:50
The mere fact that this is Vista is pointless - who cares. The anti-virus on the computer should have caught it.

It doesn't really matter what operating system is on a computer - if it has a virus and there is no anti-virus or old definitions for the anti-virus on the machine, it's still an infected machine. The fact that Vista was mentioned was just because of another fanboi hating Microsoft. I'm not a fan myself, but yes, the title is just... well, flawed.
#21 +tunafish on 18 Sep 2007 - 23:19
i have one word - theregister
need i say anymore..... just like slashdot.........
Always spinning something to make another company look wrong
In this case its not micrsofts fault or vistas fault its the OEM laptop maker who loads the laptops with the images
#22 CheeseFart on 19 Sep 2007 - 01:29
im surprised the virus is still around
#23 kouhii00 on 19 Sep 2007 - 04:27
The title sounds more like "Vista attacked by the Average Joe Virus".
#24 Deciever on 19 Sep 2007 - 05:47
1) Yes there is not an AV or OS in the world that can protect against a MBR virus that is preloaded off of a floppy or usb drive, however there are BIOS out there that can protect you against some of these things. If anything it would be the failure of the BIOS.

2) Do I think old Viruses might be capable of damaging in Vista? Certainly, it happened with XP and microsofts own image format.
#25 Chicane-UK on 19 Sep 2007 - 07:30
God. I remeber Stoned.Angelina doing the rounds the first time!

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)