home *** CD-ROM | disk | FTP | other *** search
| Unknown | 1997-09-12 | 955.4 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 1%
| dexvert
| GNU gprof performance data (other/gnuGprofPerformanceData)
| ext
| Unsupported |
| 100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| ce fa be ba 4e 04 00 00 | a6 ed 0e 00 44 11 00 00 |....N...|....D...|
|00000010| 9b 14 00 00 29 17 00 00 | 6f 19 00 00 38 1b 00 00 |....)...|o...8...|
|00000020| b5 1c 00 00 9c 1e 00 00 | a0 21 00 00 73 24 00 00 |........|.!..s$..|
|00000030| 82 26 00 00 ab 28 00 00 | 1e 2a 00 00 10 2d 00 00 |.&...(..|.*...-..|
|00000040| 5d 30 00 00 a7 32 00 00 | 1d 35 00 00 c0 36 00 00 |]0...2..|.5...6..|
|00000050| 34 37 00 00 a3 3b 00 00 | 1c 3e 00 00 f6 40 00 00 |47...;..|.>...@..|
|00000060| cd 43 00 00 09 46 00 00 | b5 47 00 00 15 50 00 00 |.C...F..|.G...P..|
|00000070| ed 52 00 00 bf 57 00 00 | cb 5a 00 00 49 5c 00 00 |.R...W..|.Z..I\..|
|00000080| 4b 5e 00 00 a5 60 00 00 | ea 63 00 00 c0 65 00 00 |K^...`..|.c...e..|
|00000090| f5 67 00 00 10 6c 00 00 | 91 6e 00 00 16 71 00 00 |.g...l..|.n...q..|
|000000a0| d1 73 00 00 48 76 00 00 | eb 78 00 00 02 7c 00 00 |.s..Hv..|.x...|..|
|000000b0| e0 7e 00 00 1c 82 00 00 | 79 84 00 00 18 88 00 00 |.~......|y.......|
|000000c0| d9 8c 00 00 59 8f 00 00 | 3f 92 00 00 b6 92 00 00 |....Y...|?.......|
|000000d0| 8a 95 00 00 33 98 00 00 | 7b 9a 00 00 04 9e 00 00 |....3...|{.......|
|000000e0| 36 a0 00 00 aa a2 00 00 | 8f a4 00 00 d9 a6 00 00 |6.......|........|
|000000f0| 7b a9 00 00 c5 ab 00 00 | 8b ae 00 00 49 b0 00 00 |{.......|....I...|
|00000100| 4d b2 00 00 7f b4 00 00 | 15 b9 00 00 69 bc 00 00 |M.......|....i...|
|00000110| 69 be 00 00 6d c0 00 00 | fa c1 00 00 28 c4 00 00 |i...m...|....(...|
|00000120| 07 c7 00 00 bd c9 00 00 | 3a cc 00 00 50 ce 00 00 |........|:...P...|
|00000130| 24 d0 00 00 3c d3 00 00 | 75 d6 00 00 00 da 00 00 |$...<...|u.......|
|00000140| ab dc 00 00 93 df 00 00 | a0 e3 00 00 45 e6 00 00 |........|....E...|
|00000150| e7 e8 00 00 bf eb 00 00 | 9e ef 00 00 6c f3 00 00 |........|....l...|
|00000160| 18 f6 00 00 fe f8 00 00 | c5 fb 00 00 b0 fe 00 00 |........|........|
|00000170| 56 01 01 00 05 04 01 00 | f7 06 01 00 bb 09 01 00 |V.......|........|
|00000180| 53 0c 01 00 ff 0e 01 00 | dc 11 01 00 d7 14 01 00 |S.......|........|
|00000190| 97 17 01 00 6e 1a 01 00 | 2f 1d 01 00 4f 20 01 00 |....n...|/...O ..|
|000001a0| 0c 23 01 00 e2 25 01 00 | bf 28 01 00 db 2b 01 00 |.#...%..|.(...+..|
|000001b0| c2 2e 01 00 b2 31 01 00 | b1 34 01 00 d3 37 01 00 |.....1..|.4...7..|
|000001c0| 2e 3b 01 00 f2 3d 01 00 | 5b 41 01 00 0f 45 01 00 |.;...=..|[A...E..|
|000001d0| 2a 48 01 00 3e 4b 01 00 | 0f 4e 01 00 c5 50 01 00 |*H..>K..|.N...P..|
|000001e0| eb 53 01 00 1f 58 01 00 | 53 5c 01 00 86 61 01 00 |.S...X..|S\...a..|
|000001f0| 29 66 01 00 eb 69 01 00 | 86 6c 01 00 96 6f 01 00 |)f...i..|.l...o..|
|00000200| 0a 74 01 00 b5 77 01 00 | 5f 7b 01 00 05 7f 01 00 |.t...w..|_{......|
|00000210| c9 83 01 00 39 89 01 00 | 9c 8c 01 00 ef 8f 01 00 |....9...|........|
|00000220| b5 92 01 00 7c 95 01 00 | 88 98 01 00 88 9b 01 00 |....|...|........|
|00000230| 63 9e 01 00 36 a1 01 00 | 32 a4 01 00 12 a7 01 00 |c...6...|2.......|
|00000240| cc aa 01 00 95 ae 01 00 | ca b1 01 00 c0 b4 01 00 |........|........|
|00000250| 3a b8 01 00 11 bc 01 00 | 33 c1 01 00 48 c3 01 00 |:.......|3...H...|
|00000260| d4 c6 01 00 16 ca 01 00 | f4 cd 01 00 13 d3 01 00 |........|........|
|00000270| e5 d5 01 00 3d d9 01 00 | 47 dd 01 00 7e e1 01 00 |....=...|G...~...|
|00000280| 08 e5 01 00 3e e8 01 00 | bc ea 01 00 23 ef 01 00 |....>...|....#...|
|00000290| 57 f2 01 00 4b f5 01 00 | 5a f8 01 00 5f fb 01 00 |W...K...|Z..._...|
|000002a0| 70 fe 01 00 61 01 02 00 | 5d 05 02 00 36 09 02 00 |p...a...|]...6...|
|000002b0| 61 0c 02 00 d7 0f 02 00 | fe 12 02 00 c0 16 02 00 |a.......|........|
|000002c0| 8e 1a 02 00 b5 1d 02 00 | 0a 21 02 00 90 24 02 00 |........|.!...$..|
|000002d0| 93 27 02 00 98 2b 02 00 | 88 2f 02 00 28 33 02 00 |.'...+..|./..(3..|
|000002e0| ef 37 02 00 50 3b 02 00 | 80 3e 02 00 33 42 02 00 |.7..P;..|.>..3B..|
|000002f0| fe 45 02 00 10 49 02 00 | 53 4c 02 00 4d 50 02 00 |.E...I..|SL..MP..|
|00000300| 8b 53 02 00 da 58 02 00 | 4a 5d 02 00 e4 60 02 00 |.S...X..|J]...`..|
|00000310| 10 65 02 00 5f 68 02 00 | 91 6b 02 00 c2 6e 02 00 |.e.._h..|.k...n..|
|00000320| d4 72 02 00 f5 75 02 00 | 23 79 02 00 5e 7c 02 00 |.r...u..|#y..^|..|
|00000330| 76 80 02 00 25 84 02 00 | e8 88 02 00 1c 8d 02 00 |v...%...|........|
|00000340| f4 90 02 00 02 92 02 00 | 6b 93 02 00 ad 94 02 00 |........|k.......|
|00000350| 8e 96 02 00 22 98 02 00 | 65 99 02 00 41 9b 02 00 |...."...|e...A...|
|00000360| f9 9d 02 00 23 a0 02 00 | b4 a2 02 00 a2 a6 02 00 |....#...|........|
|00000370| e5 a8 02 00 9a ad 02 00 | 0a b0 02 00 cc b5 02 00 |........|........|
|00000380| 39 ba 02 00 75 be 02 00 | b8 c1 02 00 d5 c4 02 00 |9...u...|........|
|00000390| 7c c8 02 00 b0 cc 02 00 | 30 d0 02 00 aa d3 02 00 ||.......|0.......|
|000003a0| 83 d7 02 00 4c d9 02 00 | 82 df 02 00 cb e0 02 00 |....L...|........|
|000003b0| 22 e4 02 00 e0 e6 02 00 | 12 ea 02 00 63 ee 02 00 |".......|....c...|
|000003c0| 3b f1 02 00 e9 f3 02 00 | 7f f6 02 00 b2 f9 02 00 |;.......|........|
|000003d0| 3c fc 02 00 08 ff 02 00 | 02 02 03 00 56 05 03 00 |<.......|....V...|
|000003e0| 03 08 03 00 b3 08 03 00 | a8 0b 03 00 44 0f 03 00 |........|....D...|
|000003f0| 35 11 03 00 cd 14 03 00 | 87 18 03 00 4c 1c 03 00 |5.......|....L...|
|00000400| ca 1f 03 00 de 22 03 00 | b2 25 03 00 a1 28 03 00 |....."..|.%...(..|
|00000410| 30 2c 03 00 da 2f 03 00 | 55 33 03 00 f3 36 03 00 |0,.../..|U3...6..|
|00000420| 41 38 03 00 76 3d 03 00 | 73 40 03 00 9e 44 03 00 |A8..v=..|s@...D..|
|00000430| 60 47 03 00 34 4b 03 00 | 8d 4e 03 00 c8 51 03 00 |`G..4K..|.N...Q..|
|00000440| 2c 55 03 00 77 58 03 00 | 7c 5c 03 00 f7 5f 03 00 |,U..wX..||\..._..|
|00000450| 5b 64 03 00 28 68 03 00 | db 6a 03 00 a6 6f 03 00 |[d..(h..|.j...o..|
|00000460| bd 73 03 00 bd 76 03 00 | bb 79 03 00 6d 7c 03 00 |.s...v..|.y..m|..|
|00000470| c6 7e 03 00 73 81 03 00 | 22 85 03 00 05 88 03 00 |.~..s...|".......|
|00000480| bb 8a 03 00 60 8d 03 00 | 8d 90 03 00 b2 93 03 00 |....`...|........|
|00000490| 60 97 03 00 47 9b 03 00 | d8 9d 03 00 bf a0 03 00 |`...G...|........|
|000004a0| c8 a2 03 00 4f a6 03 00 | 02 a9 03 00 29 ac 03 00 |....O...|....)...|
|000004b0| 3b af 03 00 f3 b1 03 00 | 06 b5 03 00 d0 b6 03 00 |;.......|........|
|000004c0| 98 b8 03 00 9e bb 03 00 | 27 be 03 00 ea c0 03 00 |........|'.......|
|000004d0| 3f c3 03 00 de c5 03 00 | 03 c9 03 00 60 cc 03 00 |?.......|....`...|
|000004e0| 86 ce 03 00 a1 d1 03 00 | b9 d4 03 00 db d7 03 00 |........|........|
|000004f0| a0 da 03 00 0c de 03 00 | 8c e1 03 00 0a e7 03 00 |........|........|
|00000500| 69 e9 03 00 62 ed 03 00 | 4d ef 03 00 68 f2 03 00 |i...b...|M...h...|
|00000510| 0d f7 03 00 4d fb 03 00 | 47 fe 03 00 80 02 04 00 |....M...|G.......|
|00000520| ae 07 04 00 30 0e 04 00 | 97 11 04 00 35 13 04 00 |....0...|....5...|
|00000530| 6d 15 04 00 e2 17 04 00 | f5 19 04 00 f9 1b 04 00 |m.......|........|
|00000540| 07 21 04 00 43 24 04 00 | 5d 28 04 00 5b 2d 04 00 |.!..C$..|](..[-..|
|00000550| 6c 30 04 00 82 37 04 00 | 58 3e 04 00 e0 42 04 00 |l0...7..|X>...B..|
|00000560| 14 48 04 00 74 49 04 00 | ee 4b 04 00 96 50 04 00 |.H..tI..|.K...P..|
|00000570| 7c 53 04 00 cc 56 04 00 | dd 59 04 00 11 5d 04 00 ||S...V..|.Y...]..|
|00000580| c2 62 04 00 03 65 04 00 | fa 6a 04 00 de 6c 04 00 |.b...e..|.j...l..|
|00000590| 7a 6f 04 00 ec 74 04 00 | f4 7a 04 00 73 7f 04 00 |zo...t..|.z..s...|
|000005a0| 89 83 04 00 c1 86 04 00 | 53 8c 04 00 72 8e 04 00 |........|S...r...|
|000005b0| 29 91 04 00 de 93 04 00 | 8c 95 04 00 3b 97 04 00 |).......|....;...|
|000005c0| 77 9c 04 00 71 a0 04 00 | 36 a4 04 00 14 a9 04 00 |w...q...|6.......|
|000005d0| b5 ac 04 00 bf ae 04 00 | 38 b3 04 00 d5 b7 04 00 |........|8.......|
|000005e0| 2a bc 04 00 95 c1 04 00 | c9 c5 04 00 7b ca 04 00 |*.......|....{...|
|000005f0| ee cd 04 00 6f d1 04 00 | 8d d3 04 00 f1 d5 04 00 |....o...|........|
|00000600| 7a d9 04 00 ea dc 04 00 | c4 df 04 00 f6 e2 04 00 |z.......|........|
|00000610| 3a e6 04 00 51 ea 04 00 | 1a ef 04 00 cd f4 04 00 |:...Q...|........|
|00000620| b5 f8 04 00 38 fb 04 00 | 56 fd 04 00 84 ff 04 00 |....8...|V.......|
|00000630| c6 03 05 00 f4 08 05 00 | 63 0c 05 00 8d 0f 05 00 |........|c.......|
|00000640| 1b 12 05 00 2f 16 05 00 | 39 18 05 00 a4 1a 05 00 |..../...|9.......|
|00000650| 28 1d 05 00 d3 22 05 00 | 48 26 05 00 e6 28 05 00 |(...."..|H&...(..|
|00000660| 31 2d 05 00 7e 31 05 00 | b6 37 05 00 54 3d 05 00 |1-..~1..|.7..T=..|
|00000670| c3 41 05 00 d9 44 05 00 | 2f 46 05 00 fa 47 05 00 |.A...D..|/F...G..|
|00000680| c1 49 05 00 fe 4b 05 00 | ab 4e 05 00 8b 51 05 00 |.I...K..|.N...Q..|
|00000690| d3 53 05 00 94 55 05 00 | 72 57 05 00 7d 59 05 00 |.S...U..|rW..}Y..|
|000006a0| 92 5b 05 00 d4 5d 05 00 | 5f 60 05 00 a5 62 05 00 |.[...]..|_`...b..|
|000006b0| f4 64 05 00 17 67 05 00 | 0f 69 05 00 24 6b 05 00 |.d...g..|.i..$k..|
|000006c0| 5c 6d 05 00 a7 6f 05 00 | 25 72 05 00 be 74 05 00 |\m...o..|%r...t..|
|000006d0| 63 76 05 00 fe 78 05 00 | 8e 7b 05 00 76 7d 05 00 |cv...x..|.{..v}..|
|000006e0| 6c 7f 05 00 72 81 05 00 | a4 83 05 00 17 86 05 00 |l...r...|........|
|000006f0| 51 88 05 00 ae 8d 05 00 | 01 92 05 00 72 99 05 00 |Q.......|....r...|
|00000700| 65 9d 05 00 ad a7 05 00 | 33 ad 05 00 a8 af 05 00 |e.......|3.......|
|00000710| ba b4 05 00 98 b9 05 00 | 3a bf 05 00 56 c4 05 00 |........|:...V...|
|00000720| 2e c7 05 00 b6 c9 05 00 | f7 cd 05 00 08 d4 05 00 |........|........|
|00000730| a1 d7 05 00 63 db 05 00 | 14 e1 05 00 9f e3 05 00 |....c...|........|
|00000740| 03 e8 05 00 65 ec 05 00 | e7 f5 05 00 51 f8 05 00 |....e...|....Q...|
|00000750| 95 fa 05 00 d9 fc 05 00 | 29 ff 05 00 24 01 06 00 |........|)...$...|
|00000760| da 03 06 00 f4 05 06 00 | 44 08 06 00 41 0a 06 00 |........|D...A...|
|00000770| a2 0c 06 00 e0 0e 06 00 | 2b 11 06 00 7a 13 06 00 |........|+...z...|
|00000780| c7 15 06 00 ac 18 06 00 | ec 1a 06 00 51 1d 06 00 |........|....Q...|
|00000790| a4 1f 06 00 7c 22 06 00 | b6 24 06 00 f5 26 06 00 |....|"..|.$...&..|
|000007a0| f7 28 06 00 43 2b 06 00 | 7d 2d 06 00 d5 2f 06 00 |.(..C+..|}-.../..|
|000007b0| 97 31 06 00 5a 33 06 00 | 25 35 06 00 e5 36 06 00 |.1..Z3..|%5...6..|
|000007c0| 02 39 06 00 c0 3a 06 00 | 84 3c 06 00 c0 3e 06 00 |.9...:..|.<...>..|
|000007d0| 82 40 06 00 42 42 06 00 | ea 43 06 00 8a 45 06 00 |.@..BB..|.C...E..|
|000007e0| 3f 47 06 00 0b 49 06 00 | 59 4b 06 00 bf 4d 06 00 |?G...I..|YK...M..|
|000007f0| b3 50 06 00 61 54 06 00 | 12 57 06 00 68 59 06 00 |.P..aT..|.W..hY..|
|00000800| bc 5b 06 00 62 5e 06 00 | e8 60 06 00 f5 63 06 00 |.[..b^..|.`...c..|
|00000810| d2 67 06 00 79 6c 06 00 | b1 6e 06 00 10 72 06 00 |.g..yl..|.n...r..|
|00000820| 3a 77 06 00 f4 78 06 00 | a6 7a 06 00 65 7e 06 00 |:w...x..|.z..e~..|
|00000830| 15 82 06 00 78 85 06 00 | ef 87 06 00 ac 89 06 00 |....x...|........|
|00000840| 63 8b 06 00 a3 8e 06 00 | 1c 92 06 00 51 94 06 00 |c.......|....Q...|
|00000850| 54 96 06 00 74 99 06 00 | 5d 9c 06 00 96 9e 06 00 |T...t...|].......|
|00000860| ce a0 06 00 d3 a3 06 00 | 11 a6 06 00 84 a8 06 00 |........|........|
|00000870| e4 ab 06 00 36 ae 06 00 | 8c b0 06 00 71 b3 06 00 |....6...|....q...|
|00000880| 3e b6 06 00 7f b8 06 00 | 44 bb 06 00 e3 bd 06 00 |>.......|D.......|
|00000890| 8f c1 06 00 89 c4 06 00 | bf c6 06 00 16 c9 06 00 |........|........|
|000008a0| 51 cb 06 00 0e cd 06 00 | d1 ce 06 00 71 d0 06 00 |Q.......|....q...|
|000008b0| 24 d2 06 00 e7 d3 06 00 | ae d5 06 00 e4 d7 06 00 |$.......|........|
|000008c0| 41 da 06 00 8e dc 06 00 | d6 de 06 00 d9 e0 06 00 |A.......|........|
|000008d0| f1 e2 06 00 39 e5 06 00 | b0 e7 06 00 3a ea 06 00 |....9...|....:...|
|000008e0| 71 ec 06 00 56 ef 06 00 | 10 f2 06 00 0e f5 06 00 |q...V...|........|
|000008f0| 71 f7 06 00 ed fa 06 00 | 6e fd 06 00 9f 02 07 00 |q.......|n.......|
|00000900| e3 06 07 00 b0 08 07 00 | 89 0a 07 00 36 19 07 00 |........|....6...|
|00000910| 74 1e 07 00 f7 25 07 00 | ec 2a 07 00 21 31 07 00 |t....%..|.*..!1..|
|00000920| 25 3a 07 00 51 3e 07 00 | a1 48 07 00 98 4d 07 00 |%:..Q>..|.H...M..|
|00000930| 6f 50 07 00 4c 59 07 00 | 8f 5c 07 00 e3 65 07 00 |oP..LY..|.\...e..|
|00000940| 42 6a 07 00 fa 6e 07 00 | 52 77 07 00 ac 7c 07 00 |Bj...n..|Rw...|..|
|00000950| 5b 85 07 00 06 89 07 00 | 38 98 07 00 6b 9b 07 00 |[.......|8...k...|
|00000960| a9 9e 07 00 67 a4 07 00 | bf aa 07 00 97 ae 07 00 |....g...|........|
|00000970| c6 b3 07 00 59 bc 07 00 | 61 c5 07 00 90 c9 07 00 |....Y...|a.......|
|00000980| 22 d0 07 00 84 d4 07 00 | 96 df 07 00 4c e6 07 00 |".......|....L...|
|00000990| b6 ec 07 00 f9 ef 07 00 | 70 f2 07 00 6c f6 07 00 |........|p...l...|
|000009a0| 0d fa 07 00 02 00 08 00 | b4 02 08 00 28 09 08 00 |........|....(...|
|000009b0| 5a 0c 08 00 8b 0f 08 00 | d0 12 08 00 fe 15 08 00 |Z.......|........|
|000009c0| 3d 19 08 00 d7 1e 08 00 | 56 28 08 00 ea 2b 08 00 |=.......|V(...+..|
|000009d0| c6 2e 08 00 fb 32 08 00 | 56 36 08 00 60 38 08 00 |.....2..|V6..`8..|
|000009e0| 68 3a 08 00 70 3c 08 00 | 2a 3f 08 00 32 41 08 00 |h:..p<..|*?..2A..|
|000009f0| 24 45 08 00 1c 49 08 00 | 52 4d 08 00 e6 51 08 00 |$E...I..|RM...Q..|
|00000a00| 31 59 08 00 9d 5c 08 00 | 13 60 08 00 3f 64 08 00 |1Y...\..|.`..?d..|
|00000a10| b3 67 08 00 b5 6a 08 00 | 8c 6d 08 00 db 71 08 00 |.g...j..|.m...q..|
|00000a20| 3a 74 08 00 43 79 08 00 | 1b 7d 08 00 56 80 08 00 |:t..Cy..|.}..V...|
|00000a30| 68 83 08 00 09 87 08 00 | bd 89 08 00 bb 8c 08 00 |h.......|........|
|00000a40| e5 91 08 00 1c 98 08 00 | c5 9b 08 00 ba 9e 08 00 |........|........|
|00000a50| 77 a1 08 00 e5 a3 08 00 | 4f a6 08 00 f8 a9 08 00 |w.......|O.......|
|00000a60| 47 ae 08 00 79 b2 08 00 | 47 b5 08 00 d8 b7 08 00 |G...y...|G.......|
|00000a70| 64 bc 08 00 7f be 08 00 | bb c1 08 00 b5 c5 08 00 |d.......|........|
|00000a80| 1e c9 08 00 46 cd 08 00 | 41 d1 08 00 78 d4 08 00 |....F...|A...x...|
|00000a90| 42 d8 08 00 33 dd 08 00 | dc e0 08 00 24 e4 08 00 |B...3...|....$...|
|00000aa0| 71 e6 08 00 3e e9 08 00 | 5f ec 08 00 5f f2 08 00 |q...>...|_..._...|
|00000ab0| 47 f5 08 00 96 f7 08 00 | a6 fa 08 00 35 ff 08 00 |G.......|....5...|
|00000ac0| b6 02 09 00 e0 06 09 00 | 42 0a 09 00 3b 0e 09 00 |........|B...;...|
|00000ad0| 37 13 09 00 6a 18 09 00 | 05 1d 09 00 4c 20 09 00 |7...j...|....L ..|
|00000ae0| 8d 23 09 00 fb 26 09 00 | 9c 29 09 00 18 2f 09 00 |.#...&..|.).../..|
|00000af0| af 34 09 00 a3 3e 09 00 | ed 40 09 00 44 45 09 00 |.4...>..|.@..DE..|
|00000b00| dc 4a 09 00 20 4d 09 00 | 4a 4f 09 00 74 51 09 00 |.J.. M..|JO..tQ..|
|00000b10| bb 53 09 00 7f 56 09 00 | da 5a 09 00 63 5d 09 00 |.S...V..|.Z..c]..|
|00000b20| b3 6b 09 00 d2 6e 09 00 | b0 72 09 00 47 77 09 00 |.k...n..|.r..Gw..|
|00000b30| 71 7a 09 00 18 7e 09 00 | 26 81 09 00 34 86 09 00 |qz...~..|&...4...|
|00000b40| 7b 89 09 00 c2 8b 09 00 | 30 8e 09 00 be 90 09 00 |{.......|0.......|
|00000b50| 4c 93 09 00 dc 95 09 00 | 1e 98 09 00 78 a0 09 00 |L.......|....x...|
|00000b60| 89 a4 09 00 15 a9 09 00 | 19 ac 09 00 34 af 09 00 |........|....4...|
|00000b70| 1a b2 09 00 ef b4 09 00 | 59 b8 09 00 31 ba 09 00 |........|Y...1...|
|00000b80| be bd 09 00 53 c0 09 00 | 22 c4 09 00 e2 c6 09 00 |....S...|".......|
|00000b90| 71 cb 09 00 cb cd 09 00 | fc d1 09 00 94 d5 09 00 |q.......|........|
|00000ba0| c2 d8 09 00 50 db 09 00 | a2 dd 09 00 c0 df 09 00 |....P...|........|
|00000bb0| c0 e2 09 00 75 e5 09 00 | a2 e8 09 00 49 ec 09 00 |....u...|....I...|
|00000bc0| fa f3 09 00 bc f6 09 00 | 76 fa 09 00 a2 fd 09 00 |........|v.......|
|00000bd0| 87 00 0a 00 ab 02 0a 00 | a4 05 0a 00 ab 08 0a 00 |........|........|
|00000be0| dc 0b 0a 00 18 0f 0a 00 | c7 12 0a 00 ad 15 0a 00 |........|........|
|00000bf0| d5 17 0a 00 8e 1a 0a 00 | ff 1c 0a 00 71 1f 0a 00 |........|....q...|
|00000c00| ec 21 0a 00 76 24 0a 00 | fb 26 0a 00 05 2a 0a 00 |.!..v$..|.&...*..|
|00000c10| 88 2c 0a 00 05 2f 0a 00 | 88 31 0a 00 0a 34 0a 00 |.,.../..|.1...4..|
|00000c20| d4 36 0a 00 c4 39 0a 00 | ba 3d 0a 00 7c 41 0a 00 |.6...9..|.=..|A..|
|00000c30| 3d 46 0a 00 da 4d 0a 00 | 86 51 0a 00 46 55 0a 00 |=F...M..|.Q..FU..|
|00000c40| b7 5b 0a 00 57 60 0a 00 | 28 63 0a 00 6d 65 0a 00 |.[..W`..|(c..me..|
|00000c50| 95 67 0a 00 66 6a 0a 00 | 1a 6d 0a 00 05 70 0a 00 |.g..fj..|.m...p..|
|00000c60| f0 72 0a 00 d9 75 0a 00 | c2 78 0a 00 ac 7b 0a 00 |.r...u..|.x...{..|
|00000c70| 97 7e 0a 00 78 81 0a 00 | ec 84 0a 00 51 87 0a 00 |.~..x...|....Q...|
|00000c80| b6 89 0a 00 f2 8b 0a 00 | 57 8e 0a 00 bc 90 0a 00 |........|W.......|
|00000c90| 21 93 0a 00 86 95 0a 00 | 02 99 0a 00 5a 9b 0a 00 |!.......|....Z...|
|00000ca0| c3 9d 0a 00 3f a1 0a 00 | c9 a3 0a 00 53 a6 0a 00 |....?...|....S...|
|00000cb0| de a8 0a 00 6a ab 0a 00 | f4 ad 0a 00 74 b1 0a 00 |....j...|....t...|
|00000cc0| fe b3 0a 00 88 b6 0a 00 | 12 b9 0a 00 9c bb 0a 00 |........|........|
|00000cd0| 28 be 0a 00 b2 c0 0a 00 | 3c c3 0a 00 c6 c5 0a 00 |(.......|<.......|
|00000ce0| 50 c8 0a 00 da ca 0a 00 | 58 cd 0a 00 d6 cf 0a 00 |P.......|X.......|
|00000cf0| 56 d2 0a 00 d4 d4 0a 00 | 52 d7 0a 00 d0 d9 0a 00 |V.......|R.......|
|00000d00| 4e dc 0a 00 cc de 0a 00 | 3c e2 0a 00 ba e4 0a 00 |N.......|<.......|
|00000d10| 29 e8 0a 00 a7 ea 0a 00 | 25 ed 0a 00 a3 ef 0a 00 |).......|%.......|
|00000d20| 21 f2 0a 00 9f f4 0a 00 | b6 fc 0a 00 ec fe 0a 00 |!.......|........|
|00000d30| 57 05 0b 00 5a 07 0b 00 | 9d 0e 0b 00 0e 11 0b 00 |W...Z...|........|
|00000d40| 64 14 0b 00 20 19 0b 00 | d8 1f 0b 00 11 24 0b 00 |d... ...|.....$..|
|00000d50| 36 28 0b 00 0a 2a 0b 00 | bb 2c 0b 00 52 34 0b 00 |6(...*..|.,..R4..|
|00000d60| 60 37 0b 00 41 3b 0b 00 | b8 42 0b 00 c5 47 0b 00 |`7..A;..|.B...G..|
|00000d70| 52 4a 0b 00 06 51 0b 00 | d1 56 0b 00 3f 5a 0b 00 |RJ...Q..|.V..?Z..|
|00000d80| 57 5d 0b 00 4b 60 0b 00 | 0d 63 0b 00 6b 66 0b 00 |W]..K`..|.c..kf..|
|00000d90| 08 69 0b 00 d8 6a 0b 00 | 3e 6d 0b 00 81 73 0b 00 |.i...j..|>m...s..|
|00000da0| 65 77 0b 00 34 7d 0b 00 | 37 82 0b 00 95 86 0b 00 |ew..4}..|7.......|
|00000db0| 8e 8d 0b 00 c7 90 0b 00 | cd 93 0b 00 cd 96 0b 00 |........|........|
|00000dc0| 07 9d 0b 00 62 a1 0b 00 | 5d a6 0b 00 c6 aa 0b 00 |....b...|].......|
|00000dd0| a5 af 0b 00 3c b3 0b 00 | 1c b7 0b 00 9b bb 0b 00 |....<...|........|
|00000de0| 3e c1 0b 00 9d c8 0b 00 | 9c cb 0b 00 5a d3 0b 00 |>.......|....Z...|
|00000df0| d6 d5 0b 00 e0 d8 0b 00 | f7 db 0b 00 50 e0 0b 00 |........|....P...|
|00000e00| 5a e3 0b 00 21 e7 0b 00 | 52 ea 0b 00 5f ef 0b 00 |Z...!...|R..._...|
|00000e10| a8 f3 0b 00 f2 f6 0b 00 | 3b fa 0b 00 83 fd 0b 00 |........|;.......|
|00000e20| cb 00 0c 00 13 04 0c 00 | 5b 07 0c 00 a3 0a 0c 00 |........|[.......|
|00000e30| eb 0d 0c 00 33 11 0c 00 | 7b 14 0c 00 c2 17 0c 00 |....3...|{.......|
|00000e40| 09 1b 0c 00 4e 1e 0c 00 | 93 21 0c 00 80 25 0c 00 |....N...|.!...%..|
|00000e50| 9e 2a 0c 00 be 2f 0c 00 | 9e 32 0c 00 77 38 0c 00 |.*.../..|.2..w8..|
|00000e60| b8 3a 0c 00 04 3d 0c 00 | 4c 3f 0c 00 92 41 0c 00 |.:...=..|L?...A..|
|00000e70| 37 44 0c 00 2b 46 0c 00 | 71 48 0c 00 27 4b 0c 00 |7D..+F..|qH..'K..|
|00000e80| 6d 4d 0c 00 b3 4f 0c 00 | f4 51 0c 00 8b 54 0c 00 |mM...O..|.Q...T..|
|00000e90| 30 57 0c 00 e2 59 0c 00 | 7b 5c 0c 00 c6 5e 0c 00 |0W...Y..|{\...^..|
|00000ea0| 18 61 0c 00 b3 63 0c 00 | 27 66 0c 00 cc 68 0c 00 |.a...c..|'f...h..|
|00000eb0| 63 6b 0c 00 b1 6d 0c 00 | b5 70 0c 00 ff 72 0c 00 |ck...m..|.p...r..|
|00000ec0| 5a 75 0c 00 f1 77 0c 00 | ca 79 0c 00 2f 7c 0c 00 |Zu...w..|.y../|..|
|00000ed0| 7d 7e 0c 00 cf 81 0c 00 | f1 84 0c 00 41 87 0c 00 |}~......|....A...|
|00000ee0| 8b 89 0c 00 bc 8b 0c 00 | 56 8e 0c 00 a3 90 0c 00 |........|V.......|
|00000ef0| f0 92 0c 00 8e 95 0c 00 | e3 97 0c 00 22 9a 0c 00 |........|...."...|
|00000f00| 65 9c 0c 00 0c 9f 0c 00 | 68 a1 0c 00 3e a4 0c 00 |e.......|h...>...|
|00000f10| 8b a6 0c 00 be a9 0c 00 | 0b ac 0c 00 58 ae 0c 00 |........|....X...|
|00000f20| a5 b0 0c 00 f2 b2 0c 00 | 3f b5 0c 00 3a b7 0c 00 |........|?...:...|
|00000f30| 83 b9 0c 00 8b bb 0c 00 | 97 bd 0c 00 28 c0 0c 00 |........|....(...|
|00000f40| ca c2 0c 00 94 c5 0c 00 | d6 c7 0c 00 b2 c9 0c 00 |........|........|
|00000f50| fd cb 0c 00 77 ce 0c 00 | fc d0 0c 00 0b d3 0c 00 |....w...|........|
|00000f60| 33 d5 0c 00 5e d7 0c 00 | a0 d9 0c 00 ef db 0c 00 |3...^...|........|
|00000f70| 74 de 0c 00 9b e0 0c 00 | 3d e3 0c 00 eb e5 0c 00 |t.......|=.......|
|00000f80| 12 e8 0c 00 38 eb 0c 00 | cf ed 0c 00 dd ef 0c 00 |....8...|........|
|00000f90| 37 f5 0c 00 c2 ff 0c 00 | 46 03 0d 00 19 07 0d 00 |7.......|F.......|
|00000fa0| 78 10 0d 00 08 14 0d 00 | 99 15 0d 00 28 19 0d 00 |x.......|....(...|
|00000fb0| 06 1e 0d 00 c5 20 0d 00 | 10 24 0d 00 af 28 0d 00 |..... ..|.$...(..|
|00000fc0| 9c 2e 0d 00 69 32 0d 00 | 28 37 0d 00 ef 39 0d 00 |....i2..|(7...9..|
|00000fd0| f2 3d 0d 00 16 45 0d 00 | 70 49 0d 00 08 4c 0d 00 |.=...E..|pI...L..|
|00000fe0| 70 4e 0d 00 e3 50 0d 00 | f4 52 0d 00 ea 57 0d 00 |pN...P..|.R...W..|
|00000ff0| cf 5a 0d 00 57 5d 0d 00 | 3f 61 0d 00 a9 64 0d 00 |.Z..W]..|?a...d..|
|00001000| c2 69 0d 00 8f 6d 0d 00 | 73 73 0d 00 c1 75 0d 00 |.i...m..|ss...u..|
|00001010| cc 7b 0d 00 4c 81 0d 00 | f2 86 0d 00 e3 8a 0d 00 |.{..L...|........|
|00001020| 5b 8f 0d 00 d0 94 0d 00 | c8 97 0d 00 31 9a 0d 00 |[.......|....1...|
|00001030| c5 9d 0d 00 b9 a2 0d 00 | 02 a7 0d 00 00 af 0d 00 |........|........|
|00001040| e9 b7 0d 00 e6 ba 0d 00 | 2f c1 0d 00 a4 c5 0d 00 |........|/.......|
|00001050| d9 c8 0d 00 50 d2 0d 00 | b0 d9 0d 00 f6 da 0d 00 |....P...|........|
|00001060| 2c df 0d 00 0e e1 0d 00 | 78 e5 0d 00 24 e9 0d 00 |,.......|x...$...|
|00001070| ec f0 0d 00 fa f7 0d 00 | aa fc 0d 00 a1 04 0e 00 |........|........|
|00001080| c3 07 0e 00 55 0a 0e 00 | 2b 0d 0e 00 9d 11 0e 00 |....U...|+.......|
|00001090| c3 14 0e 00 ef 17 0e 00 | 20 1c 0e 00 41 22 0e 00 |........| ...A"..|
|000010a0| 70 24 0e 00 ce 29 0e 00 | 91 2e 0e 00 5d 31 0e 00 |p$...)..|....]1..|
|000010b0| 6e 35 0e 00 10 3a 0e 00 | ab 41 0e 00 23 45 0e 00 |n5...:..|.A..#E..|
|000010c0| f2 48 0e 00 6f 4d 0e 00 | 08 53 0e 00 4b 55 0e 00 |.H..oM..|.S..KU..|
|000010d0| 92 5b 0e 00 48 62 0e 00 | 9e 65 0e 00 15 6b 0e 00 |.[..Hb..|.e...k..|
|000010e0| 01 6e 0e 00 c5 73 0e 00 | c5 79 0e 00 a6 7e 0e 00 |.n...s..|.y...~..|
|000010f0| dc 82 0e 00 bc 87 0e 00 | ad 8e 0e 00 e3 93 0e 00 |........|........|
|00001100| a0 9b 0e 00 e7 a5 0e 00 | 40 ad 0e 00 87 b1 0e 00 |........|@.......|
|00001110| 6f b4 0e 00 bd b6 0e 00 | c2 bc 0e 00 f0 c1 0e 00 |o.......|........|
|00001120| 54 c4 0e 00 35 c7 0e 00 | a9 ca 0e 00 d0 cf 0e 00 |T...5...|........|
|00001130| 73 d3 0e 00 53 d9 0e 00 | 17 dd 0e 00 70 e1 0e 00 |s...S...|....p...|
|00001140| cd e5 0e 00 5b 28 63 29 | 42 72 61 69 6e 5d 0d 0a |....[(c)|Brain]..|
|00001150| 56 69 72 75 73 20 4e 61 | 6d 65 3a 20 28 63 29 42 |Virus Na|me: (c)B|
|00001160| 72 61 69 6e 0d 0a 41 6c | 69 61 73 20 4e 61 6d 65 |rain..Al|ias Name|
|00001170| 3a 20 50 61 6b 69 73 74 | 61 6e 69 2c 20 43 6c 6f |: Pakist|ani, Clo|
|00001180| 6e 65 2c 20 4e 69 70 70 | 65 72 0d 0a 56 69 72 75 |ne, Nipp|er..Viru|
|00001190| 73 20 54 79 70 65 3a 20 | 42 6f 6f 74 20 56 69 72 |s Type: |Boot Vir|
|000011a0| 75 73 0d 0a 56 69 72 75 | 73 20 4c 65 6e 67 74 68 |us..Viru|s Length|
|000011b0| 3a 20 4e 2f 41 0d 0a 44 | 65 73 63 72 69 70 74 69 |: N/A..D|escripti|
|000011c0| 6f 6e 3a 20 54 68 69 73 | 20 76 69 72 75 73 20 69 |on: This| virus i|
|000011d0| 6e 66 65 63 74 73 20 62 | 6f 6f 74 20 73 65 63 74 |nfects b|oot sect|
|000011e0| 6f 72 73 2e 0d 0a 0d 0a | 57 68 65 6e 20 61 6e 20 |ors.....|When an |
|000011f0| 69 6e 66 65 63 74 65 64 | 20 66 69 6c 65 20 69 73 |infected| file is|
|00001200| 20 65 78 65 63 75 74 65 | 64 2c 20 74 68 65 20 76 | execute|d, the v|
|00001210| 69 72 75 73 0d 0a 69 6e | 73 74 61 6c 6c 73 20 69 |irus..in|stalls i|
|00001220| 74 73 65 6c 66 20 69 6e | 74 6f 20 6d 65 6d 6f 72 |tself in|to memor|
|00001230| 79 2e 20 54 6f 74 61 6c | 20 61 76 61 69 6c 61 62 |y. Total| availab|
|00001240| 6c 65 0d 0a 6d 65 6d 6f | 72 79 20 77 69 6c 6c 20 |le..memo|ry will |
|00001250| 64 65 63 72 65 61 73 65 | 20 62 79 20 33 2d 37 20 |decrease| by 3-7 |
|00001260| 4b 62 79 74 65 73 2e 0d | 0a 0d 0a 54 68 69 73 20 |Kbytes..|...This |
|00001270| 76 69 72 75 73 20 6d 6f | 76 65 73 20 74 68 65 20 |virus mo|ves the |
|00001280| 62 6f 6f 74 20 73 65 63 | 74 6f 72 20 61 6e 64 20 |boot sec|tor and |
|00001290| 72 65 70 6c 61 63 65 73 | 20 69 74 0d 0a 77 69 74 |replaces| it..wit|
|000012a0| 68 20 61 20 63 6f 70 79 | 20 6f 66 20 74 68 65 20 |h a copy| of the |
|000012b0| 76 69 72 75 73 2e 20 54 | 68 65 20 6f 72 69 67 69 |virus. T|he origi|
|000012c0| 6e 61 6c 20 62 6f 6f 74 | 20 73 65 63 74 6f 72 0d |nal boot| sector.|
|000012d0| 0a 77 69 6c 6c 20 62 65 | 20 6d 6f 76 65 64 20 74 |.will be| moved t|
|000012e0| 6f 20 61 6e 6f 74 68 65 | 72 20 73 65 63 74 6f 72 |o anothe|r sector|
|000012f0| 20 61 6e 64 20 6d 61 72 | 6b 65 64 20 61 73 20 62 | and mar|ked as b|
|00001300| 61 64 2e 0d 0a 54 68 69 | 73 20 76 69 72 75 73 20 |ad...Thi|s virus |
|00001310| 77 69 6c 6c 20 61 6c 73 | 6f 20 63 68 61 6e 67 65 |will als|o change|
|00001320| 20 74 68 65 20 64 69 73 | 6b 20 6c 61 62 65 6c 20 | the dis|k label |
|00001330| 74 6f 20 72 65 61 64 3a | 0d 0a 0d 0a 20 20 20 20 |to read:|.... |
|00001340| 22 28 63 29 20 42 72 61 | 69 6e 22 0d 0a 0d 0a 54 |"(c) Bra|in"....T|
|00001350| 68 65 20 66 6f 6c 6c 6f | 77 69 6e 67 20 74 65 78 |he follo|wing tex|
|00001360| 74 20 69 73 20 6c 6f 63 | 61 74 65 64 20 69 6e 20 |t is loc|ated in |
|00001370| 74 68 65 20 76 69 72 75 | 73 3a 0d 0a 0d 0a 20 20 |the viru|s:.... |
|00001380| 20 20 57 65 6c 63 6f 6d | 65 20 74 6f 20 74 68 65 | Welcom|e to the|
|00001390| 20 44 75 6e 67 65 6f 6e | 0d 0a 20 20 20 20 28 63 | Dungeon|.. (c|
|000013a0| 29 20 31 39 38 36 20 42 | 61 73 69 74 20 26 20 41 |) 1986 B|asit & A|
|000013b0| 6d 6a 61 64 20 28 70 76 | 74 29 20 4c 74 64 2e 0d |mjad (pv|t) Ltd..|
|000013c0| 0a 20 20 20 20 42 52 41 | 49 4e 20 43 4f 4d 50 55 |. BRA|IN COMPU|
|000013d0| 54 45 52 20 53 45 52 56 | 49 43 45 53 0d 0a 20 20 |TER SERV|ICES.. |
|000013e0| 20 20 37 33 30 20 4e 49 | 5a 41 42 20 42 4c 4f 43 | 730 NI|ZAB BLOC|
|000013f0| 4b 20 41 4c 4c 41 4d 41 | 20 49 51 42 41 4c 20 54 |K ALLAMA| IQBAL T|
|00001400| 4f 57 4e 0d 0a 20 20 20 | 20 4c 41 48 4f 52 45 2d |OWN.. | LAHORE-|
|00001410| 50 41 4b 49 53 54 41 4e | 0d 0a 20 20 20 20 50 48 |PAKISTAN|.. PH|
|00001420| 4f 4e 45 20 3a 34 33 30 | 37 39 31 2c 34 34 33 32 |ONE :430|791,4432|
|00001430| 34 38 2c 32 38 30 35 33 | 30 2e 0d 0a 20 20 20 20 |48,28053|0... |
|00001440| 42 65 77 61 72 65 20 6f | 66 20 74 68 69 73 20 56 |Beware o|f this V|
|00001450| 49 52 55 53 2e 2e 2e 2e | 0d 0a 20 20 20 20 43 6f |IRUS....|.. Co|
|00001460| 6e 74 61 63 74 20 75 73 | 20 66 6f 72 20 76 61 63 |ntact us| for vac|
|00001470| 63 69 6e 61 74 69 6f 6e | 2e 2e 2e 2e 2e 2e 2e 2e |cination|........|
|00001480| 2e 2e 2e 2e 2e 2e 2e 2e | 2e 0d 0a 20 20 20 20 24 |........|... $|
|00001490| 23 40 25 24 40 21 21 0d | 0a 0d 0a 5b 35 35 35 5d |#@%$@!!.|...[555]|
|000014a0| 0d 0a 56 69 72 75 73 20 | 4e 61 6d 65 3a 20 35 35 |..Virus |Name: 55|
|000014b0| 35 0d 0a 41 6c 69 61 73 | 20 4e 61 6d 65 3a 20 44 |5..Alias| Name: D|
|000014c0| 75 74 63 68 20 35 35 35 | 2c 20 51 75 69 74 2d 31 |utch 555|, Quit-1|
|000014d0| 39 39 0d 0a 56 69 72 75 | 73 20 54 79 70 65 3a 20 |99..Viru|s Type: |
|000014e0| 46 69 6c 65 20 56 69 72 | 75 73 0d 0a 56 69 72 75 |File Vir|us..Viru|
|000014f0| 73 20 4c 65 6e 67 74 68 | 3a 20 35 35 35 20 62 79 |s Length|: 555 by|
|00001500| 74 65 73 0d 0a 44 65 73 | 63 72 69 70 74 69 6f 6e |tes..Des|cription|
|00001510| 3a 20 54 68 69 73 20 76 | 69 72 75 73 20 69 6e 66 |: This v|irus inf|
|00001520| 65 63 74 73 20 2a 2e 43 | 4f 4d 20 61 6e 64 20 2a |ects *.C|OM and *|
|00001530| 2e 45 58 45 0d 0a 20 20 | 20 20 20 20 20 20 20 20 |.EXE.. | |
|00001540| 20 20 20 66 69 6c 65 73 | 2c 20 61 73 20 77 65 6c | files|, as wel|
|00001550| 6c 20 61 73 20 43 4f 4d | 4d 41 4e 44 2e 43 4f 4d |l as COM|MAND.COM|
|00001560| 2e 0d 0a 0d 0a 57 68 65 | 6e 20 61 6e 20 69 6e 66 |.....Whe|n an inf|
|00001570| 65 63 74 65 64 20 66 69 | 6c 65 20 69 73 20 65 78 |ected fi|le is ex|
|00001580| 65 63 75 74 65 64 2c 20 | 74 68 65 20 76 69 72 75 |ecuted, |the viru|
|00001590| 73 0d 0a 69 6e 73 74 61 | 6c 6c 73 20 69 74 73 65 |s..insta|lls itse|
|000015a0| 6c 66 20 69 6e 74 6f 20 | 6d 65 6d 6f 72 79 2e 20 |lf into |memory. |
|000015b0| 54 6f 74 61 6c 20 61 76 | 61 69 6c 61 62 6c 65 0d |Total av|ailable.|
|000015c0| 0a 6d 65 6d 6f 72 79 20 | 77 69 6c 6c 20 64 65 63 |.memory |will dec|
|000015d0| 72 65 61 73 65 20 62 79 | 20 35 36 30 20 62 79 74 |rease by| 560 byt|
|000015e0| 65 73 2e 0d 0a 0d 0a 4f | 6e 63 65 20 74 68 65 20 |es.....O|nce the |
|000015f0| 76 69 72 75 73 20 69 73 | 20 6d 65 6d 6f 72 79 20 |virus is| memory |
|00001600| 72 65 73 69 64 65 6e 74 | 2c 20 69 74 20 77 69 6c |resident|, it wil|
|00001610| 6c 20 69 6e 66 65 63 74 | 0d 0a 2a 2e 43 4f 4d 20 |l infect|..*.COM |
|00001620| 61 6e 64 20 2a 2e 45 58 | 45 20 66 69 6c 65 73 20 |and *.EX|E files |
|00001630| 61 73 20 74 68 65 79 20 | 61 72 65 20 65 78 65 63 |as they |are exec|
|00001640| 75 74 65 64 2e 0d 0a 49 | 6e 66 65 63 74 65 64 20 |uted...I|nfected |
|00001650| 66 69 6c 65 73 20 77 69 | 6c 6c 20 69 6e 63 72 65 |files wi|ll incre|
|00001660| 61 73 65 20 69 6e 20 73 | 69 7a 65 20 62 79 20 35 |ase in s|ize by 5|
|00001670| 35 35 20 62 79 74 65 73 | 2c 0d 0a 77 69 74 68 20 |55 bytes|,..with |
|00001680| 74 68 65 20 76 69 72 75 | 73 20 62 65 69 6e 67 20 |the viru|s being |
|00001690| 6c 6f 63 61 74 65 64 20 | 61 74 20 74 68 65 20 65 |located |at the e|
|000016a0| 6e 64 20 6f 66 20 74 68 | 65 0d 0a 69 6e 66 65 63 |nd of th|e..infec|
|000016b0| 74 65 64 20 66 69 6c 65 | 2e 20 49 6e 66 65 63 74 |ted file|. Infect|
|000016c0| 65 64 20 66 69 6c 65 73 | 20 77 69 6c 6c 20 68 61 |ed files| will ha|
|000016d0| 76 65 20 74 68 65 69 72 | 20 64 61 74 65 0d 0a 61 |ve their| date..a|
|000016e0| 6e 64 20 74 69 6d 65 20 | 72 65 63 6f 72 64 73 20 |nd time |records |
|000016f0| 75 70 64 61 74 65 64 20 | 74 6f 20 74 68 65 20 64 |updated |to the d|
|00001700| 61 74 65 20 61 6e 64 20 | 74 69 6d 65 20 74 68 65 |ate and |time the|
|00001710| 0d 0a 69 6e 66 65 63 74 | 69 6f 6e 20 6f 63 63 75 |..infect|ion occu|
|00001720| 72 72 65 64 2e 0d 0a 0d | 0a 5b 41 69 72 43 6f 70 |rred....|.[AirCop|
|00001730| 5d 0d 0a 56 69 72 75 73 | 20 4e 61 6d 65 3a 20 41 |]..Virus| Name: A|
|00001740| 69 72 43 6f 70 0d 0a 41 | 6c 69 61 73 20 4e 61 6d |irCop..A|lias Nam|
|00001750| 65 3a 0d 0a 56 69 72 75 | 73 20 54 79 70 65 3a 20 |e:..Viru|s Type: |
|00001760| 42 6f 6f 74 20 56 69 72 | 75 73 0d 0a 56 69 72 75 |Boot Vir|us..Viru|
|00001770| 73 20 4c 65 6e 67 74 68 | 3a 20 4e 2f 41 0d 0a 44 |s Length|: N/A..D|
|00001780| 65 73 63 72 69 70 74 69 | 6f 6e 3a 20 54 68 69 73 |escripti|on: This|
|00001790| 20 76 69 72 75 73 20 69 | 6e 66 65 63 74 73 20 62 | virus i|nfects b|
|000017a0| 6f 6f 74 20 73 65 63 74 | 6f 72 73 2e 0d 0a 0d 0a |oot sect|ors.....|
|000017b0| 57 68 65 6e 20 61 20 73 | 79 73 74 65 6d 20 69 73 |When a s|ystem is|
|000017c0| 20 62 6f 6f 74 65 64 20 | 66 72 6f 6d 20 61 20 64 | booted |from a d|
|000017d0| 69 73 6b 20 69 6e 66 65 | 63 74 65 64 20 62 79 0d |isk infe|cted by.|
|000017e0| 0a 74 68 65 20 76 69 72 | 75 73 2c 20 20 74 68 65 |.the vir|us, the|
|000017f0| 20 76 69 72 75 73 20 77 | 69 6c 6c 20 69 6e 73 74 | virus w|ill inst|
|00001800| 61 6c 6c 20 69 74 73 65 | 6c 66 20 6d 65 6d 6f 72 |all itse|lf memor|
|00001810| 79 0d 0a 72 65 73 69 64 | 65 6e 74 2e 20 20 54 6f |y..resid|ent. To|
|00001820| 74 61 6c 20 73 79 73 74 | 65 6d 20 6d 65 6d 6f 72 |tal syst|em memor|
|00001830| 79 20 77 69 6c 6c 20 64 | 65 63 72 65 61 73 65 20 |y will d|ecrease |
|00001840| 62 79 0d 0a 31 2c 30 32 | 34 20 62 79 74 65 73 2e |by..1,02|4 bytes.|
|00001850| 0d 0a 0d 0a 4f 6e 63 65 | 20 74 68 65 20 76 69 72 |....Once| the vir|
|00001860| 75 73 20 69 73 20 6d 65 | 6d 6f 72 79 20 72 65 73 |us is me|mory res|
|00001870| 69 64 65 6e 74 2c 20 61 | 6c 6c 20 75 6e 70 72 6f |ident, a|ll unpro|
|00001880| 74 65 63 74 65 64 0d 0a | 64 69 73 6b 65 74 74 65 |tected..|diskette|
|00001890| 73 20 61 63 63 65 73 73 | 65 64 20 77 69 6c 6c 20 |s access|ed will |
|000018a0| 62 65 20 69 6e 66 65 63 | 74 65 64 2e 20 20 54 68 |be infec|ted. Th|
|000018b0| 65 20 76 69 72 75 73 0d | 0a 77 69 6c 6c 20 72 65 |e virus.|.will re|
|000018c0| 70 6c 61 63 65 20 74 68 | 65 20 66 6c 6f 70 70 79 |place th|e floppy|
|000018d0| 20 62 6f 6f 74 20 73 65 | 63 74 6f 72 20 77 69 74 | boot se|ctor wit|
|000018e0| 68 20 61 20 63 6f 70 79 | 20 6f 66 0d 0a 69 74 73 |h a copy| of..its|
|000018f0| 65 6c 66 2e 0d 0a 0d 0a | 54 68 65 20 76 69 72 75 |elf.....|The viru|
|00001900| 73 20 77 69 6c 6c 20 73 | 68 6f 77 20 74 68 65 20 |s will s|how the |
|00001910| 66 6f 6c 6c 6f 77 69 6e | 67 20 6d 65 73 73 61 67 |followin|g messag|
|00001920| 65 20 6f 6e 0d 0a 69 6e | 66 65 63 74 65 64 20 73 |e on..in|fected s|
|00001930| 79 73 74 65 6d 73 3a 0d | 0a 0d 0a 20 20 20 20 20 |ystems:.|... |
|00001940| 22 52 65 64 20 53 74 61 | 74 65 2c 20 47 65 72 6d |"Red Sta|te, Germ|
|00001950| 20 4f 66 66 65 6e 73 69 | 76 65 2e 0d 0a 20 20 20 | Offensi|ve... |
|00001960| 20 20 20 41 49 52 43 4f | 50 2e 22 0d 0a 0d 0a 5b | AIRCO|P."....[|
|00001970| 41 6c 61 6d 65 64 61 5d | 0d 0a 56 69 72 75 73 20 |Alameda]|..Virus |
|00001980| 4e 61 6d 65 3a 20 41 6c | 61 6d 65 64 61 0d 0a 41 |Name: Al|ameda..A|
|00001990| 6c 69 61 73 20 4e 61 6d | 65 3a 20 41 6c 65 6d 65 |lias Nam|e: Aleme|
|000019a0| 64 61 0d 0a 56 69 72 75 | 73 20 54 79 70 65 3a 20 |da..Viru|s Type: |
|000019b0| 42 6f 6f 74 20 56 69 72 | 75 73 0d 0a 56 69 72 75 |Boot Vir|us..Viru|
|000019c0| 73 20 4c 65 6e 67 74 68 | 3a 20 4e 2f 41 0d 0a 44 |s Length|: N/A..D|
|000019d0| 65 73 63 72 69 70 74 69 | 6f 6e 3a 20 54 68 69 73 |escripti|on: This|
|000019e0| 20 76 69 72 75 73 20 69 | 6e 66 65 63 74 73 20 62 | virus i|nfects b|
|000019f0| 6f 6f 74 20 73 65 63 74 | 6f 72 73 2e 0d 0a 0d 0a |oot sect|ors.....|
|00001a00| 57 68 65 6e 20 74 68 65 | 20 73 79 73 74 65 6d 20 |When the| system |
|00001a10| 69 73 20 62 6f 6f 74 65 | 64 20 66 72 6f 6d 20 61 |is boote|d from a|
|00001a20| 20 64 69 73 6b 20 69 6e | 66 65 63 74 65 64 20 62 | disk in|fected b|
|00001a30| 79 0d 0a 74 68 65 20 76 | 69 72 75 73 2c 20 74 68 |y..the v|irus, th|
|00001a40| 65 20 76 69 72 75 73 20 | 77 69 6c 6c 20 69 6e 73 |e virus |will ins|
|00001a50| 74 61 6c 6c 20 69 74 73 | 65 6c 66 20 6d 65 6d 6f |tall its|elf memo|
|00001a60| 72 79 0d 0a 72 65 73 69 | 64 65 6e 74 2e 0d 0a 0d |ry..resi|dent....|
|00001a70| 0a 4f 6e 63 65 20 74 68 | 65 20 76 69 72 75 73 20 |.Once th|e virus |
|00001a80| 69 73 20 6d 65 6d 6f 72 | 79 20 72 65 73 69 64 65 |is memor|y reside|
|00001a90| 6e 74 2c 20 61 6c 6c 20 | 75 6e 70 72 6f 74 65 63 |nt, all |unprotec|
|00001aa0| 74 65 64 0d 0a 35 2d 31 | 2f 34 22 20 33 36 30 6b |ted..5-1|/4" 360k|
|00001ab0| 20 64 69 73 6b 65 74 74 | 65 73 20 77 69 6c 6c 20 | diskett|es will |
|00001ac0| 62 65 20 69 6e 66 65 63 | 74 65 64 20 77 68 65 6e |be infec|ted when|
|00001ad0| 20 69 74 0d 0a 61 63 74 | 69 76 61 74 65 73 20 74 | it..act|ivates t|
|00001ae0| 68 72 6f 75 67 68 20 61 | 20 77 61 72 6d 20 62 6f |hrough a| warm bo|
|00001af0| 6f 74 20 28 43 54 52 4c | 2d 41 4c 54 2d 44 45 4c |ot (CTRL|-ALT-DEL|
|00001b00| 29 2e 20 28 54 68 65 0d | 0a 76 69 72 75 73 20 72 |). (The.|.virus r|
|00001b10| 65 6d 61 69 6e 73 20 69 | 6e 20 6d 65 6d 6f 72 79 |emains i|n memory|
|00001b20| 20 61 66 74 65 72 20 61 | 20 77 61 72 6d 20 62 6f | after a| warm bo|
|00001b30| 6f 74 29 2e 0d 0a 0d 0a | 5b 41 6d 62 75 6c 61 6e |ot).....|[Ambulan|
|00001b40| 63 65 5d 0d 0a 56 69 72 | 75 73 20 4e 61 6d 65 3a |ce]..Vir|us Name:|
|00001b50| 20 41 6d 62 75 6c 61 6e | 63 65 0d 0a 41 6c 69 61 | Ambulan|ce..Alia|
|00001b60| 73 20 4e 61 6d 65 3a 20 | 41 6d 62 75 6c 61 6e 63 |s Name: |Ambulanc|
|00001b70| 65 20 43 61 72 2c 20 52 | 65 64 58 0d 0a 56 69 72 |e Car, R|edX..Vir|
|00001b80| 75 73 20 54 79 70 65 3a | 20 46 69 6c 65 20 56 69 |us Type:| File Vi|
|00001b90| 72 75 73 0d 0a 56 69 72 | 75 73 20 4c 65 6e 67 74 |rus..Vir|us Lengt|
|00001ba0| 68 3a 20 37 39 36 20 62 | 79 74 65 73 0d 0a 44 65 |h: 796 b|ytes..De|
|00001bb0| 73 63 72 69 70 74 69 6f | 6e 3a 20 54 68 69 73 20 |scriptio|n: This |
|00001bc0| 76 69 72 75 73 20 69 6e | 66 65 63 74 73 20 2a 2e |virus in|fects *.|
|00001bd0| 43 4f 4d 20 66 69 6c 65 | 73 2e 0d 0a 0d 0a 57 68 |COM file|s.....Wh|
|00001be0| 65 6e 20 61 6e 20 69 6e | 66 65 63 74 65 64 20 66 |en an in|fected f|
|00001bf0| 69 6c 65 20 69 73 20 65 | 78 65 63 75 74 65 64 2c |ile is e|xecuted,|
|00001c00| 20 74 68 65 20 76 69 72 | 75 73 20 77 69 6c 6c 0d | the vir|us will.|
|00001c10| 0a 61 74 74 65 6d 70 74 | 20 74 6f 20 69 6e 66 65 |.attempt| to infe|
|00001c20| 63 74 20 6f 6e 65 20 2a | 2e 43 4f 4d 20 66 69 6c |ct one *|.COM fil|
|00001c30| 65 2e 0d 0a 0d 0a 4f 74 | 68 65 72 20 73 79 6d 70 |e.....Ot|her symp|
|00001c40| 74 6f 6d 73 20 69 6e 63 | 6c 75 64 65 20 64 69 73 |toms inc|lude dis|
|00001c50| 70 6c 61 79 69 6e 67 20 | 61 20 6d 6f 76 69 6e 67 |playing |a moving|
|00001c60| 0d 0a 61 6d 62 75 6c 61 | 6e 63 65 20 61 74 20 74 |..ambula|nce at t|
|00001c70| 68 65 20 62 6f 74 74 6f | 6d 20 6f 66 20 74 68 65 |he botto|m of the|
|00001c80| 20 73 63 72 65 65 6e 20 | 61 73 20 77 65 6c 6c 20 | screen |as well |
|00001c90| 61 73 0d 0a 70 6c 61 79 | 69 6e 67 20 74 68 65 20 |as..play|ing the |
|00001ca0| 73 6f 75 6e 64 20 6f 66 | 20 61 20 73 69 72 65 6e |sound of| a siren|
|00001cb0| 2e 0d 0a 0d 0a 5b 41 6e | 74 69 45 58 45 5d 0d 0a |.....[An|tiEXE]..|
|00001cc0| 56 69 72 75 73 20 4e 61 | 6d 65 3a 20 41 6e 74 69 |Virus Na|me: Anti|
|00001cd0| 45 58 45 0d 0a 41 6c 69 | 61 73 20 4e 61 6d 65 3a |EXE..Ali|as Name:|
|00001ce0| 20 44 33 2c 20 4e 65 77 | 42 75 67 2c 20 43 4d 4f | D3, New|Bug, CMO|
|00001cf0| 53 34 0d 0a 56 69 72 75 | 73 20 54 79 70 65 3a 20 |S4..Viru|s Type: |
|00001d00| 42 6f 6f 74 20 56 69 72 | 75 73 0d 0a 56 69 72 75 |Boot Vir|us..Viru|
|00001d10| 73 20 4c 65 6e 67 74 68 | 3a 20 4e 2f 41 0d 0a 44 |s Length|: N/A..D|
|00001d20| 65 73 63 72 69 70 74 69 | 6f 6e 3a 20 54 68 69 73 |escripti|on: This|
|00001d30| 20 76 69 72 75 73 20 69 | 6e 66 65 63 74 73 20 62 | virus i|nfects b|
|00001d40| 6f 6f 74 20 73 65 63 74 | 6f 72 73 2e 0d 0a 0d 0a |oot sect|ors.....|
|00001d50| 57 68 65 6e 20 74 68 65 | 20 73 79 73 74 65 6d 20 |When the| system |
|00001d60| 69 73 20 62 6f 6f 74 65 | 64 20 66 72 6f 6d 20 61 |is boote|d from a|
|00001d70| 20 64 69 73 6b 20 69 6e | 66 65 63 74 65 64 20 62 | disk in|fected b|
|00001d80| 79 0d 0a 74 68 65 20 76 | 69 72 75 73 2c 20 20 74 |y..the v|irus, t|
|00001d90| 68 65 20 76 69 72 75 73 | 20 77 69 6c 6c 20 69 6e |he virus| will in|
|00001da0| 73 74 61 6c 6c 20 69 74 | 73 65 6c 66 20 6d 65 6d |stall it|self mem|
|00001db0| 6f 72 79 0d 0a 72 65 73 | 69 64 65 6e 74 2e 20 20 |ory..res|ident. |
|00001dc0| 54 6f 74 61 6c 20 61 76 | 61 69 6c 61 62 6c 65 20 |Total av|ailable |
|00001dd0| 6d 65 6d 6f 72 79 20 77 | 69 6c 6c 20 64 65 63 72 |memory w|ill decr|
|00001de0| 65 61 73 65 0d 0a 62 79 | 20 31 2c 30 32 34 20 62 |ease..by| 1,024 b|
|00001df0| 79 74 65 73 2e 20 20 54 | 68 65 20 76 69 72 75 73 |ytes. T|he virus|
|00001e00| 20 77 69 6c 6c 20 61 6c | 73 6f 0d 0a 6f 76 65 72 | will al|so..over|
|00001e10| 77 72 69 74 65 20 74 68 | 65 20 4d 61 73 74 65 72 |write th|e Master|
|00001e20| 20 42 6f 6f 74 20 53 65 | 63 74 6f 72 20 77 69 74 | Boot Se|ctor wit|
|00001e30| 68 20 61 20 63 6f 70 79 | 20 6f 66 0d 0a 74 68 65 |h a copy| of..the|
|00001e40| 20 76 69 72 75 73 2e 0d | 0a 0d 0a 4f 6e 63 65 20 | virus..|...Once |
|00001e50| 74 68 65 20 76 69 72 75 | 73 20 69 73 20 6d 65 6d |the viru|s is mem|
|00001e60| 6f 72 79 20 72 65 73 69 | 64 65 6e 74 2c 20 69 74 |ory resi|dent, it|
|00001e70| 20 77 69 6c 6c 0d 0a 69 | 6e 66 65 63 74 20 61 6c | will..i|nfect al|
|00001e80| 6c 20 75 6e 70 72 6f 74 | 65 63 74 65 64 20 64 69 |l unprot|ected di|
|00001e90| 73 6b 65 74 74 65 73 2e | 0d 0a 0d 0a 5b 41 74 6f |skettes.|....[Ato|
|00001ea0| 6d 69 63 5d 0d 0a 56 69 | 72 75 73 20 4e 61 6d 65 |mic]..Vi|rus Name|
|00001eb0| 3a 20 41 74 6f 6d 69 63 | 0d 0a 41 6c 69 61 73 20 |: Atomic|..Alias |
|00001ec0| 4e 61 6d 65 3a 0d 0a 56 | 69 72 75 73 20 54 79 70 |Name:..V|irus Typ|
|00001ed0| 65 3a 20 46 69 6c 65 20 | 56 69 72 75 73 0d 0a 56 |e: File |Virus..V|
|00001ee0| 69 72 75 73 20 4c 65 6e | 67 74 68 3a 20 33 37 31 |irus Len|gth: 371|
|00001ef0| 20 62 79 74 65 73 0d 0a | 44 65 73 63 72 69 70 74 | bytes..|Descript|
|00001f00| 69 6f 6e 3a 20 54 68 69 | 73 20 76 69 72 75 73 20 |ion: Thi|s virus |
|00001f10| 69 6e 66 65 63 74 73 20 | 2a 2e 43 4f 4d 20 66 69 |infects |*.COM fi|
|00001f20| 6c 65 73 2e 0d 0a 0d 0a | 57 68 65 6e 20 61 6e 20 |les.....|When an |
|00001f30| 69 6e 66 65 63 74 65 64 | 20 66 69 6c 65 20 69 73 |infected| file is|
|00001f40| 20 65 78 65 63 75 74 65 | 64 2c 20 74 68 65 20 76 | execute|d, the v|
|00001f50| 69 72 75 73 20 77 69 6c | 6c 0d 0a 69 6e 66 65 63 |irus wil|l..infec|
|00001f60| 74 20 74 68 65 20 66 69 | 72 73 74 20 74 77 6f 20 |t the fi|rst two |
|00001f70| 2a 2e 43 4f 4d 20 66 69 | 6c 65 73 20 6c 6f 63 61 |*.COM fi|les loca|
|00001f80| 74 65 64 20 69 6e 20 74 | 68 65 0d 0a 73 61 6d 65 |ted in t|he..same|
|00001f90| 20 64 69 72 65 63 74 6f | 72 79 2e 20 20 54 68 65 | directo|ry. The|
|00001fa0| 20 76 69 72 75 73 20 77 | 69 6c 6c 20 70 65 72 6d | virus w|ill perm|
|00001fb0| 61 6e 65 6e 74 6c 79 0d | 0a 6f 76 65 72 77 72 69 |anently.|.overwri|
|00001fc0| 74 65 20 74 68 65 20 66 | 69 72 73 74 20 33 37 31 |te the f|irst 371|
|00001fd0| 20 62 79 74 65 73 20 6f | 66 20 74 68 65 20 66 69 | bytes o|f the fi|
|00001fe0| 6c 65 73 20 69 74 0d 0a | 69 6e 66 65 63 74 73 2e |les it..|infects.|
|00001ff0| 20 20 44 61 74 65 20 61 | 6e 64 20 74 69 6d 65 20 | Date a|nd time |
|00002000| 66 69 65 6c 64 73 20 6f | 66 20 69 6e 66 65 63 74 |fields o|f infect|
|00002010| 65 64 20 66 69 6c 65 73 | 0d 0a 77 69 6c 6c 20 6e |ed files|..will n|
|00002020| 6f 74 20 62 65 20 61 6c | 74 65 72 65 64 2e 20 54 |ot be al|tered. T|
|00002030| 68 65 20 76 69 72 75 73 | 20 77 69 6c 6c 20 73 68 |he virus| will sh|
|00002040| 6f 77 20 74 68 65 0d 0a | 66 6f 6c 6c 6f 77 69 6e |ow the..|followin|
|00002050| 67 20 6d 65 73 73 61 67 | 65 20 61 66 74 65 72 20 |g messag|e after |
|00002060| 69 6e 66 65 63 74 69 6e | 67 20 61 20 66 69 6c 65 |infectin|g a file|
|00002070| 3a 0d 0a 0d 0a 20 20 20 | 20 22 42 61 64 20 63 6f |:.... | "Bad co|
|00002080| 6d 6d 61 6e 64 20 6f 72 | 20 66 69 6c 65 20 6e 61 |mmand or| file na|
|00002090| 6d 65 22 0d 0a 0d 0a 54 | 68 65 20 66 6f 6c 6c 6f |me"....T|he follo|
|000020a0| 77 69 6e 67 20 74 65 78 | 74 20 73 74 72 69 6e 67 |wing tex|t string|
|000020b0| 20 69 73 20 6c 6f 63 61 | 74 65 64 20 69 6e 20 74 | is loca|ted in t|
|000020c0| 68 65 20 76 69 72 75 73 | 3a 0d 0a 0d 0a 20 20 20 |he virus|:.... |
|000020d0| 20 22 5b 54 41 44 31 41 | 5d 20 4d 65 6d 6f 72 79 | "[TAD1A|] Memory|
|000020e0| 20 4c 61 70 73 65 20 2d | 2d 20 54 6f 72 6f 6e 74 | Lapse -|- Toront|
|000020f0| 6f 2c 20 43 41 4e 41 44 | 41 22 0d 0a 20 20 20 20 |o, CANAD|A".. |
|00002100| 22 54 68 65 20 41 74 6f | 6d 69 63 20 44 75 73 74 |"The Ato|mic Dust|
|00002110| 62 69 6e 20 31 41 20 2d | 2d 20 54 68 69 73 20 69 |bin 1A -|- This i|
|00002120| 73 20 6a 75 73 74 20 74 | 68 65 20 66 69 72 73 74 |s just t|he first|
|00002130| 0d 0a 20 20 20 20 73 74 | 65 70 22 0d 0a 20 20 20 |.. st|ep".. |
|00002140| 20 22 42 61 64 20 63 6f | 6d 6d 61 6e 64 20 6f 72 | "Bad co|mmand or|
|00002150| 20 66 69 6c 65 20 6e 61 | 6d 65 22 0d 0a 20 20 20 | file na|me".. |
|00002160| 20 22 2a 2e 43 4f 4d 20 | 2e 2e 20 63 20 44 75 73 | "*.COM |.. c Dus|
|00002170| 74 62 69 6e 20 31 41 20 | 2d 2d 20 54 68 69 73 20 |tbin 1A |-- This |
|00002180| 69 73 20 6a 75 73 74 20 | 74 68 65 20 66 69 72 73 |is just |the firs|
|00002190| 74 0d 0a 20 20 20 20 73 | 74 65 70 22 0d 0a 0d 0a |t.. s|tep"....|
|000021a0| 5b 41 75 73 74 72 5f 50 | 61 72 61 73 69 74 65 5d |[Austr_P|arasite]|
|000021b0| 0d 0a 56 69 72 75 73 20 | 4e 61 6d 65 3a 20 41 75 |..Virus |Name: Au|
|000021c0| 73 74 72 5f 50 61 72 61 | 73 69 74 65 0d 0a 41 6c |str_Para|site..Al|
|000021d0| 69 61 73 20 4e 61 6d 65 | 3a 20 41 75 73 73 69 65 |ias Name|: Aussie|
|000021e0| 20 50 61 72 61 73 69 74 | 65 0d 0a 56 69 72 75 73 | Parasit|e..Virus|
|000021f0| 20 54 79 70 65 3a 20 46 | 69 6c 65 20 56 69 72 75 | Type: F|ile Viru|
|00002200| 73 0d 0a 56 69 72 75 73 | 20 4c 65 6e 67 74 68 3a |s..Virus| Length:|
|00002210| 20 32 39 32 20 62 79 74 | 65 73 0d 0a 44 65 73 63 | 292 byt|es..Desc|
|00002220| 72 69 70 74 69 6f 6e 3a | 20 54 68 69 73 20 76 69 |ription:| This vi|
|00002230| 72 75 73 20 69 6e 66 65 | 63 74 73 20 2a 2e 43 4f |rus infe|cts *.CO|
|00002240| 4d 20 66 69 6c 65 73 20 | 61 73 0d 0a 20 20 20 20 |M files |as.. |
|00002250| 20 20 20 20 20 20 20 20 | 20 77 65 6c 6c 20 61 73 | | well as|
|00002260| 20 43 4f 4d 4d 41 4e 44 | 2e 43 4f 4d 2e 0d 0a 0d | COMMAND|.COM....|
|00002270| 0a 57 68 65 6e 20 61 6e | 20 69 6e 66 65 63 74 65 |.When an| infecte|
|00002280| 64 20 66 69 6c 65 20 69 | 73 20 65 78 65 63 75 74 |d file i|s execut|
|00002290| 65 64 2c 20 74 68 65 20 | 76 69 72 75 73 20 77 69 |ed, the |virus wi|
|000022a0| 6c 6c 0d 0a 69 6e 73 74 | 61 6c 6c 20 69 74 73 65 |ll..inst|all itse|
|000022b0| 6c 66 20 69 6e 74 6f 20 | 6d 65 6d 6f 72 79 2e 20 |lf into |memory. |
|000022c0| 54 6f 74 61 6c 20 61 76 | 61 69 6c 61 62 6c 65 20 |Total av|ailable |
|000022d0| 6d 65 6d 6f 72 79 0d 0a | 77 69 6c 6c 20 64 65 63 |memory..|will dec|
|000022e0| 72 65 61 73 65 20 62 79 | 20 33 32 30 20 62 79 74 |rease by| 320 byt|
|000022f0| 65 73 2e 0d 0a 0d 0a 4f | 6e 63 65 20 74 68 65 20 |es.....O|nce the |
|00002300| 76 69 72 75 73 20 69 73 | 20 6d 65 6d 6f 72 79 20 |virus is| memory |
|00002310| 72 65 73 69 64 65 6e 74 | 2c 20 61 6c 6c 20 65 78 |resident|, all ex|
|00002320| 65 63 75 74 69 6e 67 0d | 0a 2a 2e 43 4f 4d 20 66 |ecuting.|.*.COM f|
|00002330| 69 6c 65 73 20 77 69 6c | 6c 20 62 65 20 69 6e 66 |iles wil|l be inf|
|00002340| 65 63 74 65 64 2e 20 49 | 6e 66 65 63 74 65 64 20 |ected. I|nfected |
|00002350| 66 69 6c 65 73 20 77 69 | 6c 6c 0d 0a 69 6e 63 72 |files wi|ll..incr|
|00002360| 65 61 73 65 20 69 6e 20 | 73 69 7a 65 20 62 79 20 |ease in |size by |
|00002370| 32 39 32 20 62 79 74 65 | 73 2c 20 77 69 74 68 20 |292 byte|s, with |
|00002380| 74 68 65 20 76 69 72 75 | 73 0d 0a 62 65 69 6e 67 |the viru|s..being|
|00002390| 20 6c 6f 63 61 74 65 64 | 20 61 74 20 74 68 65 20 | located| at the |
|000023a0| 65 6e 64 20 6f 66 20 74 | 68 65 20 69 6e 66 65 63 |end of t|he infec|
|000023b0| 74 65 64 20 66 69 6c 65 | 2e 0d 0a 44 61 74 65 20 |ted file|...Date |
|000023c0| 61 6e 64 20 74 69 6d 65 | 20 72 65 63 6f 72 64 73 |and time| records|
|000023d0| 20 6f 66 20 69 6e 66 65 | 63 74 65 64 20 66 69 6c | of infe|cted fil|
|000023e0| 65 73 20 77 69 6c 6c 20 | 6e 6f 74 0d 0a 62 65 20 |es will |not..be |
|000023f0| 61 6c 74 65 72 65 64 2e | 0d 0a 0d 0a 53 79 6d 70 |altered.|....Symp|
|00002400| 74 6f 6d 73 20 69 6e 63 | 6c 75 64 65 20 73 79 73 |toms inc|lude sys|
|00002410| 74 65 6d 20 68 61 6e 67 | 69 6e 67 2e 0d 0a 0d 0a |tem hang|ing.....|
|00002420| 54 68 65 20 66 6f 6c 6c | 6f 77 69 6e 67 20 74 65 |The foll|owing te|
|00002430| 78 74 20 73 74 72 69 6e | 67 20 69 73 20 76 69 73 |xt strin|g is vis|
|00002440| 69 62 6c 65 20 69 6e 20 | 74 68 65 20 76 69 72 75 |ible in |the viru|
|00002450| 73 3a 0d 0a 0d 0a 20 20 | 20 20 22 41 75 73 74 72 |s:.... | "Austr|
|00002460| 61 6c 69 61 6e 20 50 61 | 72 61 73 69 74 65 22 0d |alian Pa|rasite".|
|00002470| 0a 0d 0a 5b 42 6c 6a 65 | 63 5d 0d 0a 56 69 72 75 |...[Blje|c]..Viru|
|00002480| 73 20 4e 61 6d 65 3a 20 | 42 6c 6a 65 63 0d 0a 41 |s Name: |Bljec..A|
|00002490| 6c 69 61 73 20 4e 61 6d | 65 3a 20 42 6c 61 63 6b |lias Nam|e: Black|
|000024a0| 20 4a 65 63 0d 0a 56 69 | 72 75 73 20 54 79 70 65 | Jec..Vi|rus Type|
|000024b0| 3a 20 46 69 6c 65 20 56 | 69 72 75 73 0d 0a 56 69 |: File V|irus..Vi|
|000024c0| 72 75 73 20 4c 65 6e 67 | 74 68 3a 20 32 33 31 2d |rus Leng|th: 231-|
|000024d0| 34 34 30 20 62 79 74 65 | 73 0d 0a 44 65 73 63 72 |440 byte|s..Descr|
|000024e0| 69 70 74 69 6f 6e 3a 20 | 54 68 69 73 20 76 69 72 |iption: |This vir|
|000024f0| 75 73 20 69 6e 66 65 63 | 74 73 20 2a 2e 43 4f 4d |us infec|ts *.COM|
|00002500| 20 66 69 6c 65 73 2e 0d | 0a 0d 0a 57 68 65 6e 20 | files..|...When |
|00002510| 61 6e 20 69 6e 66 65 63 | 74 65 64 20 66 69 6c 65 |an infec|ted file|
|00002520| 20 69 73 20 65 78 65 63 | 75 74 65 64 2c 20 74 68 | is exec|uted, th|
|00002530| 65 20 76 69 72 75 73 20 | 77 69 6c 6c 0d 0a 69 6e |e virus |will..in|
|00002540| 66 65 63 74 20 74 68 72 | 65 65 20 2a 2e 43 4f 4d |fect thr|ee *.COM|
|00002550| 20 70 72 6f 67 72 61 6d | 73 20 69 6e 20 74 68 65 | program|s in the|
|00002560| 20 73 61 6d 65 20 64 69 | 72 65 63 74 6f 72 79 2e | same di|rectory.|
|00002570| 0d 0a 49 6e 66 65 63 74 | 65 64 20 66 69 6c 65 73 |..Infect|ed files|
|00002580| 20 77 69 6c 6c 20 69 6e | 63 72 65 61 73 65 20 69 | will in|crease i|
|00002590| 6e 20 73 69 7a 65 20 62 | 79 20 32 33 31 2d 34 34 |n size b|y 231-44|
|000025a0| 30 0d 0a 62 79 74 65 73 | 2c 20 77 69 74 68 20 74 |0..bytes|, with t|
|000025b0| 68 65 20 76 69 72 75 73 | 20 62 65 69 6e 67 20 6c |he virus| being l|
|000025c0| 6f 63 61 74 65 64 20 61 | 74 20 74 68 65 0d 0a 62 |ocated a|t the..b|
|000025d0| 65 67 69 6e 6e 69 6e 67 | 20 6f 66 20 74 68 65 20 |eginning| of the |
|000025e0| 69 6e 66 65 63 74 65 64 | 20 66 69 6c 65 2e 20 49 |infected| file. I|
|000025f0| 6e 66 65 63 74 65 64 20 | 66 69 6c 65 73 0d 0a 77 |nfected |files..w|
|00002600| 69 6c 6c 20 68 61 76 65 | 20 74 68 65 69 72 20 64 |ill have| their d|
|00002610| 61 74 65 20 61 6e 64 20 | 74 69 6d 65 20 72 65 63 |ate and |time rec|
|00002620| 6f 72 64 73 20 75 70 64 | 61 74 65 64 20 74 6f 0d |ords upd|ated to.|
|00002630| 0a 74 68 65 20 64 61 74 | 65 20 61 6e 64 20 74 69 |.the dat|e and ti|
|00002640| 6d 65 20 74 68 65 20 69 | 6e 66 65 63 74 69 6f 6e |me the i|nfection|
|00002650| 20 6f 63 63 75 72 72 65 | 64 2e 0d 0a 0d 0a 53 79 | occurre|d.....Sy|
|00002660| 6d 70 74 6f 6d 73 20 69 | 6e 63 6c 75 64 65 20 73 |mptoms i|nclude s|
|00002670| 79 73 74 65 6d 20 68 61 | 6e 67 69 6e 67 2e 0d 0a |ystem ha|nging...|
|00002680| 0d 0a 5b 42 75 74 74 65 | 72 66 6c 79 5d 0d 0a 56 |..[Butte|rfly]..V|
|00002690| 69 72 75 73 20 4e 61 6d | 65 3a 20 42 75 74 74 65 |irus Nam|e: Butte|
|000026a0| 72 66 6c 79 0d 0a 41 6c | 69 61 73 20 4e 61 6d 65 |rfly..Al|ias Name|
|000026b0| 3a 20 42 75 74 74 65 72 | 66 6c 69 65 73 0d 0a 56 |: Butter|flies..V|
|000026c0| 69 72 75 73 20 54 79 70 | 65 3a 20 46 69 6c 65 20 |irus Typ|e: File |
|000026d0| 56 69 72 75 73 0d 0a 56 | 69 72 75 73 20 4c 65 6e |Virus..V|irus Len|
|000026e0| 67 74 68 3a 20 33 30 32 | 20 62 79 74 65 73 0d 0a |gth: 302| bytes..|
|000026f0| 44 65 73 63 72 69 70 74 | 69 6f 6e 3a 20 54 68 69 |Descript|ion: Thi|
|00002700| 73 20 76 69 72 75 73 20 | 69 6e 66 65 63 74 73 20 |s virus |infects |
|00002710| 2a 2e 43 4f 4d 20 66 69 | 6c 65 73 2e 0d 0a 0d 0a |*.COM fi|les.....|
|00002720| 57 68 65 6e 20 61 6e 20 | 69 6e 66 65 63 74 65 64 |When an |infected|
|00002730| 20 66 69 6c 65 20 69 73 | 20 65 78 65 63 75 74 65 | file is| execute|
|00002740| 64 2c 20 74 68 65 20 76 | 69 72 75 73 20 77 69 6c |d, the v|irus wil|
|00002750| 6c 0d 0a 69 6e 66 65 63 | 74 20 61 6c 6c 20 74 68 |l..infec|t all th|
|00002760| 65 20 2a 2e 43 4f 4d 20 | 66 69 6c 65 73 20 6c 6f |e *.COM |files lo|
|00002770| 63 61 74 65 64 20 69 6e | 20 74 68 65 20 73 61 6d |cated in| the sam|
|00002780| 65 0d 0a 64 69 72 65 63 | 74 6f 72 79 2e 0d 0a 0d |e..direc|tory....|
|00002790| 0a 49 6e 66 65 63 74 65 | 64 20 66 69 6c 65 73 20 |.Infecte|d files |
|000027a0| 77 69 6c 6c 20 69 6e 63 | 72 65 61 73 65 20 69 6e |will inc|rease in|
|000027b0| 20 73 69 7a 65 20 62 79 | 20 33 30 32 20 62 79 74 | size by| 302 byt|
|000027c0| 65 73 2c 0d 0a 77 69 74 | 68 20 74 68 65 20 76 69 |es,..wit|h the vi|
|000027d0| 72 75 73 20 62 65 69 6e | 67 20 6c 6f 63 61 74 65 |rus bein|g locate|
|000027e0| 64 20 61 74 20 74 68 65 | 20 65 6e 64 20 6f 66 20 |d at the| end of |
|000027f0| 74 68 65 0d 0a 69 6e 66 | 65 63 74 65 64 20 66 69 |the..inf|ected fi|
|00002800| 6c 65 2e 20 20 49 6e 66 | 65 63 74 65 64 20 66 69 |le. Inf|ected fi|
|00002810| 6c 65 73 20 77 69 6c 6c | 20 6e 6f 74 20 68 61 76 |les will| not hav|
|00002820| 65 20 74 68 65 69 72 0d | 0a 64 61 74 65 20 61 6e |e their.|.date an|
|00002830| 64 20 74 69 6d 65 20 72 | 65 63 6f 72 64 73 20 61 |d time r|ecords a|
|00002840| 6c 74 65 72 65 64 2e 0d | 0a 0d 0a 54 68 65 20 66 |ltered..|...The f|
|00002850| 6f 6c 6c 6f 77 69 6e 67 | 20 74 65 78 74 20 73 74 |ollowing| text st|
|00002860| 72 69 6e 67 20 69 73 20 | 6c 6f 63 61 74 65 64 20 |ring is |located |
|00002870| 69 6e 20 74 68 65 20 76 | 69 72 75 73 3a 0d 0a 0d |in the v|irus:...|
|00002880| 0a 20 20 20 20 22 47 6f | 64 64 61 6d 6e 20 42 75 |. "Go|ddamn Bu|
|00002890| 74 74 65 72 66 6c 69 65 | 73 22 0d 0a 20 20 20 20 |tterflie|s".. |
|000028a0| 22 2a 2e 43 4f 4d 22 0d | 0a 0d 0a 5b 43 61 73 63 |"*.COM".|...[Casc|
|000028b0| 61 64 65 5d 0d 0a 56 69 | 72 75 73 20 4e 61 6d 65 |ade]..Vi|rus Name|
|000028c0| 3a 20 43 61 73 63 61 64 | 65 0d 0a 41 6c 69 61 73 |: Cascad|e..Alias|
|000028d0| 20 4e 61 6d 65 3a 20 42 | 6c 61 63 6b 20 4a 61 63 | Name: B|lack Jac|
|000028e0| 6b 2c 20 46 61 6c 6c 69 | 6e 67 0d 0a 56 69 72 75 |k, Falli|ng..Viru|
|000028f0| 73 20 54 79 70 65 3a 20 | 46 69 6c 65 20 56 69 72 |s Type: |File Vir|
|00002900| 75 73 0d 0a 56 69 72 75 | 73 20 4c 65 6e 67 74 68 |us..Viru|s Length|
|00002910| 3a 20 31 2c 37 30 31 20 | 6f 72 20 31 2c 37 30 34 |: 1,701 |or 1,704|
|00002920| 20 62 79 74 65 73 0d 0a | 44 65 73 63 72 69 70 74 | bytes..|Descript|
|00002930| 69 6f 6e 3a 20 54 68 69 | 73 20 76 69 72 75 73 20 |ion: Thi|s virus |
|00002940| 69 6e 66 65 63 74 73 20 | 2a 2e 43 4f 4d 20 66 69 |infects |*.COM fi|
|00002950| 6c 65 73 2e 0d 0a 0d 0a | 57 68 65 6e 20 61 6e 20 |les.....|When an |
|00002960| 69 6e 66 65 63 74 65 64 | 20 66 69 6c 65 20 69 73 |infected| file is|
|00002970| 20 65 78 65 63 75 74 65 | 64 2c 20 74 68 65 20 76 | execute|d, the v|
|00002980| 69 72 75 73 0d 0a 69 6e | 73 74 61 6c 6c 73 20 69 |irus..in|stalls i|
|00002990| 74 73 65 6c 66 20 69 6e | 74 6f 20 6d 65 6d 6f 72 |tself in|to memor|
|000029a0| 79 2e 0d 0a 0d 0a 4f 6e | 63 65 20 74 68 65 20 76 |y.....On|ce the v|
|000029b0| 69 72 75 73 20 69 73 20 | 6d 65 6d 6f 72 79 20 72 |irus is |memory r|
|000029c0| 65 73 69 64 65 6e 74 2c | 20 69 74 20 77 69 6c 6c |esident,| it will|
|000029d0| 20 63 61 75 73 65 0d 0a | 74 68 65 20 63 68 61 72 | cause..|the char|
|000029e0| 61 63 74 65 72 73 20 6f | 6e 20 74 68 65 20 73 63 |acters o|n the sc|
|000029f0| 72 65 65 6e 20 74 6f 20 | 66 61 6c 6c 20 74 6f 20 |reen to |fall to |
|00002a00| 74 68 65 20 62 6f 74 74 | 6f 6d 0d 0a 6f 66 20 74 |the bott|om..of t|
|00002a10| 68 65 20 73 63 72 65 65 | 6e 2e 0d 0a 0d 0a 5b 43 |he scree|n.....[C|
|00002a20| 6f 6e 6e 69 65 5d 0d 0a | 56 69 72 75 73 20 4e 61 |onnie]..|Virus Na|
|00002a30| 6d 65 3a 20 43 6f 6e 6e | 69 65 0d 0a 41 6c 69 61 |me: Conn|ie..Alia|
|00002a40| 73 20 4e 61 6d 65 3a 0d | 0a 56 69 72 75 73 20 54 |s Name:.|.Virus T|
|00002a50| 79 70 65 3a 20 46 69 6c | 65 20 56 69 72 75 73 0d |ype: Fil|e Virus.|
|00002a60| 0a 56 69 72 75 73 20 4c | 65 6e 67 74 68 3a 20 31 |.Virus L|ength: 1|
|00002a70| 2c 37 36 31 20 62 79 74 | 65 73 0d 0a 44 65 73 63 |,761 byt|es..Desc|
|00002a80| 72 69 70 74 69 6f 6e 3a | 20 54 68 69 73 20 76 69 |ription:| This vi|
|00002a90| 72 75 73 20 69 6e 66 65 | 63 74 73 20 2a 2e 43 4f |rus infe|cts *.CO|
|00002aa0| 4d 20 20 66 69 6c 65 73 | 2c 20 61 73 0d 0a 20 20 |M files|, as.. |
|00002ab0| 20 20 20 20 20 20 20 20 | 20 20 20 77 65 6c 6c 20 | | well |
|00002ac0| 61 73 20 43 4f 4d 4d 41 | 4e 44 2e 43 4f 4d 2e 0d |as COMMA|ND.COM..|
|00002ad0| 0a 0d 0a 57 68 65 6e 20 | 61 6e 20 69 6e 66 65 63 |...When |an infec|
|00002ae0| 74 65 64 20 66 69 6c 65 | 20 69 73 20 65 78 65 63 |ted file| is exec|
|00002af0| 75 74 65 64 2c 20 74 68 | 65 20 76 69 72 75 73 0d |uted, th|e virus.|
|00002b00| 0a 69 6e 73 74 61 6c 6c | 73 20 69 74 73 65 6c 66 |.install|s itself|
|00002b10| 20 69 6e 74 6f 20 6d 65 | 6d 6f 72 79 2e 20 54 6f | into me|mory. To|
|00002b20| 74 61 6c 20 61 76 61 69 | 6c 61 62 6c 65 0d 0a 6d |tal avai|lable..m|
|00002b30| 65 6d 6f 72 79 20 77 69 | 6c 6c 20 64 65 63 72 65 |emory wi|ll decre|
|00002b40| 61 73 65 20 62 79 20 33 | 2c 35 32 30 20 62 79 74 |ase by 3|,520 byt|
|00002b50| 65 73 2e 0d 0a 0d 0a 4f | 6e 63 65 20 74 68 65 20 |es.....O|nce the |
|00002b60| 76 69 72 75 73 20 69 73 | 20 6d 65 6d 6f 72 79 20 |virus is| memory |
|00002b70| 72 65 73 69 64 65 6e 74 | 2c 20 69 74 20 77 69 6c |resident|, it wil|
|00002b80| 6c 20 69 6e 66 65 63 74 | 0d 0a 2a 2e 43 4f 4d 20 |l infect|..*.COM |
|00002b90| 66 69 6c 65 73 20 77 68 | 65 6e 20 74 68 65 79 20 |files wh|en they |
|00002ba0| 61 72 65 20 65 78 65 63 | 75 74 65 64 2c 20 6f 70 |are exec|uted, op|
|00002bb0| 65 6e 65 64 2c 20 6f 72 | 20 63 6f 70 69 65 64 2e |ened, or| copied.|
|00002bc0| 0d 0a 49 6e 66 65 63 74 | 65 64 20 66 69 6c 65 73 |..Infect|ed files|
|00002bd0| 20 77 69 6c 6c 20 69 6e | 63 72 65 61 73 65 20 69 | will in|crease i|
|00002be0| 6e 20 73 69 7a 65 20 62 | 79 20 31 2c 37 36 31 0d |n size b|y 1,761.|
|00002bf0| 0a 62 79 74 65 73 2c 20 | 77 69 74 68 20 74 68 65 |.bytes, |with the|
|00002c00| 20 76 69 72 75 73 20 62 | 65 69 6e 67 20 6c 6f 63 | virus b|eing loc|
|00002c10| 61 74 65 64 20 61 74 20 | 74 68 65 20 65 6e 64 20 |ated at |the end |
|00002c20| 6f 66 0d 0a 74 68 65 20 | 69 6e 66 65 63 74 65 64 |of..the |infected|
|00002c30| 20 66 69 6c 65 2e 20 54 | 68 65 20 64 61 74 65 20 | file. T|he date |
|00002c40| 61 6e 64 20 74 69 6d 65 | 20 69 6e 66 6f 72 6d 61 |and time| informa|
|00002c50| 74 69 6f 6e 20 6f 66 0d | 0a 69 6e 66 65 63 74 65 |tion of.|.infecte|
|00002c60| 64 20 66 69 6c 65 73 20 | 77 69 6c 6c 20 6e 6f 74 |d files |will not|
|00002c70| 20 62 65 20 61 6c 74 65 | 72 65 64 2e 0d 0a 0d 0a | be alte|red.....|
|00002c80| 54 68 65 20 66 6f 6c 6c | 6f 77 69 6e 67 20 74 65 |The foll|owing te|
|00002c90| 78 74 20 73 74 72 69 6e | 67 20 63 61 6e 20 62 65 |xt strin|g can be|
|00002ca0| 20 66 6f 75 6e 64 20 69 | 6e 20 74 68 65 0d 0a 76 | found i|n the..v|
|00002cb0| 69 72 75 73 3a 0d 0a 0d | 0a 20 20 20 20 22 54 68 |irus:...|. "Th|
|00002cc0| 69 73 20 69 73 20 3c 43 | 6f 6e 6e 69 65 3e 20 57 |is is <C|onnie> W|
|00002cd0| 72 69 74 74 65 6e 20 62 | 79 20 44 61 72 6b 20 53 |ritten b|y Dark S|
|00002ce0| 6c 61 79 65 72 20 69 6e | 0d 0a 20 20 20 20 4b 65 |layer in|.. Ke|
|00002cf0| 65 6c 75 6e 67 20 54 41 | 49 57 41 4e 20 50 3a 5c |elung TA|IWAN P:\|
|00002d00| 43 4f 4d 4d 41 4e 44 2e | 43 4f 4d 22 0d 0a 0d 0a |COMMAND.|COM"....|
|00002d10| 5b 43 56 69 72 75 73 5d | 0d 0a 56 69 72 75 73 20 |[CVirus]|..Virus |
|00002d20| 4e 61 6d 65 3a 20 43 56 | 69 72 75 73 0d 0a 41 6c |Name: CV|irus..Al|
|00002d30| 69 61 73 20 4e 61 6d 65 | 3a 20 4e 6f 77 68 65 72 |ias Name|: Nowher|
|00002d40| 65 20 4d 61 6e 2c 20 56 | 4d 65 73 73 69 0d 0a 56 |e Man, V|Messi..V|
|00002d50| 69 72 75 73 20 54 79 70 | 65 3a 20 46 69 6c 65 20 |irus Typ|e: File |
|00002d60| 56 69 72 75 73 0d 0a 56 | 69 72 75 73 20 4c 65 6e |Virus..V|irus Len|
|00002d70| 67 74 68 3a 0d 0a 44 65 | 73 63 72 69 70 74 69 6f |gth:..De|scriptio|
|00002d80| 6e 3a 20 54 68 69 73 20 | 76 69 72 75 73 20 69 6e |n: This |virus in|
|00002d90| 66 65 63 74 73 20 2a 2e | 43 4f 4d 20 20 61 6e 64 |fects *.|COM and|
|00002da0| 20 2a 2e 45 58 45 0d 0a | 20 20 20 20 20 20 20 20 | *.EXE..| |
|00002db0| 20 20 20 20 20 66 69 6c | 65 73 20 74 68 61 74 20 | fil|es that |
|00002dc0| 61 72 65 20 6c 61 72 67 | 65 72 20 74 68 61 6e 20 |are larg|er than |
|00002dd0| 36 2c 33 30 30 0d 0a 20 | 20 20 20 20 20 20 20 20 |6,300.. | |
|00002de0| 20 20 20 20 62 79 74 65 | 73 20 69 6e 20 73 69 7a | byte|s in siz|
|00002df0| 65 2e 0d 0a 0d 0a 57 68 | 65 6e 20 61 6e 20 69 6e |e.....Wh|en an in|
|00002e00| 66 65 63 74 65 64 20 66 | 69 6c 65 20 69 73 20 65 |fected f|ile is e|
|00002e10| 78 65 63 75 74 65 64 2c | 20 74 68 65 20 76 69 72 |xecuted,| the vir|
|00002e20| 75 73 20 77 69 6c 6c 0d | 0a 73 65 61 72 63 68 20 |us will.|.search |
|00002e30| 66 6f 72 20 61 20 73 75 | 69 74 61 62 6c 65 20 66 |for a su|itable f|
|00002e40| 69 6c 65 20 74 6f 20 69 | 6e 66 65 63 74 20 28 6c |ile to i|nfect (l|
|00002e50| 61 72 67 65 72 20 74 68 | 61 6e 0d 0a 36 2c 33 30 |arger th|an..6,30|
|00002e60| 30 20 62 79 74 65 73 20 | 69 6e 20 73 69 7a 65 29 |0 bytes |in size)|
|00002e70| 2e 20 49 6e 66 65 63 74 | 65 64 20 66 69 6c 65 73 |. Infect|ed files|
|00002e80| 20 77 69 6c 6c 20 68 61 | 76 65 20 74 68 65 0d 0a | will ha|ve the..|
|00002e90| 66 69 72 73 74 20 6f 72 | 69 67 69 6e 61 6c 20 36 |first or|iginal 6|
|00002ea0| 2c 32 38 36 20 62 79 74 | 65 73 20 6f 76 65 72 77 |,286 byt|es overw|
|00002eb0| 72 69 74 74 65 6e 20 62 | 79 20 74 68 65 0d 0a 76 |ritten b|y the..v|
|00002ec0| 69 72 75 73 2e 20 44 61 | 74 65 20 61 6e 64 20 74 |irus. Da|te and t|
|00002ed0| 69 6d 65 20 69 6e 66 6f | 72 6d 61 74 69 6f 6e 20 |ime info|rmation |
|00002ee0| 6f 66 20 69 6e 66 65 63 | 74 65 64 20 66 69 6c 65 |of infec|ted file|
|00002ef0| 73 0d 0a 77 69 6c 6c 20 | 6e 6f 74 20 62 65 20 61 |s..will |not be a|
|00002f00| 6c 74 65 72 65 64 2e 20 | 20 4f 6e 63 65 20 61 20 |ltered. | Once a |
|00002f10| 66 69 6c 65 20 69 73 20 | 73 75 63 63 65 73 73 66 |file is |successf|
|00002f20| 75 6c 6c 79 0d 0a 69 6e | 66 65 63 74 65 64 2c 20 |ully..in|fected, |
|00002f30| 74 68 65 20 66 6f 6c 6c | 6f 77 69 6e 67 20 6d 65 |the foll|owing me|
|00002f40| 73 73 61 67 65 20 77 69 | 6c 6c 20 62 65 20 64 69 |ssage wi|ll be di|
|00002f50| 73 70 6c 61 79 65 64 0d | 0a 6f 6e 20 74 68 65 20 |splayed.|.on the |
|00002f60| 73 63 72 65 65 6e 3a 0d | 0a 0d 0a 20 20 20 20 22 |screen:.|... "|
|00002f70| 4f 75 74 20 6f 66 20 6d | 65 6d 6f 72 79 22 0d 0a |Out of m|emory"..|
|00002f80| 0d 0a 49 66 20 69 6e 66 | 65 63 74 69 6f 6e 20 69 |..If inf|ection i|
|00002f90| 73 20 6e 6f 74 20 70 6f | 73 73 69 62 6c 65 2c 20 |s not po|ssible, |
|00002fa0| 74 68 65 20 66 6f 6c 6c | 6f 77 69 6e 67 0d 0a 6d |the foll|owing..m|
|00002fb0| 65 73 73 61 67 65 20 77 | 69 6c 6c 20 62 65 20 64 |essage w|ill be d|
|00002fc0| 69 73 70 6c 61 79 65 64 | 3a 0d 0a 0d 0a 20 20 20 |isplayed|:.... |
|00002fd0| 20 22 41 6c 6c 20 66 69 | 6c 65 73 20 69 6e 66 65 | "All fi|les infe|
|00002fe0| 63 74 65 64 2e 20 20 4d | 69 73 73 69 6f 6e 20 63 |cted. M|ission c|
|00002ff0| 6f 6d 70 6c 65 74 65 2e | 22 0d 0a 0d 0a 54 68 65 |omplete.|"....The|
|00003000| 20 66 6f 6c 6c 6f 77 69 | 6e 67 20 74 65 78 74 20 | followi|ng text |
|00003010| 73 74 72 69 6e 67 20 63 | 61 6e 20 62 65 20 66 6f |string c|an be fo|
|00003020| 75 6e 64 20 69 6e 20 74 | 68 65 0d 0a 76 69 72 75 |und in t|he..viru|
|00003030| 73 3a 0d 0a 0d 0a 20 20 | 20 20 22 4e 4d 41 4e 22 |s:.... | "NMAN"|
|00003040| 0d 0a 20 20 20 20 22 42 | 4d 41 4e 22 0d 0a 20 20 |.. "B|MAN".. |
|00003050| 20 20 22 2a 2e 45 58 45 | 22 0d 0a 0d 0a 5b 44 61 | "*.EXE|"....[Da|
|00003060| 74 61 4c 6f 63 6b 5d 0d | 0a 56 69 72 75 73 20 4e |taLock].|.Virus N|
|00003070| 61 6d 65 3a 20 44 61 74 | 61 4c 6f 63 6b 0d 0a 41 |ame: Dat|aLock..A|
|00003080| 6c 69 61 73 20 4e 61 6d | 65 3a 20 44 61 74 61 6c |lias Nam|e: Datal|
|00003090| 6f 63 6b 2e 39 32 30 2e | 41 2c 20 56 39 32 30 0d |ock.920.|A, V920.|
|000030a0| 0a 56 69 72 75 73 20 54 | 79 70 65 3a 20 46 69 6c |.Virus T|ype: Fil|
|000030b0| 65 20 56 69 72 75 73 0d | 0a 56 69 72 75 73 20 4c |e Virus.|.Virus L|
|000030c0| 65 6e 67 74 68 3a 20 39 | 32 30 20 62 79 74 65 73 |ength: 9|20 bytes|
|000030d0| 0d 0a 44 65 73 63 72 69 | 70 74 69 6f 6e 3a 20 54 |..Descri|ption: T|
|000030e0| 68 69 73 20 76 69 72 75 | 73 20 69 6e 66 65 63 74 |his viru|s infect|
|000030f0| 73 20 2a 2e 43 4f 4d 20 | 61 6e 64 20 2a 2e 45 58 |s *.COM |and *.EX|
|00003100| 45 0d 0a 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |E.. | |
|00003110| 66 69 6c 65 73 2e 0d 0a | 49 6e 74 65 72 72 75 70 |files...|Interrup|
|00003120| 74 20 76 65 63 74 6f 72 | 73 20 68 6f 6f 6b 65 64 |t vector|s hooked|
|00003130| 3a 20 49 4e 54 20 32 31 | 68 0d 0a 0d 0a 49 6e 66 |: INT 21|h....Inf|
|00003140| 65 63 74 69 6f 6e 20 6d | 65 74 68 6f 64 3a 20 57 |ection m|ethod: W|
|00003150| 68 65 6e 20 61 6e 20 69 | 6e 66 65 63 74 65 64 20 |hen an i|nfected |
|00003160| 66 69 6c 65 20 72 75 6e | 73 2c 20 74 68 65 0d 0a |file run|s, the..|
|00003170| 76 69 72 75 73 20 6c 6f | 61 64 73 20 69 74 73 65 |virus lo|ads itse|
|00003180| 6c 66 20 69 6e 74 6f 20 | 6d 65 6d 6f 72 79 2e 20 |lf into |memory. |
|00003190| 57 68 69 6c 65 20 6c 6f | 61 64 65 64 2c 20 69 74 |While lo|aded, it|
|000031a0| 0d 0a 69 6e 66 65 63 74 | 73 20 61 6e 79 20 66 69 |..infect|s any fi|
|000031b0| 6c 65 20 74 68 61 74 20 | 65 78 65 63 75 74 65 73 |le that |executes|
|000031c0| 2e 20 49 6e 66 65 63 74 | 65 64 20 66 69 6c 65 73 |. Infect|ed files|
|000031d0| 0d 0a 69 6e 63 72 65 61 | 73 65 20 62 79 20 39 32 |..increa|se by 92|
|000031e0| 30 20 62 79 74 65 73 2e | 0d 0a 0d 0a 44 61 6d 61 |0 bytes.|....Dama|
|000031f0| 67 65 3a 20 41 66 74 65 | 72 20 41 75 67 75 73 74 |ge: Afte|r August|
|00003200| 20 31 39 39 30 2c 20 74 | 68 65 20 76 69 72 75 73 | 1990, t|he virus|
|00003210| 20 77 6f 6e 27 74 20 61 | 6c 6c 6f 77 0d 0a 66 69 | won't a|llow..fi|
|00003220| 6c 65 73 20 77 69 74 68 | 20 74 68 65 20 65 78 74 |les with| the ext|
|00003230| 65 6e 73 69 6f 6e 20 2e | 3f 42 46 20 74 6f 20 62 |ension .|?BF to b|
|00003240| 65 20 6f 70 65 6e 65 64 | 2e 20 57 68 65 6e 0d 0a |e opened|. When..|
|00003250| 61 6e 20 61 74 74 65 6d | 70 74 20 69 73 20 6d 61 |an attem|pt is ma|
|00003260| 64 65 2c 20 69 74 20 64 | 69 73 70 6c 61 79 73 20 |de, it d|isplays |
|00003270| 74 68 65 20 65 72 72 6f | 6e 65 6f 75 73 0d 0a 65 |the erro|neous..e|
|00003280| 72 72 6f 72 20 6d 65 73 | 73 61 67 65 20 22 54 6f |rror mes|sage "To|
|00003290| 6f 20 6d 61 6e 79 20 66 | 69 6c 65 73 20 6f 70 65 |o many f|iles ope|
|000032a0| 6e 2e 22 0d 0a 0d 0a 5b | 44 65 6e 7a 75 6b 6f 5d |n."....[|Denzuko]|
|000032b0| 0d 0a 56 69 72 75 73 20 | 4e 61 6d 65 3a 20 44 65 |..Virus |Name: De|
|000032c0| 6e 7a 75 6b 6f 0d 0a 41 | 6c 69 61 73 20 4e 61 6d |nzuko..A|lias Nam|
|000032d0| 65 3a 20 44 65 6e 20 5a | 75 6b 0d 0a 56 69 72 75 |e: Den Z|uk..Viru|
|000032e0| 73 20 54 79 70 65 3a 20 | 42 6f 6f 74 20 56 69 72 |s Type: |Boot Vir|
|000032f0| 75 73 0d 0a 56 69 72 75 | 73 20 4c 65 6e 67 74 68 |us..Viru|s Length|
|00003300| 3a 20 4e 2f 41 0d 0a 44 | 65 73 63 72 69 70 74 69 |: N/A..D|escripti|
|00003310| 6f 6e 3a 20 54 68 69 73 | 20 76 69 72 75 73 20 69 |on: This| virus i|
|00003320| 6e 66 65 63 74 73 20 62 | 6f 6f 74 20 73 65 63 74 |nfects b|oot sect|
|00003330| 6f 72 73 2e 0d 0a 0d 0a | 49 6e 66 65 63 74 69 6f |ors.....|Infectio|
|00003340| 6e 20 6d 65 74 68 6f 64 | 3a 20 57 68 65 6e 20 74 |n method|: When t|
|00003350| 68 65 20 73 79 73 74 65 | 6d 20 61 74 74 65 6d 70 |he syste|m attemp|
|00003360| 74 73 20 74 6f 20 62 6f | 6f 74 0d 0a 66 72 6f 6d |ts to bo|ot..from|
|00003370| 20 61 6e 20 69 6e 66 65 | 63 74 65 64 20 64 69 73 | an infe|cted dis|
|00003380| 6b 65 74 74 65 2c 20 74 | 68 65 20 76 69 72 75 73 |kette, t|he virus|
|00003390| 20 6c 6f 61 64 73 20 69 | 74 73 65 6c 66 0d 0a 69 | loads i|tself..i|
|000033a0| 6e 74 6f 20 6d 65 6d 6f | 72 79 2d 2d 65 76 65 6e |nto memo|ry--even|
|000033b0| 20 69 66 20 74 68 65 20 | 62 6f 6f 74 20 66 61 69 | if the |boot fai|
|000033c0| 6c 73 2e 20 57 68 69 6c | 65 20 6c 6f 61 64 65 64 |ls. Whil|e loaded|
|000033d0| 2c 0d 0a 74 68 65 20 76 | 69 72 75 73 20 61 74 74 |,..the v|irus att|
|000033e0| 65 6d 70 74 73 20 74 6f | 20 69 6e 66 65 63 74 20 |empts to| infect |
|000033f0| 61 6e 79 20 61 63 63 65 | 73 73 65 64 0d 0a 64 69 |any acce|ssed..di|
|00003400| 73 6b 65 74 74 65 2e 0d | 0a 0d 0a 44 61 6d 61 67 |skette..|...Damag|
|00003410| 65 3a 20 57 68 65 6e 20 | 3c 43 74 72 6c 3e 3c 41 |e: When |<Ctrl><A|
|00003420| 6c 74 3e 3c 44 65 6c 3e | 20 69 73 20 70 72 65 73 |lt><Del>| is pres|
|00003430| 73 65 64 2c 20 74 68 65 | 0d 0a 6d 65 73 73 61 67 |sed, the|..messag|
|00003440| 65 20 22 44 65 6e 20 5a | 75 6b 22 20 69 73 20 64 |e "Den Z|uk" is d|
|00003450| 69 73 70 6c 61 79 65 64 | 20 61 6e 64 20 74 68 65 |isplayed| and the|
|00003460| 20 73 79 73 74 65 6d 20 | 73 65 65 6d 73 0d 0a 74 | system |seems..t|
|00003470| 6f 20 72 65 62 6f 6f 74 | 2e 20 48 6f 77 65 76 65 |o reboot|. Howeve|
|00003480| 72 2c 20 74 68 65 20 76 | 69 72 75 73 20 72 65 6d |r, the v|irus rem|
|00003490| 61 69 6e 73 20 69 6e 20 | 6d 65 6d 6f 72 79 2e 0d |ains in |memory..|
|000034a0| 0a 42 65 63 61 75 73 65 | 20 74 68 65 20 76 69 72 |.Because| the vir|
|000034b0| 75 73 20 77 61 73 20 64 | 65 73 69 67 6e 65 64 20 |us was d|esigned |
|000034c0| 66 6f 72 20 33 36 30 20 | 4b 42 0d 0a 64 69 73 6b |for 360 |KB..disk|
|000034d0| 65 74 74 65 73 2c 20 69 | 74 20 75 6e 69 6e 74 65 |ettes, i|t uninte|
|000034e0| 6e 74 69 6f 6e 61 6c 6c | 79 20 64 65 73 74 72 6f |ntionall|y destro|
|000034f0| 79 73 20 64 61 74 61 20 | 6f 6e 20 33 2e 35 0d 0a |ys data |on 3.5..|
|00003500| 69 6e 63 68 20 6f 72 20 | 31 2e 32 20 4d 42 20 64 |inch or |1.2 MB d|
|00003510| 69 73 6b 65 74 74 65 73 | 2e 0d 0a 0d 0a 5b 44 69 |iskettes|.....[Di|
|00003520| 65 5f 48 61 72 64 5f 32 | 5d 0d 0a 56 69 72 75 73 |e_Hard_2|]..Virus|
|00003530| 20 4e 61 6d 65 3a 20 44 | 69 65 5f 48 61 72 64 5f | Name: D|ie_Hard_|
|00003540| 32 0d 0a 41 6c 69 61 73 | 20 4e 61 6d 65 3a 20 44 |2..Alias| Name: D|
|00003550| 48 32 0d 0a 56 69 72 75 | 73 20 54 79 70 65 3a 20 |H2..Viru|s Type: |
|00003560| 46 69 6c 65 20 56 69 72 | 75 73 0d 0a 56 69 72 75 |File Vir|us..Viru|
|00003570| 73 20 4c 65 6e 67 74 68 | 3a 20 34 2c 30 30 30 20 |s Length|: 4,000 |
|00003580| 62 79 74 65 73 0d 0a 44 | 65 73 63 72 69 70 74 69 |bytes..D|escripti|
|00003590| 6f 6e 3a 20 54 68 69 73 | 20 76 69 72 75 73 20 69 |on: This| virus i|
|000035a0| 6e 66 65 63 74 73 20 2a | 2e 43 4f 4d 20 61 6e 64 |nfects *|.COM and|
|000035b0| 20 2a 2e 45 58 45 0d 0a | 20 20 20 20 20 20 20 20 | *.EXE..| |
|000035c0| 20 20 20 20 20 66 69 6c | 65 73 2e 0d 0a 49 6e 74 | fil|es...Int|
|000035d0| 65 72 72 75 70 74 20 76 | 65 63 74 6f 72 73 20 68 |errupt v|ectors h|
|000035e0| 6f 6f 6b 65 64 3a 20 49 | 4e 54 20 32 31 68 0d 0a |ooked: I|NT 21h..|
|000035f0| 0d 0a 49 6e 66 65 63 74 | 69 6f 6e 20 6d 65 74 68 |..Infect|ion meth|
|00003600| 6f 64 3a 20 57 68 65 6e | 20 61 6e 20 69 6e 66 65 |od: When| an infe|
|00003610| 63 74 65 64 20 66 69 6c | 65 20 72 75 6e 73 2c 20 |cted fil|e runs, |
|00003620| 74 68 65 0d 0a 76 69 72 | 75 73 20 6c 6f 61 64 73 |the..vir|us loads|
|00003630| 20 69 74 73 65 6c 66 20 | 69 6e 74 6f 20 6d 65 6d | itself |into mem|
|00003640| 6f 72 79 2e 20 57 68 69 | 6c 65 20 6c 6f 61 64 65 |ory. Whi|le loade|
|00003650| 64 2c 20 69 74 0d 0a 69 | 6e 66 65 63 74 73 20 61 |d, it..i|nfects a|
|00003660| 63 63 65 73 73 65 64 20 | 65 78 65 63 75 74 61 62 |ccessed |executab|
|00003670| 6c 65 20 66 69 6c 65 73 | 2e 20 49 6e 66 65 63 74 |le files|. Infect|
|00003680| 65 64 20 66 69 6c 65 73 | 0d 0a 69 6e 63 72 65 61 |ed files|..increa|
|00003690| 73 65 20 62 79 20 34 2c | 30 30 30 20 62 79 74 65 |se by 4,|000 byte|
|000036a0| 73 2e 0d 0a 0d 0a 44 61 | 6d 61 67 65 3a 20 55 6e |s.....Da|mage: Un|
|000036b0| 64 65 72 20 61 6e 61 6c | 79 73 69 73 0d 0a 0d 0a |der anal|ysis....|
|000036c0| 5b 44 69 72 5d 0d 0a 56 | 69 72 75 73 20 4e 61 6d |[Dir]..V|irus Nam|
|000036d0| 65 3a 20 44 69 72 0d 0a | 41 6c 69 61 73 20 4e 61 |e: Dir..|Alias Na|
|000036e0| 6d 65 3a 20 44 49 52 0d | 0a 56 69 72 75 73 20 54 |me: DIR.|.Virus T|
|000036f0| 79 70 65 3a 20 46 69 6c | 65 20 56 69 72 75 73 0d |ype: Fil|e Virus.|
|00003700| 0a 56 69 72 75 73 20 4c | 65 6e 67 74 68 3a 20 36 |.Virus L|ength: 6|
|00003710| 39 31 20 62 79 74 65 73 | 0d 0a 44 65 73 63 72 69 |91 bytes|..Descri|
|00003720| 70 74 69 6f 6e 3a 20 53 | 65 65 20 44 69 72 2d 32 |ption: S|ee Dir-2|
|00003730| 0d 0a 0d 0a 5b 44 69 72 | 2d 32 5d 0d 0a 56 69 72 |....[Dir|-2]..Vir|
|00003740| 75 73 20 4e 61 6d 65 3a | 20 44 69 72 2d 32 0d 0a |us Name:| Dir-2..|
|00003750| 41 6c 69 61 73 20 4e 61 | 6d 65 3a 20 44 69 72 2d |Alias Na|me: Dir-|
|00003760| 49 49 2c 20 43 72 65 65 | 70 69 6e 67 20 44 65 61 |II, Cree|ping Dea|
|00003770| 74 68 0d 0a 56 69 72 75 | 73 20 54 79 70 65 3a 20 |th..Viru|s Type: |
|00003780| 46 69 6c 65 20 56 69 72 | 75 73 0d 0a 56 69 72 75 |File Vir|us..Viru|
|00003790| 73 20 4c 65 6e 67 74 68 | 3a 20 31 2c 30 32 34 20 |s Length|: 1,024 |
|000037a0| 62 79 74 65 73 0d 0a 44 | 65 73 63 72 69 70 74 69 |bytes..D|escripti|
|000037b0| 6f 6e 3a 20 54 68 69 73 | 20 76 69 72 75 73 20 69 |on: This| virus i|
|000037c0| 6e 66 65 63 74 73 20 2a | 2e 43 4f 4d 20 61 6e 64 |nfects *|.COM and|
|000037d0| 20 2a 2e 45 58 45 0d 0a | 20 20 20 20 20 20 20 20 | *.EXE..| |
|000037e0| 20 20 20 20 20 66 69 6c | 65 73 2e 0d 0a 50 43 20 | fil|es...PC |
|000037f0| 56 65 63 74 6f 72 73 20 | 48 6f 6f 6b 65 64 3a 20 |Vectors |Hooked: |
|00003800| 4e 6f 6e 65 0d 0a 0d 0a | 45 78 65 63 75 74 69 6f |None....|Executio|
|00003810| 6e 20 50 72 6f 63 65 64 | 75 72 65 3a 0d 0a 31 29 |n Proced|ure:..1)|
|00003820| 20 57 68 65 6e 20 74 68 | 65 20 76 69 72 75 73 20 | When th|e virus |
|00003830| 6c 6f 61 64 73 20 69 74 | 73 65 6c 66 20 72 65 73 |loads it|self res|
|00003840| 69 64 65 6e 74 20 69 6e | 20 6d 65 6d 6f 72 79 0d |ident in| memory.|
|00003850| 0a 20 20 20 69 74 20 77 | 69 6c 6c 20 63 68 61 6e |. it w|ill chan|
|00003860| 67 65 20 74 68 65 20 64 | 69 72 65 63 74 6f 72 79 |ge the d|irectory|
|00003870| 20 73 74 72 75 63 74 75 | 72 65 20 64 61 74 61 20 | structu|re data |
|00003880| 73 6f 0d 0a 20 20 20 74 | 68 61 74 20 63 65 72 74 |so.. t|hat cert|
|00003890| 61 69 6e 20 65 78 65 63 | 75 74 61 62 6c 65 20 66 |ain exec|utable f|
|000038a0| 69 6c 65 73 20 61 72 65 | 20 6c 69 6e 6b 65 64 20 |iles are| linked |
|000038b0| 74 6f 0d 0a 20 20 20 69 | 74 73 65 6c 66 2e 0d 0a |to.. i|tself...|
|000038c0| 32 29 20 54 68 69 73 20 | 61 6c 6c 6f 77 73 20 74 |2) This |allows t|
|000038d0| 68 65 20 76 69 72 75 73 | 20 74 6f 20 65 78 65 63 |he virus| to exec|
|000038e0| 75 74 65 20 77 68 65 6e | 20 79 6f 75 20 65 78 65 |ute when| you exe|
|000038f0| 63 75 74 65 0d 0a 20 20 | 20 61 20 66 69 6c 65 20 |cute.. | a file |
|00003900| 74 6f 20 77 68 69 63 68 | 20 74 68 65 20 44 49 52 |to which| the DIR|
|00003910| 32 2d 39 31 30 20 76 69 | 72 75 73 20 69 73 20 6c |2-910 vi|rus is l|
|00003920| 69 6e 6b 65 64 20 74 6f | 2e 0d 0a 20 20 20 41 74 |inked to|... At|
|00003930| 20 74 68 69 73 20 70 6f | 69 6e 74 20 69 74 20 63 | this po|int it c|
|00003940| 61 6e 20 62 65 67 69 6e | 20 74 6f 20 69 6e 66 65 |an begin| to infe|
|00003950| 63 74 20 6f 74 68 65 72 | 20 66 69 6c 65 73 2e 0d |ct other| files..|
|00003960| 0a 33 29 20 54 68 65 20 | 76 69 72 75 73 20 73 74 |.3) The |virus st|
|00003970| 61 79 73 20 72 65 73 69 | 64 65 6e 74 20 69 6e 20 |ays resi|dent in |
|00003980| 6d 65 6d 6f 72 79 20 62 | 75 74 20 64 6f 65 73 6e |memory b|ut doesn|
|00003990| 27 74 0d 0a 20 20 20 68 | 6f 6f 6b 20 61 6e 79 20 |'t.. h|ook any |
|000039a0| 69 6e 74 65 72 72 75 70 | 74 73 2e 20 49 74 20 75 |interrup|ts. It u|
|000039b0| 73 65 73 20 61 6e 6f 74 | 68 65 72 20 66 75 6e 63 |ses anot|her func|
|000039c0| 74 69 6f 6e 0d 0a 20 20 | 20 74 6f 20 69 6e 66 65 |tion.. | to infe|
|000039d0| 63 74 20 66 69 6c 65 73 | 20 2e 20 49 74 20 69 6e |ct files| . It in|
|000039e0| 66 65 63 74 73 20 2e 43 | 4f 4d 20 61 6e 64 20 2e |fects .C|OM and .|
|000039f0| 45 58 45 20 66 69 6c 65 | 73 0d 0a 20 20 20 77 68 |EXE file|s.. wh|
|00003a00| 65 6e 20 74 68 65 79 20 | 61 72 65 20 22 52 45 41 |en they |are "REA|
|00003a10| 44 20 26 20 57 52 49 54 | 45 22 2e 0d 0a 0d 0a 44 |D & WRIT|E".....D|
|00003a20| 61 6d 61 67 65 3a 20 57 | 68 65 6e 20 61 6c 6c 20 |amage: W|hen all |
|00003a30| 74 68 65 20 2e 43 4f 4d | 20 61 6e 64 20 2e 45 58 |the .COM| and .EX|
|00003a40| 45 20 66 69 6c 65 73 20 | 61 72 65 0d 0a 69 6e 66 |E files |are..inf|
|00003a50| 65 63 74 65 64 20 6f 6e | 20 61 20 64 69 73 6b 2c |ected on| a disk,|
|00003a60| 20 69 74 20 77 69 6c 6c | 20 6e 6f 74 20 62 65 20 | it will| not be |
|00003a70| 70 6f 73 73 69 62 6c 65 | 0d 0a 74 6f 20 65 78 65 |possible|..to exe|
|00003a80| 63 75 74 65 20 61 6e 79 | 20 66 69 6c 65 73 20 66 |cute any| files f|
|00003a90| 72 6f 6d 20 74 68 65 20 | 64 69 73 6b 2e 0d 0a 0d |rom the |disk....|
|00003aa0| 0a 44 65 74 65 63 74 69 | 6f 6e 20 4d 65 74 68 6f |.Detecti|on Metho|
|00003ab0| 64 3a 20 43 68 65 63 6b | 20 74 68 65 20 64 69 73 |d: Check| the dis|
|00003ac0| 6b 20 62 79 20 75 73 69 | 6e 67 0d 0a 22 43 48 4b |k by usi|ng.."CHK|
|00003ad0| 44 53 4b 2e 45 58 45 22 | 2c 20 69 66 20 73 6f 6d |DSK.EXE"|, if som|
|00003ae0| 65 20 66 69 6c 65 73 20 | 61 72 65 20 63 72 6f 73 |e files |are cros|
|00003af0| 73 2d 6c 69 6e 6b 65 64 | 0d 0a 74 6f 20 74 68 65 |s-linked|..to the|
|00003b00| 20 73 61 6d 65 20 70 6f | 73 69 74 69 6f 6e 2c 20 | same po|sition, |
|00003b10| 74 68 65 6e 20 74 68 65 | 73 65 20 66 69 6c 65 73 |then the|se files|
|00003b20| 20 6d 75 73 74 20 62 65 | 0d 0a 69 6e 66 65 63 74 | must be|..infect|
|00003b30| 65 64 2e 0d 0a 0d 0a 4e | 6f 74 65 3a 20 44 49 52 |ed.....N|ote: DIR|
|00003b40| 32 2d 39 31 30 20 64 6f | 65 73 6e 27 74 20 68 6f |2-910 do|esn't ho|
|00003b50| 6f 6b 20 49 4e 54 20 32 | 34 68 20 77 68 65 6e 20 |ok INT 2|4h when |
|00003b60| 69 6e 66 65 63 74 69 6e | 67 0d 0a 66 69 6c 65 73 |infectin|g..files|
|00003b70| 2e 20 49 74 20 6f 6d 69 | 74 73 20 49 2f 4f 20 65 |. It omi|ts I/O e|
|00003b80| 72 72 6f 72 73 20 28 73 | 75 63 68 20 61 73 20 77 |rrors (s|uch as w|
|00003b90| 72 69 74 65 0d 0a 70 72 | 6f 74 65 63 74 29 2e 0d |rite..pr|otect)..|
|00003ba0| 0a 0d 0a 5b 44 69 73 6b | 5f 4b 69 6c 6c 65 72 5d |...[Disk|_Killer]|
|00003bb0| 0d 0a 56 69 72 75 73 20 | 4e 61 6d 65 3a 20 44 69 |..Virus |Name: Di|
|00003bc0| 73 6b 5f 4b 69 6c 6c 65 | 72 0d 0a 41 6c 69 61 73 |sk_Kille|r..Alias|
|00003bd0| 20 4e 61 6d 65 3a 20 4f | 67 72 65 0d 0a 56 69 72 | Name: O|gre..Vir|
|00003be0| 75 73 20 54 79 70 65 3a | 20 42 6f 6f 74 20 56 69 |us Type:| Boot Vi|
|00003bf0| 72 75 73 0d 0a 56 69 72 | 75 73 20 4c 65 6e 67 74 |rus..Vir|us Lengt|
|00003c00| 68 3a 20 4e 2f 41 0d 0a | 44 65 73 63 72 69 70 74 |h: N/A..|Descript|
|00003c10| 69 6f 6e 3a 20 54 68 69 | 73 20 76 69 72 75 73 20 |ion: Thi|s virus |
|00003c20| 69 6e 66 65 63 74 73 20 | 62 6f 6f 74 20 73 65 63 |infects |boot sec|
|00003c30| 74 6f 72 73 2e 0d 0a 0d | 0a 49 6e 66 65 63 74 69 |tors....|.Infecti|
|00003c40| 6f 6e 20 6d 65 74 68 6f | 64 3a 20 57 68 65 6e 20 |on metho|d: When |
|00003c50| 74 68 65 20 73 79 73 74 | 65 6d 20 69 73 20 62 6f |the syst|em is bo|
|00003c60| 6f 74 65 64 20 66 72 6f | 6d 0d 0a 61 6e 20 69 6e |oted fro|m..an in|
|00003c70| 66 65 63 74 65 64 20 64 | 69 73 6b 2c 20 74 68 65 |fected d|isk, the|
|00003c80| 20 76 69 72 75 73 20 6c | 6f 61 64 73 20 69 74 73 | virus l|oads its|
|00003c90| 65 6c 66 20 69 6e 74 6f | 0d 0a 6d 65 6d 6f 72 79 |elf into|..memory|
|00003ca0| 2e 0d 0a 0d 0a 44 61 6d | 61 67 65 3a 20 41 66 74 |.....Dam|age: Aft|
|00003cb0| 65 72 20 74 68 65 20 63 | 6f 6d 70 75 74 65 72 20 |er the c|omputer |
|00003cc0| 68 61 73 20 62 65 65 6e | 20 6f 6e 20 66 6f 72 20 |has been| on for |
|00003cd0| 34 38 0d 0a 68 6f 75 72 | 73 2c 20 74 68 65 20 76 |48..hour|s, the v|
|00003ce0| 69 72 75 73 20 64 69 73 | 70 6c 61 79 73 20 74 68 |irus dis|plays th|
|00003cf0| 65 20 66 6f 6c 6c 6f 77 | 69 6e 67 20 6d 65 73 73 |e follow|ing mess|
|00003d00| 61 67 65 0d 0a 61 6e 64 | 20 74 68 65 6e 20 65 6e |age..and| then en|
|00003d10| 63 72 79 70 74 73 20 61 | 6c 6c 20 74 68 65 20 64 |crypts a|ll the d|
|00003d20| 61 74 61 20 6f 6e 20 74 | 68 65 20 68 61 72 64 20 |ata on t|he hard |
|00003d30| 64 69 73 6b 3a 0d 0a 0d | 0a 22 44 69 73 6b 20 4b |disk:...|."Disk K|
|00003d40| 69 6c 6c 65 72 20 2d 2d | 20 56 65 72 73 69 6f 6e |iller --| Version|
|00003d50| 20 31 2e 30 30 20 62 79 | 20 43 4f 4d 50 55 54 45 | 1.00 by| COMPUTE|
|00003d60| 52 20 4f 47 52 45 0d 0a | 20 30 34 2f 30 31 2f 31 |R OGRE..| 04/01/1|
|00003d70| 39 38 39 0d 0a 0d 0a 20 | 57 61 72 6e 69 6e 67 21 |989.... |Warning!|
|00003d80| 21 0d 0a 20 44 6f 6e 27 | 74 20 74 75 72 6e 20 6f |!.. Don'|t turn o|
|00003d90| 66 66 20 74 68 65 20 70 | 6f 77 65 72 20 6f 72 0d |ff the p|ower or.|
|00003da0| 0a 20 72 65 6d 6f 76 65 | 20 74 68 65 20 64 69 73 |. remove| the dis|
|00003db0| 6b 65 74 74 65 20 77 68 | 69 6c 65 20 44 69 73 6b |kette wh|ile Disk|
|00003dc0| 20 4b 69 6c 6c 65 72 20 | 69 73 20 50 72 6f 63 65 | Killer |is Proce|
|00003dd0| 73 73 69 6e 67 2e 0d 0a | 20 50 72 6f 63 65 73 73 |ssing...| Process|
|00003de0| 69 6e 67 2e 0d 0a 20 4e | 6f 77 20 79 6f 75 20 63 |ing... N|ow you c|
|00003df0| 61 6e 20 74 75 72 6e 20 | 6f 66 66 20 74 68 65 20 |an turn |off the |
|00003e00| 70 6f 77 65 72 2e 20 49 | 20 77 69 73 68 20 79 6f |power. I| wish yo|
|00003e10| 75 20 6c 75 63 6b 2e 22 | 0d 0a 0d 0a 5b 45 44 56 |u luck."|....[EDV|
|00003e20| 5d 0d 0a 56 69 72 75 73 | 20 4e 61 6d 65 3a 20 45 |]..Virus| Name: E|
|00003e30| 44 56 0d 0a 41 6c 69 61 | 73 20 4e 61 6d 65 3a 20 |DV..Alia|s Name: |
|00003e40| 43 75 72 73 79 0d 0a 56 | 69 72 75 73 20 54 79 70 |Cursy..V|irus Typ|
|00003e50| 65 3a 20 42 6f 6f 74 20 | 56 69 72 75 73 0d 0a 56 |e: Boot |Virus..V|
|00003e60| 69 72 75 73 20 4c 65 6e | 67 74 68 3a 20 4e 2f 41 |irus Len|gth: N/A|
|00003e70| 0d 0a 44 65 73 63 72 69 | 70 74 69 6f 6e 3a 20 54 |..Descri|ption: T|
|00003e80| 68 69 73 20 76 69 72 75 | 73 20 69 6e 66 65 63 74 |his viru|s infect|
|00003e90| 73 20 62 6f 6f 74 20 73 | 65 63 74 6f 72 73 2e 0d |s boot s|ectors..|
|00003ea0| 0a 0d 0a 57 68 65 6e 20 | 74 68 65 20 73 79 73 74 |...When |the syst|
|00003eb0| 65 6d 20 69 73 20 62 6f | 6f 74 65 64 20 66 72 6f |em is bo|oted fro|
|00003ec0| 6d 20 61 20 64 69 73 6b | 20 69 6e 66 65 63 74 65 |m a disk| infecte|
|00003ed0| 64 20 62 79 0d 0a 74 68 | 65 20 76 69 72 75 73 2c |d by..th|e virus,|
|00003ee0| 20 74 68 65 20 76 69 72 | 75 73 20 77 69 6c 6c 20 | the vir|us will |
|00003ef0| 69 6e 73 74 61 6c 6c 20 | 69 74 73 65 6c 66 20 69 |install |itself i|
|00003f00| 6e 74 6f 0d 0a 6d 65 6d | 6f 72 79 2e 0d 0a 0d 0a |nto..mem|ory.....|
|00003f10| 4f 6e 63 65 20 74 68 65 | 20 76 69 72 75 73 20 69 |Once the| virus i|
|00003f20| 73 20 6d 65 6d 6f 72 79 | 20 72 65 73 69 64 65 6e |s memory| residen|
|00003f30| 74 2c 20 69 74 20 77 69 | 6c 6c 20 69 6e 66 65 63 |t, it wi|ll infec|
|00003f40| 74 0d 0a 61 6e 79 20 61 | 63 63 65 73 73 65 64 20 |t..any a|ccessed |
|00003f50| 66 6c 6f 70 70 79 20 64 | 69 73 6b 73 2e 20 49 74 |floppy d|isks. It|
|00003f60| 20 77 69 6c 6c 20 6d 6f | 76 65 20 74 68 65 20 6f | will mo|ve the o|
|00003f70| 72 69 67 69 6e 61 6c 0d | 0a 62 6f 6f 74 20 73 65 |riginal.|.boot se|
|00003f80| 63 74 6f 72 2c 20 72 65 | 70 6c 61 63 69 6e 67 20 |ctor, re|placing |
|00003f90| 69 74 20 77 69 74 68 20 | 61 20 63 6f 70 79 20 6f |it with |a copy o|
|00003fa0| 66 20 74 68 65 20 76 69 | 72 75 73 2e 0d 0a 0d 0a |f the vi|rus.....|
|00003fb0| 4f 6e 63 65 20 74 68 65 | 20 76 69 72 75 73 20 68 |Once the| virus h|
|00003fc0| 61 73 20 69 6e 66 65 63 | 74 65 64 20 73 69 78 20 |as infec|ted six |
|00003fd0| 64 69 73 6b 73 2c 20 69 | 74 20 77 69 6c 6c 0d 0a |disks, i|t will..|
|00003fe0| 64 69 73 61 62 6c 65 20 | 74 68 65 20 6b 65 79 62 |disable |the keyb|
|00003ff0| 6f 61 72 64 20 61 73 20 | 77 65 6c 6c 20 61 73 20 |oard as |well as |
|00004000| 63 6f 72 72 75 70 74 20 | 61 6c 6c 20 64 69 73 6b |corrupt |all disk|
|00004010| 73 0d 0a 69 6e 20 74 68 | 65 20 73 79 73 74 65 6d |s..in th|e system|
|00004020| 2e 20 20 4f 6e 63 65 20 | 63 6f 6d 70 6c 65 74 65 |. Once |complete|
|00004030| 64 2c 20 74 68 65 20 66 | 6f 6c 6c 6f 77 69 6e 67 |d, the f|ollowing|
|00004040| 0d 0a 6d 65 73 73 61 67 | 65 20 77 69 6c 6c 20 62 |..messag|e will b|
|00004050| 65 20 64 69 73 70 6c 61 | 79 65 64 20 6f 6e 20 74 |e displa|yed on t|
|00004060| 68 65 20 73 63 72 65 65 | 6e 3a 0d 0a 0d 0a 20 20 |he scree|n:.... |
|00004070| 20 20 22 54 68 61 74 20 | 72 69 6e 67 73 20 61 20 | "That |rings a |
|00004080| 62 65 6c 6c 2c 20 6e 6f | 3f 20 20 46 72 6f 6d 20 |bell, no|? From |
|00004090| 43 75 72 73 79 22 0d 0a | 0d 0a 54 68 65 20 66 6f |Cursy"..|..The fo|
|000040a0| 6c 6c 6f 77 69 6e 67 20 | 73 74 72 69 6e 67 20 63 |llowing |string c|
|000040b0| 61 6e 20 62 65 20 66 6f | 75 6e 64 20 69 6e 20 69 |an be fo|und in i|
|000040c0| 6e 66 65 63 74 65 64 20 | 62 6f 6f 74 0d 0a 73 65 |nfected |boot..se|
|000040d0| 63 74 6f 72 73 3a 0d 0a | 0d 0a 20 20 20 20 22 4d |ctors:..|.. "M|
|000040e0| 53 44 4f 53 20 56 65 72 | 73 2e 20 45 2e 44 2e 56 |SDOS Ver|s. E.D.V|
|000040f0| 2e 22 0d 0a 0d 0a 5b 45 | 78 65 62 75 67 5d 0d 0a |."....[E|xebug]..|
|00004100| 56 69 72 75 73 20 4e 61 | 6d 65 3a 20 45 78 65 62 |Virus Na|me: Exeb|
|00004110| 75 67 0d 0a 41 6c 69 61 | 73 20 4e 61 6d 65 3a 20 |ug..Alia|s Name: |
|00004120| 53 77 69 73 73 20 42 6f | 6f 74 2c 20 43 4d 4f 53 |Swiss Bo|ot, CMOS|
|00004130| 20 6b 69 6c 6c 65 72 0d | 0a 56 69 72 75 73 20 54 | killer.|.Virus T|
|00004140| 79 70 65 3a 20 42 6f 6f | 74 20 56 69 72 75 73 0d |ype: Boo|t Virus.|
|00004150| 0a 56 69 72 75 73 20 4c | 65 6e 67 74 68 3a 20 4e |.Virus L|ength: N|
|00004160| 2f 41 0d 0a 44 65 73 63 | 72 69 70 74 69 6f 6e 3a |/A..Desc|ription:|
|00004170| 20 54 68 69 73 20 76 69 | 72 75 73 20 69 6e 66 65 | This vi|rus infe|
|00004180| 63 74 73 20 62 6f 6f 74 | 20 73 65 63 74 6f 72 73 |cts boot| sectors|
|00004190| 2e 0d 0a 49 6e 74 65 72 | 72 75 70 74 20 76 65 63 |...Inter|rupt vec|
|000041a0| 74 6f 72 73 20 68 6f 6f | 6b 65 64 3a 20 49 4e 54 |tors hoo|ked: INT|
|000041b0| 20 31 33 68 0d 0a 0d 0a | 49 6e 66 65 63 74 69 6f | 13h....|Infectio|
|000041c0| 6e 20 6d 65 74 68 6f 64 | 3a 20 57 68 65 6e 20 74 |n method|: When t|
|000041d0| 68 65 20 73 79 73 74 65 | 6d 20 69 73 20 62 6f 6f |he syste|m is boo|
|000041e0| 74 65 64 20 66 72 6f 6d | 0d 0a 61 6e 20 45 78 65 |ted from|..an Exe|
|000041f0| 62 75 67 20 69 6e 66 65 | 63 74 65 64 20 64 69 73 |bug infe|cted dis|
|00004200| 6b 65 74 74 65 2c 20 74 | 68 65 20 45 78 65 62 75 |kette, t|he Exebu|
|00004210| 67 20 76 69 72 75 73 20 | 77 69 6c 6c 0d 0a 69 6e |g virus |will..in|
|00004220| 73 74 61 6c 6c 20 69 74 | 73 65 6c 66 20 6d 65 6d |stall it|self mem|
|00004230| 6f 72 79 20 72 65 73 69 | 64 65 6e 74 20 61 74 20 |ory resi|dent at |
|00004240| 74 68 65 20 74 6f 70 20 | 6f 66 0d 0a 73 79 73 74 |the top |of..syst|
|00004250| 65 6d 20 6d 65 6d 6f 72 | 79 20 62 75 74 20 62 65 |em memor|y but be|
|00004260| 6c 6f 77 20 74 68 65 20 | 36 34 30 4b 20 44 4f 53 |low the |640K DOS|
|00004270| 20 62 6f 75 6e 64 61 72 | 79 2c 0d 0a 6d 6f 76 69 | boundar|y,..movi|
|00004280| 6e 67 20 69 6e 74 65 72 | 72 75 70 74 20 31 32 27 |ng inter|rupt 12'|
|00004290| 73 20 72 65 74 75 72 6e | 2e 20 20 54 6f 74 61 6c |s return|. Total|
|000042a0| 20 73 79 73 74 65 6d 20 | 61 6e 64 0d 0a 61 76 61 | system |and..ava|
|000042b0| 69 6c 61 62 6c 65 20 66 | 72 65 65 20 6d 65 6d 6f |ilable f|ree memo|
|000042c0| 72 79 20 77 69 6c 6c 20 | 64 65 63 72 65 61 73 65 |ry will |decrease|
|000042d0| 20 62 79 20 31 2c 30 32 | 34 0d 0a 62 79 74 65 73 | by 1,02|4..bytes|
|000042e0| 2e 20 20 41 6c 73 6f 20 | 61 74 20 74 68 69 73 20 |. Also |at this |
|000042f0| 74 69 6d 65 2c 20 74 68 | 65 20 76 69 72 75 73 20 |time, th|e virus |
|00004300| 77 69 6c 6c 20 69 6e 66 | 65 63 74 0d 0a 74 68 65 |will inf|ect..the|
|00004310| 20 73 79 73 74 65 6d 20 | 68 61 72 64 20 64 69 73 | system |hard dis|
|00004320| 6b 27 73 20 6d 61 73 74 | 65 72 20 62 6f 6f 74 20 |k's mast|er boot |
|00004330| 73 65 63 74 6f 72 2e 0d | 0a 0d 0a 44 61 6d 61 67 |sector..|...Damag|
|00004340| 65 3a 20 4d 61 73 74 65 | 72 20 62 6f 6f 74 20 73 |e: Maste|r boot s|
|00004350| 65 63 74 6f 72 20 63 6f | 72 72 75 70 74 69 6f 6e |ector co|rruption|
|00004360| 3b 20 64 65 63 72 65 61 | 73 65 20 69 6e 0d 0a 74 |; decrea|se in..t|
|00004370| 6f 74 61 6c 20 73 79 73 | 74 65 6d 20 61 6e 64 20 |otal sys|tem and |
|00004380| 61 76 61 69 6c 61 62 6c | 65 20 66 72 65 65 20 6d |availabl|e free m|
|00004390| 65 6d 6f 72 79 3b 20 69 | 6e 61 62 69 6c 69 74 79 |emory; i|nability|
|000043a0| 20 74 6f 0d 0a 61 63 63 | 65 73 73 20 64 72 69 76 | to..acc|ess driv|
|000043b0| 65 20 43 3a 20 61 66 74 | 65 72 20 64 69 73 6b 65 |e C: aft|er diske|
|000043c0| 74 74 65 20 62 6f 6f 74 | 2e 0d 0a 0d 0a 5b 46 61 |tte boot|.....[Fa|
|000043d0| 74 5f 54 61 62 6c 65 5d | 0d 0a 56 69 72 75 73 20 |t_Table]|..Virus |
|000043e0| 4e 61 6d 65 3a 20 46 61 | 74 5f 54 61 62 6c 65 0d |Name: Fa|t_Table.|
|000043f0| 0a 41 6c 69 61 73 20 4e | 61 6d 65 3a 0d 0a 56 69 |.Alias N|ame:..Vi|
|00004400| 72 75 73 20 54 79 70 65 | 3a 20 46 69 6c 65 20 56 |rus Type|: File V|
|00004410| 69 72 75 73 0d 0a 56 69 | 72 75 73 20 4c 65 6e 67 |irus..Vi|rus Leng|
|00004420| 74 68 3a 20 36 2c 35 34 | 30 20 62 79 74 65 73 0d |th: 6,54|0 bytes.|
|00004430| 0a 44 65 73 63 72 69 70 | 74 69 6f 6e 3a 20 54 68 |.Descrip|tion: Th|
|00004440| 69 73 20 76 69 72 75 73 | 20 69 6e 66 65 63 74 73 |is virus| infects|
|00004450| 20 2a 2e 45 58 45 20 20 | 66 69 6c 65 73 2e 0d 0a | *.EXE |files...|
|00004460| 0d 0a 57 68 65 6e 20 61 | 6e 20 69 6e 66 65 63 74 |..When a|n infect|
|00004470| 65 64 20 66 69 6c 65 20 | 69 73 20 65 78 65 63 75 |ed file |is execu|
|00004480| 74 65 64 2c 20 74 68 65 | 20 76 69 72 75 73 20 77 |ted, the| virus w|
|00004490| 69 6c 6c 0d 0a 69 6e 66 | 65 63 74 20 6f 6e 65 20 |ill..inf|ect one |
|000044a0| 2a 2e 45 58 45 20 66 69 | 6c 65 20 6c 6f 63 61 74 |*.EXE fi|le locat|
|000044b0| 65 64 20 69 6e 20 74 68 | 65 20 73 61 6d 65 0d 0a |ed in th|e same..|
|000044c0| 64 69 72 65 63 74 6f 72 | 79 2e 20 20 54 68 65 20 |director|y. The |
|000044d0| 76 69 72 75 73 20 77 69 | 6c 6c 20 6f 76 65 72 77 |virus wi|ll overw|
|000044e0| 72 69 74 65 20 74 68 65 | 20 66 69 72 73 74 0d 0a |rite the| first..|
|000044f0| 36 2c 35 34 30 20 62 79 | 74 65 73 20 6f 66 20 74 |6,540 by|tes of t|
|00004500| 68 65 20 6f 72 69 67 69 | 6e 61 6c 20 66 69 6c 65 |he origi|nal file|
|00004510| 2e 20 44 61 74 65 20 61 | 6e 64 20 74 69 6d 65 0d |. Date a|nd time.|
|00004520| 0a 69 6e 66 6f 72 6d 61 | 74 69 6f 6e 20 6f 66 20 |.informa|tion of |
|00004530| 69 6e 66 65 63 74 65 64 | 20 66 69 6c 65 73 20 77 |infected| files w|
|00004540| 69 6c 6c 20 62 65 20 75 | 70 64 61 74 65 64 20 74 |ill be u|pdated t|
|00004550| 6f 0d 0a 74 68 65 20 74 | 69 6d 65 20 6f 66 20 69 |o..the t|ime of i|
|00004560| 6e 66 65 63 74 69 6f 6e | 2e 0d 0a 0d 0a 54 68 65 |nfection|.....The|
|00004570| 20 66 6f 6c 6c 6f 77 69 | 6e 67 20 74 65 78 74 20 | followi|ng text |
|00004580| 73 74 72 69 6e 67 20 63 | 61 6e 20 62 65 20 66 6f |string c|an be fo|
|00004590| 75 6e 64 20 69 6e 20 74 | 68 65 0d 0a 76 69 72 75 |und in t|he..viru|
|000045a0| 73 3a 0d 0a 0d 0a 20 20 | 20 20 22 68 69 74 6f 68 |s:.... | "hitoh|
|000045b0| 61 6e 61 22 0d 0a 20 20 | 20 20 22 6b 61 72 75 20 |ana".. | "karu |
|000045c0| 62 61 22 0d 0a 20 20 20 | 20 22 72 62 20 43 3a 5c |ba".. | "rb C:\|
|000045d0| 20 2a 20 2e 2a 20 46 41 | 54 20 54 41 42 4c 45 20 | * .* FA|T TABLE |
|000045e0| 45 22 0d 0a 20 20 20 20 | 22 38 52 52 4f 52 22 0d |E".. |"8RROR".|
|000045f0| 0a 20 20 20 20 22 45 58 | 45 22 0d 0a 20 20 20 20 |. "EX|E".. |
|00004600| 22 43 4f 4d 22 0d 0a 0d | 0a 5b 46 69 6c 6c 65 72 |"COM"...|.[Filler|
|00004610| 2e 41 5d 0d 0a 56 69 72 | 75 73 20 4e 61 6d 65 3a |.A]..Vir|us Name:|
|00004620| 20 46 69 6c 6c 65 72 2e | 41 0d 0a 41 6c 69 61 73 | Filler.|A..Alias|
|00004630| 20 4e 61 6d 65 3a 20 46 | 69 6c 6c 65 72 0d 0a 56 | Name: F|iller..V|
|00004640| 69 72 75 73 20 54 79 70 | 65 3a 20 20 20 42 6f 6f |irus Typ|e: Boo|
|00004650| 74 20 56 69 72 75 73 0d | 0a 56 69 72 75 73 20 4c |t Virus.|.Virus L|
|00004660| 65 6e 67 74 68 3a 20 4e | 2f 41 0d 0a 44 65 73 63 |ength: N|/A..Desc|
|00004670| 72 69 70 74 69 6f 6e 3a | 20 54 68 69 73 20 76 69 |ription:| This vi|
|00004680| 72 75 73 20 69 6e 66 65 | 63 74 73 20 62 6f 6f 74 |rus infe|cts boot|
|00004690| 20 73 65 63 74 6f 72 73 | 2e 0d 0a 0d 0a 49 6e 66 | sectors|.....Inf|
|000046a0| 65 63 74 69 6f 6e 20 6d | 65 74 68 6f 64 3a 20 57 |ection m|ethod: W|
|000046b0| 68 65 6e 20 74 68 65 20 | 73 79 73 74 65 6d 20 69 |hen the |system i|
|000046c0| 73 20 62 6f 6f 74 65 64 | 20 66 72 6f 6d 0d 0a 61 |s booted| from..a|
|000046d0| 6e 20 69 6e 66 65 63 74 | 65 64 20 66 6c 6f 70 70 |n infect|ed flopp|
|000046e0| 79 2c 20 74 68 65 20 76 | 69 72 75 73 20 6c 6f 61 |y, the v|irus loa|
|000046f0| 64 73 20 69 74 73 65 6c | 66 20 69 6e 74 6f 0d 0a |ds itsel|f into..|
|00004700| 6d 65 6d 6f 72 79 2e 20 | 57 68 69 6c 65 20 6c 6f |memory. |While lo|
|00004710| 61 64 65 64 2c 20 69 74 | 20 69 6e 66 65 63 74 73 |aded, it| infects|
|00004720| 20 61 6e 79 20 61 63 63 | 65 73 73 65 64 2c 0d 0a | any acc|essed,..|
|00004730| 6e 6f 6e 2d 70 72 6f 74 | 65 63 74 65 64 20 64 69 |non-prot|ected di|
|00004740| 73 6b 73 2e 20 54 68 65 | 20 44 4f 53 20 43 48 4b |sks. The| DOS CHK|
|00004750| 44 53 4b 20 70 72 6f 67 | 72 61 6d 20 77 69 6c 6c |DSK prog|ram will|
|00004760| 0d 0a 73 68 6f 77 20 61 | 20 22 74 6f 74 61 6c 20 |..show a| "total |
|00004770| 62 79 74 65 73 20 6d 65 | 6d 6f 72 79 22 20 64 65 |bytes me|mory" de|
|00004780| 63 72 65 61 73 65 20 6f | 66 20 38 2c 31 39 32 0d |crease o|f 8,192.|
|00004790| 0a 62 79 74 65 73 2e 0d | 0a 0d 0a 44 61 6d 61 67 |.bytes..|...Damag|
|000047a0| 65 3a 20 55 6e 64 65 72 | 20 61 6e 61 6c 79 73 69 |e: Under| analysi|
|000047b0| 73 0d 0a 0d 0a 5b 46 6c | 69 70 5d 0d 0a 56 69 72 |s....[Fl|ip]..Vir|
|000047c0| 75 73 20 4e 61 6d 65 3a | 20 46 6c 69 70 0d 0a 41 |us Name:| Flip..A|
|000047d0| 6c 69 61 73 20 4e 61 6d | 65 3a 0d 0a 56 69 72 75 |lias Nam|e:..Viru|
|000047e0| 73 20 54 79 70 65 3a 20 | 20 20 42 6f 6f 74 20 56 |s Type: | Boot V|
|000047f0| 69 72 75 73 0d 0a 56 69 | 72 75 73 20 4c 65 6e 67 |irus..Vi|rus Leng|
|00004800| 74 68 3a 20 32 2c 36 37 | 32 20 62 79 74 65 73 0d |th: 2,67|2 bytes.|
|00004810| 0a 44 65 73 63 72 69 70 | 74 69 6f 6e 3a 20 54 68 |.Descrip|tion: Th|
|00004820| 69 73 20 76 69 72 75 73 | 20 69 6e 66 65 63 74 73 |is virus| infects|
|00004830| 20 2a 2e 43 4f 4d 20 61 | 6e 64 20 2a 2e 45 58 45 | *.COM a|nd *.EXE|
|00004840| 0d 0a 20 20 20 20 20 20 | 20 20 20 20 20 20 20 66 |.. | f|
|00004850| 69 6c 65 73 2e 0d 0a 49 | 6e 74 65 72 72 75 70 74 |iles...I|nterrupt|
|00004860| 20 56 65 63 74 6f 72 73 | 20 48 6f 6f 6b 65 64 3a | Vectors| Hooked:|
|00004870| 20 49 4e 54 20 32 31 68 | 0d 0a 0d 0a 49 6e 66 65 | INT 21h|....Infe|
|00004880| 63 74 69 6f 6e 20 50 72 | 6f 63 65 73 73 3a 20 54 |ction Pr|ocess: T|
|00004890| 68 69 73 20 76 69 72 75 | 73 20 73 70 72 65 61 64 |his viru|s spread|
|000048a0| 73 20 62 79 0d 0a 65 78 | 65 63 75 74 69 6e 67 20 |s by..ex|ecuting |
|000048b0| 61 6e 20 69 6e 66 65 63 | 74 65 64 20 70 72 6f 67 |an infec|ted prog|
|000048c0| 72 61 6d 20 6f 72 20 62 | 79 20 62 6f 6f 74 69 6e |ram or b|y bootin|
|000048d0| 67 0d 0a 74 68 65 20 73 | 79 73 74 65 6d 20 77 69 |g..the s|ystem wi|
|000048e0| 74 68 20 61 6e 20 69 6e | 66 65 63 74 65 64 20 64 |th an in|fected d|
|000048f0| 69 73 6b 2e 20 54 68 65 | 72 65 20 61 72 65 0d 0a |isk. The|re are..|
|00004900| 73 65 76 65 72 61 6c 20 | 6d 65 74 68 6f 64 73 20 |several |methods |
|00004910| 6f 66 20 69 6e 66 65 63 | 74 69 6f 6e 2e 0d 0a 0d |of infec|tion....|
|00004920| 0a 31 29 20 49 6e 66 65 | 63 74 69 6f 6e 20 6f 66 |.1) Infe|ction of|
|00004930| 20 61 20 63 6c 65 61 6e | 20 73 79 73 74 65 6d 20 | a clean| system |
|00004940| 62 79 20 61 6e 20 69 6e | 66 65 63 74 65 64 0d 0a |by an in|fected..|
|00004950| 70 72 6f 67 72 61 6d 2e | 0d 0a 0d 0a 57 68 65 6e |program.|....When|
|00004960| 20 61 6e 20 69 6e 66 65 | 63 74 65 64 20 70 72 6f | an infe|cted pro|
|00004970| 67 72 61 6d 20 69 73 20 | 65 78 65 63 75 74 65 64 |gram is |executed|
|00004980| 20 69 6e 20 61 20 63 6c | 65 61 6e 0d 0a 73 79 73 | in a cl|ean..sys|
|00004990| 74 65 6d 2c 20 74 68 65 | 20 76 69 72 75 73 20 77 |tem, the| virus w|
|000049a0| 69 6c 6c 20 63 6f 70 79 | 20 69 74 73 65 6c 66 20 |ill copy| itself |
|000049b0| 69 6e 20 74 68 65 20 6c | 61 73 74 0d 0a 73 69 64 |in the l|ast..sid|
|000049c0| 65 20 6f 66 20 74 68 65 | 20 6c 61 73 74 20 63 79 |e of the| last cy|
|000049d0| 6c 69 6e 64 65 72 2c 20 | 62 65 67 69 6e 6e 69 6e |linder, |beginnin|
|000049e0| 67 20 66 72 6f 6d 20 74 | 68 65 20 35 74 68 0d 0a |g from t|he 5th..|
|000049f0| 6c 61 73 74 20 73 65 63 | 74 6f 72 20 74 6f 20 74 |last sec|tor to t|
|00004a00| 68 65 20 31 73 74 20 6c | 61 73 74 20 73 65 63 74 |he 1st l|ast sect|
|00004a10| 6f 72 20 61 6e 64 20 74 | 68 65 20 76 69 72 75 73 |or and t|he virus|
|00004a20| 0d 0a 77 69 6c 6c 20 73 | 75 62 74 72 61 63 74 20 |..will s|ubtract |
|00004a30| 74 68 65 20 44 4f 53 20 | 62 6f 6f 74 20 73 65 63 |the DOS |boot sec|
|00004a40| 74 6f 72 20 61 74 20 6f | 66 66 73 65 74 20 30 78 |tor at o|ffset 0x|
|00004a50| 31 33 68 0d 0a 28 4e 75 | 6d 62 65 72 20 6f 66 20 |13h..(Nu|mber of |
|00004a60| 6c 6f 67 69 63 61 6c 20 | 73 65 63 74 6f 72 73 20 |logical |sectors |
|00004a70| 29 20 77 69 74 68 20 36 | 2e 20 46 69 6e 61 6c 6c |) with 6|. Finall|
|00004a80| 79 2c 20 74 68 65 0d 0a | 76 69 72 75 73 20 63 6f |y, the..|virus co|
|00004a90| 64 65 20 69 73 20 77 72 | 69 74 74 65 6e 20 6f 6e |de is wr|itten on|
|00004aa0| 74 6f 20 74 68 65 20 70 | 61 72 74 69 74 69 6f 6e |to the p|artition|
|00004ab0| 20 73 65 63 74 6f 72 2e | 0d 0a 0d 0a 32 29 20 53 | sector.|....2) S|
|00004ac0| 70 72 65 61 64 69 6e 67 | 20 74 68 65 20 69 6e 66 |preading| the inf|
|00004ad0| 65 63 74 69 6f 6e 20 74 | 68 72 6f 75 67 68 20 61 |ection t|hrough a|
|00004ae0| 6e 20 69 6e 66 65 63 74 | 65 64 20 64 69 73 6b 2e |n infect|ed disk.|
|00004af0| 0d 0a 0d 0a 49 66 20 61 | 20 50 43 20 69 73 20 62 |....If a| PC is b|
|00004b00| 6f 6f 74 65 64 20 66 72 | 6f 6d 20 61 6e 20 69 6e |ooted fr|om an in|
|00004b10| 66 65 63 74 65 64 20 64 | 69 73 6b 2c 20 74 68 65 |fected d|isk, the|
|00004b20| 0d 0a 73 70 72 65 61 64 | 69 6e 67 20 6f 66 20 74 |..spread|ing of t|
|00004b30| 68 65 20 69 6e 66 65 63 | 74 69 6f 6e 20 69 73 20 |he infec|tion is |
|00004b40| 63 6f 6d 70 6c 65 74 65 | 2e 20 20 54 68 65 20 62 |complete|. The b|
|00004b50| 6f 6f 74 0d 0a 63 6f 64 | 65 2c 20 70 72 65 76 69 |oot..cod|e, previ|
|00004b60| 6f 75 73 6c 79 20 6f 76 | 65 72 77 72 69 74 74 65 |ously ov|erwritte|
|00004b70| 6e 20 62 79 20 74 68 65 | 20 76 69 72 75 73 20 6f |n by the| virus o|
|00004b80| 6e 20 74 68 65 0d 0a 64 | 69 73 6b 20 70 61 72 74 |n the..d|isk part|
|00004b90| 69 74 69 6f 6e 20 73 65 | 63 74 6f 72 2c 20 72 65 |ition se|ctor, re|
|00004ba0| 61 64 73 20 74 68 65 20 | 6d 61 69 6e 20 63 6f 72 |ads the |main cor|
|00004bb0| 65 20 6f 66 20 74 68 65 | 0d 0a 76 69 72 75 73 20 |e of the|..virus |
|00004bc0| 66 72 6f 6d 20 74 68 65 | 20 6c 61 73 74 20 35 20 |from the| last 5 |
|00004bd0| 73 65 63 74 6f 72 73 20 | 74 6f 20 74 68 65 20 6c |sectors |to the l|
|00004be0| 61 73 74 0d 0a 73 65 63 | 74 6f 72 2c 20 61 6e 64 |ast..sec|tor, and|
|00004bf0| 20 6c 6f 61 64 73 20 69 | 74 20 61 73 20 61 20 54 | loads i|t as a T|
|00004c00| 53 52 20 69 6e 20 52 41 | 4d 2c 20 6f 63 63 75 70 |SR in RA|M, occup|
|00004c10| 79 69 6e 67 20 33 0d 0a | 4b 62 20 6f 66 20 74 68 |ying 3..|Kb of th|
|00004c20| 65 20 68 69 67 68 65 72 | 20 70 61 72 74 20 6f 66 |e higher| part of|
|00004c30| 20 73 79 73 74 65 6d 20 | 6d 65 6d 6f 72 79 2e 20 | system |memory. |
|00004c40| 20 41 73 20 73 6f 6f 6e | 0d 0a 61 73 20 69 74 20 | As soon|..as it |
|00004c50| 69 73 20 69 6e 73 74 61 | 6c 6c 65 64 20 61 73 20 |is insta|lled as |
|00004c60| 61 20 54 53 52 2c 20 74 | 68 65 20 76 69 72 75 73 |a TSR, t|he virus|
|00004c70| 20 74 61 6b 65 73 0d 0a | 63 6f 6e 74 72 6f 6c 20 | takes..|control |
|00004c80| 6f 66 20 49 6e 74 20 31 | 43 68 20 28 54 69 6d 65 |of Int 1|Ch (Time|
|00004c90| 72 20 49 6e 74 65 72 72 | 75 70 74 29 20 74 6f 20 |r Interr|upt) to |
|00004ca0| 76 65 72 69 66 79 2c 0d | 0a 77 69 74 68 20 61 20 |verify,.|.with a |
|00004cb0| 66 72 65 71 75 65 6e 63 | 79 20 6f 66 20 31 38 2e |frequenc|y of 18.|
|00004cc0| 32 20 74 69 6d 65 73 20 | 70 65 72 20 73 65 63 6f |2 times |per seco|
|00004cd0| 6e 64 2c 20 69 66 20 74 | 68 65 0d 0a 44 4f 53 20 |nd, if t|he..DOS |
|00004ce0| 43 4f 4d 4d 41 4e 44 2e | 43 4f 4d 20 69 73 20 6c |COMMAND.|COM is l|
|00004cf0| 6f 61 64 65 64 2e 20 20 | 49 66 20 44 4f 53 20 69 |oaded. |If DOS i|
|00004d00| 73 20 70 72 65 73 65 6e | 74 2c 20 74 68 65 0d 0a |s presen|t, the..|
|00004d10| 76 69 72 75 73 20 72 65 | 73 74 6f 72 65 73 20 74 |virus re|stores t|
|00004d20| 68 65 20 74 69 6d 65 72 | 20 61 6e 64 20 74 61 6b |he timer| and tak|
|00004d30| 65 73 20 63 6f 6e 74 72 | 6f 6c 20 6f 66 20 49 6e |es contr|ol of In|
|00004d40| 74 0d 0a 32 31 68 2e 0d | 0a 0d 0a 44 61 6d 61 67 |t..21h..|...Damag|
|00004d50| 65 3a 20 4c 6f 73 73 20 | 6f 66 20 64 61 74 61 20 |e: Loss |of data |
|00004d60| 73 74 6f 72 65 64 20 69 | 6e 20 74 68 65 20 36 74 |stored i|n the 6t|
|00004d70| 68 20 6c 61 73 74 20 74 | 6f 20 31 73 74 0d 0a 6c |h last t|o 1st..l|
|00004d80| 61 73 74 20 73 65 63 74 | 6f 72 73 20 6f 66 20 74 |ast sect|ors of t|
|00004d90| 68 65 20 64 69 73 6b 2e | 20 56 69 72 75 73 20 61 |he disk.| Virus a|
|00004da0| 6c 73 6f 20 69 6e 63 72 | 65 61 73 65 73 0d 0a 66 |lso incr|eases..f|
|00004db0| 69 6c 65 20 73 69 7a 65 | 73 2e 0d 0a 0d 0a 53 79 |ile size|s.....Sy|
|00004dc0| 6d 70 74 6f 6d 73 3a 20 | 56 69 72 75 73 20 74 75 |mptoms: |Virus tu|
|00004dd0| 72 6e 73 20 73 63 72 65 | 65 6e 20 64 69 73 70 6c |rns scre|en displ|
|00004de0| 61 79 20 75 70 73 69 64 | 65 20 64 6f 77 6e 0d 0a |ay upsid|e down..|
|00004df0| 28 72 6f 74 61 74 65 73 | 20 31 38 30 20 64 65 67 |(rotates| 180 deg|
|00004e00| 72 65 65 73 29 2e 20 46 | 69 6c 65 20 73 69 7a 65 |rees). F|ile size|
|00004e10| 73 20 69 6e 63 72 65 61 | 73 65 20 62 79 0d 0a 32 |s increa|se by..2|
|00004e20| 2c 31 35 33 20 62 79 74 | 65 73 2e 0d 0a 0d 0a 4e |,153 byt|es.....N|
|00004e30| 6f 74 65 3a 20 54 68 65 | 20 76 69 72 75 73 20 75 |ote: The| virus u|
|00004e40| 73 65 73 20 61 20 73 6d | 61 72 74 20 74 65 63 68 |ses a sm|art tech|
|00004e50| 6e 69 71 75 65 20 74 6f | 20 61 76 6f 69 64 0d 0a |nique to| avoid..|
|00004e60| 61 6e 74 69 2d 76 69 72 | 75 73 20 64 65 74 65 63 |anti-vir|us detec|
|00004e70| 74 69 6f 6e 20 70 72 6f | 67 72 61 6d 73 2c 20 77 |tion pro|grams, w|
|00004e80| 68 65 6e 20 6d 6f 64 69 | 66 79 69 6e 67 20 74 68 |hen modi|fying th|
|00004e90| 65 0d 0a 70 61 72 74 69 | 74 69 6f 6e 20 73 65 63 |e..parti|tion sec|
|00004ea0| 74 6f 72 2c 20 74 68 61 | 74 20 69 73 20 68 6f 6f |tor, tha|t is hoo|
|00004eb0| 6b 69 6e 67 20 69 6e 74 | 20 30 31 68 2c 20 69 74 |king int| 01h, it|
|00004ec0| 20 77 69 6c 6c 0d 0a 74 | 75 72 6e 20 6f 6e 20 61 | will..t|urn on a|
|00004ed0| 20 73 69 6e 67 6c 65 20 | 73 74 65 70 20 66 6c 61 | single |step fla|
|00004ee0| 67 20 74 6f 20 67 65 74 | 20 74 68 65 20 6f 72 69 |g to get| the ori|
|00004ef0| 67 69 6e 61 6c 0d 0a 65 | 6e 74 72 79 20 6f 66 20 |ginal..e|ntry of |
|00004f00| 44 4f 53 20 68 6f 6f 6b | 65 64 20 6f 66 20 49 4e |DOS hook|ed of IN|
|00004f10| 54 20 31 33 68 20 2e 20 | 54 68 65 20 76 69 72 75 |T 13h . |The viru|
|00004f20| 73 20 77 69 6c 6c 0d 0a | 74 68 65 6e 20 6d 6f 76 |s will..|then mov|
|00004f30| 65 20 69 74 73 65 6c 66 | 20 74 6f 20 74 68 65 20 |e itself| to the |
|00004f40| 74 6f 70 20 6f 66 20 74 | 68 65 20 4d 43 42 20 28 |top of t|he MCB (|
|00004f50| 6d 65 6d 6f 72 79 0d 0a | 63 6f 6e 74 72 6f 6c 20 |memory..|control |
|00004f60| 62 6c 6f 63 6b 29 2c 20 | 61 6e 64 20 64 65 63 72 |block), |and decr|
|00004f70| 65 61 73 65 20 61 76 61 | 69 6c 61 62 6c 65 20 6d |ease ava|ilable m|
|00004f80| 65 6d 6f 72 79 20 69 6e | 0d 0a 74 68 65 20 4d 43 |emory in|..the MC|
|00004f90| 42 20 62 79 20 32 36 37 | 32 20 28 41 37 30 68 29 |B by 267|2 (A70h)|
|00004fa0| 20 62 79 74 65 73 2e 20 | 49 74 20 77 69 6c 6c 20 | bytes. |It will |
|00004fb0| 68 6f 6f 6b 20 49 6e 74 | 20 32 31 68 0d 0a 77 69 |hook Int| 21h..wi|
|00004fc0| 74 68 20 74 68 65 20 73 | 61 6d 65 20 6d 65 74 68 |th the s|ame meth|
|00004fd0| 6f 64 20 61 73 20 66 6f | 72 20 49 4e 54 20 31 33 |od as fo|r INT 13|
|00004fe0| 68 20 61 6e 64 20 74 68 | 65 6e 0d 0a 70 72 6f 63 |h and th|en..proc|
|00004ff0| 65 65 64 73 20 74 6f 20 | 72 75 6e 20 74 68 65 20 |eeds to |run the |
|00005000| 6f 72 69 67 69 6e 61 6c | 20 70 72 6f 67 72 61 6d |original| program|
|00005010| 2e 0d 0a 0d 0a 5b 46 6f | 72 6d 2e 41 5d 0d 0a 56 |.....[Fo|rm.A]..V|
|00005020| 69 72 75 73 20 4e 61 6d | 65 3a 20 46 6f 72 6d 2e |irus Nam|e: Form.|
|00005030| 41 0d 0a 41 6c 69 61 73 | 20 4e 61 6d 65 3a 20 46 |A..Alias| Name: F|
|00005040| 4f 52 4d 2c 20 46 6f 72 | 6d 2c 20 46 6f 72 6d 20 |ORM, For|m, Form |
|00005050| 31 38 2c 20 47 65 6e 65 | 72 69 63 0d 0a 56 69 72 |18, Gene|ric..Vir|
|00005060| 75 73 20 54 79 70 65 3a | 20 42 6f 6f 74 20 56 69 |us Type:| Boot Vi|
|00005070| 72 75 73 0d 0a 56 69 72 | 75 73 20 4c 65 6e 67 74 |rus..Vir|us Lengt|
|00005080| 68 3a 20 4e 2f 41 0d 0a | 44 65 73 63 72 69 70 74 |h: N/A..|Descript|
|00005090| 69 6f 6e 3a 20 54 68 69 | 73 20 76 69 72 75 73 20 |ion: Thi|s virus |
|000050a0| 69 6e 66 65 63 74 73 20 | 62 6f 6f 74 20 73 65 63 |infects |boot sec|
|000050b0| 74 6f 72 73 2e 0d 0a 49 | 6e 74 65 72 72 75 70 74 |tors...I|nterrupt|
|000050c0| 20 76 65 63 74 6f 72 73 | 20 68 6f 6f 6b 65 64 3a | vectors| hooked:|
|000050d0| 20 49 4e 54 20 31 33 68 | 2c 20 49 4e 54 20 30 39 | INT 13h|, INT 09|
|000050e0| 68 0d 0a 0d 0a 49 6e 66 | 65 63 74 69 6f 6e 20 6d |h....Inf|ection m|
|000050f0| 65 74 68 6f 64 3a 20 57 | 68 65 6e 20 74 68 65 20 |ethod: W|hen the |
|00005100| 73 79 73 74 65 6d 20 69 | 73 20 62 6f 6f 74 65 64 |system i|s booted|
|00005110| 20 66 72 6f 6d 0d 0a 61 | 6e 20 69 6e 66 65 63 74 | from..a|n infect|
|00005120| 65 64 20 64 69 73 6b 65 | 74 74 65 2c 20 74 68 65 |ed diske|tte, the|
|00005130| 20 76 69 72 75 73 20 69 | 6e 66 65 63 74 73 20 74 | virus i|nfects t|
|00005140| 68 65 20 44 4f 53 0d 0a | 62 6f 6f 74 20 73 65 63 |he DOS..|boot sec|
|00005150| 74 6f 72 20 61 6e 64 20 | 6c 6f 61 64 73 20 69 74 |tor and |loads it|
|00005160| 73 65 6c 66 20 69 6e 74 | 6f 20 6d 65 6d 6f 72 79 |self int|o memory|
|00005170| 2e 20 57 68 69 6c 65 0d | 0a 6c 6f 61 64 65 64 2c |. While.|.loaded,|
|00005180| 20 69 74 20 69 6e 66 65 | 63 74 73 20 61 6e 79 20 | it infe|cts any |
|00005190| 61 63 63 65 73 73 65 64 | 2c 20 6e 6f 6e 2d 70 72 |accessed|, non-pr|
|000051a0| 6f 74 65 63 74 65 64 0d | 0a 64 69 73 6b 73 2e 20 |otected.|.disks. |
|000051b0| 54 68 65 20 44 4f 53 20 | 43 48 4b 44 53 4b 20 70 |The DOS |CHKDSK p|
|000051c0| 72 6f 67 72 61 6d 20 77 | 69 6c 6c 20 69 6e 64 69 |rogram w|ill indi|
|000051d0| 63 61 74 65 0d 0a 36 35 | 33 2c 33 31 32 20 62 79 |cate..65|3,312 by|
|000051e0| 74 65 73 20 6f 66 20 66 | 72 65 65 20 6d 65 6d 6f |tes of f|ree memo|
|000051f0| 72 79 2e 0d 0a 0d 0a 44 | 61 6d 61 67 65 3a 20 4f |ry.....D|amage: O|
|00005200| 6e 20 74 68 65 20 31 38 | 74 68 20 64 61 79 20 6f |n the 18|th day o|
|00005210| 66 20 61 6e 79 20 6d 6f | 6e 74 68 2c 20 74 68 65 |f any mo|nth, the|
|00005220| 20 76 69 72 75 73 0d 0a | 77 69 6c 6c 20 65 6d 69 | virus..|will emi|
|00005230| 74 20 61 20 63 6c 69 63 | 6b 69 6e 67 20 73 6f 75 |t a clic|king sou|
|00005240| 6e 64 20 77 68 65 6e 65 | 76 65 72 20 6b 65 79 73 |nd whene|ver keys|
|00005250| 20 61 72 65 0d 0a 70 72 | 65 73 73 65 64 2e 20 54 | are..pr|essed. T|
|00005260| 68 65 20 73 79 73 74 65 | 6d 20 6d 61 79 20 68 61 |he syste|m may ha|
|00005270| 6e 67 20 77 68 65 6e 20 | 61 20 72 65 61 64 20 65 |ng when |a read e|
|00005280| 72 72 6f 72 0d 0a 6f 63 | 63 75 72 73 2c 20 61 6e |rror..oc|curs, an|
|00005290| 64 20 70 61 72 74 73 20 | 6f 66 20 74 68 65 20 6f |d parts |of the o|
|000052a0| 72 69 67 69 6e 61 6c 20 | 62 6f 6f 74 20 73 65 63 |riginal |boot sec|
|000052b0| 74 6f 72 20 6d 61 79 0d | 0a 62 65 20 6f 76 65 72 |tor may.|.be over|
|000052c0| 77 72 69 74 74 65 6e 2c | 20 6d 61 6b 69 6e 67 20 |written,| making |
|000052d0| 74 68 65 20 70 61 72 74 | 69 74 69 6f 6e 20 75 6e |the part|ition un|
|000052e0| 62 6f 6f 74 61 62 6c 65 | 2e 0d 0a 0d 0a 5b 46 72 |bootable|.....[Fr|
|000052f0| 69 64 61 79 5f 31 33 74 | 68 5d 0d 0a 56 69 72 75 |iday_13t|h]..Viru|
|00005300| 73 20 4e 61 6d 65 3a 20 | 46 72 69 64 61 79 5f 31 |s Name: |Friday_1|
|00005310| 33 74 68 0d 0a 41 6c 69 | 61 73 20 4e 61 6d 65 3a |3th..Ali|as Name:|
|00005320| 20 46 72 69 64 61 79 20 | 74 68 65 20 31 33 74 68 | Friday |the 13th|
|00005330| 2c 20 56 69 72 75 73 20 | 31 38 31 33 2c 0d 0a 20 |, Virus |1813,.. |
|00005340| 20 20 20 20 20 20 20 20 | 20 20 20 49 73 72 61 65 | | Israe|
|00005350| 6c 69 61 6e 2c 20 4a 65 | 72 75 73 61 6c 65 6d 0d |lian, Je|rusalem.|
|00005360| 0a 56 69 72 75 73 20 54 | 79 70 65 3a 20 46 69 6c |.Virus T|ype: Fil|
|00005370| 65 20 56 69 72 75 73 0d | 0a 56 69 72 75 73 20 4c |e Virus.|.Virus L|
|00005380| 65 6e 67 74 68 3a 20 61 | 70 70 72 6f 78 2e 20 31 |ength: a|pprox. 1|
|00005390| 2c 38 31 33 20 62 79 74 | 65 73 0d 0a 44 65 73 63 |,813 byt|es..Desc|
|000053a0| 72 69 70 74 69 6f 6e 3a | 20 54 68 69 73 20 76 69 |ription:| This vi|
|000053b0| 72 75 73 20 69 6e 66 65 | 63 74 73 20 2a 2e 43 4f |rus infe|cts *.CO|
|000053c0| 4d 20 61 6e 64 20 2a 2e | 45 58 45 0d 0a 20 20 20 |M and *.|EXE.. |
|000053d0| 20 20 20 20 20 20 20 20 | 20 20 66 69 6c 65 73 2e | | files.|
|000053e0| 0d 0a 50 43 20 56 65 63 | 74 6f 72 73 20 48 6f 6f |..PC Vec|tors Hoo|
|000053f0| 6b 65 64 3a 20 20 49 6e | 74 20 32 31 0d 0a 0d 0a |ked: In|t 21....|
|00005400| 45 78 65 63 75 74 69 6f | 6e 20 50 72 6f 63 65 64 |Executio|n Proced|
|00005410| 75 72 65 3a 0d 0a 31 29 | 20 54 68 65 20 76 69 72 |ure:..1)| The vir|
|00005420| 75 73 20 63 68 65 63 6b | 73 20 77 68 65 74 68 65 |us check|s whethe|
|00005430| 72 20 69 74 20 69 73 20 | 61 6c 72 65 61 64 79 20 |r it is |already |
|00005440| 6c 6f 61 64 65 64 0d 0a | 20 20 20 72 65 73 69 64 |loaded..| resid|
|00005450| 65 6e 74 20 69 6e 20 6d | 65 6d 6f 72 79 2e 20 49 |ent in m|emory. I|
|00005460| 66 20 22 4e 6f 22 2c 20 | 69 74 20 74 68 65 6e 20 |f "No", |it then |
|00005470| 6c 6f 61 64 73 0d 0a 20 | 20 20 69 74 73 65 6c 66 |loads.. | itself|
|00005480| 20 72 65 73 69 64 65 6e | 74 20 69 6e 74 6f 20 6d | residen|t into m|
|00005490| 65 6d 6f 72 79 20 62 79 | 20 68 6f 6f 6b 69 6e 67 |emory by| hooking|
|000054a0| 20 49 4e 54 20 32 31 68 | 2e 0d 0a 32 29 20 49 74 | INT 21h|...2) It|
|000054b0| 20 74 68 65 6e 20 65 78 | 65 63 75 74 65 73 20 74 | then ex|ecutes t|
|000054c0| 68 65 20 6f 72 69 67 69 | 6e 61 6c 20 66 69 6c 65 |he origi|nal file|
|000054d0| 2e 0d 0a 33 29 20 57 69 | 74 68 20 69 74 73 65 6c |...3) Wi|th itsel|
|000054e0| 66 20 6c 6f 61 64 65 64 | 20 72 65 73 69 64 65 6e |f loaded| residen|
|000054f0| 74 20 69 6e 20 6d 65 6d | 6f 72 79 20 69 74 20 77 |t in mem|ory it w|
|00005500| 69 6c 6c 0d 0a 20 20 20 | 69 6e 66 65 63 74 20 61 |ill.. |infect a|
|00005510| 6e 79 20 75 6e 69 6e 66 | 65 63 74 65 64 20 66 69 |ny uninf|ected fi|
|00005520| 6c 65 20 74 68 61 74 20 | 69 73 20 65 78 65 63 75 |le that |is execu|
|00005530| 74 65 64 2e 0d 0a 0d 0a | 44 61 6d 61 67 65 3a 20 |ted.....|Damage: |
|00005540| 49 6e 20 74 68 65 20 79 | 65 61 72 20 31 39 38 37 |In the y|ear 1987|
|00005550| 2c 20 74 68 65 20 76 69 | 72 75 73 20 64 6f 65 73 |, the vi|rus does|
|00005560| 20 6e 6f 20 64 61 6d 61 | 67 65 0d 0a 2e 20 49 74 | no dama|ge... It|
|00005570| 20 70 72 6f 63 65 65 64 | 73 20 6f 6e 6c 79 20 74 | proceed|s only t|
|00005580| 6f 20 69 6e 66 65 63 74 | 20 6f 74 68 65 72 20 66 |o infect| other f|
|00005590| 69 6c 65 73 2e 20 45 76 | 65 72 79 0d 0a 46 72 69 |iles. Ev|ery..Fri|
|000055a0| 64 61 79 20 74 68 65 20 | 31 33 74 68 2c 20 65 78 |day the |13th, ex|
|000055b0| 63 6c 75 64 69 6e 67 20 | 74 68 65 20 79 65 61 72 |cluding |the year|
|000055c0| 20 31 39 38 37 2c 20 74 | 68 65 20 76 69 72 75 73 | 1987, t|he virus|
|000055d0| 0d 0a 64 65 6c 65 74 65 | 73 20 65 76 65 72 79 20 |..delete|s every |
|000055e0| 65 78 65 63 75 74 65 64 | 20 70 72 6f 67 72 61 6d |executed| program|
|000055f0| 20 2e 20 41 6c 6c 20 6f | 74 68 65 72 20 64 61 79 | . All o|ther day|
|00005600| 73 2c 0d 0a 65 78 63 6c | 75 64 69 6e 67 20 74 68 |s,..excl|uding th|
|00005610| 65 20 79 65 61 72 20 31 | 39 38 37 2c 20 74 68 65 |e year 1|987, the|
|00005620| 20 76 69 72 75 73 20 73 | 70 72 65 61 64 73 2e 20 | virus s|preads. |
|00005630| 20 41 62 6f 75 74 0d 0a | 68 61 6c 66 20 61 6e 20 | About..|half an |
|00005640| 68 6f 75 72 20 61 66 74 | 65 72 20 74 68 65 20 76 |hour aft|er the v|
|00005650| 69 72 75 73 20 69 73 20 | 69 6e 73 74 61 6c 6c 65 |irus is |installe|
|00005660| 64 20 69 6e 0d 0a 6d 65 | 6d 6f 72 79 20 69 74 20 |d in..me|mory it |
|00005670| 73 63 72 6f 6c 6c 73 20 | 75 70 20 62 79 20 74 77 |scrolls |up by tw|
|00005680| 6f 20 6c 69 6e 65 73 20 | 61 20 73 6d 61 6c 6c 20 |o lines |a small |
|00005690| 77 69 6e 64 6f 77 0d 0a | 77 69 74 68 20 63 6f 6f |window..|with coo|
|000056a0| 72 64 69 6e 61 74 65 73 | 20 28 35 2c 20 35 29 2c |rdinates| (5, 5),|
|000056b0| 20 28 31 36 2c 20 31 36 | 29 20 61 6e 64 20 73 6c | (16, 16|) and sl|
|000056c0| 6f 77 73 20 64 6f 77 6e | 0d 0a 63 6f 6d 70 75 74 |ows down|..comput|
|000056d0| 65 72 20 73 70 65 65 64 | 2e 20 20 44 65 6c 61 79 |er speed|. Delay|
|000056e0| 20 6c 6f 6f 70 20 72 65 | 70 65 61 74 73 20 31 38 | loop re|peats 18|
|000056f0| 2e 35 20 74 69 6d 65 73 | 20 70 65 72 0d 0a 73 65 |.5 times| per..se|
|00005700| 63 6f 6e 64 2e 0d 0a 0d | 0a 44 65 74 65 63 74 69 |cond....|.Detecti|
|00005710| 6f 6e 20 4d 65 74 68 6f | 64 3a 20 49 6e 63 72 65 |on Metho|d: Incre|
|00005720| 61 73 65 73 20 74 68 65 | 20 66 69 6c 65 20 6c 65 |ases the| file le|
|00005730| 6e 67 74 68 20 62 79 0d | 0a 31 38 31 33 20 62 79 |ngth by.|.1813 by|
|00005740| 74 65 73 2e 0d 0a 0d 0a | 4e 6f 74 65 3a 20 4c 6f |tes.....|Note: Lo|
|00005750| 61 64 73 20 69 74 73 65 | 6c 66 20 72 65 73 69 64 |ads itse|lf resid|
|00005760| 65 6e 74 20 69 6e 20 6d | 65 6d 6f 72 79 2e 20 20 |ent in m|emory. |
|00005770| 41 6e 20 65 72 72 6f 72 | 0d 0a 6d 65 73 73 61 67 |An error|..messag|
|00005780| 65 20 6f 63 63 75 72 73 | 20 69 66 20 74 68 65 72 |e occurs| if ther|
|00005790| 65 20 69 73 20 61 6e 20 | 49 2f 4f 20 65 72 72 6f |e is an |I/O erro|
|000057a0| 72 20 28 73 75 63 68 20 | 61 73 0d 0a 77 72 69 74 |r (such |as..writ|
|000057b0| 65 20 70 72 6f 74 65 63 | 74 29 2e 0d 0a 0d 0a 5b |e protec|t).....[|
|000057c0| 46 72 6f 64 6f 2e 46 72 | 6f 64 6f 2e 41 5d 0d 0a |Frodo.Fr|odo.A]..|
|000057d0| 56 69 72 75 73 20 4e 61 | 6d 65 3a 20 46 72 6f 64 |Virus Na|me: Frod|
|000057e0| 6f 2e 46 72 6f 64 6f 2e | 41 0d 0a 41 6c 69 61 73 |o.Frodo.|A..Alias|
|000057f0| 20 4e 61 6d 65 3a 20 34 | 30 39 36 2c 20 49 44 46 | Name: 4|096, IDF|
|00005800| 2c 20 34 30 39 36 2d 31 | 2c 20 46 72 6f 64 6f 2c |, 4096-1|, Frodo,|
|00005810| 0d 0a 20 20 20 20 20 20 | 20 20 20 20 20 20 46 72 |.. | Fr|
|00005820| 6f 64 6f 2e 46 72 6f 64 | 6f 2e 41 2c 20 31 30 30 |odo.Frod|o.A, 100|
|00005830| 20 59 65 61 72 0d 0a 56 | 69 72 75 73 20 54 79 70 | Year..V|irus Typ|
|00005840| 65 3a 20 46 69 6c 65 20 | 56 69 72 75 73 0d 0a 56 |e: File |Virus..V|
|00005850| 69 72 75 73 20 4c 65 6e | 67 74 68 3a 20 34 2c 30 |irus Len|gth: 4,0|
|00005860| 39 36 20 62 79 74 65 73 | 0d 0a 44 65 73 63 72 69 |96 bytes|..Descri|
|00005870| 70 74 69 6f 6e 3a 20 54 | 68 69 73 20 76 69 72 75 |ption: T|his viru|
|00005880| 73 20 69 6e 66 65 63 74 | 73 20 2a 2e 43 4f 4d 20 |s infect|s *.COM |
|00005890| 61 6e 64 20 2a 2e 45 58 | 45 0d 0a 20 20 20 20 20 |and *.EX|E.. |
|000058a0| 20 20 20 20 20 20 20 20 | 66 69 6c 65 73 2e 0d 0a | |files...|
|000058b0| 49 6e 74 65 72 72 75 70 | 74 20 76 65 63 74 6f 72 |Interrup|t vector|
|000058c0| 73 20 68 6f 6f 6b 65 64 | 3a 20 49 4e 54 20 32 31 |s hooked|: INT 21|
|000058d0| 68 2c 20 49 4e 54 20 31 | 33 68 0d 0a 0d 0a 49 6e |h, INT 1|3h....In|
|000058e0| 66 65 63 74 69 6f 6e 20 | 6d 65 74 68 6f 64 3a 20 |fection |method: |
|000058f0| 57 68 65 6e 20 61 6e 20 | 69 6e 66 65 63 74 65 64 |When an |infected|
|00005900| 20 66 69 6c 65 20 72 75 | 6e 73 2c 20 74 68 65 0d | file ru|ns, the.|
|00005910| 0a 76 69 72 75 73 20 6c | 6f 61 64 73 20 69 74 73 |.virus l|oads its|
|00005920| 65 6c 66 20 69 6e 20 6d | 65 6d 6f 72 79 2e 20 57 |elf in m|emory. W|
|00005930| 68 69 6c 65 20 6c 6f 61 | 64 65 64 2c 20 69 74 0d |hile loa|ded, it.|
|00005940| 0a 69 6e 66 65 63 74 73 | 20 61 63 63 65 73 73 65 |.infects| accesse|
|00005950| 64 20 65 78 65 63 75 74 | 61 62 6c 65 20 66 69 6c |d execut|able fil|
|00005960| 65 73 2e 20 54 68 65 20 | 76 69 72 75 73 0d 0a 69 |es. The |virus..i|
|00005970| 6e 63 72 65 61 73 65 73 | 20 74 68 65 20 73 69 7a |ncreases| the siz|
|00005980| 65 20 6f 66 20 69 6e 66 | 65 63 74 65 64 20 66 69 |e of inf|ected fi|
|00005990| 6c 65 73 20 62 79 20 34 | 30 39 36 0d 0a 62 79 74 |les by 4|096..byt|
|000059a0| 65 73 2e 0d 0a 0d 0a 44 | 61 6d 61 67 65 3a 20 41 |es.....D|amage: A|
|000059b0| 66 74 65 72 20 53 65 70 | 74 65 6d 62 65 72 20 32 |fter Sep|tember 2|
|000059c0| 31 2c 20 74 68 65 20 76 | 69 72 75 73 20 74 72 69 |1, the v|irus tri|
|000059d0| 65 73 20 74 6f 0d 0a 6d | 6f 64 69 66 79 20 74 68 |es to..m|odify th|
|000059e0| 65 20 62 6f 6f 74 20 73 | 65 63 74 6f 72 20 74 6f |e boot s|ector to|
|000059f0| 20 64 69 73 70 6c 61 79 | 20 22 46 52 4f 44 4f 20 | display| "FRODO |
|00005a00| 4c 49 56 45 53 2e 22 0d | 0a 48 6f 77 65 76 65 72 |LIVES.".|.However|
|00005a10| 2c 20 74 68 65 20 76 69 | 72 75 73 20 63 6f 64 65 |, the vi|rus code|
|00005a20| 20 69 73 20 63 6f 72 72 | 75 70 74 65 64 2c 20 73 | is corr|upted, s|
|00005a30| 6f 20 69 6e 73 74 65 61 | 64 0d 0a 6f 66 20 6d 6f |o instea|d..of mo|
|00005a40| 64 69 66 79 69 6e 67 20 | 74 68 65 20 73 79 73 74 |difying |the syst|
|00005a50| 65 6d 20 61 72 65 61 73 | 2c 20 69 74 20 63 72 61 |em areas|, it cra|
|00005a60| 73 68 65 73 20 74 68 65 | 0d 0a 73 79 73 74 65 6d |shes the|..system|
|00005a70| 2e 0d 0a 0d 0a 4e 6f 74 | 65 3a 20 57 68 69 6c 65 |.....Not|e: While|
|00005a80| 20 74 68 65 20 76 69 72 | 75 73 20 69 73 20 69 6e | the vir|us is in|
|00005a90| 20 6d 65 6d 6f 72 79 2c | 20 69 74 20 68 69 64 65 | memory,| it hide|
|00005aa0| 73 20 74 68 65 0d 0a 69 | 6e 63 72 65 61 73 65 20 |s the..i|ncrease |
|00005ab0| 69 6e 20 69 6e 66 65 63 | 74 65 64 20 66 69 6c 65 |in infec|ted file|
|00005ac0| 20 73 69 7a 65 73 2e 0d | 0a 0d 0a 5b 47 65 6e 65 | sizes..|...[Gene|
|00005ad0| 72 69 63 5f 34 30 38 5d | 0d 0a 56 69 72 75 73 20 |ric_408]|..Virus |
|00005ae0| 4e 61 6d 65 3a 20 47 65 | 6e 65 72 69 63 5f 34 30 |Name: Ge|neric_40|
|00005af0| 38 0d 0a 41 6c 69 61 73 | 20 4e 61 6d 65 3a 20 4e |8..Alias| Name: N|
|00005b00| 59 42 2c 20 42 31 0d 0a | 56 69 72 75 73 20 54 79 |YB, B1..|Virus Ty|
|00005b10| 70 65 3a 20 42 6f 6f 74 | 20 56 69 72 75 73 0d 0a |pe: Boot| Virus..|
|00005b20| 56 69 72 75 73 20 4c 65 | 6e 67 74 68 3a 20 4e 2f |Virus Le|ngth: N/|
|00005b30| 41 0d 0a 44 65 73 63 72 | 69 70 74 69 6f 6e 3a 20 |A..Descr|iption: |
|00005b40| 54 68 69 73 20 76 69 72 | 75 73 20 69 6e 66 65 63 |This vir|us infec|
|00005b50| 74 73 20 62 6f 6f 74 20 | 73 65 63 74 6f 72 73 2e |ts boot |sectors.|
|00005b60| 0d 0a 0d 0a 49 6e 66 65 | 63 74 69 6f 6e 20 6d 65 |....Infe|ction me|
|00005b70| 74 68 6f 64 3a 20 57 68 | 65 6e 20 74 68 65 20 73 |thod: Wh|en the s|
|00005b80| 79 73 74 65 6d 20 69 73 | 20 62 6f 6f 74 65 64 20 |ystem is| booted |
|00005b90| 66 72 6f 6d 0d 0a 61 6e | 20 69 6e 66 65 63 74 65 |from..an| infecte|
|00005ba0| 64 20 64 69 73 6b 65 74 | 74 65 2c 20 74 68 65 20 |d disket|te, the |
|00005bb0| 76 69 72 75 73 20 69 6e | 66 65 63 74 73 20 74 68 |virus in|fects th|
|00005bc0| 65 20 6d 61 73 74 65 72 | 0d 0a 62 6f 6f 74 20 72 |e master|..boot r|
|00005bd0| 65 63 6f 72 64 20 61 6e | 64 20 6c 6f 61 64 73 20 |ecord an|d loads |
|00005be0| 69 74 73 65 6c 66 20 69 | 6e 20 6d 65 6d 6f 72 79 |itself i|n memory|
|00005bf0| 2e 20 57 68 69 6c 65 0d | 0a 6c 6f 61 64 65 64 2c |. While.|.loaded,|
|00005c00| 20 69 74 20 69 6e 66 65 | 63 74 73 20 61 6e 79 20 | it infe|cts any |
|00005c10| 61 63 63 65 73 73 65 64 | 2c 20 6e 6f 6e 2d 70 72 |accessed|, non-pr|
|00005c20| 6f 74 65 63 74 65 64 0d | 0a 64 69 73 6b 73 2e 0d |otected.|.disks..|
|00005c30| 0a 0d 0a 44 61 6d 61 67 | 65 3a 20 4e 6f 6e 65 20 |...Damag|e: None |
|00005c40| 6b 6e 6f 77 6e 0d 0a 0d | 0a 5b 47 65 6e 65 72 69 |known...|.[Generi|
|00005c50| 63 5f 34 33 37 5d 0d 0a | 56 69 72 75 73 20 4e 61 |c_437]..|Virus Na|
|00005c60| 6d 65 3a 20 47 65 6e 65 | 72 69 63 5f 34 33 37 0d |me: Gene|ric_437.|
|00005c70| 0a 41 6c 69 61 73 20 4e | 61 6d 65 3a 20 42 6f 6f |.Alias N|ame: Boo|
|00005c80| 74 2d 34 33 37 0d 0a 56 | 69 72 75 73 20 54 79 70 |t-437..V|irus Typ|
|00005c90| 65 3a 20 42 6f 6f 74 20 | 56 69 72 75 73 0d 0a 56 |e: Boot |Virus..V|
|00005ca0| 69 72 75 73 20 4c 65 6e | 67 74 68 3a 20 4e 2f 41 |irus Len|gth: N/A|
|00005cb0| 0d 0a 44 65 73 63 72 69 | 70 74 69 6f 6e 3a 20 54 |..Descri|ption: T|
|00005cc0| 68 69 73 20 76 69 72 75 | 73 20 69 6e 66 65 63 74 |his viru|s infect|
|00005cd0| 73 20 62 6f 6f 74 20 73 | 65 63 74 6f 72 73 2e 0d |s boot s|ectors..|
|00005ce0| 0a 0d 0a 54 68 69 73 20 | 76 69 72 75 73 20 77 69 |...This |virus wi|
|00005cf0| 6c 6c 20 6f 6e 6c 79 20 | 69 6e 66 65 63 74 20 68 |ll only |infect h|
|00005d00| 61 72 64 20 64 72 69 76 | 65 73 20 77 68 65 6e 20 |ard driv|es when |
|00005d10| 61 6e 0d 0a 61 74 74 65 | 6d 70 74 20 74 6f 20 62 |an..atte|mpt to b|
|00005d20| 6f 6f 74 20 66 72 6f 6d | 20 61 6e 20 69 6e 66 65 |oot from| an infe|
|00005d30| 63 74 65 64 20 64 69 73 | 6b 65 74 74 65 20 69 73 |cted dis|kette is|
|00005d40| 20 6d 61 64 65 2e 0d 0a | 4f 6e 63 65 20 74 68 65 | made...|Once the|
|00005d50| 20 76 69 72 75 73 20 68 | 61 73 20 69 6e 66 65 63 | virus h|as infec|
|00005d60| 74 65 64 20 74 68 65 20 | 68 61 72 64 20 64 72 69 |ted the |hard dri|
|00005d70| 76 65 2c 20 61 6c 6c 0d | 0a 6e 6f 6e 2d 70 72 6f |ve, all.|.non-pro|
|00005d80| 74 65 63 74 65 64 20 66 | 6c 6f 70 70 69 65 73 20 |tected f|loppies |
|00005d90| 75 73 65 64 20 69 6e 20 | 74 68 65 20 6d 61 63 68 |used in |the mach|
|00005da0| 69 6e 65 20 77 69 6c 6c | 20 62 65 0d 0a 69 6e 66 |ine will| be..inf|
|00005db0| 65 63 74 65 64 2e 0d 0a | 0d 0a 55 6e 6c 69 6b 65 |ected...|..Unlike|
|00005dc0| 20 6d 6f 73 74 20 6f 74 | 68 65 72 20 62 6f 6f 74 | most ot|her boot|
|00005dd0| 20 73 65 63 74 6f 72 20 | 76 69 72 75 73 65 73 20 | sector |viruses |
|00005de0| 28 65 78 63 65 70 74 0d | 0a 46 6f 72 6d 29 2c 20 |(except.|.Form), |
|00005df0| 42 6f 6f 74 2d 34 33 37 | 20 69 6e 66 65 63 74 73 |Boot-437| infects|
|00005e00| 20 74 68 65 20 44 4f 53 | 20 62 6f 6f 74 20 73 65 | the DOS| boot se|
|00005e10| 63 74 6f 72 20 6f 6e 0d | 0a 68 61 72 64 20 64 72 |ctor on.|.hard dr|
|00005e20| 69 76 65 73 20 69 6e 73 | 74 65 61 64 20 6f 66 20 |ives ins|tead of |
|00005e30| 74 68 65 20 4d 61 73 74 | 65 72 20 42 6f 6f 74 20 |the Mast|er Boot |
|00005e40| 52 65 63 6f 72 64 2e 0d | 0a 0d 0a 5b 47 72 65 65 |Record..|...[Gree|
|00005e50| 6e 43 61 74 5d 0d 0a 56 | 69 72 75 73 20 4e 61 6d |nCat]..V|irus Nam|
|00005e60| 65 3a 20 47 72 65 65 6e | 43 61 74 0d 0a 41 6c 69 |e: Green|Cat..Ali|
|00005e70| 61 73 20 4e 61 6d 65 3a | 20 47 72 65 65 6e 20 43 |as Name:| Green C|
|00005e80| 61 74 65 72 70 69 6c 6c | 61 72 2c 0d 0a 20 20 20 |aterpill|ar,.. |
|00005e90| 20 20 20 20 20 20 20 20 | 20 47 72 65 65 6e 5f 43 | | Green_C|
|00005ea0| 61 74 65 72 70 69 6c 6c | 61 72 2e 31 35 37 35 2e |aterpill|ar.1575.|
|00005eb0| 41 2c 20 46 69 6e 64 2c | 20 31 35 39 31 2c 0d 0a |A, Find,| 1591,..|
|00005ec0| 20 20 20 20 20 20 20 20 | 20 20 20 20 31 35 37 35 | | 1575|
|00005ed0| 0d 0a 56 69 72 75 73 20 | 54 79 70 65 3a 20 46 69 |..Virus |Type: Fi|
|00005ee0| 6c 65 20 56 69 72 75 73 | 0d 0a 56 69 72 75 73 20 |le Virus|..Virus |
|00005ef0| 4c 65 6e 67 74 68 3a 20 | 31 2c 39 39 31 20 74 6f |Length: |1,991 to|
|00005f00| 20 32 2c 30 30 35 20 62 | 79 74 65 73 0d 0a 44 65 | 2,005 b|ytes..De|
|00005f10| 73 63 72 69 70 74 69 6f | 6e 3a 20 54 68 69 73 20 |scriptio|n: This |
|00005f20| 76 69 72 75 73 20 69 6e | 66 65 63 74 73 20 2a 2e |virus in|fects *.|
|00005f30| 43 4f 4d 20 61 6e 64 20 | 2a 2e 45 58 45 0d 0a 20 |COM and |*.EXE.. |
|00005f40| 20 20 20 20 20 20 20 20 | 20 20 20 20 66 69 6c 65 | | file|
|00005f50| 73 2e 0d 0a 49 6e 74 65 | 72 72 75 70 74 20 76 65 |s...Inte|rrupt ve|
|00005f60| 63 74 6f 72 73 20 68 6f | 6f 6b 65 64 3a 20 49 4e |ctors ho|oked: IN|
|00005f70| 54 20 32 31 68 0d 0a 0d | 0a 49 6e 66 65 63 74 69 |T 21h...|.Infecti|
|00005f80| 6f 6e 20 6d 65 74 68 6f | 64 3a 20 57 68 65 6e 20 |on metho|d: When |
|00005f90| 61 6e 20 69 6e 66 65 63 | 74 65 64 20 66 69 6c 65 |an infec|ted file|
|00005fa0| 20 72 75 6e 73 2c 20 74 | 68 65 0d 0a 76 69 72 75 | runs, t|he..viru|
|00005fb0| 73 20 6c 6f 61 64 73 20 | 69 74 73 65 6c 66 20 69 |s loads |itself i|
|00005fc0| 6e 20 6d 65 6d 6f 72 79 | 2e 0d 0a 0d 0a 44 61 6d |n memory|.....Dam|
|00005fd0| 61 67 65 3a 20 41 66 74 | 65 72 20 61 20 73 70 65 |age: Aft|er a spe|
|00005fe0| 63 69 66 69 63 20 74 69 | 6d 65 20 70 65 72 69 6f |cific ti|me perio|
|00005ff0| 64 20 68 61 73 20 65 6c | 61 70 73 65 64 2c 0d 0a |d has el|apsed,..|
|00006000| 74 68 65 20 65 78 65 63 | 75 74 69 6f 6e 20 6f 66 |the exec|ution of|
|00006010| 20 61 6e 20 69 6e 66 65 | 63 74 65 64 20 66 69 6c | an infe|cted fil|
|00006020| 65 20 63 61 75 73 65 73 | 20 61 20 67 72 65 65 6e |e causes| a green|
|00006030| 0d 0a 63 61 74 65 72 70 | 69 6c 6c 61 72 20 74 6f |..caterp|illar to|
|00006040| 20 72 75 6e 20 61 63 72 | 6f 73 73 20 74 68 65 20 | run acr|oss the |
|00006050| 73 63 72 65 65 6e 2c 20 | 65 78 63 72 65 74 69 6e |screen, |excretin|
|00006060| 67 0d 0a 74 68 65 20 73 | 63 72 65 65 6e 20 63 6f |g..the s|creen co|
|00006070| 6e 74 65 6e 74 73 20 61 | 73 20 69 74 20 67 6f 65 |ntents a|s it goe|
|00006080| 73 2e 20 54 68 65 72 65 | 20 69 73 20 6e 6f 0d 0a |s. There| is no..|
|00006090| 70 65 72 6d 61 6e 65 6e | 74 20 64 61 6d 61 67 65 |permanen|t damage|
|000060a0| 2e 0d 0a 0d 0a 5b 47 72 | 6f 67 33 31 5d 0d 0a 56 |.....[Gr|og31]..V|
|000060b0| 69 72 75 73 20 4e 61 6d | 65 3a 20 47 72 6f 67 33 |irus Nam|e: Grog3|
|000060c0| 31 0d 0a 41 6c 69 61 73 | 20 4e 61 6d 65 3a 20 47 |1..Alias| Name: G|
|000060d0| 72 6f 67 20 33 2e 31 0d | 0a 56 69 72 75 73 20 54 |rog 3.1.|.Virus T|
|000060e0| 79 70 65 3a 20 46 69 6c | 65 20 56 69 72 75 73 0d |ype: Fil|e Virus.|
|000060f0| 0a 56 69 72 75 73 20 4c | 65 6e 67 74 68 3a 20 31 |.Virus L|ength: 1|
|00006100| 2c 32 30 30 20 62 79 74 | 65 73 0d 0a 44 65 73 63 |,200 byt|es..Desc|
|00006110| 72 69 70 74 69 6f 6e 3a | 20 54 68 69 73 20 76 69 |ription:| This vi|
|00006120| 72 75 73 20 69 6e 66 65 | 63 74 73 20 2a 2e 43 4f |rus infe|cts *.CO|
|00006130| 4d 20 66 69 6c 65 73 20 | 61 73 0d 0a 20 20 20 20 |M files |as.. |
|00006140| 20 20 20 20 20 20 20 20 | 20 77 65 6c 6c 20 61 73 | | well as|
|00006150| 20 43 4f 4d 4d 41 4e 44 | 2e 43 4f 4d 2e 0d 0a 0d | COMMAND|.COM....|
|00006160| 0a 57 68 65 6e 20 61 6e | 20 69 6e 66 65 63 74 65 |.When an| infecte|
|00006170| 64 20 66 69 6c 65 20 69 | 73 20 65 78 65 63 75 74 |d file i|s execut|
|00006180| 65 64 2c 20 74 68 65 20 | 76 69 72 75 73 0d 0a 69 |ed, the |virus..i|
|00006190| 6e 73 74 61 6c 6c 73 20 | 69 74 73 65 6c 66 20 69 |nstalls |itself i|
|000061a0| 6e 74 6f 20 6d 65 6d 6f | 72 79 2e 20 54 6f 74 61 |nto memo|ry. Tota|
|000061b0| 6c 20 61 76 61 69 6c 61 | 62 6c 65 0d 0a 6d 65 6d |l availa|ble..mem|
|000061c0| 6f 72 79 20 77 69 6c 6c | 20 64 65 63 72 65 61 73 |ory will| decreas|
|000061d0| 65 20 62 79 20 34 2c 38 | 30 30 20 62 79 74 65 73 |e by 4,8|00 bytes|
|000061e0| 2e 20 54 68 65 20 76 69 | 72 75 73 0d 0a 77 69 6c |. The vi|rus..wil|
|000061f0| 6c 20 61 6c 73 6f 20 69 | 6e 66 65 63 74 20 43 4f |l also i|nfect CO|
|00006200| 4d 4d 41 4e 44 2e 43 4f | 4d 2e 0d 0a 0d 0a 4f 6e |MMAND.CO|M.....On|
|00006210| 63 65 20 74 68 65 20 76 | 69 72 75 73 20 69 73 20 |ce the v|irus is |
|00006220| 6d 65 6d 6f 72 79 20 72 | 65 73 69 64 65 6e 74 2c |memory r|esident,|
|00006230| 20 69 74 20 77 69 6c 6c | 20 69 6e 66 65 63 74 0d | it will| infect.|
|00006240| 0a 2a 2e 43 4f 4d 20 66 | 69 6c 65 73 20 74 68 61 |.*.COM f|iles tha|
|00006250| 74 20 61 72 65 20 6c 61 | 72 67 65 72 20 74 68 61 |t are la|rger tha|
|00006260| 6e 20 32 2c 30 30 30 20 | 62 79 74 65 73 20 77 68 |n 2,000 |bytes wh|
|00006270| 65 6e 0d 0a 74 68 65 79 | 20 61 72 65 20 65 78 65 |en..they| are exe|
|00006280| 63 75 74 65 64 20 6f 72 | 20 6f 70 65 6e 65 64 2e |cuted or| opened.|
|00006290| 20 20 49 6e 66 65 63 74 | 65 64 20 66 69 6c 65 73 | Infect|ed files|
|000062a0| 20 77 69 6c 6c 0d 0a 69 | 6e 63 72 65 61 73 65 20 | will..i|ncrease |
|000062b0| 69 6e 20 73 69 7a 65 20 | 62 79 20 31 2c 32 30 30 |in size |by 1,200|
|000062c0| 20 62 79 74 65 73 2c 20 | 77 69 74 68 20 74 68 65 | bytes, |with the|
|000062d0| 20 76 69 72 75 73 0d 0a | 62 65 69 6e 67 20 6c 6f | virus..|being lo|
|000062e0| 63 61 74 65 64 20 61 74 | 20 74 68 65 20 62 65 67 |cated at| the beg|
|000062f0| 69 6e 6e 69 6e 67 20 6f | 66 20 74 68 65 20 69 6e |inning o|f the in|
|00006300| 66 65 63 74 65 64 0d 0a | 66 69 6c 65 2e 20 44 61 |fected..|file. Da|
|00006310| 74 65 20 61 6e 64 20 74 | 69 6d 65 20 69 6e 66 6f |te and t|ime info|
|00006320| 72 6d 61 74 69 6f 6e 20 | 6f 66 20 69 6e 66 65 63 |rmation |of infec|
|00006330| 74 65 64 20 66 69 6c 65 | 73 0d 0a 77 69 6c 6c 20 |ted file|s..will |
|00006340| 6e 6f 74 20 62 65 20 61 | 6c 74 65 72 65 64 2e 0d |not be a|ltered..|
|00006350| 0a 0d 0a 54 68 65 20 66 | 6f 6c 6c 6f 77 69 6e 67 |...The f|ollowing|
|00006360| 20 74 65 78 74 20 73 74 | 72 69 6e 67 20 63 61 6e | text st|ring can|
|00006370| 20 62 65 20 66 6f 75 6e | 64 20 69 6e 20 74 68 65 | be foun|d in the|
|00006380| 0d 0a 76 69 72 75 73 3a | 0d 0a 0d 0a 20 20 20 20 |..virus:|.... |
|00006390| 22 47 52 4f 47 20 34 45 | 56 45 52 21 22 0d 0a 20 |"GROG 4E|VER!".. |
|000063a0| 20 20 20 22 47 52 4f 47 | 20 76 33 2e 31 20 28 43 | "GROG| v3.1 (C|
|000063b0| 29 20 27 39 33 20 62 79 | 20 47 52 4f 47 20 2d 20 |) '93 by| GROG - |
|000063c0| 49 74 61 6c 79 22 0d 0a | 20 20 20 20 22 4d 69 63 |Italy"..| "Mic|
|000063d0| 72 6f 73 6f 66 74 20 43 | 3a 5c 43 4f 4d 4d 41 4e |rosoft C|:\COMMAN|
|000063e0| 44 2e 43 4f 4d 22 0d 0a | 0d 0a 5b 48 61 63 6b 74 |D.COM"..|..[Hackt|
|000063f0| 69 63 32 5d 0d 0a 56 69 | 72 75 73 20 4e 61 6d 65 |ic2]..Vi|rus Name|
+--------+-------------------------+-------------------------+--------+--------+
Only 25.0 KB of data is shown above.
