Virus.DOS.Onehalf Followup/Removal Attempt

the raw footage of this recording was over 25 minutes, be glad I trimmed it
can the onehalf virus actually be removed with a tool, or are we doomed to living with a parasitic encrypting virus?
once again, watch in 1080p for best results!

[@syntaxvrc]

[Packard Bell: WAAAAAAAH waah waaah] I love how you captioned the computer xD

[@UVClay]

Things this video taught me: ESET products were just as good 22 years ago And they got better translators

[@UVClay]

No, ESET is GOAT.

[@justaguy9224]

Yes, the Slovaks are the masters of antiviruses and malware removal tools!

[@crylune]

ESET falls short in detection rate compared to other top AVs like Kaspersky, I'd consider Kaspersky the GOAT. That is to say, I still love ESET and Kaspersky the most. ESET, Kaspersky and Bitdefender are my only go-to AV recommendations these days, even over regular Windows Defender because Defender's self-defense does not exist.

[@realcomputerdude100]

Can we run VSafe? YES- OH SHIT

[@Mrvideosandgames]

I love the virus removal typos.

[@ManticoreRO]

My first pc was infected with onehalf... what a journey. Managed to remove it with RAV6 antivirus. The RAV6 came with a special executable named RAV-ONE. It was made especially for this virus. It worked after I waited for like, half a day for the hard drive to be decrypted.

[@RandomPerson8492]

With all that bad English I was seriously expecting this to be a DOS-era rogue antivirus.

[@marianamohammed3790]

+Myrmeko Me thought* You are dumb as well. Not...

[@DaniPaunov]

Hi! Do you want to rescue *_yout_* disk?

[@jordanjohnson714]

Dani Paunov there's many spelling mistakes at least it worked

[@itzspencerr1403]

+Jordan Johnson (Mighty Burger) and thank god for that!

[@DaniPaunov]

+Jordan Johnson (Mighty Burger) Too bad, that almost no one uses DOS now...

[@scaprod558]

+Dani Paunov Youut... Sounds Like Another Language...

[@DaniPaunov]

***** I guess that would explane it?

[@NijiMarii]

0:41 has the best youtube captions of all time

[@nycto7803]

"Yay- oh crap knocked over the Tripod almost but YAY"

[@Sypaka]

Volume in drive A is BS. Well played. Onehalf cleaner wants the /D... wtf..

[@sherib5752]

0:41 with captions: [packard bell: WAAAAAAAAAAAAAAAAAAH]

[@FakiaKun224]

I'm a little impressed at how long ESET has been around now that I know they made this sweet tool back in the day.

[@mistylear19]

For people ripping on the spelling of the Antivirus, I noticed it said something about "Slovak." So perhaps the people that made it didn't have English as their first language? Still, some of the errors were interesting, for sure, but others (like Program with two M's) can be excused.

[@metalboySK1]

The OneHalf virus was made in Slovakia and so was the removal tool. (I'm from Slovakia) back in 1994, when OneHalf was made, the country was still a bit left behind because it separated from Czech Republic in 1993, so English wasn't really a significant language.

[@metalboySK1]

Fifo Folter Ahoj :)

[@metalboySK1]

Fifo Folter Ahoj :)

[@justaguy9224]

In Eastern Bloc countries, such as Czechoslovakia, German was more popular as a second language than English, and in German, program is spelled with two m’s.

[@MikiSayakaFan]

i recently found the removal tool on one of my old floppies! :D/

[@MetaBloxer]

10:12 "Can we run VSafe?" *Runs VSafe* *World collapses*

I think after the decryption you should have scanned the C: drive with the tool, as some of the binaries/ executables on the hard drive could have been still infected and infect the boot sector again and the encryption would start again.

[@jbh759]

3:34 Do you want to rescue _yout_ disk?

[@manthor6689]

Oh, yes I would like to rescue myt disc!

[@Andrewsafb71]

Omg, you watched the video too???

[@MycoolGaming]

You mean 3:50?

[@kvint3]

one of the greatest viruses made in slovakia destroyed by a very ease removal software made in slovakia. i love my country :D

[@FrealFan2]

10:18 i honestly thought you were just mad you could run vsafe that you hit the tripod...

[@Randomizer92mx]

It's actually a tool remover made by the antivirus company ESET in 1994. And yeah it's from Slovakia.

[@RBHMSpoons]

The closed captions when the computer reboots had me in tears Waahhh Wooahhh Wooo Waahhh

[@mineLOLpride]

'Volume in drive A is BS' OK. That is... ...uhh...

[@plaguedoctor198]

I was laughing at that. :P

[@blockcamp]

mineLOLpride what do you mean of bs? Bi?

[@amritlohia8240]

BS = bullshit

[@lajenehuen260]

THAT IS BULLSHIT BLAZING

[@nathanmackenn3409]

And this was on a small partition. MOTHER OF GOD.

[@guyyoshpe]

Funny! From the antivirus tool, it seems the decryption is actually just a xor with a constant (147). The utility gives up this information when it says "Analyzing virus-version & xor-constant: okay"

[@blackholeproductions]

Whoever subtitled this, i want to marry you

[@nathanbruner8370]

So, OneHalf only does damage if you remove it improperly?

[@nikobellic8237]

2:05 Volume in Drive A is BS Or.. Volume in Drive A is Bullshit

[@456ironmaiden]

I noticed that haha

[@ADRENELINEDUDE]

Niko! Lets go bowling.

[@NijiMarii]

WAAAAAAAAAH waaaaaaaaaah WOOOOOOOOOH OOOOOOOOOH meeeeeeeep

[@AshtonSnapp]

I see this and I'm like "yea" and then a MLP commercial pops up

[@TheGamerWithMore]

I saw that as well. Really KZbin? Unrelated much!

[@legionfighter6789]

IT DOESNT WORK!!

[@TheGamerWithMore]

Shot Up Gaming Actually. it does for me. what version of Google Chrome are you using?

[@legionfighter6789]

2.7.1.3 Do you mean does ads before the video?

[@TheGamerWithMore]

Shot Up Gaming Hmm, 2.7.1.3...Yeah, and half way through the video. Something strange is going on here.

[@trit136]

Lol when he says "Dis. Is. Screwed."

[@Solinaru]

H*ck yeah! ESET has been my brand of choice since XP, but there's something satisfing​ in watching it overcome a DOS virus like nothing

[@FrankChickens]

One common way was through downloading software from BBSs which had infected software on their hard drive. Another was swapping software with people who didn't know they were infected. Then there was accidental infection of PD software where the people offering the software didn't know it was infected.

[@gruccinishikino12]

Turn on subtitles. Thank me later.

[@headbang4416]

Write down the *followin* characters:

[@jan_h]

Cylinder: washing machine Flux capacitors: Technobabble Recovering: Ages

[@reversevelocity]

THE VIRUS HACKED MY WASHING MACHINE! WE'RE ALL GONNA DIE!

[@scaprod558]

+Engi Neer AAAAEEEEE GET PC TO FIX IT

[@OckGypsy]

NOW GOING TO DECRYPT DISK, DO YOU WAMT TO RESCUE YOUT DISM?!

[@thecomputernerd1482]

In the original video, you said it would infect floppy disks if it was in memory, but what if you had the disk in write protect mode, which makes it read-only, it couldn't infect it then, because the disk is read only

[@Sypaka]

some viruses could infect floppies even in write protect mode.

[@38mb.]

writeprotect was just a suggestion on a lot of floppies

[@GamePlayShare]

Its 2021 and i got this virus on one of my old test PCs. It didn't encrypt anything on the disk tho and only infected lots of files. Maybe because of FAT32 it failed to encrypt it.

[@valrina]

I live next to the office of Eset .

[@pixelbucket8884]

There's a library near where I live that still uses MS-DOS to sort the books and also to "help" people find books, if only people knew the commands. They had to put a little sign up showing people Who to use the computers.

[@duszeksmsaczek6394]

I can write the help program for this library

[@duszeksmsaczek6394]

+Duszek Smsaczek Or write the desktop enviroment

[@KanadeTachibanaBlackMidi]

8:30 oh scheeeeeeeeeet

[@masonhaines4320]

how did you get here

[@AAron-fc2kn]

dis is one half

[@FreeFireFull]

It's not monochrome though. You can see red text.

[@zubirhusein]

i like your presentation style man, keep it up

[@mineplaymod9000]

i got a antivirus ad before this video. KZbin KNOWS WHAT YOUR DOING, DANOCT1! also 720p works.

[@AssasinAnonymous]

my computer has 213mbs of porn

[@derekbond9521]

Im sure

[@TiredCapybara]

Your mother must be proud.

[@FairPlay137]

"Dis is one half" _[deletes self]_

[@nycto7803]

Then Onehalf encrypts that part of your hard drive and your mother can no longer find it

[@cassert24]

But that's just a one video worth size

[@TheGigaBrain]

The closed captions are a gold mine.

[@BlackOmen801]

I know this is an older video but I found out there is a hidden text string with in the virus and a different way the "Free Love" virus also triggers

[@sciencemkid]

OUR ONEHALF, IN THE MIDDLE OF OUR DRIVE

[@redcrimson718]

New computer, who dis? Dis is one half.

[@TheOriginalElkstone]

So excited about running Vsafe there was an earthquake

[@TheMobiusBR]

This is one half? or Disk is one half?

[@TheDarkTechGuy]

You've inspired me to get VMWare copy's of all the old os's and totally trash them. :D thx!

[@MaxymYT]

is the text a little bit green only for me?

[@DoubleATam]

I like how the program made to remove Onehalf has just as bad spelling as Onehalf.

[@reddy112]

Love the computer captions

[@ThePhantomSafetyPin]

"I guess it would still be like that if you're running full-scan." That depends on the Anti-malware program and how speedy your computer is, as well as how deep the scan level is, and how big the disk is.

[@NotBart]

Seems like the sk keyboard layout made errors in an safe program making it look unsafe

[@raym1922]

No one can rescue *Yout* disk

[@MagikGimp]

They gave the cleaning tool the same file name as the virus. Doh!

[@stealthdrifter4556]

Brr brrrr mrrr mrrrr meeep

[@IrisGalaxis]

Scared the hell out of me knocking that tripod over

[@trippyunicorn4208]

ALRIGHT ANOTHER TYPO LET'S GO

[@thelemonking3288]

Lol.. "Volume A Drive is BS."

[@entechcore]

+danooct1 i was wondering what would happen if you removed some of the critical dos files (please put it in a video)

[@KiljuCA]

Liam Bo it would fail to boot depending on what you deleted

[@backfromthe_death]

America Grew up listening to you. It still does.

[@alexxxO_O]

I have a Three TB Disk, And one time it was infected, IT TOOK 9 HOURS TO SCAN IT ON QUICK SCAN!!

[@therealhardrock]

10:18 lol

[@geometrydashmajntom469]

SLOVAKIA? thats similar to czech and im from czech republic :D

[@intel386DX]

Geometry Dash MajnTom go go Czehoslovakia :)

[@elijahr241]

Don't czechs and slovaks hate each other or something? That's the stereotype at least.

[@elijahr241]

@@intel386DX also that's not a country anymore

[@pupsthemechanic]

ESET made the antivirus that my tv uses.

[@AnnOSRS]

Glad this didn't turn into "when DOS AVs fail."

[@mattshanahan5213]

so excited about vsafe he killed the camcorder.

[@justarandomguy9234]

Utilities to remove viruses are good. But i stopped using malware protection because it quarantinned steam so it wouldnt work

[@justarandomguy9234]

I did

[@roguepackets2198]

He keeps on feigning death and coming back from the cold.

[@jjb0894]

So this malware was basically ransomware without a ransom.

[@38mb.]

it doesnt ask for money, and as long as you dont improperly remove it, your files effectively arent encrypted. it's a stretch to call it ransomware at all

[@minefilms1122]

Then everything screws up and nothing works and all your data is screwed

[@Tenrys]

i wonder how we got viruses at this time... since there was no internet, dangerous floppies you got by random guys in the street? but that would be weird.. "hey i just got this random game for you. insert it in your pc!"

[@Eriphiel]

The typos in the utility are kind of endearing.

[@enthusiasticgeek7237]

Do you want to rescue yout disk? (Y/n) this should be a t-shirt

[@avi8aviate]

Never mess with anti-Onehalf. B)

[@trit136]

Do you want to rescue Yout disk?

[@irontomato3835]

Write down the followin' parameters.

[@cassert24]

0:40 In the subtitles, [Packard Bell: WAAAAAAAAAH / waaaaaaaaaaaaa / WOOOOOOOOOOH] lol!

[@MagikGimp]

Also, NOD antivirus has been around since the late 80s apparently. Can you believe that?

[@AndrewMackoul]

Cool!

[@doescolder24]

Dis is two halves.

[@lolerzzz]

whys the writing green

[@CoburnFuse]

Just curious, what if you actually interrupt the decryption...

[@TheDarkTechGuy]

I'll upload some virus vids soon as a start of a series.

[@RATMAN775]

Aaron Gosselin does. :P

[@jazzcat23]

Preference?

[@Randomizer92mx]

It was founded in 1992.

[@SovietToaster]

Dammit RougeAmp.

[@DOGSAVESTHEDAY_SYSTEM]

5:40 me making something in Minecraft be like...

[@DaniPaunov]

test *test* _test_ -test- *_test_* *-test-* _-test-_ *_-test-_*

[@scaprod558]

+Kis Balázs balizaj No... test **test __test __--test *_-_-*test *--*test -__-test

[@Gx3irMC]

I don't listen to Packard Bell anymore.

[@MNCWProductions]

Dis is danooct1.

[@PepsiMaxz1]

Thanks for this great video :))

[@Orangestar1]

Cut 'em some slack on the typos, Dan. It's a Slovakian company.

[@buzzthegamer23]

8:28 Watch the captions

[@TehMcPixelWay]

Awesome, its a scaner apparently.

[@Keksnek]

Slovakia ?! This virus was made in Slovakia ?! In my country ?! lol :DD

[@thelemonking3288]

How do you even obtain a dos virus? XD

[@weezerbluealbum5984]

buy a floppy with the DOS virus

[@weezerbluealbum5984]

not knowing that the virus is on the floppy

[@thelemonking3288]

How does the virus get on the floppy in the first place?

[@weezerbluealbum5984]

the person who sold the floppy disk made the virus

[@thelemonking3288]

Sooo lets say we bought Doom.. ID Software made a DOS killing virus?