DOS/STONED incident

From Bitcoin Wiki
Jump to: navigation, search

On May 15, 2014, a virus signature of an antique virus called DOS/STONED was inserted into the block chain. This caused Microsoft Security Essentials to recognize the block chain as the virus, prompting it to remove the file in question, and subsequently forcing the node to reload the block chain from that point, continuing the cycle.[1][2]

Stoned was a virus created by an unidentified student from Wellington, New Zealand in 1987.[3][4] It was one of the first computer viruses, and had become common and widespread by the 1990s. When an infected computer started, there was a one in eight probability that it would declare "Your PC is now Stoned!"[5][6] The phrase is found in infected boot sectors of infected floppy disks and master boot records of infected hard disks along with the phrase "Legalise Marijuana".[sic]

Only the signature of the virus had been inserted into the blockchain; the virus itself was not there, and if it were, it would not be able to function.[7]

The situation was averted shortly thereafter, as Microsoft had prevented the block chain from being recognized as Stoned.[8] Microsoft Security Essentials did not lose the ability to detect a real instance of Stoned.

References

  1. https://answers.microsoft.com/en-us/protect/forum/mse-protect_updating/microsoft-security-essentials-reporting-false/0240ed8e-5a27-4843-a939-0279c8110e1c?tm=1400189799602&auth=1
  2. http://www.theregister.co.uk/2014/05/18/bitcoin_user_stoned_on_virus_warnings/
  3. "...a brief history of PC viruses.", IBM Research
  4. "The early days", History of Malware
  5. "Analysis of Stoned", Peter Kleissner
  6. "The “Stoned” PC Virus", Commented disassembly of virus code at computerarcheology.com
  7. /r/Bitcoin thread 25xeqd. A Virus Scare in the Blockchain: Traces of DOS “Stoned” Found 19 May 2014. This post
  8. http://thehackernews.com/2014/05/microsoft-security-essential-found.html