54 lines
2.2 KiB
Plaintext
54 lines
2.2 KiB
Plaintext
|
|
ÚÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ¿
|
|
³ OŸŸSpring v0.89 - By Virogen - 10/03/93³
|
|
ÀÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÙ
|
|
|
|
Here's yet another release of this never ending virus. I really wanted
|
|
to wait a little longer before I released a new version, but I wanted
|
|
to get a new version out ASAP. v.90 will probably follow soon.
|
|
|
|
so.. what the hell did I change in this version?
|
|
well..
|
|
|
|
- now infects on int 21h function calls as follows :
|
|
0Eh - Change drive - Infects up to 5 files in the current
|
|
directory, ONLY if a program is not running.
|
|
Kills ANTI-VIR.DAT and CHKLIST.* also.
|
|
3Bh - Change directory - Same as above
|
|
4Bh - Execute - Infects anytime, whether a program is running
|
|
or not, does not delete ANTI-VIR.DAT and CHKLIST.* files.
|
|
|
|
- After alot of expiermenting I came up with a few trix (not the ceral)
|
|
to get around TBAV 607 heuristics (which plagued the last version)
|
|
for the most part. A few infected files will get a warning, and the
|
|
others will set off 3 or 4 flags but it's not enough to cause TBAV
|
|
to warn the user.
|
|
|
|
- No longer detectable by Fprot Heuristics
|
|
|
|
- Mutation engine was improved, although still not completly polymorphic.
|
|
|
|
|
|
Type : PSRhA - Parastic & Spawning Resident - Mutating
|
|
Origin : Virogen's Drunken Programming Inc.
|
|
Length : 1556-1606
|
|
Interrupts Hooked : 20h 21h (24h e.h.) 27h
|
|
|
|
Infection Method : Once memory resident, the virus infects up to five
|
|
files in the current directory everytime a file
|
|
is execucted, and when a program is NOT running
|
|
it will infect on directory changes and disk changes.
|
|
It will also kill ANTi-VIR.DAT and CHKLIST.* files
|
|
at the time of infection on the two latter occurances.
|
|
Anyway, it will first infect EXE files (spawning) in
|
|
a directory, once all the EXE files have been infected,
|
|
it moves to COM files (parastic).
|
|
|
|
|
|
|
|
Your Faithful Comrad,
|
|
Virogen
|
|
|
|
|
|
|