70 lines
3.1 KiB
Plaintext
70 lines
3.1 KiB
Plaintext
====================
|
|
DWI Virus Source
|
|
By The Attitude Adjuster and AccuPunk
|
|
====================
|
|
|
|
Here's the source to one of our new older viruses... Both 'Punk and
|
|
I did a little bit on this one, but, 'Punk thought it all up... I just
|
|
kinda fucked around with the code when he said he was bored with it...
|
|
Anyway, I can't really give you too much help here, as this code isn't at
|
|
all the greatest, but, I include it to get this virus out into the world.
|
|
|
|
Umm, assemble two pass, and link to an EXE. Modfiy the header to
|
|
make the maximum memory allocation equal to the minimum, and the fucker
|
|
should run... I'm really not going to test it right now, mainly because
|
|
it's late, and I AM releasing this tonight...
|
|
|
|
===========================================================================
|
|
Virus Name: Damn Windows Idiot!
|
|
Aliases: Anti-Windows
|
|
Author(s): AccuPunk/The Attitude Adjuster
|
|
Group: Virulent Graffiti
|
|
Scan ID: [DWI]
|
|
V Status: Abortion
|
|
Discovery: Well, see, we were in LIST.COM and we saw this code...
|
|
Symptoms: EXE growth; messages; something to do with WIN.COM
|
|
Orgin: WestBumbleFuck, Ohio DipShitPeak, New York
|
|
Eff Length: 1063 Bytes
|
|
Res Length: 1280 Bytes
|
|
Type Code: PRhE - Parasitic Resident EXE Infector
|
|
Detection Method:
|
|
Removal Instructions: Cry... Delete Windows... Increase wallet space,
|
|
hire and Antivirus Professional ("...two words together that can't
|
|
make sense!").
|
|
|
|
General Comments:
|
|
|
|
DWI will become resident after first checking for it's own
|
|
presence in memory. DWI places itself into high memory, and
|
|
changes it's MCB owner to the usual DOS MCB owner segment.
|
|
This may be changed to retrive the DOS MCB owner from DOS,
|
|
in the future, but this suffices at the present.
|
|
|
|
Int 21h is revectored to Int 30h where the virus uses it for
|
|
DOS calls. The FAR PTR at Int 30h+1 is lost.
|
|
|
|
Upon the execution of any program using Int 21h/Ax=4B00h, DWI
|
|
will check the file for an 'MZ' header, and if found, infect
|
|
the file, leaving the time, date, and attributes of the file
|
|
unchanged.
|
|
|
|
DWI seems to have an adverse effect on WIN.COM when it is run.
|
|
|
|
Other than the offensive WIN.COM program, DWI will not harm any
|
|
data... If DESQView is found, the host system owner will be wired
|
|
$100,000 for choosing a decent multitasking operating system...
|
|
err... maybe not, but, we'll not screw any .COM files.
|
|
|
|
Strings Contained in the Virus:
|
|
|
|
'[DWI] AccuPunk/The Attitude Adjuster Virulent Graffiti'
|
|
'WIN.COM'
|
|
|
|
Future Revision Notes:
|
|
|
|
There will probably be no future revisions of DWI. We may optomize
|
|
it a little, and rip the engine for use in a planned virus, but,
|
|
as I said, there will probably be no DWI-B.
|
|
===========================================================================
|
|
|