Tukukkk

When I was in college, I remember IBM representatives trying to sell OS/2 Warp to students and teachers by saying that there were no (known) viruses for OS/2. (Of course, that didn't stop the makers of IBM AntiVirus for OS/2 and Norton AntiVirus for OS/2.)

The paper "The effect of computer viruses on OS/2 and Warp" (presented in September 1995 by John F. Morar and David M. Chess of the IBM Thomas J. Watson Research Center) mentions that there "are currently only two OS/2 viruses known to us."

Is there any reference that states how many native OS/2 viruses there were by the time IBM discontinued its support for OS/2 (on December 31, 2006)?

I have not found a reference, but here's a search for OS/2 on Trend Micro's virus encyclopedia. That finds 30 entries, some of which are actual OS/2 viruses, and some of which are interesting OS/2 security vulnerabilities.

The cited source from the question is the source for the English Wikipedia page as well, that claims that there are only very few known viruses for that system.

But the low amount of viruses seems to be much bigger.

Not two, but at least five viruses are well known. That's more than double.

Arelocs also known as Aep is one of a few viruses for IBM's OS/2 operating system. It is considered "the first known virus that affects OS/2 files in the 'right way'" as it writes itself to the file and modifies the NewEXE header and other system areas.

Type  File virus

Creator Mark Ludwig

Date Discovered 1995

Place of Origin Show Low, Arizona, USA

Source Language 

Platform    OS/2

File Type(s)    .dll, .exe

Jiskefet
Jiskefet is a rare example of an OS/2 virus. It was coded by Masud Khafir, who named it after a Dutch comedy troupe.

Type    File virus

Creator Masud Khafir

Date Discovered 1994

Place of Origin The Netherlands

Source Language Assembly

Platform    OS/2

File Type(s)    .exe

Infection Length    2,048 bytes

Myname is an OS/2 virus. When executed, the virus infects OS/2 NewEXE files, overwriting them. While the virus has no malicious payload, the overwriting of the files damages them irreparably.

Type  File virus

Creator 

Date Discovered 1993.12

Place of Origin United States

Source Language 

Platform    OS/2

File Type(s)    .exe

Infection Length    2,048 bytes

Rexx is a virus for OS/2. Very little information is available about the virus. Our tests seem to show it overwrites files it infects.

Rexx is also the name of a scripting language. It predates OS/2 appearing in 1979 and it was the primary scripting language for that OS, along with Amiga and a few others.

Type  File virus

Creator 

Date Discovered 

Place of Origin 

Source Language 

Platform    OS/2

File Type(s)    .exe

Infection Length    38,620 bytes

Reported Costs  

Uxia is an OS/2 virus. All that seems to be known about it any more is that it is 7,200 bytes long and for IBM's OS/2.

Type  File virus

Creator 

Date Discovered 

Place of Origin 

Source Language 

Platform    OS/2

Infection Length    7,200 bytes

Reported Costs  

As we know there is something like
IBM AntiVirus Version 2.5 running on OS/2. Advertised as:

So, tell me how does it work really?

In a nutshell, pretty darn well. Over the years as a network administrator, I have taken a few viruses prisoner. Since I found these in "the wild" I used them for my "live" testing. The FORM virus is probably the most common boot sector virus in the wild.

But what is FORM? A DOS virus:

Form is a boot sector virus from the 1990's. It often topped charts for the most common virus. Form was extremely long-lived, on the list of viruses in the wild up until 2006, 16 years after its initial release.

Type  Boot sector virus

Creator 

Date Discovered 1990.02

Place of Origin Zurich, Switzerland

Source Language Assembly

Platform    DOS

Infection Length    3 disk sectors

Reported Costs  

That seems to narrow down the viruses truly and specifically targeting OS/2 only to be quite small. But:

Dr. Solomon's Anti-Virus Toolkit for OS/2 - by Noah Sumner (1997)
If you are like the vast majority of OS/2 users you think you don't need an anti-virus program. We all know that DOS viruses can't affect OS/2, right? Wrong. The experts tell me that there are probably somewhere around 200 viruses that can and will affect you even if you are running OS/2 under HPFS. If you are running under FAT that number is much higher.

Well, at least none of them will really attack OS/2, right? Wrong again. There are currently three known viruses that are designed to attack OS/2 users only, and if Warp 4 is a success that number will start to rise.

Now you are probably saying, "Well, maybe I should protect myself from viruses." That is where our good friend from Dr. Solomon comes in to play. Why should you use Dr. Solomon's Anti-Virus for OS/2? Here are three good reasons:

it detects the OS/2 viruses (IBM's Anti-Virus doesn't)
it has a nice PM interface
it is truly 32 bit.