Liren Large Software Subsidy 16

home *** CD-ROM | disk | FTP | other *** search
/ Liren Large Software Subsidy 16 / 16.iso / t / t169 / 2.img / VIRSCAN.IN! / VIRSCAN.INF
The Norton AntiVirus Information | 1993-09-20 | 89.2 KB
open in:
MacOS 8.1 |
Win98 |
DOS
view JSON data |
view as text

This file was processed as: The Norton AntiVirus Information (other/theNortonAntiVirusInformation).
This format is not currently supported by dexvert.
Confidence	Program	Detection	Match Type	Support
`66%`	dexvert	INI File `(text/ini)`	ext	Supported
`1%`	dexvert	The Norton AntiVirus Information `(other/theNortonAntiVirusInformation)`	magic	Unsupported
`1%`	dexvert	Adobe Type Manager Font Information `(other/adobeTypeFontInfo)`	ext	Unsupported
`1%`	dexvert	Signum 3 Document Editor Params `(other/signum3DocumentEditorParams)`	ext	Unsupported
`100%`	file	data	default
`100%`	TrID	The Norton AntiVirus Information	default
`100%`	gt2	Kopftext: 'The Norton AntiVirus Information File	default (weak)
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 54 68 65 20 4e 6f 72 74 | 6f 6e 20 41 6e 74 69 56 |The Nort|on AntiV|
|00000010| 69 72 75 73 20 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |irus Inf|ormation|
|00000020| 20 46 69 6c 65 0d 0a 43 | 6f 70 79 72 69 67 68 74 | File..C|opyright|
|00000030| 20 53 79 6d 61 6e 74 65 | 63 20 43 6f 72 70 2e 20 | Symante|c Corp. |
|00000040| 31 39 39 33 0d 0a 41 6c | 6c 20 52 69 67 68 74 73 |1993..Al|l Rights|
|00000050| 20 52 65 73 65 72 76 65 | 64 0d 0a 0d 0a 56 65 72 | Reserve|d....Ver|
|00000060| 73 69 6f 6e 20 23 39 33 | 30 39 0d 0a 1a 00 00 00 |sion #93|09......|
|00000070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000080| 00 00 f6 0c b0 1a 00 00 | 04 00 02 00 00 00 00 00 |........|........|
|00000090| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000c0| 00 00 a7 00 a7 00 be 00 | e1 00 e1 00 fc 00 0c 01 |........|........|
|000000d0| 0c 01 0c 01 35 01 35 01 | 54 01 75 01 a5 01 cb 01 |....5.5.|T.u.....|
|000000e0| 00 00 12 02 12 02 12 02 | 12 02 28 02 00 00 46 02 |........|..(...F.|
|000000f0| 46 02 66 02 66 02 66 02 | 66 02 81 02 a6 02 c6 02 |F.f.f.f.|f.......|
|00000100| e6 02 09 03 09 03 09 03 | 22 03 22 03 5c 03 5c 03 |........|".".\.\.|
|00000110| 5c 03 83 03 9e 03 c3 03 | c3 03 f0 03 18 04 49 04 |\.......|......I.|
|00000120| 49 04 67 04 67 04 67 04 | 67 04 67 04 88 04 9c 04 |I.g.g.g.|g.g.....|
|00000130| 9c 04 9c 04 9c 04 9c 04 | 9c 04 9c 04 9c 04 9c 04 |........|........|
|00000140| 9c 04 9c 04 9c 04 9c 04 | 9c 04 9c 04 b0 04 b0 04 |........|........|
|00000150| d8 04 d8 04 f8 04 f8 04 | 08 05 08 05 26 05 26 05 |........|....&.&.|
|00000160| 26 05 26 05 26 05 26 05 | 26 05 26 05 46 05 46 05 |&.&.&.&.|&.&.F.F.|
|00000170| 78 05 78 05 78 05 8e 05 | a5 05 a5 05 cb 05 cb 05 |x.x.x...|........|
|00000180| cb 05 cb 05 cb 05 eb 05 | fd 05 fd 05 fd 05 fd 05 |........|........|
|00000190| fd 05 45 06 3a 06 45 06 | 45 06 45 06 45 06 45 06 |..E.:.E.|E.E.E.E.|
|000001a0| 45 06 67 06 67 06 77 06 | 9b 06 9b 06 9b 06 9b 06 |E.g.g.w.|........|
|000001b0| 9b 06 9b 06 9b 06 9b 06 | 9b 06 9b 06 9b 06 9b 06 |........|........|
|000001c0| 9b 06 9b 06 9b 06 9b 06 | a9 06 a9 06 a9 06 d9 06 |........|........|
|000001d0| e6 06 e6 06 e6 06 e6 06 | e6 06 e6 06 f8 06 f8 06 |........|........|
|000001e0| f8 06 f8 06 1e 07 38 07 | 55 07 55 07 71 07 a4 07 |......8.|U.U.q...|
|000001f0| c2 07 c2 07 e4 07 f1 07 | f1 07 f1 07 f1 07 f1 07 |........|........|
|00000200| f1 07 f1 07 f1 07 f1 07 | f1 07 f1 07 f1 07 f1 07 |........|........|
|00000210| f1 07 21 08 5b 08 5b 08 | 82 08 82 08 82 08 82 08 |..!.[.[.|........|
|00000220| 82 08 9b 08 bd 08 d0 08 | ea 08 22 09 42 09 52 09 |........|..".B.R.|
|00000230| 52 09 75 09 8a 09 8a 09 | 9c 09 9c 09 af 09 d0 09 |R.u.....|........|
|00000240| f3 09 f3 09 06 0a 06 0a | 06 0a 06 0a 06 0a 06 0a |........|........|
|00000250| 06 0a 06 0a 06 0a 06 0a | 06 0a 06 0a 06 0a 06 0a |........|........|
|00000260| 06 0a 06 0a 06 0a 06 0a | 06 0a 06 0a 06 0a 06 0a |........|........|
|00000270| 06 0a 06 0a 06 0a 06 0a | 1c 0a 28 0a 4f 0a 75 0a |........|..(.O.u.|
|00000280| c4 0a 96 0a 96 0a c4 0a | c4 0a c4 0a c4 0a c4 0a |........|........|
|00000290| c4 0a c4 0a c4 0a c4 0a | c4 0a c4 0a c4 0a c4 0a |........|........|
|000002a0| c4 0a c4 0a c4 0a c4 0a | c4 0a c4 0a c4 0a ec 0a |........|........|
|000002b0| ec 0a ec 0a 1f 0b 36 0b | 36 0b 47 0b 4e 0b 60 0b |......6.|6.G.N.`.|
|000002c0| 84 0b a1 0b d2 0b d2 0b | d2 0b d2 0b d2 0b d2 0b |........|........|
|000002d0| d2 0b d2 0b d2 0b d2 0b | ef 0b fe 0b fe 0b fe 0b |........|........|
|000002e0| 13 0c 13 0c 35 0c 3c 0c | 3c 0c 3c 0c 68 0c 7f 0c |....5.<.|<.<.h...|
|000002f0| 99 0c ad 0c bf 0c e4 0c | f1 0c 05 0d 12 0d 44 0d |........|......D.|
|00000300| 60 0d 60 0d 82 0d 82 0d | 99 0d 99 0d 99 0d 99 0d |`.`.....|........|
|00000310| b0 0d be 0d 00 00 f0 0d | 0c 0e 1c 0e 1c 0e 43 0e |........|......C.|
|00000320| 43 0e 5a 0e 5a 0e 5a 0e | 5a 0e 5a 0e 6d 0e 6d 0e |C.Z.Z.Z.|Z.Z.m.m.|
|00000330| 6d 0e 6d 0e 6d 0e 6d 0e | 9f 0e d1 0e ee 0e ee 0e |m.m.m.m.|........|
|00000340| ee 0e 1f 0f 35 0f 35 0f | 35 0f 54 0f 70 0f 70 0f |....5.5.|5.T.p.p.|
|00000350| 70 0f 70 0f 70 0f 70 0f | 70 0f 7d 0f 7d 0f 7d 0f |p.p.p.p.|p.}.}.}.|
|00000360| 9b 0f 9b 0f 9b 0f 9b 0f | 9b 0f 9b 0f 9b 0f 9b 0f |........|........|
|00000370| 9b 0f 9b 0f 9b 0f 9b 0f | 7d 0f 7d 0f b8 0f b8 0f |........|}.}.....|
|00000380| b8 0f b8 0f cd 0f cd 0f | cd 0f 7d 0f 7d 0f 7d 0f |........|..}.}.}.|
|00000390| 7d 0f 7d 0f 7d 0f 7d 0f | 7d 0f dc 0f 06 10 06 10 |}.}.}.}.|}.......|
|000003a0| 06 10 06 10 06 10 2e 10 | 3b 10 3b 10 3b 10 3b 10 |........|;.;.;.;.|
|000003b0| 61 10 61 10 61 10 61 10 | 61 10 61 10 61 10 61 10 |a.a.a.a.|a.a.a.a.|
|000003c0| 8e 10 a6 10 d9 10 d9 10 | f6 10 f6 10 f6 10 f6 10 |........|........|
|000003d0| f6 10 01 11 24 11 59 11 | 59 11 6c 11 6c 11 9a 11 |....$.Y.|Y.l.l...|
|000003e0| cd 11 cd 11 cd 11 cd 11 | cd 11 cd 11 cd 11 cd 11 |........|........|
|000003f0| cd 11 cd 11 cd 11 cd 11 | cd 11 cd 11 cd 11 cd 11 |........|........|
|00000400| cd 11 cd 11 cd 11 cd 11 | cd 11 cd 11 b6 11 cd 11 |........|........|
|00000410| cd 11 cd 11 cd 11 cd 11 | dd 11 02 12 02 12 22 12 |........|......".|
|00000420| 22 12 4d 12 77 12 77 12 | 77 12 77 12 77 12 77 12 |".M.w.w.|w.w.w.w.|
|00000430| 77 12 77 12 98 12 9f 12 | bf 12 bf 12 bf 12 bf 12 |w.w.....|........|
|00000440| bf 12 dc 12 15 13 15 13 | 36 13 49 13 68 13 80 13 |........|6.I.h...|
|00000450| a0 13 c9 13 db 13 f0 13 | f9 13 f9 13 f9 13 f9 13 |........|........|
|00000460| 15 14 2b 14 2b 14 39 14 | 39 14 39 14 44 14 44 14 |..+.+.9.|9.9.D.D.|
|00000470| 44 14 62 14 84 14 50 37 | 50 37 af 14 d4 14 f3 14 |D.b...P7|P7......|
|00000480| f3 14 13 15 3d 15 67 15 | 67 15 7f 15 89 15 a3 15 |....=.g.|g.......|
|00000490| ba 15 ba 15 ca 15 ca 15 | ca 15 ca 15 e9 15 db 15 |........|........|
|000004a0| e9 15 e9 15 e9 15 0f 16 | 2f 16 4a 16 66 16 66 16 |........|/.J.f.f.|
|000004b0| 66 16 7a 16 7a 16 8f 16 | 9c 16 a3 16 a3 16 b2 16 |f.z.z...|........|
|000004c0| b2 16 c9 16 c9 16 ec 16 | ec 16 ec 16 13 17 13 17 |........|........|
|000004d0| 13 17 13 17 13 17 13 17 | 33 17 47 17 63 17 7f 17 |........|3.G.c...|
|000004e0| 7f 17 7f 17 9e 17 9e 17 | 9e 17 9e 17 9e 17 9e 17 |........|........|
|000004f0| bb 17 bb 17 bb 17 bb 17 | bb 17 eb 17 eb 17 13 18 |........|........|
|00000500| 13 18 13 18 13 18 2e 18 | 2e 18 55 18 77 18 77 18 |........|..U.w.w.|
|00000510| 77 18 77 18 77 18 77 18 | a6 18 c3 18 eb 18 0b 19 |w.w.w.w.|........|
|00000520| 1d 19 25 19 25 19 25 19 | 25 19 25 19 25 19 31 19 |..%.%.%.|%.%.%.1.|
|00000530| 6b 19 8c 19 8c 19 8c 19 | 8c 19 8c 19 8c 19 8c 19 |k.......|........|
|00000540| b7 19 c8 19 e5 19 13 1a | 3e 1a 3e 1a 51 1a 5b 1a |........|>.>.Q.[.|
|00000550| 5b 1a 5b 1a 5b 1a 5b 1a | 5b 1a 6d 1a 8b 1a a4 1a |[.[.[.[.|[.m.....|
|00000560| a4 1a ce 1a f7 1a 60 0d | 60 0d 60 0d 1d 1b 1d 1b |......`.|`.`.....|
|00000570| 1d 1b 4c 1b 67 1b 89 1b | a5 1b b6 1b b6 1b b6 1b |..L.g...|........|
|00000580| c4 1b eb 1b eb 1b 04 1c | 1b 1c 31 1c 42 1c 6c 1c |........|..1.B.l.|
|00000590| 90 1c 90 1c 97 1c 97 1c | 97 1c 97 1c 97 1c bb 1c |........|........|
|000005a0| bb 1c bb 1c bb 1c bb 1c | bb 1c bb 1c bb 1c bb 1c |........|........|
|000005b0| bb 1c e5 1c 05 1d 05 1d | 24 1d 24 1d 24 1d 24 1d |........|$.$.$.$.|
|000005c0| 24 1d 24 1d 24 1d 24 1d | 24 1d 45 1d 45 1d 45 1d |$.$.$.$.|$.E.E.E.|
|000005d0| 74 1d 74 1d 74 1d 74 1d | 74 1d 74 1d 74 1d 74 1d |t.t.t.t.|t.t.t.t.|
|000005e0| 74 1d 8e 1d 8e 1d ad 1d | ad 1d ad 1d cb 1d e7 1d |t.......|........|
|000005f0| 02 1e 09 1e 09 1e 27 1e | 27 1e 2e 1e 3b 1e 4c 1e |......'.|'...;.L.|
|00000600| 72 1e 72 1e 9e 1e 9e 1e | 9e 1e 9e 1e c7 1e c7 1e |r.r.....|........|
|00000610| f4 1e f4 1e 0e 1f 1e 1f | 40 1f 53 1f 53 1f 53 1f |........|@.S.S.S.|
|00000620| 76 1f 85 1f 85 1f 92 1f | 92 1f 92 1f 92 1f 92 1f |v.......|........|
|00000630| ae 1f ae 1f ae 1f ae 1f | ae 1f ae 1f be 1f d2 1f |........|........|
|00000640| d2 1f d2 1f d2 1f e7 1f | e7 1f e7 1f e7 1f e7 1f |........|........|
|00000650| e7 1f e7 1f e7 1f e7 1f | e7 1f e7 1f e7 1f e7 1f |........|........|
|00000660| e7 1f e7 1f e7 1f e7 1f | e7 1f e7 1f e7 1f e7 1f |........|........|
|00000670| e7 1f 16 20 16 20 16 20 | 16 20 16 20 16 20 16 20 |... . . |. . . . |
|00000680| 16 20 16 20 16 20 16 20 | 16 20 16 20 16 20 e7 1f |. . . . |. . . ..|
|00000690| e7 1f e7 1f e7 1f e7 1f | e7 1f e7 1f e7 1f e7 1f |........|........|
|000006a0| e7 1f e7 1f e7 1f 26 20 | 26 20 26 20 26 20 26 20 |......& |& & & & |
|000006b0| 26 20 e7 1f e7 1f e7 1f | e7 1f e7 1f e7 1f e7 1f |& ......|........|
|000006c0| e7 1f e7 1f e7 1f e7 1f | e7 1f e7 1f e7 1f e7 1f |........|........|
|000006d0| e7 1f e7 1f e7 1f e7 1f | e7 1f e7 1f e7 1f e7 1f |........|........|
|000006e0| e7 1f e7 1f e7 1f e7 1f | e7 1f e7 1f e7 1f e7 1f |........|........|
|000006f0| e7 1f d2 1f 72 20 72 20 | 72 20 72 20 72 20 72 20 |....r r |r r r r |
|00000700| 72 20 72 20 72 20 72 20 | 72 20 72 20 72 20 72 20 |r r r r |r r r r |
|00000710| 72 20 72 20 72 20 72 20 | 72 20 72 20 72 20 d2 1f |r r r r |r r r ..|
|00000720| d2 1f d2 1f d2 1f d2 1f | d2 1f d2 1f d2 1f d2 1f |........|........|
|00000730| d2 1f d2 1f d2 1f ae 20 | ae 20 ae 20 ae 20 ae 20 |....... |. . . . |
|00000740| d2 1f d2 1f d2 1f d2 1f | d2 1f d2 1f d2 1f d2 1f |........|........|
|00000750| d2 1f d2 1f d2 1f d2 1f | d2 1f d2 1f d2 1f d2 1f |........|........|
|00000760| d2 1f d2 1f dc 20 dc 20 | d2 1f d2 1f fc 20 fc 20 |..... . |..... . |
|00000770| fc 20 fc 20 d2 1f 29 21 | 29 21 d2 1f d2 1f d2 1f |. . ..)!|)!......|
|00000780| d2 1f d2 1f d2 1f 53 21 | 53 21 00 00 00 00 00 00 |......S!|S!......|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 7b 21 7b 21 7b 21 7b 21 | 7b 21 7b 21 9c 21 9c 21 |{!{!{!{!|{!{!.!.!|
|000007b0| ba 21 ba 21 ba 21 d2 1f | d2 1f d2 1f d2 1f d8 21 |.!.!.!..|.......!|
|000007c0| d2 1f d8 21 d8 21 d8 21 | d2 1f d2 1f f7 21 1b 22 |...!.!.!|.....!."|
|000007d0| 36 22 55 22 72 22 92 22 | af 22 ba 22 d4 22 d4 22 |6"U"r"."|."."."."|
|000007e0| f2 22 10 23 10 23 10 23 | 10 23 48 23 60 23 71 23 |.".#.#.#|.#H#`#q#|
|000007f0| 71 23 71 23 71 23 b3 23 | 90 23 90 23 b3 23 b3 23 |q#q#q#.#|.#.#.#.#|
|00000800| b3 23 b3 23 b3 23 b3 23 | b3 23 b3 23 b3 23 b3 23 |.#.#.#.#|.#.#.#.#|
|00000810| b3 23 e9 23 e9 23 e9 23 | e9 23 0d 24 1d 24 41 24 |.#.#.#.#|.#.$.$A$|
|00000820| 56 24 6e 24 7f 24 7f 24 | 7f 24 90 24 9f 24 aa 24 |V$n$.$.$|.$.$.$.$|
|00000830| c0 24 ed 24 ed 24 1c 25 | 2f 25 2f 25 3e 25 3e 25 |.$.$.$.%|/%/%>%>%|
|00000840| 45 25 45 25 6c 25 99 25 | bd 25 de 25 de 25 fa 25 |E%E%l%.%|.%.%.%.%|
|00000850| fa 25 fa 25 fa 25 fa 25 | fa 25 fa 25 fa 25 fa 25 |.%.%.%.%|.%.%.%.%|
|00000860| fa 25 fa 25 fa 25 fa 25 | fa 25 fa 25 fa 25 fa 25 |.%.%.%.%|.%.%.%.%|
|00000870| fa 25 fa 25 fa 25 fa 25 | fa 25 1b 26 1b 26 3c 26 |.%.%.%.%|.%.&.&<&|
|00000880| 60 26 67 26 67 26 67 26 | 67 26 67 26 67 26 8f 26 |`&g&g&g&|g&g&g&.&|
|00000890| 9f 26 9f 26 d0 26 b3 23 | d0 26 d0 26 d0 26 d0 26 |.&.&.&.#|.&.&.&.&|
|000008a0| e1 26 02 27 02 27 1a 27 | 21 27 44 27 77 27 87 27 |.&.'.'.'|!'D'w'.'|
|000008b0| 9e 27 aa 27 da 27 c6 27 | c6 27 0c 28 1f 28 39 28 |.'.'.'.'|.'.(.(9(|
|000008c0| 61 28 61 28 61 28 6f 28 | 76 28 86 28 86 28 86 28 |a(a(a(o(|v(.(.(.(|
|000008d0| 86 28 86 28 86 28 86 28 | 86 28 86 28 cd 28 a9 28 |.(.(.(.(|.(.(.(.(|
|000008e0| cd 28 dd 28 dd 28 17 29 | 17 29 4b 29 55 29 67 29 |.(.(.(.)|.)K)U)g)|
|000008f0| 67 29 67 29 88 29 95 29 | 95 29 95 29 bc 29 d8 29 |g)g).).)|.).).).)|
|00000900| f3 29 fa 29 fa 29 fa 29 | fa 29 fa 29 fa 29 fa 29 |.).).).)|.).).).)|
|00000910| fa 29 fa 29 0a 2a 29 2a | 35 2a 5c 2a 5c 2a 5c 2a |.).).*)*|5*\*\*\*|
|00000920| 74 2a 86 2a 96 2a a8 2a | be 2a d9 2a d9 2a f1 2a |t*.*.*.*|.*.*.*.*|
|00000930| 0d 2b 37 2b 5b 2b b6 2b | 88 2b 88 2b 88 2b 88 2b |.+7+[+.+|.+.+.+.+|
|00000940| 88 2b a7 2b b6 2b b6 2b | cc 2b e6 2b e6 2b 12 2c |.+.+.+.+|.+.+.+.,|
|00000950| 12 2c 12 2c e6 2b 26 2c | 26 2c 26 2c 26 2c 26 2c |.,.,.+&,|&,&,&,&,|
|00000960| 26 2c 26 2c 26 2c 26 2c | 26 2c 26 2c 26 2c 26 2c |&,&,&,&,|&,&,&,&,|
|00000970| 26 2c 53 2c 53 2c 7b 2c | a7 2c d0 2c d0 2c d0 2c |&,S,S,{,|.,.,.,.,|
|00000980| d0 2c d0 2c d0 2c d0 2c | d0 2c d0 2c d0 2c d0 2c |.,.,.,.,|.,.,.,.,|
|00000990| d0 2c d0 2c d0 2c d0 2c | d0 2c d0 2c d0 2c d0 2c |.,.,.,.,|.,.,.,.,|
|000009a0| d0 2c d0 2c d0 2c d0 2c | d0 2c d0 2c d0 2c eb 2c |.,.,.,.,|.,.,.,.,|
|000009b0| d0 2c d0 2c d0 2c fc 2c | fc 2c 1e 2d 25 2d 3e 2d |.,.,.,.,|.,.-%->-|
|000009c0| 6a 2d 6a 2d 7b 2d 9d 2d | a8 2d a8 2d a8 2d ba 2d |j-j-{-.-|.-.-.-.-|
|000009d0| cb 2d cb 2d fe 2d fe 2d | 1a 2e 35 2e 42 2e 42 2e |.-.-.-.-|..5.B.B.|
|000009e0| 42 2e 42 2e 42 2e 42 2e | 42 2e 42 2e 42 2e 69 2e |B.B.B.B.|B.B.B.i.|
|000009f0| 9b 2e 9b 2e 9b 2e 9b 2e | 9b 2e 9b 2e 9b 2e 9b 2e |........|........|
|00000a00| bc 2e bc 2e bc 2e bc 2e | bc 2e bc 2e bc 2e bc 2e |........|........|
|00000a10| bc 2e e2 2e e2 2e e2 2e | fd 2e fd 2e fd 2e fd 2e |........|........|
|00000a20| fd 2e fd 2e fd 2e fd 2e | fd 2e 14 2f 35 2f 52 2f |........|.../5/R/|
|00000a30| 67 2f 67 2f 72 2f 72 2f | 7f 2f 8e 2f a1 2f a1 2f |g/g/r/r/|././././|
|00000a40| b0 2f b9 2f d8 2f d8 2f | 07 30 27 30 27 30 39 30 |././././|.0'0'090|
|00000a50| 49 30 61 30 81 30 81 30 | 81 30 92 30 92 30 92 30 |I0a0.0.0|.0.0.0.0|
|00000a60| 92 30 92 30 92 30 a2 30 | a2 30 a2 30 a2 30 a2 30 |.0.0.0.0|.0.0.0.0|
|00000a70| a2 30 d3 30 d3 30 ef 30 | 07 31 07 31 1e 31 1e 31 |.0.0.0.0|.1.1.1.1|
|00000a80| 37 31 5a 31 5a 31 00 00 | 5a 31 5a 31 5a 31 70 31 |71Z1Z1..|Z1Z1Z1p1|
|00000a90| 82 31 97 31 97 31 a6 31 | a6 31 a6 31 a6 31 a6 31 |.1.1.1.1|.1.1.1.1|
|00000aa0| a6 31 a6 31 a6 31 a6 31 | a6 31 a6 31 a6 31 a6 31 |.1.1.1.1|.1.1.1.1|
|00000ab0| a6 31 a6 31 a6 31 a6 31 | a6 31 a6 31 a6 31 a6 31 |.1.1.1.1|.1.1.1.1|
|00000ac0| a6 31 a6 31 a6 31 a6 31 | a6 31 a6 31 a6 31 a6 31 |.1.1.1.1|.1.1.1.1|
|00000ad0| a6 31 a6 31 a6 31 a6 31 | a6 31 d7 31 ea 31 ea 31 |.1.1.1.1|.1.1.1.1|
|00000ae0| ea 31 ea 31 13 32 13 32 | 34 32 3b 32 47 32 47 32 |.1.1.2.2|42;2G2G2|
|00000af0| 47 32 47 32 47 32 47 32 | 47 32 54 32 5b 32 74 32 |G2G2G2G2|G2T2[2t2|
|00000b00| 89 32 89 32 89 32 89 32 | 89 32 b0 32 b0 32 b0 32 |.2.2.2.2|.2.2.2.2|
|00000b10| b7 32 cf 32 e2 32 f0 32 | 08 33 3f 33 4f 33 71 33 |.2.2.2.2|.3?3O3q3|
|00000b20| 88 33 88 33 88 33 af 33 | af 33 af 33 af 33 d0 33 |.3.3.3.3|.3.3.3.3|
|00000b30| d0 33 f0 33 1a 34 3c 34 | 3c 34 3c 34 3c 34 3c 34 |.3.3.4<4|<4<4<4<4|
|00000b40| 3c 34 3c 34 3c 34 3c 34 | 3c 34 3c 34 3c 34 3c 34 |<4<4<4<4|<4<4<4<4|
|00000b50| 3c 34 3c 34 3c 34 3c 34 | 3c 34 3c 34 3c 34 3c 34 |<4<4<4<4|<4<4<4<4|
|00000b60| 3c 34 3c 34 3c 34 3c 34 | 3c 34 3c 34 3c 34 3c 34 |<4<4<4<4|<4<4<4<4|
|00000b70| 3c 34 3c 34 3c 34 3c 34 | 3c 34 3c 34 3c 34 3c 34 |<4<4<4<4|<4<4<4<4|
|00000b80| 3c 34 3c 34 3c 34 3c 34 | 3c 34 3c 34 3c 34 3c 34 |<4<4<4<4|<4<4<4<4|
|00000b90| 3c 34 3c 34 4f 34 56 34 | 77 34 84 34 96 34 96 34 |<4<4O4V4|w4.4.4.4|
|00000ba0| a8 34 b5 34 b5 34 e2 34 | e2 34 13 35 13 35 3b 35 |.4.4.4.4|.4.5.5;5|
|00000bb0| 57 35 62 35 88 35 a2 35 | df 35 df 35 fe 35 08 36 |W5b5.5.5|.5.5.5.6|
|00000bc0| 38 36 45 36 5f 36 6b 36 | 6b 36 6b 36 72 36 72 36 |86E6_6k6|k6k6r6r6|
|00000bd0| 92 36 a3 36 f9 36 f9 36 | 15 37 1c 37 42 37 50 37 |.6.6.6.6|.7.7B7P7|
|00000be0| 50 37 50 37 50 37 50 37 | 50 37 50 37 50 37 50 37 |P7P7P7P7|P7P7P7P7|
|00000bf0| 5e 37 72 37 82 37 aa 37 | aa 37 aa 37 aa 37 cb 37 |^7r7.7.7|.7.7.7.7|
|00000c00| cb 37 cb 37 cb 37 cb 37 | cb 37 cb 37 db 37 e8 37 |.7.7.7.7|.7.7.7.7|
|00000c10| e8 37 f7 37 0d 38 0d 38 | 23 38 2f 38 2f 38 2f 38 |.7.7.8.8|#8/8/8/8|
|00000c20| 2f 38 3d 38 3d 38 56 38 | 64 38 87 38 8e 38 bb 38 |/8=8=8V8|d8.8.8.8|
|00000c30| c2 38 c2 38 c2 38 c2 38 | c2 38 c2 38 c2 38 d2 38 |.8.8.8.8|.8.8.8.8|
|00000c40| d2 38 d2 38 d2 38 ff 38 | 1c 39 2d 39 2d 39 2d 39 |.8.8.8.8|.9-9-9-9|
|00000c50| 43 39 63 39 7a 39 98 39 | bf 39 cf 39 e5 39 15 3a |C9c9z9.9|.9.9.9.:|
|00000c60| 33 3a 4f 3a 5c 3a 6c 3a | 6c 3a 6c 3a 6c 3a 97 3a |3:O:\:l:|l:l:l:.:|
|00000c70| cd 3a f2 3a f2 3a f2 3a | f2 3a f2 3a f2 3a 0e 3b |.:.:.:.:|.:.:.:.;|
|00000c80| 29 3b 37 3b 55 3b 55 3b | 55 3b 50 37 72 3b 92 3b |);7;U;U;|U;P7r;.;|
|00000c90| b6 3b b6 3b c6 3b d8 3b | d8 3b d8 3b d8 3b d8 3b |.;.;.;.;|.;.;.;.;|
|00000ca0| d8 3b d8 3b d8 3b d8 3b | d8 3b 1a 3c 36 3c 36 3c |.;.;.;.;|.;.<6<6<|
|00000cb0| 50 37 5c 3c 5c 3c 7c 3c | 97 3c 97 3c 50 37 97 3c |P7\<\<|<|.<.<P7.<|
|00000cc0| 97 3c 97 3c b2 3c b2 3c | b2 3c b2 3c b2 3c b2 3c |.<.<.<.<|.<.<.<.<|
|00000cd0| b2 3c b2 3c b2 3c c6 3c | e0 3c e0 3c 04 3d 04 3d |.<.<.<.<|.<.<.=.=|
|00000ce0| 04 3d 04 3d 31 3d 31 3d | 43 3d 75 3d 9c 3d 75 3d |.=.=1=1=|C=u=.=u=|
|00000cf0| 75 3d 9c 3d c8 3d c8 3d | e7 3d 09 3e 2c 3e 2c 3e |u=.=.=.=|.=.>,>,>|
|00000d00| 2c 3e 2c 3e 38 3e 55 3e | 6a 3e 84 3e a1 3e a1 3e |,>,>8>U>|j>.>.>.>|
|00000d10| ae 3e ae 3e ae 3e bd 3e | bd 3e bd 3e bd 3e bd 3e |.>.>.>.>|.>.>.>.>|
|00000d20| bd 3e bd 3e e0 3e e8 3e | e8 3e e8 3e e8 3e e8 3e |.>.>.>.>|.>.>.>.>|
|00000d30| e8 3e e8 3e e8 3e e8 3e | e8 3e e8 3e e8 3e f8 3e |.>.>.>.>|.>.>.>.>|
|00000d40| f8 3e f8 3e f8 3e f8 3e | f8 3e f8 3e 10 3f 1d 3f |.>.>.>.>|.>.>.?.?|
|00000d50| 40 3f 50 3f 6a 3f 6a 3f | 40 3f 6a 3f 6a 3f 6a 3f |@?P?j?j?|@?j?j?j?|
|00000d60| 6a 3f 8a 3f 8a 3f bc 3f | bc 3f bc 3f bc 3f bc 3f |j?.?.?.?|.?.?.?.?|
|00000d70| e8 3f 02 40 02 40 02 40 | 16 40 16 40 16 40 3a 40 |.?.@.@.@|.@.@.@:@|
|00000d80| 73 40 73 40 73 40 73 40 | 73 40 73 40 73 40 73 40 |s@s@s@s@|s@s@s@s@|
|00000d90| 73 40 73 40 73 40 73 40 | 73 40 73 40 73 40 73 40 |s@s@s@s@|s@s@s@s@|
|00000da0| 73 40 73 40 73 40 73 40 | 73 40 73 40 73 40 73 40 |s@s@s@s@|s@s@s@s@|
|00000db0| 73 40 73 40 73 40 73 40 | 73 40 73 40 73 40 73 40 |s@s@s@s@|s@s@s@s@|
|00000dc0| 73 40 73 40 73 40 73 40 | 84 40 b8 40 b8 40 c6 40 |s@s@s@s@|.@.@.@.@|
|00000dd0| dc 40 fb 40 06 41 06 41 | 06 41 06 41 20 41 2d 41 |.@.@.A.A|.A.A A-A|
|00000de0| 3b 41 5f 41 73 41 99 41 | ba 41 ba 41 ba 41 ba 41 |;A_AsA.A|.A.A.A.A|
|00000df0| ba 41 ba 41 ba 41 e4 41 | 08 42 1b 42 1b 42 1b 42 |.A.A.A.A|.B.B.B.B|
|00000e00| 35 42 35 42 35 42 44 42 | 44 42 44 42 44 42 44 42 |5B5B5BDB|DBDBDBDB|
|00000e10| 44 42 44 42 44 42 44 42 | 44 42 44 42 44 42 44 42 |DBDBDBDB|DBDBDBDB|
|00000e20| 44 42 44 42 44 42 44 42 | 44 42 7e 42 90 42 90 42 |DBDBDBDB|DB~B.B.B|
|00000e30| 90 42 90 42 90 42 90 42 | a9 42 a9 42 a9 42 a9 42 |.B.B.B.B|.B.B.B.B|
|00000e40| a9 42 a9 42 a9 42 a9 42 | a9 42 a9 42 a9 42 a9 42 |.B.B.B.B|.B.B.B.B|
|00000e50| a9 42 a9 42 a9 42 a9 42 | a9 42 a9 42 a9 42 a9 42 |.B.B.B.B|.B.B.B.B|
|00000e60| a9 42 d1 42 d1 42 e0 42 | e0 42 e0 42 e0 42 e0 42 |.B.B.B.B|.B.B.B.B|
|00000e70| 0e 43 0e 43 0e 43 0e 43 | 0e 43 0e 43 33 43 4d 43 |.C.C.C.C|.C.C3CMC|
|00000e80| 4d 43 80 43 80 43 80 43 | 80 43 80 43 80 43 80 43 |MC.C.C.C|.C.C.C.C|
|00000e90| 80 43 80 43 80 43 80 43 | 80 43 80 43 80 43 80 43 |.C.C.C.C|.C.C.C.C|
|00000ea0| 80 43 80 43 80 43 80 43 | 80 43 80 43 80 43 80 43 |.C.C.C.C|.C.C.C.C|
|00000eb0| 80 43 80 43 80 43 80 43 | 80 43 80 43 80 43 80 43 |.C.C.C.C|.C.C.C.C|
|00000ec0| 80 43 80 43 80 43 80 43 | 80 43 80 43 80 43 80 43 |.C.C.C.C|.C.C.C.C|
|00000ed0| 80 43 80 43 80 43 80 43 | 80 43 80 43 80 43 80 43 |.C.C.C.C|.C.C.C.C|
|00000ee0| 80 43 80 43 80 43 80 43 | 80 43 80 43 80 43 80 43 |.C.C.C.C|.C.C.C.C|
|00000ef0| 80 43 80 43 80 43 80 43 | 80 43 80 43 80 43 80 43 |.C.C.C.C|.C.C.C.C|
|00000f00| 80 43 80 43 80 43 80 43 | 80 43 80 43 80 43 80 43 |.C.C.C.C|.C.C.C.C|
|00000f10| 80 43 80 43 80 43 80 43 | 80 43 80 43 80 43 80 43 |.C.C.C.C|.C.C.C.C|
|00000f20| 80 43 80 43 80 43 80 43 | 80 43 80 43 80 43 80 43 |.C.C.C.C|.C.C.C.C|
|00000f30| 80 43 80 43 80 43 80 43 | 80 43 80 43 80 43 80 43 |.C.C.C.C|.C.C.C.C|
|00000f40| 80 43 80 43 80 43 80 43 | 80 43 80 43 00 00 a4 43 |.C.C.C.C|.C.C...C|
|00000f50| a4 43 a4 43 a4 43 a4 43 | a4 43 a4 43 a4 43 a4 43 |.C.C.C.C|.C.C.C.C|
|00000f60| a4 43 80 43 bc 43 bc 43 | bc 43 bc 43 bc 43 bc 43 |.C.C.C.C|.C.C.C.C|
|00000f70| bc 43 bc 43 bc 43 bc 43 | bc 43 bc 43 bc 43 bc 43 |.C.C.C.C|.C.C.C.C|
|00000f80| bc 43 bc 43 bc 43 bc 43 | bc 43 bc 43 bc 43 bc 43 |.C.C.C.C|.C.C.C.C|
|00000f90| d3 43 e4 43 e4 43 08 44 | 08 44 08 44 08 44 08 44 |.C.C.C.D|.D.D.D.D|
|00000fa0| 08 44 08 44 08 44 08 44 | 08 44 08 44 20 44 3f 44 |.D.D.D.D|.D.D D?D|
|00000fb0| 3f 44 5e 44 77 44 91 44 | 98 44 98 44 98 44 98 44 |?D^DwD.D|.D.D.D.D|
|00000fc0| 98 44 a7 44 ca 44 ca 44 | e2 44 09 45 15 45 40 45 |.D.D.D.D|.D.E.E@E|
|00000fd0| 53 45 77 45 89 45 89 45 | 89 45 89 45 89 45 89 45 |SEwE.E.E|.E.E.E.E|
|00000fe0| 89 45 89 45 89 45 89 45 | 89 45 89 45 89 45 89 45 |.E.E.E.E|.E.E.E.E|
|00000ff0| 89 45 89 45 89 45 89 45 | 89 45 89 45 89 45 89 45 |.E.E.E.E|.E.E.E.E|
|00001000| 89 45 89 45 89 45 89 45 | 89 45 89 45 89 45 89 45 |.E.E.E.E|.E.E.E.E|
|00001010| 89 45 89 45 89 45 89 45 | 89 45 89 45 89 45 89 45 |.E.E.E.E|.E.E.E.E|
|00001020| 89 45 98 45 98 45 98 45 | bd 45 e0 45 f6 45 07 46 |.E.E.E.E|.E.E.E.F|
|00001030| 1d 46 24 46 4d 46 4d 46 | 4d 46 4d 46 4d 46 4d 46 |.F$FMFMF|MFMFMFMF|
|00001040| 4d 46 4d 46 4d 46 61 46 | 61 46 61 46 6e 46 6e 46 |MFMFMFaF|aFaFnFnF|
|00001050| 6e 46 6e 46 8e 46 a3 46 | a3 46 b7 46 e6 46 09 47 |nFnF.F.F|.F.F.F.G|
|00001060| 09 47 09 47 09 47 09 47 | 09 47 09 47 09 47 09 47 |.G.G.G.G|.G.G.G.G|
|00001070| 09 47 09 47 09 47 09 47 | 09 47 09 47 09 47 09 47 |.G.G.G.G|.G.G.G.G|
|00001080| 09 47 09 47 09 47 09 47 | 09 47 09 47 09 47 09 47 |.G.G.G.G|.G.G.G.G|
|00001090| 09 47 09 47 09 47 09 47 | 09 47 09 47 09 47 09 47 |.G.G.G.G|.G.G.G.G|
|000010a0| 09 47 09 47 09 47 09 47 | 09 47 09 47 09 47 09 47 |.G.G.G.G|.G.G.G.G|
|000010b0| 1e 47 4a 47 5f 47 5f 47 | 5f 47 7c 47 7c 47 7c 47 |.GJG_G_G|_G|G|G|G|
|000010c0| 8d 47 9e 47 9e 47 b1 47 | e7 47 1f 48 1f 48 1f 48 |.G.G.G.G|.G.H.H.H|
|000010d0| 1f 48 1f 48 1f 48 1f 48 | 44 48 51 48 00 00 00 00 |.H.H.H.H|DHQH....|
|000010e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010f0| 00 00 00 00 00 00 10 23 | 75 48 75 48 91 48 c3 03 |.......#|uHuH.H..|
|00001100| b3 48 db 48 fc 48 15 49 | 1e 49 39 49 55 49 6b 49 |.H.H.H.I|.I9IUIkI|
|00001110| 6b 49 93 49 b6 49 e4 49 | 05 4a 13 17 20 4a 4c 4a |kI.I.I.I|.J.. JLJ|
|00001120| 68 4a 83 4a b6 4a dc 4a | 00 00 ef 4a 0e 4b 67 26 |hJ.J.J.J|...J.Kg&|
|00001130| 34 4b 55 4b 75 4b 87 4b | 9e 4b 55 49 d0 4b ea 4b |4KUKuK.K|.KUI.K.K|
|00001140| 11 4c 2e 4c 4e 4c 6f 4c | 89 4c 89 4c d8 3b b6 4c |.L.LNLoL|.L.L.;.L|
|00001150| d4 4c 00 4d 00 00 23 4d | 29 00 29 00 29 00 29 00 |.L.M..#M|).).).).|
|00001160| 29 00 29 00 00 00 00 00 | 00 00 00 00 f8 3b 00 00 |).).....|.....;..|
|00001170| 00 00 00 00 00 00 00 00 | 9c 04 00 00 00 00 00 00 |........|........|
|00001180| 00 00 15 14 50 37 ee 0e | 00 00 00 00 00 00 e7 01 |....P7..|........|
|00001190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011a0| 00 00 00 00 00 00 00 00 | 00 00 f0 0d 00 00 00 00 |........|........|
|000011b0| 53 00 00 00 00 00 00 00 | 9c 04 00 00 00 00 00 00 |S.......|........|
|000011c0| 00 00 00 00 00 00 00 00 | 53 00 53 00 53 00 53 00 |........|S.S.S.S.|
|000011d0| 06 10 06 10 53 00 53 00 | 53 00 53 00 53 00 53 00 |....S.S.|S.S.S.S.|
|000011e0| 53 00 53 00 53 00 00 00 | 00 00 1f 0d 00 00 00 00 |S.S.S...|........|
|000011f0| 00 00 00 00 00 00 00 00 | 9c 04 07 00 07 00 82 00 |........|........|
|00001200| 82 00 06 10 29 00 29 00 | 9c 04 00 00 29 00 00 00 |....).).|....)...|
|00001210| 29 00 29 00 00 00 00 00 | 29 00 82 00 00 00 53 00 |).).....|).....S.|
|00001220| 00 00 00 00 00 00 00 00 | 00 00 9c 3d 00 00 63 52 |........|...=..cR|
|00001230| 00 00 00 00 37 52 00 00 | 00 00 00 00 00 00 00 00 |....7R..|........|
|00001240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 34 4b |........|......4K|
|00001250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012c0| 00 00 00 00 3c 34 82 00 | 3c 34 3c 34 3c 34 3c 34 |....<4..|<4<4<4<4|
|000012d0| 3c 34 3c 34 3c 34 3c 34 | 53 00 00 00 3c 34 3c 34 |<4<4<4<4|S...<4<4|
|000012e0| 00 00 7f 0c 00 00 00 00 | 00 00 00 00 00 00 d2 1f |........|........|
|000012f0| d2 1f 0d 2b 89 32 89 32 | 6d 1a 6d 1a 6d 1a 8b 1a |...+.2.2|m.m.m...|
|00001300| d0 2c a9 42 f3 09 53 00 | 00 00 06 10 00 00 53 00 |.,.B..S.|......S.|
|00001310| 53 00 82 00 a2 30 f7 37 | 7b 21 00 00 00 00 53 00 |S....0.7|{!....S.|
|00001320| 00 00 8e 10 00 00 00 00 | 00 00 00 00 82 00 00 00 |........|........|
|00001330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 d2 1f |........|........|
|00001340| 13 0c 7f 15 2e 10 13 17 | 82 00 82 00 e5 39 a2 30 |........|.....9.0|
|00001350| 55 18 00 00 00 00 00 00 | 00 00 00 00 53 00 4a 47 |U.......|....S.JG|
|00001360| 82 00 00 00 00 00 e0 3c | 82 00 53 00 29 00 53 00 |.......<|..S.).S.|
|00001370| 8f 00 53 00 53 00 29 00 | 07 00 82 00 07 00 77 12 |..S.S.).|......w.|
|00001380| 00 00 53 00 00 00 00 00 | 00 00 f8 04 00 00 00 00 |..S.....|........|
|00001390| c9 16 c9 16 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001400| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 88 35 |........|.......5|
|00001410| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001420| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001460| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001470| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001480| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 26 2c |........|......&,|
|00001490| 26 2c 26 2c 26 2c 26 2c | bc 3f 26 2c 26 2c 26 2c |&,&,&,&,|.?&,&,&,|
|000014a0| bc 3f bc 3f c2 36 26 2c | 26 2c bc 3f 26 2c 26 2c |.?.?.6&,|&,.?&,&,|
|000014b0| 26 2c 26 2c 26 2c 26 2c | 26 2c 26 2c 26 2c d2 51 |&,&,&,&,|&,&,&,.Q|
|000014c0| 46 4d 7c 4d b0 4d e6 4d | 1d 4e 3b 4e 74 4e aa 4e |FM|M.M.M|.N;NtN.N|
|000014d0| e0 4e 11 4f 3d 4f 75 4f | a6 4f d5 4f d5 4f ff 4f |.N.O=OuO|.O.O.O.O|
|000014e0| 24 50 5c 50 5c 50 5c 50 | 94 50 cc 50 f9 50 2f 51 |$P\P\P\P|.P.P.P/Q|
|000014f0| 60 51 97 51 97 51 97 51 | 00 00 00 00 00 00 00 00 |`Q.Q.Q.Q|........|
|00001500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001600| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001610| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001620| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001630| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001640| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001650| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001660| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001670| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001680| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001690| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016d0| 53 00 00 00 e2 34 82 00 | 00 00 00 00 5c 03 5c 03 |S....4..|....\.\.|
|000016e0| 5c 03 5c 03 00 00 00 00 | 00 00 00 00 80 43 00 00 |\.\.....|.....C..|
|000016f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001700| 00 00 00 00 80 43 00 00 | 00 00 00 00 00 00 00 00 |.....C..|........|
|00001710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001800| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001810| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001820| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001830| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001840| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001850| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001860| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001870| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001880| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001890| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000019a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000019b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000019c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000019d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000019e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000019f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001aa0| 3c 34 3c 34 3c 34 3c 34 | 3c 34 3c 34 3c 34 00 00 |<4<4<4<4|<4<4<4..|
|00001ab0| 00 4e 6f 20 69 6e 66 6f | 72 6d 61 74 69 6f 6e 20 |.No info|rmation |
|00001ac0| 61 76 61 69 6c 61 62 6c | 65 2e 00 00 00 54 68 69 |availabl|e....Thi|
|00001ad0| 73 20 69 73 20 6e 6f 74 | 20 61 20 76 69 72 75 73 |s is not| a virus|
|00001ae0| 2e 20 49 74 20 69 73 20 | 61 20 54 72 6f 6a 61 6e |. It is |a Trojan|
|00001af0| 20 48 6f 72 73 65 20 70 | 72 6f 67 72 61 6d 2e 20 | Horse p|rogram. |
|00001b00| 20 59 6f 75 20 73 68 6f | 75 6c 64 20 64 65 6c 65 | You sho|uld dele|
|00001b10| 74 65 20 74 68 69 73 20 | 66 69 6c 65 2e 20 20 53 |te this |file.  S|
|00001b20| 65 65 20 22 54 72 6f 6a | 61 6e 22 20 69 6e 20 74 |ee "Troj|an" in t|
|00001b30| 68 65 20 47 6c 6f 73 73 | 61 72 79 20 73 65 63 74 |he Gloss|ary sect|
|00001b40| 69 6f 6e 20 6f 66 20 79 | 6f 75 72 20 6d 61 6e 75 |ion of y|our manu|
|00001b50| 61 6c 2e 00 00 54 68 69 | 73 20 69 73 20 6e 6f 74 |al...Thi|s is not|
|00001b60| 20 61 20 76 69 72 75 73 | 2e 20 49 74 20 69 73 20 | a virus|. It is |
|00001b70| 61 20 70 72 6f 67 72 61 | 6d 20 64 65 73 69 67 6e |a progra|m design|
|00001b80| 65 64 20 74 6f 20 72 65 | 6c 65 61 73 65 20 61 20 |ed to re|lease a |
|00001b90| 76 69 72 75 73 20 6f 6e | 20 79 6f 75 72 20 73 79 |virus on| your sy|
|00001ba0| 73 74 65 6d 2e 20 59 6f | 75 20 73 68 6f 75 6c 64 |stem. Yo|u should|
|00001bb0| 20 64 65 6c 65 74 65 20 | 74 68 69 73 20 66 69 6c | delete |this fil|
|00001bc0| 65 2e 20 20 53 65 65 20 | 22 44 72 6f 70 70 65 72 |e.  See |"Dropper|
|00001bd0| 22 20 69 6e 20 74 68 65 | 20 47 6c 6f 73 73 61 72 |" in the| Glossar|
|00001be0| 79 20 73 65 63 74 69 6f | 6e 20 6f 66 20 79 6f 75 |y sectio|n of you|
|00001bf0| 72 20 6d 61 6e 75 61 6c | 2e 00 00 00 00 54 68 69 |r manual|.....Thi|
|00001c00| 73 20 69 73 20 61 20 66 | 69 72 73 74 20 67 65 6e |s is a f|irst gen|
|00001c10| 65 72 61 74 69 6f 6e 20 | 73 61 6d 70 6c 65 20 6f |eration |sample o|
|00001c20| 66 20 74 68 65 20 76 69 | 72 75 73 2e 20 20 41 20 |f the vi|rus.  A |
|00001c30| 66 69 72 73 74 20 67 65 | 6e 65 72 61 74 69 6f 6e |first ge|neration|
|00001c40| 20 73 61 6d 70 6c 65 20 | 69 73 20 6f 6e 65 20 77 | sample |is one w|
|00001c50| 68 65 72 65 20 61 6c 6c | 20 74 68 65 20 73 65 63 |here all| the sec|
|00001c60| 6f 6e 64 20 67 65 6e 65 | 72 61 74 69 6f 6e 20 76 |ond gene|ration v|
|00001c70| 69 72 75 73 65 73 20 61 | 72 65 20 74 68 65 20 73 |iruses a|re the s|
|00001c80| 61 6d 65 20 62 75 74 20 | 64 69 66 66 65 72 20 66 |ame but |differ f|
|00001c90| 72 6f 6d 20 74 68 65 20 | 66 69 72 73 74 20 67 65 |rom the |first ge|
|00001ca0| 6e 65 72 61 74 69 6f 6e | 20 76 69 72 75 73 20 73 |neration| virus s|
|00001cb0| 61 6d 70 6c 65 2e 00 00 | 00 54 68 69 73 20 69 73 |ample...|.This is|
|00001cc0| 20 61 20 64 61 6d 61 67 | 65 64 20 76 65 72 73 69 | a damag|ed versi|
|00001cd0| 6f 6e 20 6f 66 20 74 68 | 65 20 6f 72 69 67 69 6e |on of th|e origin|
|00001ce0| 61 6c 20 76 69 72 75 73 | 2e 00 00 00 00 54 68 69 |al virus|.....Thi|
|00001cf0| 73 20 69 73 20 61 20 68 | 61 72 6d 6c 65 73 73 20 |s is a h|armless |
|00001d00| 6a 6f 6b 65 20 70 72 6f | 67 72 61 6d 2e 00 00 00 |joke pro|gram....|
|00001d10| 00 54 68 69 73 20 69 73 | 20 61 20 73 69 6d 70 6c |.This is| a simpl|
|00001d20| 65 20 76 69 72 75 73 20 | 74 68 61 74 20 64 6f 65 |e virus |that doe|
|00001d30| 73 20 6e 6f 74 68 69 6e | 67 20 62 75 74 20 72 65 |s nothin|g but re|
|00001d40| 70 6c 69 63 61 74 65 2e | 00 00 00 00 37 34 38 2c |plicate.|....748,|
|00001d50| 20 54 68 65 72 65 73 65 | 00 42 65 74 77 65 65 6e | Therese|.Between|
|00001d60| 20 33 3a 31 30 70 6d 20 | 61 6e 64 20 33 3a 31 33 | 3:10pm |and 3:13|
|00001d70| 70 6d 20 65 76 65 72 79 | 20 64 61 79 2c 20 74 68 |pm every| day, th|
|00001d80| 65 20 76 69 72 75 73 20 | 69 6e 74 65 72 66 65 72 |e virus |interfer|
|00001d90| 65 73 20 77 69 74 68 20 | 6b 65 79 62 6f 61 72 64 |es with |keyboard|
|00001da0| 20 69 6e 70 75 74 2e 00 | 54 68 69 72 74 65 65 6e | input..|Thirteen|
|00001db0| 20 6d 69 6e 75 74 65 73 | 00 54 68 65 20 76 69 72 | minutes|.The vir|
|00001dc0| 75 73 20 6d 61 79 20 61 | 74 74 61 63 68 20 67 61 |us may a|ttach ga|
|00001dd0| 72 62 61 67 65 20 62 79 | 74 65 73 20 74 6f 20 69 |rbage by|tes to i|
|00001de0| 6e 66 65 63 74 65 64 20 | 70 72 6f 67 72 61 6d 73 |nfected |programs|
|00001df0| 2e 20 41 20 63 6f 6c 64 | 20 62 6f 6f 74 20 6d 61 |. A cold| boot ma|
|00001e00| 79 20 62 65 20 72 65 71 | 75 69 72 65 64 20 61 66 |y be req|uired af|
|00001e10| 74 65 72 20 72 75 6e 6e | 69 6e 67 20 61 6e 20 69 |ter runn|ing an i|
|00001e20| 6e 66 65 63 74 65 64 20 | 70 72 6f 67 72 61 6d 2e |nfected |program.|
|00001e30| 00 00 00 00 34 38 37 30 | 20 4f 76 65 72 77 72 69 |....4870| Overwri|
|00001e40| 74 69 6e 67 00 54 68 65 | 20 76 69 72 75 73 20 64 |ting.The| virus d|
|00001e50| 65 73 74 72 6f 79 73 20 | 70 72 6f 67 72 61 6d 20 |estroys |program |
|00001e60| 66 69 6c 65 73 20 62 79 | 20 6f 76 65 72 77 72 69 |files by| overwri|
|00001e70| 74 69 6e 67 20 74 68 65 | 20 66 69 72 73 74 20 34 |ting the| first 4|
|00001e80| 38 37 30 20 62 79 74 65 | 73 20 77 69 74 68 20 69 |870 byte|s with i|
|00001e90| 74 73 20 76 69 72 61 6c | 20 63 6f 64 65 2e 00 00 |ts viral| code...|
|00001ea0| 00 54 68 65 20 76 69 72 | 75 73 20 63 68 61 6e 67 |.The vir|us chang|
|00001eb0| 65 73 20 61 6e 20 69 6e | 66 65 63 74 65 64 20 70 |es an in|fected p|
|00001ec0| 72 6f 67 72 61 6d 27 73 | 20 64 61 74 65 20 61 6e |rogram's| date an|
|00001ed0| 64 20 74 69 6d 65 20 73 | 74 61 6d 70 2e 00 00 00 |d time s|tamp....|
|00001ee0| 37 74 68 20 53 6f 6e 2c | 20 53 65 76 65 6e 74 68 |7th Son,| Seventh|
|00001ef0| 20 53 6f 6e 00 54 68 65 | 20 76 69 72 75 73 20 63 | Son.The| virus c|
|00001f00| 68 61 6e 67 65 73 20 61 | 6e 20 69 6e 66 65 63 74 |hanges a|n infect|
|00001f10| 65 64 20 70 72 6f 67 72 | 61 6d 27 73 20 64 61 74 |ed progr|am's dat|
|00001f20| 65 20 61 6e 64 20 74 69 | 6d 65 20 73 74 61 6d 70 |e and ti|me stamp|
|00001f30| 2e 20 49 6e 66 65 63 74 | 65 64 20 70 72 6f 67 72 |. Infect|ed progr|
|00001f40| 61 6d 73 20 63 6f 6e 74 | 61 69 6e 20 74 68 65 20 |ams cont|ain the |
|00001f50| 74 65 78 74 20 22 53 65 | 76 65 6e 74 68 20 53 6f |text "Se|venth So|
|00001f60| 6e 20 6f 66 20 61 20 73 | 65 76 65 6e 74 68 20 73 |n of a s|eventh s|
|00001f70| 6f 6e 22 20 61 6e 64 20 | 22 2a 2e 43 4f 4d 22 2e |on" and |"*.COM".|
|00001f80| 00 00 00 00 31 39 37 31 | 00 57 68 65 6e 20 74 68 |....1971|.When th|
|00001f90| 65 20 76 69 72 75 73 20 | 69 73 20 61 63 74 69 76 |e virus |is activ|
|00001fa0| 65 2c 20 69 74 20 70 6c | 61 79 73 20 6f 6e 65 20 |e, it pl|ays one |
|00001fb0| 6f 66 20 65 69 67 68 74 | 20 64 69 66 66 65 72 65 |of eight| differe|
|00001fc0| 6e 74 20 74 75 6e 65 73 | 2e 20 49 74 20 64 6f 65 |nt tunes|. It doe|
|00001fd0| 73 20 6e 6f 74 20 69 6e | 66 65 63 74 20 70 72 6f |s not in|fect pro|
|00001fe0| 67 72 61 6d 73 20 73 6d | 61 6c 6c 65 72 20 74 68 |grams sm|aller th|
|00001ff0| 61 6e 20 38 31 39 32 20 | 62 79 74 65 73 2e 00 00 |an 8192 |bytes...|
|00002000| 00 54 68 65 20 76 69 72 | 75 73 20 63 68 61 6e 67 |.The vir|us chang|
|00002010| 65 73 20 61 6e 20 69 6e | 66 65 63 74 65 64 20 70 |es an in|fected p|
|00002020| 72 6f 67 72 61 6d 27 73 | 20 64 61 74 65 20 61 6e |rogram's| date an|
|00002030| 64 20 74 69 6d 65 20 73 | 74 61 6d 70 2e 20 57 68 |d time s|tamp. Wh|
|00002040| 65 6e 20 61 63 74 69 76 | 61 74 65 64 2c 20 74 68 |en activ|ated, th|
|00002050| 65 20 76 69 72 75 73 20 | 63 6c 65 61 72 73 20 61 |e virus |clears a|
|00002060| 6e 64 20 72 65 70 72 69 | 6e 74 73 20 62 6c 6f 63 |nd repri|nts bloc|
|00002070| 6b 73 20 6f 66 20 74 68 | 65 20 73 63 72 65 65 6e |ks of th|e screen|
|00002080| 2e 00 00 00 00 54 68 65 | 20 76 69 72 75 73 20 63 |.....The| virus c|
|00002090| 68 61 6e 67 65 73 20 61 | 6e 20 69 6e 66 65 63 74 |hanges a|n infect|
|000020a0| 65 64 20 70 72 6f 67 72 | 61 6d 27 73 20 64 61 74 |ed progr|am's dat|
|000020b0| 65 20 61 6e 64 20 74 69 | 6d 65 20 73 74 61 6d 70 |e and ti|me stamp|
|000020c0| 2e 20 49 74 20 61 63 74 | 69 76 61 74 65 73 20 6f |. It act|ivates o|
|000020d0| 6e 20 74 68 65 20 31 33 | 74 68 20 6f 66 20 65 61 |n the 13|th of ea|
|000020e0| 63 68 20 6d 6f 6e 74 68 | 2e 20 57 68 65 6e 20 64 |ch month|. When d|
|000020f0| 6f 75 62 6c 65 20 6c 65 | 74 74 65 72 73 20 61 72 |ouble le|tters ar|
|00002100| 65 20 74 79 70 65 64 20 | 69 74 20 74 72 69 70 6c |e typed |it tripl|
|00002110| 65 73 20 74 68 65 20 6c | 65 74 74 65 72 2e 20 46 |es the l|etter. F|
|00002120| 6f 72 20 65 78 61 6d 70 | 6c 65 2c 20 22 62 6f 6f |or examp|le, "boo|
|00002130| 6b 22 20 62 65 63 6f 6d | 65 73 20 22 62 6f 6f 6f |k" becom|es "booo|
|00002140| 6b 22 2e 00 00 54 68 65 | 20 76 69 72 75 73 20 70 |k"...The| virus p|
|00002150| 72 6f 64 75 63 65 73 20 | 61 20 73 6c 6f 77 20 63 |roduces |a slow c|
|00002160| 6c 69 63 6b 69 6e 67 20 | 73 6f 75 6e 64 2e 20 54 |licking |sound. T|
|00002170| 68 65 20 76 69 72 75 73 | 20 74 61 72 67 65 74 73 |he virus| targets|
|00002180| 20 74 68 65 20 61 6e 74 | 69 76 69 72 75 73 20 20 | the ant|ivirus  |
|00002190| 70 61 63 6b 61 67 65 20 | 50 43 2d 63 69 6c 6c 69 |package |PC-cilli|
|000021a0| 6e 2e 20 49 74 20 63 6f | 6e 74 61 69 6e 73 20 74 |n. It co|ntains t|
|000021b0| 68 65 20 74 65 78 74 20 | 22 48 41 54 49 2d 48 41 |he text |"HATI-HA|
|000021c0| 54 49 20 21 21 20 41 44 | 41 20 56 49 52 55 53 20 |TI !! AD|A VIRUS |
|000021d0| 44 49 53 49 4e 49 20 21 | 21 22 00 00 41 64 6f 6c |DISINI !|!"..Adol|
|000021e0| 66 20 48 69 74 6c 65 72 | 00 54 68 65 20 76 69 72 |f Hitler|.The vir|
|000021f0| 75 73 20 63 68 61 6e 67 | 65 73 20 61 6e 20 69 6e |us chang|es an in|
|00002200| 66 65 63 74 65 64 20 70 | 72 6f 67 72 61 6d 27 73 |fected p|rogram's|
|00002210| 20 64 61 74 65 20 61 6e | 64 20 74 69 6d 65 20 73 | date an|d time s|
|00002220| 74 61 6d 70 2e 20 43 6f | 6e 74 61 69 6e 73 20 74 |tamp. Co|ntains t|
|00002230| 68 65 20 74 65 78 74 20 | 22 41 64 6f 6c 70 68 20 |he text |"Adolph |
|00002240| 48 69 74 6c 65 72 22 2e | 00 00 00 00 43 6f 6d 70 |Hitler".|....Comp|
|00002250| 61 6e 69 6f 6e 00 54 68 | 65 20 76 69 72 75 73 20 |anion.Th|e virus |
|00002260| 6d 61 79 20 64 69 73 70 | 6c 61 79 20 74 68 65 20 |may disp|lay the |
|00002270| 6d 65 73 73 61 67 65 20 | 22 59 6f 75 72 20 63 6f |message |"Your co|
|00002280| 6d 70 75 74 65 72 20 69 | 73 20 69 6e 66 65 63 74 |mputer i|s infect|
|00002290| 65 64 20 77 69 74 68 22 | 20 61 6e 64 20 22 41 49 |ed with"| and "AI|
|000022a0| 44 53 20 56 49 52 55 53 | 20 49 49 22 20 61 6e 64 |DS VIRUS| II" and|
|000022b0| 20 70 6c 61 79 20 6d 75 | 73 69 63 2e 20 41 73 20 | play mu|sic. As |
|000022c0| 61 20 63 6f 6d 70 61 6e | 69 6f 6e 20 76 69 72 75 |a compan|ion viru|
|000022d0| 73 2c 20 73 69 6d 70 6c | 79 20 64 65 6c 65 74 65 |s, simpl|y delete|
|000022e0| 20 61 6c 6c 20 69 6e 66 | 65 63 74 65 64 20 66 69 | all inf|ected fi|
|000022f0| 6c 65 73 2e 00 00 00 00 | 00 54 68 65 20 69 6e 66 |les.....|.The inf|
|00002300| 65 63 74 65 64 20 70 72 | 6f 67 72 61 6d 20 73 74 |ected pr|ogram st|
|00002310| 6f 70 73 20 61 66 74 65 | 72 20 64 69 73 70 6c 61 |ops afte|r displa|
|00002320| 79 69 6e 67 20 74 68 65 | 20 6d 65 73 73 61 67 65 |ying the| message|
|00002330| 20 22 41 20 6b 75 6b 75 | 2c 20 4e 61 73 74 65 70 | "A kuku|, Nastep|
|00002340| 6e 79 20 6b 6f 6d 6f 72 | 6e 69 6b 21 21 22 00 00 |ny komor|nik!!"..|
|00002350| 00 41 20 76 61 72 69 61 | 6e 74 20 6f 66 20 74 68 |.A varia|nt of th|
|00002360| 65 20 41 6b 75 6b 75 20 | 76 69 72 75 73 20 63 6f |e Akuku |virus co|
|00002370| 6e 74 61 69 6e 69 6e 67 | 20 74 68 65 20 74 65 78 |ntaining| the tex|
|00002380| 74 20 22 53 6f 72 72 79 | 2c 20 49 27 6d 20 63 6f |t "Sorry|, I'm co|
|00002390| 70 6d 70 6c 65 74 6c 79 | 20 64 65 61 64 22 2e 20 |pmpletly| dead". |
|000023a0| 4e 6f 74 65 20 74 68 61 | 74 20 22 63 6f 6d 70 6c |Note tha|t "compl|
|000023b0| 65 74 65 6c 79 22 20 69 | 73 20 6d 69 73 73 70 65 |etely" i|s misspe|
|000023c0| 6c 6c 65 64 2e 00 00 00 | 41 6c 61 00 4f 6e 65 20 |lled....|Ala.One |
|000023d0| 68 6f 75 72 20 61 66 74 | 65 72 20 74 68 65 20 76 |hour aft|er the v|
|000023e0| 69 72 75 73 20 69 73 20 | 61 63 74 69 76 61 74 65 |irus is |activate|
|000023f0| 64 2c 20 74 68 65 20 66 | 6f 6c 6c 6f 77 69 6e 67 |d, the f|ollowing|
|00002400| 20 6d 65 73 73 61 67 65 | 20 61 70 70 65 61 72 73 | message| appears|
|00002410| 3a 20 22 53 4f 46 54 57 | 41 52 45 20 43 4f 50 49 |: "SOFTW|ARE COPI|
|00002420| 45 53 20 50 52 4f 48 49 | 42 49 54 45 44 20 42 59 |ES PROHI|BITED BY|
|00002430| 20 49 4e 54 45 52 4e 41 | 54 49 4f 4e 41 4c 20 4c | INTERNA|TIONAL L|
|00002440| 41 57 2e 2e 2e 22 00 00 | 00 54 68 65 20 76 69 72 |AW..."..|.The vir|
|00002450| 75 73 20 63 68 61 6e 67 | 65 73 20 61 6e 20 69 6e |us chang|es an in|
|00002460| 66 65 63 74 65 64 20 70 | 72 6f 67 72 61 6d 27 73 |fected p|rogram's|
|00002470| 20 64 61 74 65 20 61 6e | 64 20 74 69 6d 65 20 73 | date an|d time s|
|00002480| 74 61 6d 70 2e 20 49 6e | 66 65 63 74 65 64 20 70 |tamp. In|fected p|
|00002490| 72 6f 67 72 61 6d 73 20 | 63 6f 6e 74 61 69 6e 20 |rograms |contain |
|000024a0| 74 68 65 20 74 65 78 74 | 20 22 41 6c 62 61 6e 69 |the text| "Albani|
|000024b0| 61 22 2e 00 00 54 68 65 | 20 76 69 72 75 73 20 63 |a"...The| virus c|
|000024c0| 68 61 6e 67 65 73 20 61 | 6e 20 69 6e 66 65 63 74 |hanges a|n infect|
|000024d0| 65 64 20 70 72 6f 67 72 | 61 6d 27 73 20 64 61 74 |ed progr|am's dat|
|000024e0| 65 20 61 6e 64 20 74 69 | 6d 65 20 73 74 61 6d 70 |e and ti|me stamp|
|000024f0| 20 74 6f 20 31 37 44 45 | 43 38 39 20 37 3a 32 31 | to 17DE|C89 7:21|
|00002500| 70 6d 2e 20 49 6e 66 65 | 63 74 65 64 20 70 72 6f |pm. Infe|cted pro|
|00002510| 67 72 61 6d 73 20 63 6f | 6e 74 61 69 6e 20 74 68 |grams co|ntain th|
|00002520| 65 20 74 65 78 74 20 22 | 43 3a 5c 43 4f 4d 4d 41 |e text "|C:\COMMA|
|00002530| 4e 44 2e 43 4f 4d 22 20 | 61 6e 64 20 22 2a 2e 43 |ND.COM" |and "*.C|
|00002540| 4f 4d 22 2e 00 00 00 00 | 00 54 68 65 20 76 69 72 |OM".....|.The vir|
|00002550| 75 73 20 63 68 61 6e 67 | 65 73 20 61 6e 20 69 6e |us chang|es an in|
|00002560| 66 65 63 74 65 64 20 70 | 72 6f 67 72 61 6d 27 73 |fected p|rogram's|
|00002570| 20 64 61 74 65 20 61 6e | 64 20 74 69 6d 65 20 73 | date an|d time s|
|00002580| 74 61 6d 70 2e 20 43 6f | 6e 74 61 69 6e 73 20 74 |tamp. Co|ntains t|
|00002590| 68 65 20 74 65 78 74 20 | 22 4f 6e 65 20 4e 69 67 |he text |"One Nig|
|000025a0| 68 74 20 56 69 72 75 73 | 20 28 43 29 20 41 6c 65 |ht Virus| (C) Ale|
|000025b0| 78 20 48 61 63 6b 65 72 | 22 20 61 6e 64 20 22 2a |x Hacker|" and "*|
|000025c0| 2e 43 4f 4d 22 2e 00 00 | 00 54 68 65 20 76 69 72 |.COM"...|.The vir|
|000025d0| 75 73 20 63 68 61 6e 67 | 65 73 20 61 6e 20 69 6e |us chang|es an in|
|000025e0| 66 65 63 74 65 64 20 70 | 72 6f 67 72 61 6d 27 73 |fected p|rogram's|
|000025f0| 20 64 61 74 65 20 61 6e | 64 20 74 69 6d 65 20 73 | date an|d time s|
|00002600| 74 61 6d 70 2e 20 43 6f | 6e 74 61 69 6e 73 20 74 |tamp. Co|ntains t|
|00002610| 68 65 20 74 65 78 74 20 | 22 54 68 65 20 4b 69 74 |he text |"The Kit|
|00002620| 65 20 56 69 72 75 73 20 | 28 43 29 20 41 6c 65 78 |e Virus |(C) Alex|
|00002630| 20 48 61 63 6b 65 72 22 | 20 61 6e 64 20 22 2a 2e | Hacker"| and "*.|
|00002640| 45 58 45 22 2e 00 00 00 | 00 54 68 65 20 76 69 72 |EXE"....|.The vir|
|00002650| 75 73 20 6f 63 63 61 73 | 69 6f 6e 61 6c 6c 79 20 |us occas|ionally |
|00002660| 64 69 73 70 6c 61 79 73 | 20 61 20 62 6f 78 65 64 |displays| a boxed|
|00002670| 20 74 65 78 74 20 61 6e | 64 20 70 6c 61 79 73 20 | text an|d plays |
|00002680| 61 20 74 75 6e 65 2e 20 | 54 68 65 20 74 65 78 74 |a tune. |The text|
|00002690| 20 20 69 73 20 65 6e 63 | 72 79 70 74 65 64 20 61 |  is enc|rypted a|
|000026a0| 6e 64 20 73 61 79 73 2c | 20 69 6e 20 70 61 72 74 |nd says,| in part|
|000026b0| 2c 20 22 41 6c 65 78 61 | 6e 64 65 72 20 2d 20 43 |, "Alexa|nder - C|
|000026c0| 6f 6e 73 74 61 6e 74 61 | 2c 20 52 6f 6d 61 6e 69 |onstanta|, Romani|
|000026d0| 61 22 2e 00 52 65 64 2d | 58 2c 20 41 6d 62 75 6c |a"..Red-|X, Ambul|
|000026e0| 61 6e 63 65 20 43 61 72 | 00 54 68 65 20 76 69 72 |ance Car|.The vir|
|000026f0| 75 73 20 6d 61 79 20 64 | 69 73 70 6c 61 79 20 61 |us may d|isplay a|
|00002700| 20 6d 6f 76 69 6e 67 20 | 61 6d 62 75 6c 61 6e 63 | moving |ambulanc|
|00002710| 65 20 77 68 69 6c 65 20 | 65 6d 69 74 74 69 6e 67 |e while |emitting|
|00002720| 20 74 68 65 20 73 6f 75 | 6e 64 20 6f 66 20 61 20 | the sou|nd of a |
|00002730| 73 69 72 65 6e 2e 00 00 | 31 33 39 32 00 54 68 65 |siren...|1392.The|
|00002740| 20 76 69 72 75 73 20 6f | 76 65 72 77 72 69 74 65 | virus o|verwrite|
|00002750| 73 20 61 20 70 72 6f 67 | 72 61 6d 27 73 20 66 69 |s a prog|ram's fi|
|00002760| 72 73 74 20 31 30 38 39 | 20 62 79 74 65 73 20 77 |rst 1089| bytes w|
|00002770| 69 74 68 20 76 69 72 61 | 6c 20 63 6f 64 65 2c 20 |ith vira|l code, |
|00002780| 70 6c 61 63 69 6e 67 20 | 74 68 65 20 6f 72 69 67 |placing |the orig|
|00002790| 69 6e 61 6c 20 63 6f 64 | 65 20 61 74 20 74 68 65 |inal cod|e at the|
|000027a0| 20 65 6e 64 2c 20 61 6e | 64 20 74 68 65 6e 20 61 | end, an|d then a|
|000027b0| 64 64 73 20 33 30 33 20 | 6d 6f 72 65 20 62 79 74 |dds 303 |more byt|
|000027c0| 65 73 20 74 6f 20 74 68 | 65 20 65 6e 64 20 6f 66 |es to th|e end of|
|000027d0| 20 74 68 65 20 66 69 6c | 65 2e 20 49 6e 66 65 63 | the fil|e. Infec|
|000027e0| 74 65 64 20 70 72 6f 67 | 72 61 6d 73 20 63 6f 6e |ted prog|rams con|
|000027f0| 74 61 69 6e 20 74 68 65 | 20 74 65 78 74 20 22 2e |tain the| text ".|
|00002800| 2e 2e 20 4e 6f 75 76 65 | 6c 20 42 61 6e 64 20 41 |.. Nouve|l Band A|
|00002810| 2e 4d 2e 4f 2e 45 2e 42 | 2e 41 22 2e 00 00 00 00 |.M.O.E.B|.A".....|
|00002820| 41 6e 64 72 65 00 49 6e | 20 61 64 64 69 74 69 6f |Andre.In| additio|
|00002830| 6e 20 74 6f 20 69 6e 66 | 65 63 74 69 6e 67 20 70 |n to inf|ecting p|
|00002840| 72 6f 67 72 61 6d 73 20 | 77 68 65 6e 20 74 68 65 |rograms |when the|
|00002850| 79 20 61 72 65 20 61 63 | 63 65 73 73 65 64 20 6f |y are ac|cessed o|
|00002860| 72 20 72 75 6e 2c 20 74 | 68 65 20 76 69 72 75 73 |r run, t|he virus|
|00002870| 20 69 6e 66 65 63 74 73 | 20 70 72 6f 67 72 61 6d | infects| program|
|00002880| 73 20 74 68 61 74 20 61 | 72 65 20 63 6f 70 69 65 |s that a|re copie|
|00002890| 64 20 6f 72 20 61 63 63 | 65 73 73 65 64 2c 20 75 |d or acc|essed, u|
|000028a0| 73 69 6e 67 20 74 68 65 | 20 44 4f 53 20 44 49 52 |sing the| DOS DIR|
|000028b0| 20 63 6f 6d 6d 61 6e 64 | 2e 00 00 00 00 54 68 65 | command|.....The|
|000028c0| 20 76 69 72 75 73 20 63 | 68 61 6e 67 65 73 20 61 | virus c|hanges a|
|000028d0| 6e 20 69 6e 66 65 63 74 | 65 64 20 70 72 6f 67 72 |n infect|ed progr|
|000028e0| 61 6d 27 73 20 64 61 74 | 65 20 61 6e 64 20 74 69 |am's dat|e and ti|
|000028f0| 6d 65 20 73 74 61 6d 70 | 2e 20 49 6e 66 65 63 74 |me stamp|. Infect|
|00002900| 65 64 20 70 72 6f 67 72 | 61 6d 73 20 63 6f 6e 74 |ed progr|ams cont|
|00002910| 61 69 6e 20 74 68 65 20 | 74 65 78 74 20 22 2a 2e |ain the |text "*.|
|00002920| 43 4f 4d 22 2e 00 00 00 | 00 54 68 65 20 76 69 72 |COM"....|.The vir|
|00002930| 75 73 20 63 68 61 6e 67 | 65 73 20 61 6e 20 69 6e |us chang|es an in|
|00002940| 66 65 63 74 65 64 20 70 | 72 6f 67 72 61 6d 27 73 |fected p|rogram's|
|00002950| 20 64 61 74 65 20 61 6e | 64 20 74 69 6d 65 20 73 | date an|d time s|
|00002960| 74 61 6d 70 2e 20 54 68 | 65 20 76 69 72 75 73 20 |tamp. Th|e virus |
|00002970| 69 6e 66 65 63 74 73 20 | 6f 6e 65 20 61 64 64 69 |infects |one addi|
|00002980| 74 69 6f 6e 61 6c 20 43 | 4f 4d 20 70 72 6f 67 72 |tional C|OM progr|
|00002990| 61 6d 20 65 61 63 68 20 | 74 69 6d 65 20 61 6e 20 |am each |time an |
|000029a0| 69 6e 66 65 63 74 65 64 | 20 70 72 6f 67 72 61 6d |infected| program|
|000029b0| 20 69 73 20 72 75 6e 2e | 00 00 00 00 00 49 6e 66 | is run.|.....Inf|
|000029c0| 65 63 74 65 64 20 70 72 | 6f 67 72 61 6d 73 20 63 |ected pr|ograms c|
|000029d0| 6f 6e 74 61 69 6e 20 74 | 68 65 20 74 65 78 74 20 |ontain t|he text |
|000029e0| 22 41 6e 74 68 72 61 78 | 22 20 61 6e 64 20 22 44 |"Anthrax|" and "D|
|000029f0| 61 6d 61 67 65 2c 20 49 | 6e 63 22 2e 20 54 68 65 |amage, I|nc". The|
|00002a00| 20 76 69 72 75 73 20 77 | 72 69 74 65 73 20 61 20 | virus w|rites a |
|00002a10| 63 6f 70 79 20 6f 66 20 | 69 74 73 65 6c 66 20 74 |copy of |itself t|
|00002a20| 6f 20 74 68 65 20 6c 61 | 73 74 20 66 65 77 20 73 |o the la|st few s|
|00002a30| 65 63 74 6f 72 73 20 6f | 66 20 74 68 65 20 68 61 |ectors o|f the ha|
|00002a40| 72 64 20 64 69 73 6b 2e | 20 41 6e 79 20 64 61 74 |rd disk.| Any dat|
|00002a50| 61 20 6c 6f 63 61 74 65 | 64 20 74 68 65 72 65 20 |a locate|d there |
|00002a60| 69 73 20 64 65 73 74 72 | 6f 79 65 64 2e 00 00 00 |is destr|oyed....|
|00002a70| 53 75 78 00 49 6e 66 65 | 63 74 65 64 20 70 72 6f |Sux.Infe|cted pro|
|00002a80| 67 72 61 6d 73 20 63 6f | 6e 74 61 69 6e 20 74 68 |grams co|ntain th|
|00002a90| 65 20 74 65 78 74 20 22 | 5b 41 6e 74 69 2d 4d 49 |e text "|[Anti-MI|
|00002aa0| 54 5d 22 2e 20 57 68 65 | 6e 20 61 63 74 69 76 65 |T]". Whe|n active|
|00002ab0| 20 6f 6e 20 44 65 63 65 | 6d 62 65 72 20 31 73 74 | on Dece|mber 1st|
|00002ac0| 2c 20 74 68 65 20 76 69 | 72 75 73 20 64 65 73 74 |, the vi|rus dest|
|00002ad0| 72 6f 79 73 20 61 6c 6c | 20 6f 66 20 74 68 65 20 |roys all| of the |
|00002ae0| 64 61 74 61 20 6f 6e 20 | 74 68 65 20 68 61 72 64 |data on |the hard|
|00002af0| 20 64 69 73 6b 20 61 6e | 64 20 64 69 73 70 6c 61 | disk an|d displa|
|00002b00| 79 73 20 22 4d 49 54 20 | 53 75 78 21 22 00 00 00 |ys "MIT |Sux!"...|
|00002b10| 50 61 6e 64 61 46 6c 75 | 00 52 75 6e 6e 69 6e 67 |PandaFlu|.Running|
|00002b20| 20 61 6e 20 69 6e 66 65 | 63 74 65 64 20 70 72 6f | an infe|cted pro|
|00002b30| 67 72 61 6d 20 63 61 75 | 73 65 73 20 61 6c 6c 20 |gram cau|ses all |
|00002b40| 43 4f 4d 20 70 72 6f 67 | 72 61 6d 73 20 6c 6f 63 |COM prog|rams loc|
|00002b50| 61 74 65 64 20 69 6e 20 | 74 68 65 20 43 3a 20 64 |ated in |the C: d|
|00002b60| 72 69 76 65 20 72 6f 6f | 74 20 64 69 72 65 63 74 |rive roo|t direct|
|00002b70| 6f 72 79 20 74 6f 20 62 | 65 20 69 6e 66 65 63 74 |ory to b|e infect|
|00002b80| 65 64 2e 20 49 6e 66 65 | 63 74 65 64 20 70 72 6f |ed. Infe|cted pro|
|00002b90| 67 72 61 6d 73 20 63 6f | 6e 74 61 69 6e 20 74 68 |grams co|ntain th|
|00002ba0| 65 20 74 65 78 74 20 22 | 46 4c 55 53 48 4f 54 33 |e text "|FLUSHOT3|
|00002bb0| 2e 43 4f 4d 22 20 61 6e | 64 20 22 43 3a 5c 50 41 |.COM" an|d "C:\PA|
|00002bc0| 4e 44 41 5c 4d 4f 4e 49 | 54 4f 52 2e 43 4f 4d 2e |NDA\MONI|TOR.COM.|
|00002bd0| 2e 2e 22 00 41 6e 74 69 | 2d 50 61 73 63 61 6c 00 |..".Anti|-Pascal.|
|00002be0| 54 68 65 20 76 69 72 75 | 73 20 63 68 61 6e 67 65 |The viru|s change|
|00002bf0| 73 20 61 6e 20 69 6e 66 | 65 63 74 65 64 20 70 72 |s an inf|ected pr|
|00002c00| 6f 67 72 61 6d 27 73 20 | 64 61 74 65 20 61 6e 64 |ogram's |date and|
|00002c10| 20 74 69 6d 65 20 73 74 | 61 6d 70 2e 20 46 69 6c | time st|amp. Fil|
|00002c20| 65 73 20 77 69 74 68 20 | 50 41 53 20 61 6e 64 20 |es with |PAS and |
|00002c30| 42 41 4b 20 65 78 74 65 | 6e 73 69 6f 6e 20 61 72 |BAK exte|nsion ar|
|00002c40| 65 20 64 65 6c 65 74 65 | 64 2e 00 00 41 50 2d 34 |e delete|d...AP-4|
|00002c50| 30 30 2f 2d 34 34 30 2f | 2d 34 38 30 2c 20 41 6e |00/-440/|-480, An|
|00002c60| 74 69 50 61 73 63 61 6c | 20 49 49 00 49 66 20 74 |tiPascal| II.If t|
|00002c70| 68 65 20 76 69 72 75 73 | 20 63 61 6e 6e 6f 74 20 |he virus| cannot |
|00002c80| 6c 6f 63 61 74 65 20 61 | 20 70 72 6f 67 72 61 6d |locate a| program|
|00002c90| 20 74 6f 20 69 6e 66 65 | 63 74 2c 20 69 74 20 64 | to infe|ct, it d|
|00002ca0| 65 6c 65 74 65 73 20 66 | 69 6c 65 73 20 77 69 74 |eletes f|iles wit|
|00002cb0| 68 20 42 41 4b 2c 20 50 | 41 53 2c 20 6f 72 20 42 |h BAK, P|AS, or B|
|00002cc0| 41 54 20 65 78 74 65 6e | 73 69 6f 6e 73 2e 00 00 |AT exten|sions...|
|00002cd0| 38 33 34 00 54 68 65 20 | 76 69 72 75 73 20 61 6c |834.The |virus al|
|00002ce0| 74 65 72 73 20 74 68 65 | 20 68 61 72 64 20 64 69 |ters the| hard di|
|00002cf0| 73 6b 20 69 6e 20 61 20 | 77 61 79 20 74 68 61 74 |sk in a |way that|
|00002d00| 20 63 61 75 73 65 73 20 | 61 6e 20 69 6e 63 6f 6d | causes |an incom|
|00002d10| 70 6c 65 74 65 20 62 6f | 6f 74 20 75 70 2e 00 00 |plete bo|ot up...|
|00002d20| 00 41 52 43 56 20 69 73 | 20 61 20 67 72 6f 75 70 |.ARCV is| a group|
|00002d30| 20 6f 66 20 76 69 72 75 | 73 65 73 20 77 72 69 74 | of viru|ses writ|
|00002d40| 74 65 6e 20 62 79 20 22 | 41 73 73 6f 63 69 61 74 |ten by "|Associat|
|00002d50| 69 6f 6e 20 6f 66 20 52 | 65 61 6c 6c 79 20 43 72 |ion of R|eally Cr|
|00002d60| 75 65 6c 20 56 69 72 75 | 73 65 73 22 2e 00 00 00 |uel Viru|ses"....|
|00002d70| 47 72 65 65 6b 2c 20 41 | 72 6d 61 00 57 68 65 6e |Greek, A|rma.When|
|00002d80| 20 61 63 74 69 76 65 20 | 62 65 74 77 65 65 6e 20 | active |between |
|00002d90| 35 20 61 6e 64 20 37 20 | 50 2e 4d 2e 2c 20 74 68 |5 and 7 |P.M., th|
|00002da0| 65 20 76 69 72 75 73 20 | 61 74 74 65 6d 70 74 73 |e virus |attempts|
|00002db0| 20 74 6f 20 75 73 65 20 | 74 68 65 20 6c 6f 63 61 | to use |the loca|
|00002dc0| 6c 20 43 4f 4d 20 70 6f | 72 74 73 20 74 6f 20 6d |l COM po|rts to m|
|00002dd0| 61 6b 65 20 61 20 70 68 | 6f 6e 65 20 63 61 6c 6c |ake a ph|one call|
|00002de0| 20 74 6f 20 6c 6f 63 61 | 6c 20 74 69 6d 65 20 69 | to loca|l time i|
|00002df0| 6e 66 6f 72 6d 61 74 69 | 6f 6e 20 69 6e 20 43 72 |nformati|on in Cr|
|00002e00| 65 74 65 2c 20 47 72 65 | 65 63 65 2e 00 00 00 00 |ete, Gre|ece.....|
|00002e10| 31 35 39 30 00 4f 6e 20 | 4e 6f 76 65 6d 62 65 72 |1590.On |November|
|00002e20| 20 32 30 74 68 20 74 68 | 65 20 76 69 72 75 73 20 | 20th th|e virus |
|00002e30| 70 72 69 6e 74 73 20 61 | 20 6c 6f 6e 67 20 6d 65 |prints a| long me|
|00002e40| 73 73 61 67 65 20 69 6e | 20 53 70 61 6e 69 73 68 |ssage in| Spanish|
|00002e50| 2c 20 77 68 69 63 68 20 | 69 6e 63 6c 75 64 65 73 |, which |includes|
|00002e60| 20 74 68 65 20 70 68 72 | 61 73 65 20 22 53 70 61 | the phr|ase "Spa|
|00002e70| 69 6e 20 4a 61 77 73 20 | 26 26 20 53 68 61 72 6b |in Jaws |&& Shark|
|00002e80| 73 22 20 69 6e 20 45 6e | 67 6c 69 73 68 2e 00 00 |s" in En|glish...|
|00002e90| 00 54 68 65 20 76 69 72 | 75 73 20 63 68 61 6e 67 |.The vir|us chang|
|00002ea0| 65 73 20 61 6e 20 69 6e | 66 65 63 74 65 64 20 70 |es an in|fected p|
|00002eb0| 72 6f 67 72 61 6d 27 73 | 20 64 61 74 65 20 61 6e |rogram's| date an|
|00002ec0| 64 20 74 69 6d 65 20 73 | 74 61 6d 70 2e 00 00 00 |d time s|tamp....|
|00002ed0| 00 54 68 65 20 76 69 72 | 75 73 20 63 6f 72 72 75 |.The vir|us corru|
|00002ee0| 70 74 73 20 64 61 74 61 | 20 66 69 6c 65 73 20 62 |pts data| files b|
|00002ef0| 79 20 64 65 6c 65 74 69 | 6e 67 20 37 30 30 20 62 |y deleti|ng 700 b|
|00002f00| 79 74 65 73 20 66 72 6f | 6d 20 74 68 65 6d 2e 20 |ytes fro|m them. |
|00002f10| 49 6e 66 65 63 74 65 64 | 20 70 72 6f 67 72 61 6d |Infected| program|
|00002f20| 73 20 63 6f 6e 74 61 69 | 6e 20 74 68 65 20 74 65 |s contai|n the te|
|00002f30| 78 74 20 22 28 43 29 20 | 41 73 54 72 41 2c 20 31 |xt "(C) |AsTrA, 1|
|00002f40| 39 39 31 2e 2e 2e 22 00 | 00 54 68 65 20 76 69 72 |991...".|.The vir|
|00002f50| 75 73 20 63 68 61 6e 67 | 65 73 20 61 6e 20 69 6e |us chang|es an in|
|00002f60| 66 65 63 74 65 64 20 70 | 72 6f 67 72 61 6d 27 73 |fected p|rogram's|
|00002f70| 20 64 61 74 65 20 61 6e | 64 20 74 69 6d 65 20 73 | date an|d time s|
|00002f80| 74 61 6d 70 2e 20 54 68 | 65 20 76 69 72 75 73 20 |tamp. Th|e virus |
|00002f90| 69 6e 66 65 63 74 73 20 | 70 72 6f 67 72 61 6d 73 |infects |programs|
|00002fa0| 20 6f 6e 6c 79 20 6f 6e | 20 41 54 28 32 38 36 29 | only on| AT(286)|
|00002fb0| 20 63 6f 6d 70 75 74 65 | 72 73 20 61 6e 64 20 61 | compute|rs and a|
|00002fc0| 62 6f 76 65 2e 00 00 00 | 00 54 68 65 20 6d 65 73 |bove....|.The mes|
|00002fd0| 73 61 67 65 20 22 4f 4b | 22 20 6f 72 20 22 49 20 |sage "OK|" or "I |
|00002fe0| 6c 69 6b 65 20 74 6f 20 | 74 72 61 76 65 6c 22 20 |like to |travel" |
|00002ff0| 61 70 70 65 61 72 73 20 | 77 68 65 6e 20 69 6e 66 |appears |when inf|
|00003000| 65 63 74 65 64 20 70 72 | 6f 67 72 61 6d 73 20 61 |ected pr|ograms a|
|00003010| 72 65 20 20 72 75 6e 2e | 20 54 68 65 20 76 69 72 |re  run.| The vir|
|00003020| 75 73 20 63 68 61 6e 67 | 65 73 20 61 6e 20 69 6e |us chang|es an in|
|00003030| 66 65 63 74 65 64 20 70 | 72 6f 67 72 61 6d 27 73 |fected p|rogram's|
|00003040| 20 64 61 74 65 20 61 6e | 64 20 74 69 6d 65 20 73 | date an|d time s|
|00003050| 74 61 6d 70 2e 20 49 74 | 20 63 6f 6e 74 61 69 6e |tamp. It| contain|
|00003060| 73 20 74 68 65 20 74 65 | 78 74 20 22 41 54 41 53 |s the te|xt "ATAS|
|00003070| 28 4b 69 65 76 29 22 20 | 61 6e 64 20 61 20 76 65 |(Kiev)" |and a ve|
|00003080| 72 73 69 6f 6e 20 6e 75 | 6d 62 65 72 2e 00 00 00 |rsion nu|mber....|
|00003090| 00 54 68 65 20 76 69 72 | 75 73 20 63 6f 6e 74 61 |.The vir|us conta|
|000030a0| 69 6e 73 20 74 68 65 20 | 65 6e 63 72 79 70 74 65 |ins the |encrypte|
|000030b0| 64 20 74 65 78 74 20 22 | 41 54 41 53 20 43 6f 72 |d text "|ATAS Cor|
|000030c0| 70 6f 72 61 74 69 6f 6e | 20 28 43 29 31 39 39 32 |poration| (C)1992|
|000030d0| 22 20 61 6e 64 20 61 20 | 76 65 72 73 69 6f 6e 20 |" and a |version |
|000030e0| 6e 75 6d 62 65 72 2e 00 | 54 72 6f 6a 65 63 74 6f |number..|Trojecto|
|000030f0| 72 00 54 68 65 20 76 69 | 72 75 73 20 63 6f 6e 74 |r.The vi|rus cont|
|00003100| 61 69 6e 73 20 74 68 65 | 20 74 65 78 74 20 22 54 |ains the| text "T|
|00003110| 52 4f 4a 45 43 54 4f 52 | 20 49 49 2c 28 63 29 20 |ROJECTOR| II,(c) |
|00003120| 41 72 6d 61 67 65 64 6f | 6e 20 55 74 69 6c 69 74 |Armagedo|n Utilit|
|00003130| 69 65 73 2c 20 41 74 68 | 65 6e 73 20 31 39 39 32 |ies, Ath|ens 1992|
|00003140| 22 2e 00 00 55 53 53 52 | 2c 20 41 74 74 65 6e 74 |"...USSR|, Attent|
|00003150| 69 6f 6e 00 57 68 65 6e | 20 61 20 6b 65 79 20 69 |ion.When| a key i|
|00003160| 73 20 70 72 65 73 73 65 | 64 2c 20 61 20 63 6c 69 |s presse|d, a cli|
|00003170| 63 6b 20 73 6f 75 6e 64 | 20 69 73 20 65 6d 69 74 |ck sound| is emit|
|00003180| 74 65 64 2e 20 57 68 65 | 6e 20 73 6f 6d 65 20 69 |ted. Whe|n some i|
|00003190| 6e 66 65 63 74 65 64 20 | 70 72 6f 67 72 61 6d 73 |nfected |programs|
|000031a0| 20 61 72 65 20 72 75 6e | 2c 20 74 68 65 20 6d 65 | are run|, the me|
|000031b0| 73 73 61 67 65 20 22 49 | 6e 76 61 6c 69 64 20 64 |ssage "I|nvalid d|
|000031c0| 72 69 76 65 20 6f 72 20 | 66 69 6c 65 20 6e 61 6d |rive or |file nam|
|000031d0| 65 22 20 61 70 70 65 61 | 72 73 2e 00 00 54 68 65 |e" appea|rs...The|
|000031e0| 20 76 69 72 75 73 20 63 | 68 61 6e 67 65 73 20 61 | virus c|hanges a|
|000031f0| 6e 20 69 6e 66 65 63 74 | 65 64 20 70 72 6f 67 72 |n infect|ed progr|
|00003200| 61 6d 27 73 20 64 61 74 | 65 20 61 6e 64 20 74 69 |am's dat|e and ti|
|00003210| 6d 65 20 73 74 61 6d 70 | 2e 20 54 68 65 20 76 69 |me stamp|. The vi|
|00003220| 72 75 73 20 69 6e 66 65 | 63 74 73 20 70 72 6f 67 |rus infe|cts prog|
|00003230| 72 61 6d 73 20 6f 6e 6c | 79 20 6f 6e 20 41 54 28 |rams onl|y on AT(|
|00003240| 32 38 36 29 20 63 6f 6d | 70 75 74 65 72 73 20 61 |286) com|puters a|
|00003250| 6e 64 20 61 62 6f 76 65 | 2e 00 00 00 00 49 6e 66 |nd above|.....Inf|
|00003260| 65 63 74 73 20 70 72 6f | 67 72 61 6d 73 20 77 68 |ects pro|grams wh|
|00003270| 65 6e 20 74 68 65 79 20 | 61 72 65 20 72 75 6e 20 |en they |are run |
|00003280| 6f 72 20 6f 70 65 6e 65 | 64 2e 20 43 6f 6e 74 61 |or opene|d. Conta|
|00003290| 69 6e 73 20 74 68 65 20 | 74 65 78 74 20 22 41 76 |ins the |text "Av|
|000032a0| 61 22 2e 00 42 61 64 73 | 65 63 00 57 68 65 6e 20 |a"..Bads|ec.When |
|000032b0| 74 68 65 20 76 69 72 75 | 73 20 69 73 20 61 63 74 |the viru|s is act|
|000032c0| 69 76 65 2c 20 74 68 65 | 20 66 6f 6e 74 73 20 6f |ive, the| fonts o|
|000032d0| 6e 20 45 47 41 20 61 6e | 64 20 56 47 41 20 6d 6f |n EGA an|d VGA mo|
|000032e0| 6e 69 74 6f 72 73 20 61 | 72 65 20 63 68 61 6e 67 |nitors a|re chang|
|000032f0| 65 64 2e 20 41 20 63 6f | 6c 64 20 62 6f 6f 74 20 |ed. A co|ld boot |
|00003300| 6d 61 79 20 62 65 20 72 | 65 71 75 69 72 65 64 20 |may be r|equired |
|00003310| 61 66 74 65 72 20 72 75 | 6e 6e 69 6e 67 20 61 6e |after ru|nning an|
|00003320| 20 69 6e 66 65 63 74 65 | 64 20 70 72 6f 67 72 61 | infecte|d progra|
|00003330| 6d 2e 00 00 00 57 68 65 | 6e 20 74 68 65 20 76 69 |m....Whe|n the vi|
|00003340| 72 75 73 20 69 73 20 66 | 69 72 73 74 20 72 75 6e |rus is f|irst run|
|00003350| 20 69 74 20 70 72 69 6e | 74 73 20 22 42 61 64 20 | it prin|ts "Bad |
|00003360| 63 6f 6d 6d 61 6e 64 20 | 6f 66 20 66 69 6c 65 20 |command |of file |
|00003370| 6e 61 6d 65 22 20 61 6e | 64 20 72 65 74 75 72 6e |name" an|d return|
|00003380| 73 20 74 6f 20 74 68 65 | 20 44 4f 53 20 70 72 6f |s to the| DOS pro|
|00003390| 6d 70 74 2e 00 00 00 00 | 42 42 00 49 6e 66 65 63 |mpt.....|BB.Infec|
|000033a0| 74 65 64 20 70 72 6f 67 | 72 61 6d 73 20 6d 61 79 |ted prog|rams may|
|000033b0| 20 6e 6f 74 20 72 75 6e | 20 70 72 6f 70 65 72 6c | not run| properl|
|000033c0| 79 2e 00 00 00 49 6e 66 | 65 63 74 65 64 20 70 72 |y....Inf|ected pr|
|000033d0| 6f 67 72 61 6d 73 20 63 | 6f 6e 74 61 69 6e 20 74 |ograms c|ontain t|
|000033e0| 68 65 20 74 65 78 74 20 | 22 54 68 65 20 62 61 64 |he text |"The bad|
|000033f0| 20 62 6f 79 20 68 61 6c | 74 20 79 6f 75 72 20 73 | boy hal|t your s|
|00003400| 79 73 74 65 6d 2e 2e 2e | 22 20 41 20 63 6f 6c 64 |ystem...|" A cold|
|00003410| 20 62 6f 6f 74 20 6d 61 | 79 20 62 65 20 72 65 71 | boot ma|y be req|
|00003420| 75 69 72 65 64 20 61 66 | 74 65 72 20 72 75 6e 6e |uired af|ter runn|
|00003430| 69 6e 67 20 61 6e 20 69 | 6e 66 65 63 74 65 64 20 |ing an i|nfected |
|00003440| 70 72 6f 67 72 61 6d 2e | 00 00 00 00 00 54 68 65 |program.|.....The|
|00003450| 20 76 69 72 75 73 20 63 | 68 61 6e 67 65 73 20 61 | virus c|hanges a|
|00003460| 6e 20 69 6e 66 65 63 74 | 65 64 20 70 72 6f 67 72 |n infect|ed progr|
|00003470| 61 6d 27 73 20 64 61 74 | 65 20 61 6e 64 20 74 69 |am's dat|e and ti|
|00003480| 6d 65 20 73 74 61 6d 70 | 2e 00 00 00 00 57 68 65 |me stamp|.....Whe|
|00003490| 6e 20 74 68 65 20 76 69 | 72 75 73 20 69 73 20 61 |n the vi|rus is a|
|000034a0| 63 74 69 76 65 20 6f 6e | 20 4a 61 6e 75 61 72 79 |ctive on| January|
|000034b0| 20 35 74 68 2c 20 69 74 | 20 65 72 61 73 65 73 20 | 5th, it| erases |
|000034c0| 74 68 65 20 4d 42 52 2c | 20 61 6e 64 20 64 69 73 |the MBR,| and dis|
|000034d0| 70 6c 61 79 73 20 66 6c | 61 73 68 69 6e 67 20 76 |plays fl|ashing v|
|000034e0| 65 72 74 69 63 61 6c 20 | 62 61 72 73 20 61 6e 64 |ertical |bars and|
|000034f0| 20 74 68 65 20 6d 65 73 | 73 61 67 65 20 22 56 69 | the mes|sage "Vi|
|00003500| 72 75 73 20 42 41 52 52 | 4f 54 45 53 20 70 6f 72 |rus BARR|OTES por|
|00003510| 20 4f 53 6f 66 74 22 2e | 00 00 00 00 56 2d 35 31 | OSoft".|....V-51|
|00003520| 32 2c 20 36 36 36 00 49 | 6e 66 65 63 74 65 64 20 |2, 666.I|nfected |
|00003530| 70 72 6f 67 72 61 6d 73 | 20 63 6f 6e 74 61 69 6e |programs| contain|
|00003540| 20 74 68 65 20 74 65 78 | 74 20 22 36 36 36 22 2e | the tex|t "666".|
|00003550| 00 00 00 00 55 53 53 52 | 00 49 6e 66 65 63 74 65 |....USSR|.Infecte|
|00003560| 64 20 70 72 6f 67 72 61 | 6d 73 20 73 69 6d 70 6c |d progra|ms simpl|
|00003570| 79 20 73 74 6f 70 20 61 | 66 74 65 72 20 65 6d 69 |y stop a|fter emi|
|00003580| 74 74 69 6e 67 20 61 20 | 63 6c 69 63 6b 69 6e 67 |tting a |clicking|
|00003590| 20 6e 6f 69 73 65 2e 20 | 54 68 65 20 76 69 72 75 | noise. |The viru|
|000035a0| 73 20 6d 61 79 20 64 69 | 73 70 6c 61 79 20 61 20 |s may di|splay a |
|000035b0| 62 6f 78 20 77 69 74 68 | 20 74 68 65 20 70 68 72 |box with| the phr|
|000035c0| 61 73 65 20 22 53 6b 61 | 67 69 20 27 62 65 62 65 |ase "Ska|gi 'bebe|
|000035d0| 27 20 3e 22 20 61 6e 64 | 20 77 68 65 6e 20 74 68 |' >" and| when th|
|000035e0| 65 20 75 73 65 72 20 74 | 79 70 65 73 20 22 62 65 |e user t|ypes "be|
|000035f0| 62 65 22 20 74 68 65 20 | 76 69 72 75 73 20 70 72 |be" the |virus pr|
|00003600| 69 6e 74 73 20 22 46 69 | 67 20 54 65 62 65 20 21 |ints "Fi|g Tebe !|
|00003610| 22 00 00 00 34 33 39 00 | 49 6e 66 65 63 74 65 64 |"...439.|Infected|
|00003620| 20 70 72 6f 67 72 61 6d | 73 27 20 73 69 7a 65 20 | program|s' size |
|00003630| 69 6e 63 72 65 61 73 65 | 73 20 62 79 20 34 33 39 |increase|s by 439|
|00003640| 20 62 79 74 65 73 2e 00 | 00 57 68 65 6e 20 61 63 | bytes..|.When ac|
|00003650| 74 69 76 65 2c 20 74 68 | 65 20 76 69 72 75 73 20 |tive, th|e virus |
|00003660| 70 6c 61 79 73 20 61 20 | 74 75 6e 65 2c 20 61 6e |plays a |tune, an|
|00003670| 64 20 61 20 6d 65 73 73 | 61 67 65 20 69 6e 20 52 |d a mess|age in R|
|00003680| 75 73 73 69 61 6e 20 61 | 70 70 65 61 72 73 2e 00 |ussian a|ppears..|
|00003690| 42 65 73 74 20 57 69 73 | 68 65 73 2c 20 57 69 73 |Best Wis|hes, Wis|
|000036a0| 68 65 73 00 49 66 20 43 | 4f 4d 4d 41 4e 44 2e 43 |hes.If C|OMMAND.C|
|000036b0| 4f 4d 20 69 73 20 69 6e | 66 65 63 74 65 64 2c 20 |OM is in|fected, |
|000036c0| 69 74 20 64 6f 65 73 20 | 6e 6f 74 20 66 75 6e 63 |it does |not func|
|000036d0| 74 69 6f 6e 20 70 72 6f | 70 65 72 6c 79 2e 20 49 |tion pro|perly. I|
|000036e0| 6e 66 65 63 74 65 64 20 | 70 72 6f 67 72 61 6d 73 |nfected |programs|
|000036f0| 20 63 6f 6e 74 61 69 6e | 20 74 68 65 20 74 65 78 | contain| the tex|
|00003700| 74 20 22 54 68 69 73 20 | 70 72 6f 67 72 61 6d 20 |t "This |program |
|00003710| 2e 2e 2e 20 57 69 74 68 | 20 42 65 73 74 20 57 69 |... With| Best Wi|
|00003720| 73 68 65 73 21 22 00 00 | 4d 75 64 00 54 68 65 20 |shes!"..|Mud.The |
|00003730| 76 69 72 75 73 20 70 6c | 61 79 73 20 74 72 69 63 |virus pl|ays tric|
|00003740| 6b 73 20 77 69 74 68 20 | 74 68 65 20 73 63 72 65 |ks with |the scre|
|00003750| 65 6e 2e 20 43 6f 6e 74 | 61 69 6e 73 20 74 68 65 |en. Cont|ains the|
|00003760| 20 74 65 78 74 20 22 4d | 65 78 69 63 61 6e 20 4d | text "M|exican M|
|00003770| 75 64 20 28 63 29 31 39 | 39 32 20 4d 61 5a 22 20 |ud (c)19|92 MaZ" |
|00003780| 61 6e 64 20 22 2b 53 77 | 65 64 65 6e 2b 22 2e 00 |and "+Sw|eden+"..|
|00003790| 44 65 61 74 68 20 52 61 | 74 74 6c 65 00 54 68 65 |Death Ra|ttle.The|
|000037a0| 20 76 69 72 75 73 20 70 | 6c 61 79 73 20 74 72 69 | virus p|lays tri|
|000037b0| 63 6b 73 20 77 69 74 68 | 20 74 68 65 20 73 63 72 |cks with| the scr|
|000037c0| 65 65 6e 2e 20 43 6f 6e | 74 61 69 6e 73 20 74 68 |een. Con|tains th|
|000037d0| 65 20 74 65 78 74 20 22 | 44 45 41 54 48 20 52 41 |e text "|DEATH RA|
|000037e0| 54 54 4c 45 20 56 31 2e | 30 30 22 20 61 6e 64 20 |TTLE V1.|00" and |
|000037f0| 22 2b 53 2b 57 2b 45 2b | 44 2b 45 2b 4e 2b 22 2e |"+S+W+E+|D+E+N+".|
|00003800| 00 00 00 00 46 65 6c 6c | 6f 77 73 68 69 70 00 49 |....Fell|owship.I|
|00003810| 6e 66 65 63 74 65 64 20 | 70 72 6f 67 72 61 6d 73 |nfected |programs|
|00003820| 20 63 6f 6e 74 61 69 6e | 20 74 68 65 20 74 65 78 | contain| the tex|
|00003830| 74 20 22 54 68 69 73 20 | 6d 65 73 73 61 67 65 20 |t "This |message |
|00003840| 69 73 20 64 65 64 69 63 | 61 74 65 64 20 74 6f 20 |is dedic|ated to |
|00003850| 61 6c 6c 20 66 65 6c 6c | 6f 77 20 50 43 20 75 73 |all fell|ow PC us|
|00003860| 65 72 73 20 6f 6e 20 45 | 61 72 74 68 2e 2e 2e 22 |ers on E|arth..."|
|00003870| 00 00 00 00 4d 6f 6e 64 | 61 79 20 74 68 65 20 31 |....Mond|ay the 1|
|00003880| 73 74 00 57 68 65 6e 20 | 74 68 65 20 76 69 72 75 |st.When |the viru|
|00003890| 73 20 69 73 20 61 63 74 | 69 76 65 20 6f 6e 20 61 |s is act|ive on a|
|000038a0| 6e 79 20 4d 6f 6e 64 61 | 79 20 74 68 65 20 31 73 |ny Monda|y the 1s|
|000038b0| 74 2c 20 74 68 65 20 62 | 6f 6f 74 20 72 65 63 6f |t, the b|oot reco|
|000038c0| 72 64 20 6f 66 20 61 6e | 79 20 66 6c 6f 70 70 79 |rd of an|y floppy|
|000038d0| 20 64 69 73 6b 20 69 6e | 20 64 72 69 76 65 20 41 | disk in| drive A|
|000038e0| 3a 20 69 73 20 6f 76 65 | 72 77 72 69 74 74 65 6e |: is ove|rwritten|
|000038f0| 2e 20 43 6f 6e 74 61 69 | 6e 73 20 74 68 65 20 74 |. Contai|ns the t|
|00003900| 65 78 74 20 22 42 45 57 | 41 52 45 20 4d 45 20 2d |ext "BEW|ARE ME -|
|00003910| 20 30 2e 30 31 2c 20 43 | 6f 70 72 20 28 63 29 20 | 0.01, C|opr (c) |
|00003920| 44 61 72 6b 47 72 61 76 | 65 53 6f 66 74 20 2d 20 |DarkGrav|eSoft - |
|00003930| 4d 6f 73 63 6f 77 20 31 | 39 39 30 22 2e 00 00 00 |Moscow 1|990"....|
|00003940| 00 54 68 65 20 66 6f 6c | 6c 6f 77 69 6e 67 20 6d |.The fol|lowing m|
|00003950| 65 73 73 61 67 65 73 20 | 61 70 70 65 61 72 3a 20 |essages |appear: |
|00003960| 22 41 74 20 6c 61 73 74 | 20 2e 2e 2e 20 41 4c 49 |"At last| ... ALI|
|00003970| 56 45 21 21 21 21 21 22 | 20 22 49 20 67 75 65 73 |VE!!!!!"| "I gues|
|00003980| 73 20 79 6f 75 72 20 63 | 6f 6d 70 75 74 65 72 20 |s your c|omputer |
|00003990| 69 73 20 69 6e 66 65 63 | 74 65 64 20 62 79 20 74 |is infec|ted by t|
|000039a0| 68 65 20 42 69 67 20 4a | 6f 6b 65 20 56 69 72 75 |he Big J|oke Viru|
|000039b0| 73 2e 2e 2e 22 00 00 00 | 4e 65 64 00 57 68 65 6e |s..."...|Ned.When|
|000039c0| 20 61 6e 20 69 6e 66 65 | 63 74 65 64 20 43 4f 4d | an infe|cted COM|
|000039d0| 4d 41 4e 44 2e 43 4f 4d | 20 72 75 6e 73 2c 20 74 |MAND.COM| runs, t|
|000039e0| 68 65 20 76 69 72 75 73 | 20 72 65 62 6f 6f 74 73 |he virus| reboots|
|000039f0| 20 79 6f 75 72 20 63 6f | 6d 70 75 74 65 72 20 63 | your co|mputer c|
|00003a00| 6f 6e 74 69 6e 75 6f 75 | 73 6c 79 2e 20 43 6f 6e |ontinuou|sly. Con|
|00003a10| 74 61 69 6e 73 20 74 68 | 65 20 74 65 78 74 20 22 |tains th|e text "|
|00003a20| 4b 4d 49 54 2d 4e 42 20 | 44 61 74 65 20 31 32 2f |KMIT-NB |Date 12/|
|00003a30| 32 38 2f 31 39 39 30 20 | 42 49 4f 53 22 2e 00 00 |28/1990 |BIOS"...|
|00003a40| 00 49 6e 66 65 63 74 65 | 64 20 70 72 6f 67 72 61 |.Infecte|d progra|
|00003a50| 6d 73 20 63 6f 6e 74 61 | 69 6e 20 74 68 65 20 74 |ms conta|in the t|
|00003a60| 65 78 74 20 22 42 49 54 | 20 41 44 44 49 43 54 2e |ext "BIT| ADDICT.|
|00003a70| 2e 2e 22 00 42 6c 6a 65 | 63 00 54 68 65 20 76 69 |..".Blje|c.The vi|
|00003a80| 72 75 73 20 63 68 61 6e | 67 65 73 20 61 6e 20 69 |rus chan|ges an i|
|00003a90| 6e 66 65 63 74 65 64 20 | 70 72 6f 67 72 61 6d 27 |nfected |program'|
|00003aa0| 73 20 64 61 74 65 20 61 | 6e 64 20 74 69 6d 65 20 |s date a|nd time |
|00003ab0| 73 74 61 6d 70 2e 20 54 | 68 69 73 20 76 69 72 75 |stamp. T|his viru|
|00003ac0| 73 20 69 6e 66 65 63 74 | 73 20 62 79 20 61 64 64 |s infect|s by add|
|00003ad0| 69 6e 67 20 69 74 73 65 | 6c 66 20 74 6f 20 74 68 |ing itse|lf to th|
|00003ae0| 65 20 73 74 61 72 74 20 | 6f 66 20 74 68 65 20 68 |e start |of the h|
|00003af0| 6f 73 74 20 66 69 6c 65 | 2e 20 54 68 69 73 20 66 |ost file|. This f|
|00003b00| 61 6d 69 6c 79 20 6f 66 | 20 76 69 72 75 73 65 73 |amily of| viruses|
|00003b10| 20 6f 66 74 65 6e 20 68 | 61 6e 67 20 74 68 65 20 | often h|ang the |
|00003b20| 69 6e 66 65 63 74 65 64 | 20 6d 61 63 68 69 6e 65 |infected| machine|
|00003b30| 2e 00 00 00 44 69 67 69 | 74 61 6c 20 46 2f 58 00 |....Digi|tal F/X.|
|00003b40| 54 68 65 20 76 69 72 75 | 73 20 63 68 61 6e 67 65 |The viru|s change|
|00003b50| 73 20 61 6e 20 69 6e 66 | 65 63 74 65 64 20 70 72 |s an inf|ected pr|
|00003b60| 6f 67 72 61 6d 27 73 20 | 64 61 74 65 20 61 6e 64 |ogram's |date and|
|00003b70| 20 74 69 6d 65 20 73 74 | 61 6d 70 2e 20 43 6f 6e | time st|amp. Con|
|00003b80| 74 61 69 6e 73 20 74 68 | 65 20 20 74 65 78 74 20 |tains th|e  text |
|00003b90| 22 44 69 67 69 74 61 6c | 20 46 2f 58 22 20 61 74 |"Digital| F/X" at|
|00003ba0| 20 74 68 65 20 62 65 67 | 69 6e 6e 69 6e 67 20 6f | the beg|inning o|
|00003bb0| 66 20 74 68 65 20 76 69 | 72 75 73 20 63 6f 64 65 |f the vi|rus code|
|00003bc0| 2e 20 57 68 65 6e 20 74 | 68 65 20 76 69 72 75 73 |. When t|he virus|
|00003bd0| 20 20 72 75 6e 73 2c 20 | 74 68 69 73 20 74 65 78 |  runs, |this tex|
|00003be0| 74 20 69 73 20 65 78 65 | 63 75 74 65 64 20 61 73 |t is exe|cuted as|
|00003bf0| 20 63 6f 64 65 20 61 6e | 64 20 77 69 6c 6c 20 68 | code an|d will h|
|00003c00| 61 6e 67 20 70 72 65 2d | 38 30 32 38 36 20 63 6f |ang pre-|80286 co|
|00003c10| 6d 70 75 74 65 72 73 2e | 00 00 00 00 53 61 64 00 |mputers.|....Sad.|
|00003c20| 54 68 65 20 76 69 72 75 | 73 20 63 68 61 6e 67 65 |The viru|s change|
|00003c30| 73 20 61 6e 20 69 6e 66 | 65 63 74 65 64 20 70 72 |s an inf|ected pr|
|00003c40| 6f 67 72 61 6d 27 73 20 | 64 61 74 65 20 61 6e 64 |ogram's |date and|
|00003c50| 20 74 69 6d 65 20 73 74 | 61 6d 70 2e 20 49 66 20 | time st|amp. If |
|00003c60| 61 63 74 69 76 65 20 69 | 6e 20 53 65 70 74 65 6d |active i|n Septem|
|00003c70| 62 65 72 20 74 68 65 20 | 76 69 72 75 73 20 64 65 |ber the |virus de|
|00003c80| 73 74 72 6f 79 73 20 64 | 61 74 61 20 61 6e 64 20 |stroys d|ata and |
|00003c90| 70 72 69 6e 74 73 20 74 | 68 65 20 74 65 78 74 20 |prints t|he text |
|00003ca0| 20 22 53 61 64 20 76 69 | 72 75 73 20 2d 20 32 34 | "Sad vi|rus - 24|
|00003cb0| 2f 38 2f 39 31 22 2e 00 | 42 6c 61 63 6b 20 4d 6f |/8/91"..|Black Mo|
|00003cc0| 6e 64 61 79 20 42 6f 72 | 64 65 72 6c 69 6e 65 2c |nday Bor|derline,|
|00003cd0| 20 4d 6f 6e 64 61 79 00 | 49 6e 66 65 63 74 65 64 | Monday.|Infected|
|00003ce0| 20 70 72 6f 67 72 61 6d | 73 20 63 6f 6e 74 61 69 | program|s contai|
|00003cf0| 6e 20 74 68 65 20 74 65 | 78 74 20 22 42 6c 61 63 |n the te|xt "Blac|
|00003d00| 6b 20 4d 6f 6e 64 61 79 | 20 32 2f 33 2f 39 4b 56 |k Monday| 2/3/9KV|
|00003d10| 20 4b 4c 20 4d 41 4c 22 | 2e 00 00 00 00 54 68 65 | KL MAL"|.....The|
|00003d20| 20 76 69 72 75 73 20 64 | 65 73 74 72 6f 79 73 20 | virus d|estroys |
|00003d30| 43 4f 4d 20 61 6e 64 20 | 45 58 45 20 70 72 6f 67 |COM and |EXE prog|
|00003d40| 72 61 6d 73 20 62 79 20 | 6f 76 65 72 77 72 69 74 |rams by |overwrit|
|00003d50| 69 6e 67 20 74 68 65 6d | 2e 20 50 72 69 6e 74 73 |ing them|. Prints|
|00003d60| 20 74 68 65 20 6d 65 73 | 73 61 67 65 20 22 54 68 | the mes|sage "Th|
|00003d70| 65 20 45 74 65 72 6e 61 | 6c 20 42 6c 61 7a 65 20 |e Eterna|l Blaze |
|00003d80| 56 69 72 75 73 20 68 61 | 73 20 62 65 65 6e 20 75 |Virus ha|s been u|
|00003d90| 6e 6c 65 61 73 68 65 64 | 2e 2e 2e 42 65 77 61 72 |nleashed|...Bewar|
|00003da0| 65 21 22 00 42 6c 6f 6f | 64 20 32 00 54 68 65 20 |e!".Bloo|d 2.The |
|00003db0| 6d 65 73 73 61 67 65 20 | 22 46 69 6c 65 20 69 6e |message |"File in|
|00003dc0| 66 65 63 74 65 64 20 62 | 79 20 42 4c 4f 4f 44 20 |fected b|y BLOOD |
|00003dd0| 56 49 52 55 53 20 76 65 | 72 73 69 6f 6e 20 31 2e |VIRUS ve|rsion 1.|
|00003de0| 32 30 22 20 61 70 70 65 | 61 72 73 2e 00 00 00 00 |20" appe|ars.....|
|00003df0| 54 72 69 76 69 61 6c 2d | 42 6c 6f 6f 64 20 4c 75 |Trivial-|Blood Lu|
|00003e00| 73 74 00 49 6e 66 65 63 | 74 65 64 20 70 72 6f 67 |st.Infec|ted prog|
|00003e10| 72 61 6d 73 20 63 6f 6e | 74 61 69 6e 20 74 68 65 |rams con|tain the|
|00003e20| 20 74 65 78 74 20 22 48 | 69 21 20 54 68 69 73 20 | text "H|i! This |
|00003e30| 69 73 20 74 68 65 20 76 | 69 72 75 73 20 42 6c 6f |is the v|irus Blo|
|00003e40| 6f 64 6c 75 73 74 20 73 | 74 72 69 6b 69 6e 67 21 |odlust s|triking!|
|00003e50| 2e 2e 2e 22 00 00 00 00 | 56 2d 35 37 39 32 2c 20 |..."....|V-5792, |
|00003e60| 35 37 39 32 2c 20 50 61 | 00 54 68 65 20 76 69 72 |5792, Pa|.The vir|
|00003e70| 75 73 20 69 6e 66 65 63 | 74 73 20 74 68 72 65 65 |us infec|ts three|
|00003e80| 20 45 58 45 20 70 72 6f | 67 72 61 6d 73 2c 20 64 | EXE pro|grams, d|
|00003e90| 69 73 70 6c 61 79 73 20 | 74 68 65 20 65 72 72 6f |isplays |the erro|
|00003ea0| 72 20 6d 65 73 73 61 67 | 65 20 22 45 72 72 6f 72 |r messag|e "Error|
|00003eb0| 20 69 6e 20 2a 2e 45 58 | 45 20 66 69 6c 65 22 2c | in *.EX|E file",|
|00003ec0| 20 61 6e 64 20 74 68 65 | 6e 20 72 65 74 75 72 6e | and the|n return|
|00003ed0| 73 20 74 6f 20 74 68 65 | 20 44 4f 53 20 70 72 6f |s to the| DOS pro|
|00003ee0| 6d 70 74 2e 20 57 68 65 | 6e 20 69 6e 66 65 63 74 |mpt. Whe|n infect|
|00003ef0| 65 64 20 70 72 6f 67 72 | 61 6d 20 69 73 20 72 75 |ed progr|am is ru|
|00003f00| 6e 6e 69 6e 67 2c 20 74 | 68 65 20 6d 65 73 73 61 |nning, t|he messa|
|00003f10| 67 65 20 22 50 61 2c 70 | 61 20 73 6c 6f 64 6b 69 |ge "Pa,p|a slodki|
|00003f20| 20 62 6f 62 61 73 6b 75 | 2e 2e 2e 22 20 61 70 70 | bobasku|..." app|
|00003f30| 65 61 72 73 2e 00 00 00 | 4d 61 6c 61 6e 65 73 69 |ears....|Malanesi|
|00003f40| 61 6e 20 42 6f 6d 62 65 | 72 00 57 68 65 6e 20 74 |an Bombe|r.When t|
|00003f50| 68 65 20 76 69 72 75 73 | 20 69 73 20 61 63 74 69 |he virus| is acti|
|00003f60| 76 65 20 6f 6e 20 41 75 | 67 75 73 74 20 33 31 73 |ve on Au|gust 31s|
|00003f70| 74 2c 20 61 20 62 65 65 | 70 20 69 73 20 65 6d 69 |t, a bee|p is emi|
|00003f80| 74 74 65 64 20 61 6e 64 | 20 74 68 65 20 6d 65 73 |tted and| the mes|
|00003f90| 73 61 67 65 20 22 21 20 | 49 20 41 4d 20 53 54 45 |sage "! |I AM STE|
|00003fa0| 41 4c 54 48 20 42 4f 4d | 42 45 52 20 21 22 20 61 |ALTH BOM|BER !" a|
|00003fb0| 70 70 65 61 72 73 2e 00 | 00 49 6e 66 65 63 74 65 |ppears..|.Infecte|
|00003fc0| 64 20 70 72 6f 67 72 61 | 6d 73 27 20 73 69 7a 65 |d progra|ms' size|
|00003fd0| 20 69 6e 63 72 65 61 73 | 65 73 20 62 65 74 77 65 | increas|es betwe|
|00003fe0| 65 6e 20 33 34 30 20 61 | 6e 64 20 33 35 30 20 62 |en 340 a|nd 350 b|
|00003ff0| 79 74 65 73 2e 00 00 00 | 42 46 44 00 57 68 65 6e |ytes....|BFD.When|
|00004000| 20 61 63 74 69 76 65 2c | 20 74 68 65 20 76 69 72 | active,| the vir|
|00004010| 75 73 20 6f 76 65 72 77 | 72 69 74 65 73 20 74 68 |us overw|rites th|
|00004020| 65 20 62 6f 6f 74 20 72 | 65 63 6f 72 64 20 6f 66 |e boot r|ecord of|
|00004030| 20 66 6c 6f 70 70 79 20 | 64 69 73 6b 73 2e 20 54 | floppy |disks. T|
|00004040| 68 65 20 76 69 72 75 73 | 20 6c 6f 63 61 74 65 73 |he virus| locates|
|00004050| 20 69 74 73 65 6c 66 20 | 69 6e 20 74 68 65 20 75 | itself |in the u|
|00004060| 6e 75 73 65 64 20 68 65 | 61 64 65 72 20 73 70 61 |nused he|ader spa|
|00004070| 63 65 20 6f 66 20 45 58 | 45 20 70 72 6f 67 72 61 |ce of EX|E progra|
|00004080| 6d 73 2e 00 00 54 68 65 | 20 76 69 72 75 73 20 73 |ms...The| virus s|
|00004090| 74 61 72 74 73 20 64 65 | 6c 65 74 69 6e 67 20 45 |tarts de|leting E|
|000040a0| 58 45 20 70 72 6f 67 72 | 61 6d 73 20 77 68 65 6e |XE progr|ams when|
|000040b0| 20 69 74 20 72 75 6e 73 | 20 6f 75 74 20 6f 66 20 | it runs| out of |
|000040c0| 43 4f 4d 20 70 72 6f 67 | 72 61 6d 73 20 74 6f 20 |COM prog|rams to |
|000040d0| 69 6e 66 65 63 74 2e 00 | 57 61 72 72 69 65 72 00 |infect..|Warrier.|
|000040e0| 41 20 63 6f 6c 64 20 62 | 6f 6f 74 20 6d 61 79 20 |A cold b|oot may |
|000040f0| 62 65 20 72 65 71 75 69 | 72 65 64 20 61 66 74 65 |be requi|red afte|
|00004100| 72 20 72 75 6e 6e 69 6e | 67 20 61 6e 20 69 6e 66 |r runnin|g an inf|
|00004110| 65 63 74 65 64 20 70 72 | 6f 67 72 61 6d 2e 00 00 |ected pr|ogram...|
|00004120| 53 68 69 65 6c 64 00 54 | 68 65 20 6d 65 73 73 61 |Shield.T|he messa|
|00004130| 67 65 20 22 49 20 67 72 | 65 65 74 20 79 6f 75 20 |ge "I gr|eet you |
|00004140| 75 73 65 72 2e 20 49 20 | 61 6d 20 43 4f 4d 2d 43 |user. I |am COM-C|
|00004150| 48 49 4c 44 2e 2e 2e 22 | 20 73 6f 6d 65 74 69 6d |HILD..."| sometim|
|00004160| 65 73 20 61 70 70 65 61 | 72 73 2e 00 00 57 68 65 |es appea|rs...Whe|
|00004170| 6e 20 61 63 74 69 76 65 | 20 6f 6e 20 46 72 69 64 |n active| on Frid|
|00004180| 61 79 73 20 62 65 66 6f | 72 65 20 33 3a 30 30 20 |ays befo|re 3:00 |
|00004190| 50 2e 4d 2e 2c 20 74 68 | 65 20 76 69 72 75 73 20 |P.M., th|e virus |
|000041a0| 63 68 61 6e 67 65 73 20 | 66 69 6c 65 73 20 74 6f |changes |files to|
|000041b0| 20 72 65 61 64 2d 6f 6e | 6c 79 2e 20 43 6f 6e 74 | read-on|ly. Cont|
|000041c0| 61 69 6e 73 20 74 68 65 | 20 74 65 78 74 20 22 42 |ains the| text "B|
|000041d0| 52 59 41 4e 53 4b 20 31 | 39 39 32 2c 20 42 49 54 |RYANSK 1|992, BIT|
|000041e0| 45 20 30 2e 30 31 20 28 | 43 29 22 2e 00 00 00 00 |E 0.01 (|C)".....|
|000041f0| 00 54 68 65 20 76 69 72 | 75 73 20 64 61 6d 61 67 |.The vir|us damag|
|00004200| 65 73 20 69 6e 66 65 63 | 74 65 64 20 70 72 6f 67 |es infec|ted prog|
|00004210| 72 61 6d 73 20 62 79 20 | 6f 76 65 72 77 72 69 74 |rams by |overwrit|
|00004220| 69 6e 67 20 74 68 65 6d | 20 77 69 74 68 20 76 69 |ing them| with vi|
|00004230| 72 61 6c 20 63 6f 64 65 | 2e 20 43 6f 6e 74 61 69 |ral code|. Contai|
|00004240| 6e 73 20 74 68 65 20 74 | 65 78 74 20 27 46 4c 4f |ns the t|ext 'FLO|
|00004250| 57 20 4c 49 4b 45 20 41 | 20 52 49 56 45 52 20 2d |W LIKE A| RIVER -|
|00004260| 20 53 54 52 49 4b 45 20 | 4c 49 4b 45 20 41 20 54 | STRIKE |LIKE A T|
|00004270| 48 55 4e 44 45 52 22 2e | 00 00 00 00 54 72 61 76 |HUNDER".|....Trav|
|00004280| 65 6c 6c 65 72 00 49 6e | 66 65 63 74 65 64 20 70 |eller.In|fected p|
|00004290| 72 6f 67 72 61 6d 73 20 | 63 6f 6e 74 61 69 6e 20 |rograms |contain |
|000042a0| 74 68 65 20 74 65 78 74 | 20 22 54 72 61 76 65 6c |the text| "Travel|
|000042b0| 6c 65 72 20 28 43 29 20 | 42 55 50 54 20 31 39 39 |ler (C) |BUPT 199|
|000042c0| 31 2e 34 2e 2e 2e 22 00 | 00 42 75 72 67 65 72 20 |1.4...".|.Burger |
|000042d0| 69 73 20 61 20 66 61 6d | 69 6c 79 20 6f 66 20 6f |is a fam|ily of o|
|000042e0| 76 65 72 77 72 69 74 69 | 6e 67 20 76 69 72 75 73 |verwriti|ng virus|
|000042f0| 65 73 20 62 61 73 65 64 | 20 6f 6e 20 73 6f 75 72 |es based| on sour|
|00004300| 63 65 20 63 6f 64 65 20 | 70 75 62 6c 69 73 68 65 |ce code |publishe|
|00004310| 64 20 69 6e 20 61 20 62 | 6f 6f 6b 2e 00 00 00 00 |d in a b|ook.....|
|00004320| 00 49 6e 66 65 63 74 65 | 64 20 70 72 6f 67 72 61 |.Infecte|d progra|
|00004330| 6d 73 20 63 6f 6e 74 61 | 69 6e 20 74 68 65 20 74 |ms conta|in the t|
|00004340| 65 78 74 20 22 47 53 2f | 30 32 22 2e 00 00 00 00 |ext "GS/|02".....|
|00004350| 00 49 6e 66 65 63 74 65 | 64 20 70 72 6f 67 72 61 |.Infecte|d progra|
|00004360| 6d 73 27 20 73 69 7a 65 | 20 69 6e 63 72 65 61 73 |ms' size| increas|
|00004370| 65 73 20 62 79 20 39 32 | 37 20 62 79 74 65 73 2e |es by 92|7 bytes.|
|00004380| 20 54 68 65 20 76 69 72 | 75 73 20 75 73 65 73 20 | The vir|us uses |
|00004390| 74 68 65 20 20 65 6e 63 | 72 79 70 74 69 6f 6e 20 |the  enc|ryption |
|000043a0| 73 79 73 74 65 6d 20 66 | 72 6f 6d 20 74 68 65 20 |system f|rom the |
|000043b0| 43 61 73 63 61 64 65 20 | 76 69 72 75 73 20 66 61 |Cascade |virus fa|
|000043c0| 6d 69 6c 79 2c 20 62 75 | 74 20 69 73 20 69 6e 74 |mily, bu|t is int|
|000043d0| 65 72 6e 61 6c 6c 79 20 | 71 75 69 74 65 20 64 69 |ernally |quite di|
|000043e0| 66 66 65 72 65 6e 74 2e | 00 00 00 00 00 54 68 65 |fferent.|.....The|
|000043f0| 20 76 69 72 75 73 20 6f | 76 65 72 77 72 69 74 65 | virus o|verwrite|
|00004400| 73 20 61 20 64 69 73 6b | 27 73 20 62 6f 6f 74 20 |s a disk|'s boot |
|00004410| 72 65 63 6f 72 64 20 69 | 6e 20 61 6e 20 61 74 74 |record i|n an att|
|00004420| 65 6d 70 74 20 74 6f 20 | 65 6c 69 6d 69 6e 61 74 |empt to |eliminat|
|00004430| 65 20 62 6f 6f 74 20 73 | 65 63 74 6f 72 20 76 69 |e boot s|ector vi|
|00004440| 72 75 73 65 73 2e 20 49 | 6e 66 65 63 74 65 64 20 |ruses. I|nfected |
|00004450| 70 72 6f 67 72 61 6d 73 | 20 63 6f 6e 74 61 69 6e |programs| contain|
|00004460| 20 74 68 65 20 74 65 78 | 74 20 22 56 69 72 75 73 | the tex|t "Virus|
|00004470| 20 45 73 20 65 6e 20 6d | 65 6d 6f 72 69 61 21 22 | Es en m|emoria!"|
|00004480| 2e 00 00 00 00 57 68 65 | 6e 20 74 68 65 20 76 69 |.....Whe|n the vi|
|00004490| 72 75 73 20 69 73 20 61 | 63 74 69 76 65 20 69 6e |rus is a|ctive in|
|000044a0| 20 4e 6f 76 65 6d 62 65 | 72 20 6f 72 20 44 65 63 | Novembe|r or Dec|
|000044b0| 65 6d 62 65 72 20 61 66 | 74 65 72 20 74 68 65 20 |ember af|ter the |
|000044c0| 31 34 74 68 2c 20 74 68 | 65 20 76 69 72 75 73 20 |14th, th|e virus |
|000044d0| 68 61 6c 74 73 20 74 68 | 65 20 63 6f 6d 70 75 74 |halts th|e comput|
|000044e0| 65 72 2e 20 43 6f 6e 74 | 61 69 6e 73 20 74 68 65 |er. Cont|ains the|
|000044f0| 20 74 65 78 74 20 22 43 | 4f 4d 4d 41 4e 44 2e 43 | text "C|OMMAND.C|
|00004500| 4f 4d 22 2e 00 00 00 00 | 42 6c 61 63 6b 4a 61 63 |OM".....|BlackJac|
|00004510| 6b 2c 20 46 61 6c 6c 69 | 6e 67 20 4c 65 74 74 65 |k, Falli|ng Lette|
|00004520| 72 73 00 57 68 65 6e 20 | 74 68 65 20 76 69 72 75 |rs.When |the viru|
|00004530| 73 20 69 73 20 61 63 74 | 69 76 65 20 66 72 6f 6d |s is act|ive from|
|00004540| 20 53 65 70 74 65 6d 62 | 65 72 20 74 68 72 6f 75 | Septemb|er throu|
|00004550| 67 68 20 44 65 63 65 6d | 62 65 72 20 6f 66 20 74 |gh Decem|ber of t|
|00004560| 68 65 20 79 65 61 72 73 | 20 31 39 38 30 20 2d 20 |he years| 1980 - |
|00004570| 31 39 38 38 2c 20 74 68 | 65 20 63 68 61 72 61 63 |1988, th|e charac|
|00004580| 74 65 72 73 20 64 69 73 | 70 6c 61 79 65 64 20 66 |ters dis|played f|
|00004590| 61 6c 6c 20 69 6e 74 6f | 20 61 20 70 69 6c 65 20 |all into| a pile |
|000045a0| 61 74 20 74 68 65 20 62 | 6f 74 74 6f 6d 20 6f 66 |at the b|ottom of|
|000045b0| 20 74 68 65 20 73 63 72 | 65 65 6e 2e 00 00 00 00 | the scr|een.....|
|000045c0| 31 37 59 34 2c 20 4a 6f | 2d 4a 6f 2c 20 59 61 70 |17Y4, Jo|-Jo, Yap|
|000045d0| 00 54 68 65 20 6f 72 69 | 67 69 6e 61 6c 20 31 37 |.The ori|ginal 17|
|000045e0| 30 31 20 61 6e 64 20 31 | 37 30 34 20 76 65 72 73 |01 and 1|704 vers|
|000045f0| 69 6f 6e 73 20 6f 66 20 | 74 68 69 73 20 76 69 72 |ions of |this vir|
|00004600| 75 73 20 61 72 65 20 77 | 69 64 65 73 70 72 65 61 |us are w|idesprea|
|00004610| 64 2c 20 74 68 65 72 65 | 66 6f 72 65 20 6d 61 6e |d, there|fore man|
|00004620| 79 20 6d 69 6e 6f 72 20 | 76 61 72 69 61 6e 74 73 |y minor |variants|
|00004630| 20 65 78 69 73 74 2e 20 | 54 68 65 79 20 64 69 66 | exist. |They dif|
|00004640| 66 65 72 20 6c 69 74 74 | 6c 65 20 66 72 6f 6d 20 |fer litt|le from |
|00004650| 74 68 65 20 6f 72 69 67 | 69 6e 61 6c 73 2e 00 00 |the orig|inals...|
|00004660| 46 41 54 20 43 68 61 6e | 63 65 00 57 68 65 6e 20 |FAT Chan|ce.When |
|00004670| 61 63 74 69 76 65 20 6f | 6e 20 4a 61 6e 75 61 72 |active o|n Januar|
|00004680| 79 20 31 35 2c 20 41 70 | 72 69 6c 20 31 35 2c 20 |y 15, Ap|ril 15, |
|00004690| 61 6e 64 20 41 75 67 75 | 73 74 20 31 35 2c 20 74 |and Augu|st 15, t|
|000046a0| 68 65 20 76 69 72 75 73 | 20 70 6c 61 79 73 20 61 |he virus| plays a|
|000046b0| 20 73 6c 6f 74 20 6d 61 | 63 68 69 6e 65 20 67 61 | slot ma|chine ga|
|000046c0| 6d 65 20 61 6e 64 20 74 | 68 65 20 6d 65 73 73 61 |me and t|he messa|
|000046d0| 67 65 20 22 43 41 53 49 | 4e 4f 20 44 45 20 4d 41 |ge "CASI|NO DE MA|
|000046e0| 4c 54 45 20 4a 41 43 4b | 50 4f 54 2e 2e 2e 22 20 |LTE JACK|POT..." |
|000046f0| 61 70 70 65 61 72 73 2e | 20 49 66 20 79 6f 75 20 |appears.| If you |
|00004700| 6c 6f 73 65 2c 20 79 6f | 75 72 20 66 69 6c 65 20 |lose, yo|ur file |
|00004710| 61 6c 6c 6f 63 61 74 69 | 6f 6e 20 74 61 62 6c 65 |allocati|on table|
|00004720| 20 69 73 20 6c 6f 73 74 | 2e 00 00 00 00 43 6f 6e | is lost|.....Con|
|00004730| 74 61 69 6e 73 20 74 68 | 65 20 74 65 78 74 20 22 |tains th|e text "|
|00004740| 43 72 79 20 48 61 76 6f | 63 2c 20 61 6e 64 20 6c |Cry Havo|c, and l|
|00004750| 65 74 20 73 6c 69 70 20 | 74 68 65 20 44 6f 67 73 |et slip |the Dogs|
|00004760| 20 6f 66 20 57 61 72 21 | 20 5b 43 61 74 70 68 69 | of War!| [Catphi|
|00004770| 73 68 5d 20 46 69 72 73 | 74 53 74 72 69 6b 65 20 |sh] Firs|tStrike |
|00004780| 4b 72 61 66 74 21 22 00 | 00 49 6e 66 65 63 74 65 |Kraft!".|.Infecte|
|00004790| 64 20 70 72 6f 67 72 61 | 6d 73 20 63 6f 6e 74 61 |d progra|ms conta|
|000047a0| 69 6e 20 74 68 65 20 74 | 65 78 74 20 22 45 58 45 |in the t|ext "EXE|
|000047b0| 43 4f 4d 43 3a 5c 43 4f | 4d 4d 41 4e 44 2e 43 4f |COMC:\CO|MMAND.CO|
|000047c0| 4d 20 43 4c 45 41 4e 22 | 2e 00 00 00 00 4e 6f 20 |M CLEAN"|.....No |
|000047d0| 69 6e 66 6f 72 6d 61 74 | 69 6f 6e 20 61 76 61 69 |informat|ion avai|
|000047e0| 6c 61 62 6c 65 2e 00 00 | 00 49 6e 66 65 63 74 65 |lable...|.Infecte|
|000047f0| 64 20 70 72 6f 67 72 61 | 6d 73 20 63 6f 6e 74 61 |d progra|ms conta|
|00004800| 69 6e 20 74 68 65 20 74 | 65 78 74 20 22 2a 2a 2a |in the t|ext "***|
|00004810| 43 43 43 50 2d 37 35 21 | 2a 2a 2a 22 20 61 6e 64 |CCCP-75!|***" and|
|00004820| 20 22 44 6f 6f 6d 73 44 | 61 79 22 2e 00 00 00 00 | "DoomsD|ay".....|
|00004830| 00 57 68 65 6e 20 74 68 | 65 20 76 69 72 75 73 20 |.When th|e virus |
|00004840| 69 73 20 61 63 74 69 76 | 65 2c 20 61 20 70 69 63 |is activ|e, a pic|
|00004850| 74 75 72 65 20 6f 66 20 | 61 20 64 6f 67 27 73 20 |ture of |a dog's |
|00004860| 68 65 61 64 20 6d 61 79 | 20 62 65 20 64 69 73 70 |head may| be disp|
|00004870| 6c 61 79 65 64 20 69 6e | 20 74 68 65 20 75 70 70 |layed in| the upp|
|00004880| 65 72 20 6c 65 66 74 20 | 68 61 6c 66 20 6f 66 20 |er left |half of |
|00004890| 74 68 65 20 73 63 72 65 | 65 6e 2c 20 77 68 69 63 |the scre|en, whic|
|000048a0| 68 20 65 61 74 73 20 69 | 74 73 20 77 61 79 20 74 |h eats i|ts way t|
|000048b0| 6f 20 74 68 65 20 72 69 | 67 68 74 2e 00 00 00 00 |o the ri|ght.....|
|000048c0| 00 54 68 65 20 76 69 72 | 75 73 20 6d 61 79 20 64 |.The vir|us may d|
|000048d0| 69 73 61 62 6c 65 20 65 | 78 74 65 6e 64 65 64 20 |isable e|xtended |
|000048e0| 6d 65 6d 6f 72 79 2c 20 | 70 72 69 6e 74 20 74 68 |memory, |print th|
|000048f0| 65 20 6d 65 73 73 61 67 | 65 20 22 53 6f 72 72 79 |e messag|e "Sorry|
|00004900| 2e 20 49 20 6e 65 65 64 | 20 4d 48 7a 20 74 6f 64 |. I need| MHz tod|
|00004910| 61 79 21 20 28 43 46 53 | 4b 29 22 20 61 6e 64 20 |ay! (CFS|K)" and |
|00004920| 68 61 6e 67 20 74 68 65 | 20 6d 61 63 68 69 6e 65 |hang the| machine|
|00004930| 2e 00 00 00 00 54 68 65 | 20 76 69 72 75 73 20 63 |.....The| virus c|
|00004940| 68 61 6e 67 65 73 20 61 | 6e 20 69 6e 66 65 63 74 |hanges a|n infect|
|00004950| 65 64 20 70 72 6f 67 72 | 61 6d 27 73 20 64 61 74 |ed progr|am's dat|
|00004960| 65 20 61 6e 64 20 74 69 | 6d 65 20 73 74 61 6d 70 |e and ti|me stamp|
|00004970| 20 74 6f 20 30 30 2d 30 | 30 2d 38 30 20 30 30 3a | to 00-0|0-80 00:|
|00004980| 30 30 2e 20 49 74 20 6d | 61 79 20 70 72 69 6e 74 |00. It m|ay print|
|00004990| 20 61 20 70 69 63 74 75 | 72 65 20 6f 66 20 61 20 | a pictu|re of a |
|000049a0| 63 61 72 74 6f 6f 6e 20 | 63 68 61 72 61 63 74 65 |cartoon |characte|
|000049b0| 72 20 70 65 65 72 69 6e | 67 20 6f 76 65 72 20 61 |r peerin|g over a|
|000049c0| 20 77 61 6c 6c 20 77 69 | 74 68 20 74 68 65 20 74 | wall wi|th the t|
|000049d0| 65 78 74 20 22 57 4f 54 | 21 21 20 4e 6f 20 41 6e |ext "WOT|!! No An|
|000049e0| 74 69 20 2d 20 56 69 72 | 75 73 20 53 6f 66 74 77 |ti - Vir|us Softw|
|000049f0| 61 72 65 2e 2e 2e 22 00 | 46 61 75 73 74 2c 20 53 |are...".|Faust, S|
|00004a00| 70 79 65 72 00 49 6e 66 | 65 63 74 65 64 20 62 6f |pyer.Inf|ected bo|
|00004a10| 6f 74 20 72 65 63 6f 72 | 64 73 20 63 6f 6e 74 61 |ot recor|ds conta|
|00004a20| 69 6e 20 74 68 65 20 74 | 65 78 74 20 22 57 65 6c |in the t|ext "Wel|
|00004a30| 63 6f 6d 65 20 74 6f 20 | 74 68 65 20 4e 65 77 20 |come to |the New |
|00004a40| 44 75 6e 67 65 6f 6e 22 | 2c 20 22 43 68 61 6f 73 |Dungeon"|, "Chaos|
|00004a50| 22 2c 20 61 6e 64 20 22 | 4c 65 74 7a 20 62 65 20 |", and "|Letz be |
|00004a60| 63 6f 6f 6c 20 67 75 79 | 73 22 2e 00 00 49 6e 66 |cool guy|s"...Inf|
|00004a70| 65 63 74 65 64 20 70 72 | 6f 67 72 61 6d 73 20 63 |ected pr|ograms c|
|00004a80| 6f 6e 74 61 69 6e 20 74 | 68 65 20 74 65 78 74 20 |ontain t|he text |
|00004a90| 22 43 4f 4d 45 58 45 53 | 59 53 42 41 54 20 43 68 |"COMEXES|YSBAT Ch|
|00004aa0| 43 43 22 2e 00 00 00 00 | 43 68 65 63 6b 73 75 6d |CC".....|Checksum|
|00004ab0| 20 31 2e 30 30 2c 20 43 | 6b 53 75 6d 00 41 20 63 | 1.00, C|kSum.A c|
|00004ac0| 6f 6c 64 20 62 6f 6f 74 | 20 6d 61 79 20 62 65 20 |old boot| may be |
|00004ad0| 72 65 71 75 69 72 65 64 | 20 61 66 74 65 72 20 72 |required| after r|
|00004ae0| 75 6e 6e 69 6e 67 20 61 | 6e 20 69 6e 66 65 63 74 |unning a|n infect|
|00004af0| 65 64 20 70 72 6f 67 72 | 61 6d 2e 00 00 46 69 6c |ed progr|am...Fil|
|00004b00| 65 73 20 77 69 74 68 20 | 43 4f 4d 20 65 78 74 65 |es with |COM exte|
|00004b10| 6e 73 69 6f 6e 73 20 61 | 72 65 20 69 6e 66 65 63 |nsions a|re infec|
|00004b20| 74 65 64 20 77 68 65 6e | 20 74 68 65 79 20 61 72 |ted when| they ar|
|00004b30| 65 20 63 6f 70 69 65 64 | 2e 20 43 6f 6e 74 61 69 |e copied|. Contai|
|00004b40| 6e 73 20 74 68 65 20 74 | 65 78 74 20 22 43 48 45 |ns the t|ext "CHE|
|00004b50| 45 42 41 20 4d 61 6b 65 | 73 20 59 61 20 48 69 67 |EBA Make|s Ya Hig|
|00004b60| 68 20 48 61 72 6d 6c 65 | 73 73 6c 79 22 20 61 6e |h Harmle|ssly" an|
|00004b70| 64 20 73 6f 6d 65 20 70 | 72 6f 66 61 6e 69 74 79 |d some p|rofanity|
|00004b80| 2e 00 00 00 00 4e 6f 20 | 69 6e 66 6f 72 6d 61 74 |.....No |informat|
|00004b90| 69 6f 6e 20 61 76 61 69 | 6c 61 62 6c 65 2e 00 00 |ion avai|lable...|
|00004ba0| 00 57 68 65 6e 20 74 68 | 65 20 76 69 72 75 73 20 |.When th|e virus |
|00004bb0| 69 73 20 61 63 74 69 76 | 65 2c 20 61 20 68 69 64 |is activ|e, a hid|
|00004bc0| 64 65 6e 20 70 72 6f 67 | 72 61 6d 20 6e 61 6d 65 |den prog|ram name|
|00004bd0| 64 20 43 49 4e 44 45 52 | 45 4c 2e 4c 41 20 69 73 |d CINDER|EL.LA is|
|00004be0| 20 63 72 65 61 74 65 64 | 2c 20 61 66 74 65 72 20 | created|, after |
|00004bf0| 61 20 63 65 72 74 61 69 | 6e 20 6e 75 6d 62 65 72 |a certai|n number|
|00004c00| 20 6f 66 20 6b 65 79 20 | 70 72 65 73 73 65 73 2e | of key |presses.|
|00004c10| 20 54 68 65 20 76 69 72 | 75 73 20 63 61 6e 20 69 | The vir|us can i|
|00004c20| 6e 66 65 63 74 20 70 72 | 6f 67 72 61 6d 73 20 77 |nfect pr|ograms w|
|00004c30| 69 74 68 20 6f 72 20 77 | 69 74 68 6f 75 74 20 66 |ith or w|ithout f|
|00004c40| 69 6c 65 20 65 78 74 65 | 6e 73 69 6f 6e 73 2e 00 |ile exte|nsions..|
|00004c50| 50 72 6f 74 6f 2d 54 00 | 49 6e 66 65 63 74 65 64 |Proto-T.|Infected|
|00004c60| 20 70 72 6f 67 72 61 6d | 73 20 63 6f 6e 74 61 69 | program|s contai|
|00004c70| 6e 20 74 68 65 20 74 65 | 78 74 20 22 43 69 76 69 |n the te|xt "Civi|
|00004c80| 6c 20 57 61 72 2c 20 28 | 63 29 20 31 39 39 32 20 |l War, (|c) 1992 |
|00004c90| 44 61 72 6b 20 48 65 6c | 6d 65 74 22 20 61 6e 64 |Dark Hel|met" and|
|00004ca0| 20 22 2a 2e 43 4f 4d 22 | 2e 00 00 00 00 57 68 65 | "*.COM"|.....Whe|
|00004cb0| 6e 20 61 6e 20 69 6e 66 | 65 63 74 65 64 20 70 72 |n an inf|ected pr|
|00004cc0| 6f 67 72 61 6d 20 69 73 | 20 72 75 6e 2c 20 74 68 |ogram is| run, th|
|00004cd0| 65 20 6d 65 73 73 61 67 | 65 20 22 45 58 45 43 20 |e messag|e "EXEC |
|00004ce0| 66 61 69 6c 75 72 65 22 | 20 61 70 70 65 61 72 73 |failure"| appears|
|00004cf0| 20 61 6e 64 20 74 68 65 | 6e 20 74 68 65 20 44 4f | and the|n the DO|
|00004d00| 53 20 70 72 6f 6d 70 74 | 20 72 65 74 75 72 6e 73 |S prompt| returns|
|00004d10| 2e 00 00 00 00 49 6e 66 | 65 63 74 65 64 20 70 72 |.....Inf|ected pr|
|00004d20| 6f 67 72 61 6d 73 20 63 | 6f 6e 74 61 69 6e 20 74 |ograms c|ontain t|
|00004d30| 68 65 20 74 65 78 74 20 | 22 43 3a 5c 49 4f 2e 53 |he text |"C:\IO.S|
|00004d40| 59 53 20 20 43 3a 5c 49 | 42 4d 42 49 4f 2e 43 4f |YS  C:\I|BMBIO.CO|
|00004d50| 4d 22 20 61 6e 64 20 22 | 43 6c 6f 73 65 2e 2e 2e |M" and "|Close...|
|00004d60| 22 00 00 00 00 57 68 65 | 6e 20 74 68 65 20 76 69 |"....Whe|n the vi|
|00004d70| 72 75 73 20 69 73 20 61 | 63 74 69 76 65 2c 20 74 |rus is a|ctive, t|
|00004d80| 68 65 20 63 6f 6d 70 75 | 74 65 72 27 73 20 73 63 |he compu|ter's sc|
|00004d90| 72 65 65 6e 20 63 6c 65 | 61 72 73 20 75 6e 65 78 |reen cle|ars unex|
|00004da0| 70 65 63 74 65 64 6c 79 | 2e 00 00 00 57 6f 72 6d |pectedly|....Worm|
|00004db0| 20 31 36 38 35 30 00 54 | 68 65 20 76 69 72 75 73 | 16850.T|he virus|
|00004dc0| 20 63 72 65 61 74 65 73 | 20 61 20 43 4f 4d 20 70 | creates| a COM p|
|00004dd0| 72 6f 67 72 61 6d 20 77 | 69 74 68 20 74 68 65 20 |rogram w|ith the |
|00004de0| 73 61 6d 65 20 66 69 6c | 65 20 6e 61 6d 65 20 61 |same fil|e name a|
|00004df0| 73 20 61 6e 20 45 58 45 | 20 70 72 6f 67 72 61 6d |s an EXE| program|
|00004e00| 2e 20 54 68 65 20 43 4f | 4d 20 70 72 6f 67 72 61 |. The CO|M progra|
|00004e10| 6d 20 69 73 20 68 69 64 | 64 65 6e 20 66 72 6f 6d |m is hid|den from|
|00004e20| 20 61 20 6e 6f 72 6d 61 | 6c 20 64 69 72 65 63 74 | a norma|l direct|
|00004e30| 6f 72 79 20 6c 69 73 74 | 69 6e 67 2e 00 00 00 00 |ory list|ing.....|
|00004e40| 00 49 6e 66 65 63 74 65 | 64 20 70 72 6f 67 72 61 |.Infecte|d progra|
|00004e50| 6d 73 27 20 73 69 7a 65 | 20 69 6e 63 72 65 61 73 |ms' size| increas|
|00004e60| 65 73 20 62 79 20 35 37 | 32 20 62 79 74 65 73 2e |es by 57|2 bytes.|
|00004e70| 00 00 00 00 56 43 4c 00 | 49 66 20 74 68 65 20 76 |....VCL.|If the v|
|00004e80| 69 72 75 73 20 63 61 6e | 6e 6f 74 20 69 6e 66 65 |irus can|not infe|
|00004e90| 63 74 20 6d 6f 72 65 20 | 66 69 6c 65 73 2c 20 74 |ct more |files, t|
|00004ea0| 68 65 20 6d 65 73 73 61 | 67 65 20 22 2a 2a 43 4f |he messa|ge "**CO|
|00004eb0| 44 45 20 5a 45 52 4f 2a | 2a 22 20 61 70 70 65 61 |DE ZERO*|*" appea|
|00004ec0| 72 73 2e 00 00 49 6e 66 | 65 63 74 65 64 20 70 72 |rs...Inf|ected pr|
|00004ed0| 6f 67 72 61 6d 73 20 63 | 6f 6e 74 61 69 6e 20 74 |ograms c|ontain t|
|00004ee0| 68 65 20 74 65 78 74 20 | 22 43 6f 66 66 65 65 73 |he text |"Coffees|
|00004ef0| 68 6f 70 22 2e 00 00 00 | 41 53 50 2d 34 37 32 00 |hop"....|ASP-472.|
|00004f00| 49 6e 66 65 63 74 65 64 | 20 70 72 6f 67 72 61 6d |Infected| program|
|00004f10| 73 20 63 6f 6e 74 61 69 | 6e 20 74 68 65 20 74 65 |s contai|n the te|
|00004f20| 78 74 20 22 41 53 50 22 | 2e 00 00 00 42 6f 6d 62 |xt "ASP"|....Bomb|
|00004f30| 65 72 00 54 68 65 20 76 | 69 72 75 73 20 62 75 69 |er.The v|irus bui|
|00004f40| 6c 64 73 20 61 20 63 6f | 6d 70 6c 65 78 20 70 61 |lds a co|mplex pa|
|00004f50| 74 68 20 6f 66 20 65 78 | 65 63 75 74 69 6f 6e 20 |th of ex|ecution |
|00004f60| 74 6f 20 69 74 73 20 6f | 77 6e 20 63 6f 64 65 20 |to its o|wn code |
|00004f70| 69 6e 20 6f 72 64 65 72 | 20 74 6f 20 61 76 6f 69 |in order| to avoi|
|00004f80| 64 20 64 65 74 65 63 74 | 69 6f 6e 2e 20 41 6c 74 |d detect|ion. Alt|
|00004f90| 68 6f 75 67 68 20 70 6f | 6c 79 6d 6f 72 70 68 69 |hough po|lymorphi|
|00004fa0| 63 2c 20 74 68 65 20 76 | 69 72 75 73 20 69 73 20 |c, the v|irus is |
|00004fb0| 6e 6f 74 20 65 6e 63 72 | 79 70 74 65 64 2e 00 00 |not encr|ypted...|
|00004fc0| 43 6f 6d 6f 2d 4c 61 6b | 65 00 49 6e 66 65 63 74 |Como-Lak|e.Infect|
|00004fd0| 65 64 20 70 72 6f 67 72 | 61 6d 73 20 63 6f 6e 74 |ed progr|ams cont|
|00004fe0| 61 69 6e 20 74 68 65 20 | 74 65 78 74 20 22 2e 2e |ain the |text "..|
|00004ff0| 2e 62 79 20 61 20 73 6f | 66 74 77 61 72 65 20 67 |.by a so|ftware g|
|00005000| 72 6f 75 70 20 72 65 73 | 69 64 65 6e 74 20 6e 65 |roup res|ident ne|
|00005010| 61 72 20 43 6f 6d 6f 20 | 4c 61 6b 65 20 28 4e 6f |ar Como |Lake (No|
|00005020| 72 74 68 20 49 74 61 6c | 79 29 2e 2e 2e 22 00 00 |rth Ital|y)..."..|
|00005030| 00 54 68 65 20 76 69 72 | 75 73 20 63 72 65 61 74 |.The vir|us creat|
|00005040| 65 73 20 61 20 43 4f 4d | 20 70 72 6f 67 72 61 6d |es a COM| program|
|00005050| 20 77 69 74 68 20 74 68 | 65 20 73 61 6d 65 20 66 | with th|e same f|
|00005060| 69 6c 65 20 6e 61 6d 65 | 20 61 73 20 61 6e 20 45 |ile name| as an E|
|00005070| 58 45 20 70 72 6f 67 72 | 61 6d 2e 20 54 68 65 20 |XE progr|am. The |
|00005080| 43 4f 4d 20 70 72 6f 67 | 72 61 6d 20 69 73 20 68 |COM prog|ram is h|
|00005090| 69 64 64 65 6e 20 66 72 | 6f 6d 20 61 20 6e 6f 72 |idden fr|om a nor|
|000050a0| 6d 61 6c 20 64 69 72 65 | 63 74 6f 72 79 20 6c 69 |mal dire|ctory li|
|000050b0| 73 74 69 6e 67 2e 00 00 | 53 79 73 6c 6f 63 6b 2e |sting...|Syslock.|
|000050c0| 43 6f 6f 6b 69 65 00 57 | 68 65 6e 20 74 68 65 20 |Cookie.W|hen the |
|000050d0| 76 69 72 75 73 20 69 73 | 20 61 63 74 69 76 65 2c |virus is| active,|
|000050e0| 20 74 68 65 20 6d 65 73 | 73 61 67 65 20 22 49 20 | the mes|sage "I |
|000050f0| 77 61 6e 74 20 61 20 43 | 4f 4f 4b 49 45 22 20 73 |want a C|OOKIE" s|
|00005100| 6f 6d 65 74 69 6d 65 73 | 20 61 70 70 65 61 72 73 |ometimes| appears|
|00005110| 2e 00 00 00 00 57 68 65 | 6e 20 61 20 70 72 6f 67 |.....Whe|n a prog|
|00005120| 72 61 6d 20 69 73 20 73 | 75 63 63 65 73 73 66 75 |ram is s|uccessfu|
|00005130| 6c 6c 79 20 69 6e 66 65 | 63 74 65 64 2c 20 74 68 |lly infe|cted, th|
|00005140| 65 20 6d 65 73 73 61 67 | 65 20 22 43 4f 53 53 49 |e messag|e "COSSI|
|00005150| 47 41 20 3f 21 20 4e 4f | 20 20 47 52 41 5a 49 45 |GA ?! NO|  GRAZIE|
|00005160| 21 2e 2e 2e 22 20 61 70 | 70 65 61 72 73 2e 00 00 |!..." ap|pears...|
|00005170| 00 49 6e 66 65 63 74 65 | 64 20 70 72 6f 67 72 61 |.Infecte|d progra|
|00005180| 6d 73 20 63 6f 6e 74 61 | 69 6e 20 74 68 65 20 74 |ms conta|in the t|
|00005190| 65 78 74 20 22 43 4f 53 | 54 45 41 55 20 45 6e 64 |ext "COS|TEAU End|
|000051a0| 2e 4d 5a 22 2e 00 00 00 | 00 43 6f 6e 74 61 69 6e |.MZ"....|.Contain|
|000051b0| 73 20 74 68 65 20 74 65 | 78 74 20 22 45 73 74 61 |s the te|xt "Esta|
|000051c0| 20 70 72 6f 67 72 61 6d | 61 20 66 75 65 20 68 65 | program|a fue he|
|000051d0| 63 68 6f 20 65 6e 20 43 | 68 69 6c 65 20 65 6e 20 |cho en C|hile en |
|000051e0| 31 39 39 32 20 70 6f 72 | 20 43 50 57 22 2e 20 49 |1992 por| CPW". I|
|000051f0| 74 20 61 76 6f 69 64 73 | 20 69 6e 66 65 63 74 69 |t avoids| infecti|
|00005200| 6e 67 2c 20 61 6e 64 20 | 6d 61 79 20 64 65 6c 65 |ng, and |may dele|
|00005210| 74 65 2c 20 73 70 65 63 | 69 66 69 63 20 61 6e 74 |te, spec|ific ant|
|00005220| 69 76 69 72 75 73 20 70 | 72 6f 64 75 63 74 73 2e |ivirus p|roducts.|
|00005230| 20 41 20 63 6f 6c 64 20 | 62 6f 6f 74 20 6d 61 79 | A cold |boot may|
|00005240| 20 62 65 20 72 65 71 75 | 69 72 65 64 20 61 66 74 | be requ|ired aft|
|00005250| 65 72 20 72 75 6e 6e 69 | 6e 67 20 61 6e 20 69 6e |er runni|ng an in|
|00005260| 66 65 63 74 65 64 20 70 | 72 6f 67 72 61 6d 2e 00 |fected p|rogram..|
|00005270| 31 31 39 33 2c 20 43 6f | 70 79 72 69 67 68 74 00 |1193, Co|pyright.|
|00005280| 41 20 66 61 6c 73 65 20 | 63 6f 70 79 72 69 67 68 |A false |copyrigh|
|00005290| 74 20 6d 65 73 73 61 67 | 65 20 61 70 70 65 61 72 |t messag|e appear|
|000052a0| 73 2e 20 54 68 65 20 76 | 69 72 75 73 20 63 68 61 |s. The v|irus cha|
|000052b0| 6e 67 65 73 20 61 6e 20 | 69 6e 66 65 63 74 65 64 |nges an |infected|
|000052c0| 20 70 72 6f 67 72 61 6d | 27 73 20 64 61 74 65 20 | program|'s date |
|000052d0| 61 6e 64 20 74 69 6d 65 | 20 73 74 61 6d 70 2e 00 |and time| stamp..|
|000052e0| 00 54 68 65 20 76 69 72 | 75 73 20 63 72 65 61 74 |.The vir|us creat|
|000052f0| 65 73 20 43 4f 4d 20 66 | 69 6c 65 73 20 77 69 74 |es COM f|iles wit|
|00005300| 68 20 74 68 65 20 74 65 | 78 74 20 22 54 68 65 20 |h the te|xt "The |
|00005310| 43 72 65 65 70 79 20 43 | 72 61 77 6c 79 22 2e 00 |Creepy C|rawly"..|
|00005320| 00 57 68 65 6e 20 61 63 | 74 69 76 65 20 6f 6e 20 |.When ac|tive on |
|00005330| 4d 6f 6e 64 61 79 73 20 | 74 68 65 20 32 38 74 68 |Mondays |the 28th|
|00005340| 20 61 6e 64 20 4a 61 6e | 75 61 72 79 20 32 38 74 | and Jan|uary 28t|
|00005350| 68 2c 20 74 68 65 20 76 | 69 72 75 73 20 6f 76 65 |h, the v|irus ove|
|00005360| 72 77 72 69 74 65 73 20 | 74 68 65 20 68 61 72 64 |rwrites |the hard|
|00005370| 20 64 69 73 6b 20 77 69 | 74 68 20 63 68 61 72 61 | disk wi|th chara|
|00005380| 63 74 65 72 73 2e 20 49 | 6e 66 65 63 74 65 64 20 |cters. I|nfected |
|00005390| 70 72 6f 67 72 61 6d 73 | 20 63 6f 6e 74 61 69 6e |programs| contain|
|000053a0| 20 74 68 65 20 74 65 78 | 74 20 22 43 72 61 7a 79 | the tex|t "Crazy|
|000053b0| 20 45 64 64 69 65 22 2e | 00 00 00 00 43 72 61 7a | Eddie".|....Craz|
|000053c0| 79 2c 20 49 6d 70 00 54 | 68 65 20 76 69 72 75 73 |y, Imp.T|he virus|
|000053d0| 20 72 65 6d 6f 76 65 73 | 20 69 74 73 65 6c 66 20 | removes| itself |
|000053e0| 66 72 6f 6d 20 69 6e 66 | 65 63 74 65 64 20 70 72 |from inf|ected pr|
|000053f0| 6f 67 72 61 6d 73 20 77 | 68 65 6e 20 69 74 20 69 |ograms w|hen it i|
|00005400| 73 20 72 65 61 64 20 69 | 6e 74 6f 20 20 6d 65 6d |s read i|nto  mem|
|00005410| 6f 72 79 2e 00 00 00 00 | 43 72 65 65 70 65 72 20 |ory.....|Creeper |
|00005420| 54 6f 72 6d 65 6e 74 6f | 72 00 54 68 65 20 76 69 |Tormento|r.The vi|
|00005430| 72 75 73 20 73 65 61 72 | 63 68 65 73 20 66 6f 72 |rus sear|ches for|
|00005440| 20 74 68 65 20 74 65 78 | 74 20 22 54 6f 72 6d 65 | the tex|t "Torme|
|00005450| 6e 74 6f 72 22 20 69 6e | 20 6d 65 6d 6f 72 79 2e |ntor" in| memory.|
|00005460| 00 00 00 00 32 34 38 30 | 2c 20 56 32 34 38 30 2c |....2480|, V2480,|
|00005470| 20 43 72 65 77 2d 32 34 | 38 30 00 54 68 65 20 6d | Crew-24|80.The m|
|00005480| 65 73 73 61 67 65 20 22 | 45 75 72 6f 70 65 61 6e |essage "|European|
|00005490| 20 43 72 61 63 6b 69 6e | 67 20 43 72 65 77 22 20 | Crackin|g Crew" |
|000054a0| 61 70 70 65 61 72 73 2e | 20 54 68 65 20 76 69 72 |appears.| The vir|
|000054b0| 75 73 20 69 6e 66 65 63 | 74 73 20 70 72 6f 67 72 |us infec|ts progr|
|000054c0| 61 6d 73 20 74 68 61 74 | 20 68 61 76 65 20 61 20 |ams that| have a |
|000054d0| 64 61 74 65 20 73 74 61 | 6d 70 20 6f 66 20 4a 61 |date sta|mp of Ja|
|000054e0| 6e 75 61 72 79 20 74 68 | 72 6f 75 67 68 20 4d 61 |nuary th|rough Ma|
|000054f0| 79 2c 20 61 72 65 20 6c | 61 72 67 65 72 20 74 68 |y, are l|arger th|
|00005500| 61 6e 20 31 30 2c 32 34 | 30 20 62 79 74 65 73 2c |an 10,24|0 bytes,|
|00005510| 20 61 6e 64 20 68 61 76 | 65 20 43 4f 4d 20 65 78 | and hav|e COM ex|
|00005520| 74 65 6e 73 69 6f 6e 73 | 2e 00 00 00 00 54 68 65 |tensions|.....The|
|00005530| 20 76 69 72 75 73 20 6d | 6f 6e 69 74 6f 72 73 20 | virus m|onitors |
|00005540| 66 6f 72 20 73 70 65 63 | 69 66 69 63 20 6c 65 74 |for spec|ific let|
|00005550| 74 65 72 73 20 69 6e 20 | 74 68 65 20 63 6f 6d 6d |ters in |the comm|
|00005560| 61 6e 64 20 6c 69 6e 65 | 2e 20 49 66 20 66 6f 75 |and line|. If fou|
|00005570| 6e 64 20 69 74 20 72 65 | 6e 61 6d 65 73 20 61 6c |nd it re|names al|
|00005580| 6c 20 66 69 6c 65 73 20 | 69 6e 20 74 68 65 20 64 |l files |in the d|
|00005590| 69 72 65 63 74 6f 72 79 | 20 74 6f 20 22 43 52 49 |irectory| to "CRI|
|000055a0| 4d 49 4e 41 4c 22 20 61 | 6e 64 20 70 72 69 6e 74 |MINAL" a|nd print|
|000055b0| 73 20 61 20 6d 65 73 73 | 61 67 65 20 63 61 6c 6c |s a mess|age call|
|000055c0| 69 6e 67 20 74 68 65 20 | 75 73 65 72 20 61 20 63 |ing the |user a c|
|000055d0| 72 69 6d 69 6e 61 6c 20 | 67 75 69 6c 74 79 20 6f |riminal |guilty o|
|000055e0| 66 20 73 6f 66 74 77 61 | 72 65 20 70 69 72 61 63 |f softwa|re pirac|
|000055f0| 79 2e 00 00 4b 72 69 76 | 6d 6f 75 73 2c 20 4f 6e |y...Kriv|mous, On|
|00005600| 6c 79 00 49 6e 66 65 63 | 74 65 64 20 70 72 6f 67 |ly.Infec|ted prog|
|00005610| 72 61 6d 73 20 63 6f 6e | 74 61 69 6e 20 74 68 65 |rams con|tain the|
|00005620| 20 74 65 78 74 20 22 4f | 6e 6c 79 20 47 6f 64 20 | text "O|nly God |
|00005630| 6b 6e 6f 77 73 21 22 20 | 54 68 65 20 70 6f 65 6d |knows!" |The poem|
|00005640| 20 22 54 68 65 72 65 20 | 77 61 73 20 61 20 63 72 | "There |was a cr|
|00005650| 6f 6f 6b 65 64 20 6d 61 | 6e 22 20 6d 61 79 20 61 |ooked ma|n" may a|
|00005660| 70 70 65 61 72 2e 00 00 | 4d 69 63 72 6f 45 6c 65 |ppear...|MicroEle|
|00005670| 70 68 61 6e 74 00 57 68 | 65 6e 20 61 6e 20 69 6e |phant.Wh|en an in|
|00005680| 66 65 63 74 65 64 20 70 | 72 6f 67 72 61 6d 20 69 |fected p|rogram i|
|00005690| 73 20 72 75 6e 2c 20 74 | 68 65 20 6d 65 73 73 61 |s run, t|he messa|
|000056a0| 67 65 20 22 42 61 64 20 | 43 6f 6d 6d 61 6e 64 20 |ge "Bad |Command |
|000056b0| 6f 72 20 66 69 6c 65 20 | 6e 61 6d 65 22 20 61 70 |or file |name" ap|
|000056c0| 70 65 61 72 73 20 61 6e | 64 20 74 68 65 6e 20 74 |pears an|d then t|
|000056d0| 68 65 20 44 4f 53 20 70 | 72 6f 6d 70 74 20 72 65 |he DOS p|rompt re|
|000056e0| 74 75 72 6e 73 2e 20 49 | 6e 66 65 63 74 65 64 20 |turns. I|nfected |
|000056f0| 70 72 6f 67 72 61 6d 73 | 20 63 6f 6e 74 61 69 6e |programs| contain|
|00005700| 20 74 68 65 20 74 65 78 | 74 20 22 4d 69 63 72 6f | the tex|t "Micro|
|00005710| 65 6c 65 70 68 61 6e 74 | 20 56 34 22 20 61 6e 64 |elephant| V4" and|
|00005720| 20 22 62 79 20 43 53 4c | 22 2e 00 00 00 57 68 65 | "by CSL|"....Whe|
|00005730| 6e 20 74 68 65 20 76 69 | 72 75 73 20 69 73 20 61 |n the vi|rus is a|
|00005740| 63 74 69 76 65 2c 20 74 | 68 65 20 6d 65 73 73 61 |ctive, t|he messa|
|00005750| 67 65 20 22 54 68 69 73 | 20 66 69 6c 65 20 69 6e |ge "This| file in|
|00005760| 66 65 63 74 65 64 20 77 | 69 74 68 20 43 4f 4d 56 |fected w|ith COMV|
|00005770| 49 52 55 53 20 31 2e 30 | 22 20 61 70 70 65 61 72 |IRUS 1.0|" appear|
|00005780| 73 2e 00 00 4e 6f 77 68 | 65 72 65 20 4d 61 6e 2c |s...Nowh|ere Man,|
|00005790| 20 56 4d 65 73 73 69 61 | 68 00 57 68 65 6e 20 61 | VMessia|h.When a|
|000057a0| 6e 20 69 6e 66 65 63 74 | 65 64 20 70 72 6f 67 72 |n infect|ed progr|
|000057b0| 61 6d 20 69 73 20 72 75 | 6e 2c 20 74 68 65 20 6d |am is ru|n, the m|
|000057c0| 65 73 73 61 67 65 20 22 | 4f 75 74 20 6f 66 20 6d |essage "|Out of m|
|000057d0| 65 6d 6f 72 79 22 20 61 | 70 70 65 61 72 73 20 61 |emory" a|ppears a|
|000057e0| 6e 64 20 74 68 65 6e 20 | 74 68 65 20 44 4f 53 20 |nd then |the DOS |
|000057f0| 70 72 6f 6d 70 74 20 72 | 65 74 75 72 6e 73 2e 00 |prompt r|eturns..|
|00005800| 00 49 6e 66 65 63 74 65 | 64 20 70 72 6f 67 72 61 |.Infecte|d progra|
|00005810| 6d 73 20 63 6f 6e 74 61 | 69 6e 20 74 68 65 20 74 |ms conta|in the t|
|00005820| 65 78 74 20 22 64 61 2c | 64 61 22 2e 20 49 6e 66 |ext "da,|da". Inf|
|00005830| 65 63 74 65 64 20 70 72 | 6f 67 72 61 6d 73 20 6f |ected pr|ograms o|
|00005840| 76 65 72 20 36 35 35 33 | 36 20 62 79 74 65 73 20 |ver 6553|6 bytes |
|00005850| 69 6e 20 73 69 7a 65 20 | 64 6f 20 6e 6f 74 20 72 |in size |do not r|
|00005860| 75 6e 20 70 72 6f 70 65 | 72 6c 79 2e 00 00 00 00 |un prope|rly.....|
|00005870| 00 57 68 65 6e 20 61 63 | 74 69 76 65 2c 20 74 68 |.When ac|tive, th|
|00005880| 65 20 76 69 72 75 73 20 | 64 69 73 70 6c 61 79 73 |e virus |displays|
|00005890| 20 76 61 72 79 69 6e 67 | 20 6d 65 73 73 61 67 65 | varying| message|
|000058a0| 73 2e 00 00 00 41 20 76 | 61 72 69 61 6e 74 20 6f |s....A v|ariant o|
|000058b0| 66 20 74 68 65 20 6f 72 | 69 67 69 6e 61 6c 20 44 |f the or|iginal D|
|000058c0| 61 72 6b 20 41 76 65 6e | 67 65 72 2e 31 38 30 30 |ark Aven|ger.1800|
|000058d0| 20 62 61 73 65 64 20 6f | 6e 20 74 68 65 20 61 75 | based o|n the au|
|000058e0| 74 68 6f 72 27 73 20 73 | 6f 75 72 63 65 20 63 6f |thor's s|ource co|
|000058f0| 64 65 2c 20 77 68 69 63 | 68 20 68 65 20 72 65 6c |de, whic|h he rel|
|00005900| 65 61 73 65 64 20 69 6e | 20 4a 61 6e 75 61 72 79 |eased in| January|
|00005910| 20 6f 66 20 31 39 39 30 | 2e 00 00 00 56 2d 31 38 | of 1990|....V-18|
|00005920| 30 30 2c 20 45 64 64 69 | 65 00 54 68 65 20 76 69 |00, Eddi|e.The vi|
|00005930| 72 75 73 20 63 6f 6e 74 | 61 69 6e 73 20 74 68 65 |rus cont|ains the|
|00005940| 20 6d 65 73 73 61 67 65 | 20 22 45 64 64 69 65 20 | message| "Eddie |
|00005950| 4c 69 76 65 73 2e 2e 2e | 73 6f 6d 65 77 68 65 72 |Lives...|somewher|
|00005960| 65 20 69 6e 20 74 69 6d | 65 22 2e 20 52 61 6e 64 |e in tim|e". Rand|
|00005970| 6f 6d 6c 79 20 6f 76 65 | 72 77 72 69 74 65 73 20 |omly ove|rwrites |
|00005980| 64 69 73 6b 20 73 65 63 | 74 6f 72 73 2e 00 00 00 |disk sec|tors....|
|00005990| 56 32 30 30 30 2c 20 54 | 72 61 76 65 6c 6c 65 72 |V2000, T|raveller|
|000059a0| 00 49 6e 66 65 63 74 65 | 64 20 70 72 6f 67 72 61 |.Infecte|d progra|
|000059b0| 6d 73 20 63 6f 6e 74 61 | 69 6e 20 74 68 65 20 74 |ms conta|in the t|
|000059c0| 65 78 74 20 22 43 6f 70 | 79 20 6d 65 20 2d 20 49 |ext "Cop|y me - I|
|000059d0| 20 77 61 6e 74 20 74 6f | 20 74 72 61 76 65 6c 22 | want to| travel"|
|000059e0| 2e 00 00 00 56 2d 32 31 | 30 30 00 49 6e 66 65 63 |....V-21|00.Infec|
|000059f0| 74 65 64 20 70 72 6f 67 | 72 61 6d 73 20 63 6f 6e |ted prog|rams con|
|00005a00| 74 61 69 6e 20 74 68 65 | 20 74 65 78 74 20 22 45 |tain the| text "E|
|00005a10| 64 64 69 65 20 4c 69 76 | 65 73 22 2e 00 00 00 00 |ddie Liv|es".....|
|00005a20| 00 57 68 65 6e 20 74 68 | 65 20 76 69 72 75 73 20 |.When th|e virus |
|00005a30| 69 73 20 61 63 74 69 76 | 65 20 6f 6e 20 4f 63 74 |is activ|e on Oct|
|00005a40| 6f 62 65 72 20 31 35 74 | 68 2c 20 74 68 65 20 63 |ober 15t|h, the c|
|00005a50| 6f 6d 70 75 74 65 72 27 | 73 20 73 63 72 65 65 6e |omputer'|s screen|
|00005a60| 20 63 6c 65 61 72 73 20 | 20 69 66 20 6e 6f 74 20 | clears | if not |
|00005a70| 69 6e 20 67 72 61 70 68 | 69 63 73 20 6d 6f 64 65 |in graph|ics mode|
|00005a80| 2c 20 61 6e 64 20 64 61 | 74 61 20 6f 6e 20 64 72 |, and da|ta on dr|
|00005a90| 69 76 65 20 43 3a 20 69 | 73 20 63 6f 72 72 75 70 |ive C: i|s corrup|
|00005aa0| 74 65 64 2e 20 43 6f 6e | 74 61 69 6e 73 20 74 68 |ted. Con|tains th|
|00005ab0| 65 20 74 65 78 74 20 22 | 28 63 29 20 44 61 72 6b |e text "|(c) Dark|
|00005ac0| 20 45 6e 64 22 2e 00 00 | 44 61 72 74 68 20 56 61 | End"...|Darth Va|
|00005ad0| 64 65 72 20 31 2d 35 00 | 50 72 6f 67 72 61 6d 73 |der 1-5.|Programs|
|00005ae0| 20 77 69 74 68 20 43 4f | 4d 20 65 78 74 65 6e 73 | with CO|M extens|
|00005af0| 69 6f 6e 73 20 61 72 65 | 20 69 6e 66 65 63 74 65 |ions are| infecte|
|00005b00| 64 20 6f 6e 6c 79 20 77 | 68 65 6e 20 74 68 65 79 |d only w|hen they|
|00005b10| 20 61 72 65 20 63 6f 70 | 69 65 64 2e 20 49 6e 66 | are cop|ied. Inf|
|00005b20| 65 63 74 65 64 20 70 72 | 6f 67 72 61 6d 73 20 64 |ected pr|ograms d|
|00005b30| 6f 20 6e 6f 74 20 72 75 | 6e 20 70 72 6f 70 65 72 |o not ru|n proper|
|00005b40| 6c 79 2e 20 43 6f 6e 74 | 61 69 6e 73 20 74 68 65 |ly. Cont|ains the|
|00005b50| 20 74 65 78 74 20 22 44 | 61 72 74 68 20 56 61 64 | text "D|arth Vad|
|00005b60| 65 72 22 2e 00 00 00 00 | 00 49 6e 66 65 63 74 65 |er".....|.Infecte|
|00005b70| 64 20 70 72 6f 67 72 61 | 6d 73 27 20 73 69 7a 65 |d progra|ms' size|
|00005b80| 20 69 6e 63 72 65 61 73 | 65 73 20 62 79 20 31 38 | increas|es by 18|
|00005b90| 37 36 20 62 79 74 65 73 | 2e 00 00 00 43 6f 6c 75 |76 bytes|....Colu|
|00005ba0| 6d 62 75 73 20 44 61 79 | 00 57 68 65 6e 20 74 68 |mbus Day|.When th|
|00005bb0| 65 20 76 69 72 75 73 20 | 69 73 20 61 63 74 69 76 |e virus |is activ|
|00005bc0| 65 20 62 65 74 77 65 65 | 6e 20 4f 63 74 6f 62 65 |e betwee|n Octobe|
|00005bd0| 72 20 31 33 74 68 20 61 | 6e 64 20 74 68 65 20 65 |r 13th a|nd the e|
|00005be0| 6e 64 20 6f 66 20 74 68 | 65 20 79 65 61 72 2c 20 |nd of th|e year, |
|00005bf0| 74 68 65 20 6d 65 73 73 | 61 67 65 73 20 22 44 41 |the mess|ages "DA|
|00005c00| 54 41 43 52 49 4d 45 20 | 56 49 52 55 53 22 20 61 |TACRIME |VIRUS" a|
|00005c10| 6e 64 20 22 52 45 4c 45 | 41 53 45 44 3a 20 31 20 |nd "RELE|ASED: 1 |
|00005c20| 4d 41 52 43 48 20 31 39 | 38 39 22 20 61 70 70 65 |MARCH 19|89" appe|
|00005c30| 61 72 2e 00 44 61 74 61 | 6c 6f 63 6b 20 31 2e 30 |ar..Data|lock 1.0|
|00005c40| 30 2c 20 56 39 32 30 2c | 20 44 61 74 61 6c 6f 63 |0, V920,| Dataloc|
|00005c50| 6b 2d 31 30 34 33 00 49 | 6e 66 65 63 74 65 64 20 |k-1043.I|nfected |
|00005c60| 70 72 6f 67 72 61 6d 73 | 20 63 6f 6e 74 61 69 6e |programs| contain|
|00005c70| 20 74 68 65 20 74 65 78 | 74 20 22 44 61 74 61 4c | the tex|t "DataL|
|00005c80| 6f 63 6b 20 76 65 72 73 | 69 6f 6e 20 31 2e 30 30 |ock vers|ion 1.00|
|00005c90| 22 2e 20 20 49 66 20 74 | 68 65 20 64 61 74 65 20 |".  If t|he date |
|00005ca0| 69 73 20 61 66 74 65 72 | 20 41 75 67 75 73 74 20 |is after| August |
|00005cb0| 31 39 39 30 2c 20 74 68 | 65 20 76 69 72 75 73 20 |1990, th|e virus |
|00005cc0| 6c 6f 63 6b 73 20 66 69 | 6c 65 73 20 77 69 74 68 |locks fi|les with|
|00005cd0| 20 74 68 65 20 2e 44 42 | 46 20 65 78 74 65 6e 73 | the .DB|F extens|
|00005ce0| 69 6f 6e 2e 00 00 00 00 | 53 59 50 00 49 66 20 74 |ion.....|SYP.If t|
|00005cf0| 68 65 20 76 69 72 75 73 | 20 69 73 20 61 63 74 69 |he virus| is acti|
|00005d00| 76 65 20 6f 6e 20 61 20 | 64 61 74 65 20 64 69 76 |ve on a |date div|
|00005d10| 69 73 69 62 6c 65 20 62 | 79 20 31 30 2c 20 74 68 |isible b|y 10, th|
|00005d20| 65 20 64 61 74 61 20 6f | 6e 20 74 68 65 20 68 61 |e data o|n the ha|
|00005d30| 72 64 20 64 69 73 6b 20 | 69 73 20 64 65 73 74 72 |rd disk |is destr|
|00005d40| 6f 79 65 64 2e 00 00 00 | 00 54 68 65 20 76 69 72 |oyed....|.The vir|
|00005d50| 75 73 20 63 6f 72 72 75 | 70 74 73 20 64 61 74 61 |us corru|pts data|
|00005d60| 20 69 6e 20 66 69 6c 65 | 73 20 77 69 74 68 20 74 | in file|s with t|
|00005d70| 68 65 20 44 42 46 20 65 | 78 74 65 6e 73 69 6f 6e |he DBF e|xtension|
|00005d80| 2e 20 54 68 65 20 46 41 | 54 20 61 6e 64 20 72 6f |. The FA|T and ro|
|00005d90| 6f 74 20 64 69 72 65 63 | 74 6f 72 79 20 6f 6e 20 |ot direc|tory on |
|00005da0| 64 72 69 76 65 73 20 44 | 3a 20 74 68 72 6f 75 67 |drives D|: throug|
|00005db0| 68 20 5a 3a 20 61 72 65 | 20 64 61 6d 61 67 65 64 |h Z: are| damaged|
|00005dc0| 20 77 68 65 6e 20 61 74 | 74 65 6d 70 74 73 20 61 | when at|tempts a|
|00005dd0| 72 65 20 6d 61 64 65 20 | 74 6f 20 77 72 69 74 65 |re made |to write|
|00005de0| 20 74 6f 20 61 20 44 42 | 46 20 66 69 6c 65 20 74 | to a DB|F file t|
|00005df0| 68 61 74 20 69 73 20 6d | 6f 72 65 20 74 68 61 6e |hat is m|ore than|
|00005e00| 20 74 68 72 65 65 20 6d | 6f 6e 74 68 73 20 6f 6c | three m|onths ol|
|00005e10| 64 2e 00 00 00 54 68 65 | 20 76 69 72 75 73 20 6f |d....The| virus o|
|00005e20| 76 65 72 77 72 69 74 65 | 73 20 74 68 65 20 66 69 |verwrite|s the fi|
|00005e30| 72 73 74 20 38 30 20 73 | 65 63 74 6f 72 73 20 6f |rst 80 s|ectors o|
|00005e40| 6e 20 64 72 69 76 65 20 | 43 3a 20 61 6e 64 20 74 |n drive |C: and t|
|00005e50| 68 65 20 6d 65 73 73 61 | 67 65 20 22 44 45 49 43 |he messa|ge "DEIC|
|00005e60| 49 44 45 21 20 20 20 42 | 59 45 20 42 59 45 20 48 |IDE!   B|YE BYE H|
|00005e70| 41 52 44 44 49 53 4b 2e | 2e 2e 22 20 61 70 70 65 |ARDDISK.|.." appe|
|00005e80| 61 72 73 2e 00 00 00 00 | 00 49 6e 66 65 63 74 65 |ars.....|.Infecte|
|00005e90| 64 20 70 72 6f 67 72 61 | 6d 73 20 63 6f 6e 74 61 |d progra|ms conta|
|00005ea0| 69 6e 20 6f 62 73 63 65 | 6e 65 20 74 65 78 74 2e |in obsce|ne text.|
|00005eb0| 00 00 00 00 00 4f 6e 20 | 74 68 65 20 31 37 74 68 |.....On |the 17th|
|00005ec0| 20 6f 66 20 61 6e 79 20 | 6d 6f 6e 74 68 2c 20 74 | of any |month, t|
|00005ed0| 68 65 20 76 69 72 75 73 | 20 72 65 70 6c 61 63 65 |he virus| replace|
|00005ee0| 73 20 74 68 65 20 6d 61 | 73 74 65 72 20 62 6f 6f |s the ma|ster boo|
|00005ef0| 74 20 73 65 63 74 6f 72 | 20 63 6f 64 65 20 73 6f |t sector| code so|
|00005f00| 20 74 68 65 20 6d 65 73 | 73 61 67 65 20 22 44 45 | the mes|sage "DE|
|00005f10| 4d 4f 4c 49 54 49 4f 4e | 20 69 73 20 68 65 72 65 |MOLITION| is here|
|00005f20| 21 22 20 70 72 69 6e 74 | 73 20 6f 6e 20 74 68 65 |!" print|s on the|
|00005f30| 20 6e 65 78 74 20 62 6f | 6f 74 20 75 70 2e 00 00 | next bo|ot up...|
|00005f40| 00 57 68 65 6e 20 61 6e | 20 69 6e 66 65 63 74 65 |.When an| infecte|
|00005f50| 64 20 70 72 6f 67 72 61 | 6d 20 69 73 20 72 75 6e |d progra|m is run|
|00005f60| 20 6f 6e 20 54 75 65 73 | 64 61 79 73 2c 20 74 68 | on Tues|days, th|
|00005f70| 65 20 6d 65 73 73 61 67 | 65 20 22 45 72 72 6f 72 |e messag|e "Error|
|00005f80| 20 65 61 74 69 6e 67 20 | 64 72 69 76 65 20 43 3a | eating |drive C:|
|00005f90| 22 20 61 70 70 65 61 72 | 73 2c 20 61 6e 64 20 74 |" appear|s, and t|
|00005fa0| 68 65 6e 20 74 68 65 20 | 76 69 72 75 73 20 6f 76 |hen the |virus ov|
|00005fb0| 65 72 77 72 69 74 65 73 | 20 31 36 30 20 73 65 63 |erwrites| 160 sec|
|00005fc0| 74 6f 72 73 20 6f 66 20 | 74 68 65 20 68 61 72 64 |tors of |the hard|
|00005fd0| 20 64 69 73 6b 2e 20 54 | 68 65 20 76 69 72 75 73 | disk. T|he virus|
|00005fe0| 20 63 68 61 6e 67 65 73 | 20 61 6e 20 69 6e 66 65 | changes| an infe|
|00005ff0| 63 74 65 64 20 70 72 6f | 67 72 61 6d 27 73 20 64 |cted pro|gram's d|
|00006000| 61 74 65 20 61 6e 64 20 | 74 69 6d 65 20 73 74 61 |ate and |time sta|
|00006010| 6d 70 2e 00 44 65 73 74 | 72 75 63 74 6f 72 20 56 |mp..Dest|ructor V|
|00006020| 34 2e 30 30 00 49 6e 66 | 65 63 74 65 64 20 70 72 |4.00.Inf|ected pr|
|00006030| 6f 67 72 61 6d 73 20 63 | 6f 6e 74 61 69 6e 20 74 |ograms c|ontain t|
|00006040| 68 65 20 74 65 78 74 20 | 22 44 45 53 54 52 55 43 |he text |"DESTRUC|
|00006050| 54 4f 52 20 56 34 2e 30 | 30 2e 2e 2e 22 00 00 00 |TOR V4.0|0..."...|
|00006060| 4d 65 78 69 63 61 6e 2c | 20 44 65 76 69 6c 27 73 |Mexican,| Devil's|
|00006070| 20 44 61 6e 63 65 2d 42 | 00 57 68 65 6e 20 74 68 | Dance-B|.When th|
|00006080| 65 20 76 69 72 75 73 20 | 69 73 20 61 63 74 69 76 |e virus |is activ|
|00006090| 65 2c 20 73 63 72 65 65 | 6e 20 63 6f 6c 6f 72 73 |e, scree|n colors|
|000060a0| 20 6d 61 79 20 63 68 61 | 6e 67 65 20 61 66 74 65 | may cha|nge afte|
|000060b0| 72 20 32 30 30 30 20 6b | 65 79 73 74 72 6f 6b 65 |r 2000 k|eystroke|
|000060c0| 73 2e 20 41 66 74 65 72 | 20 35 30 30 30 20 6b 65 |s. After| 5000 ke|
|000060d0| 79 73 74 72 6f 6b 65 73 | 2c 20 74 68 65 20 6d 65 |ystrokes|, the me|
|000060e0| 73 73 61 67 65 20 22 48 | 61 76 65 20 79 6f 75 20 |ssage "H|ave you |
|000060f0| 65 76 65 72 20 64 61 6e | 63 65 64 20 77 69 74 68 |ever dan|ced with|
|00006100| 20 74 68 65 20 64 65 76 | 69 6c 2e 2e 2e 22 20 61 | the dev|il..." a|
|00006110| 70 70 65 61 72 73 2e 00 | 4b 65 77 6c 20 44 65 77 |ppears..|Kewl Dew|
|00006120| 64 7a 00 54 68 65 20 6d | 65 73 73 61 67 65 20 22 |dz.The m|essage "|
|00006130| 4b 65 77 6c 20 44 65 77 | 64 7a 21 22 20 61 70 70 |Kewl Dew|dz!" app|
|00006140| 65 61 72 73 2e 20 41 20 | 63 6f 6c 64 20 62 6f 6f |ears. A |cold boo|
|00006150| 74 20 6d 61 79 20 62 65 | 20 72 65 71 75 69 72 65 |t may be| require|
|00006160| 64 20 61 66 74 65 72 20 | 72 75 6e 6e 69 6e 67 20 |d after |running |
|00006170| 61 6e 20 69 6e 66 65 63 | 74 65 64 20 70 72 6f 67 |an infec|ted prog|
|00006180| 72 61 6d 2e 00 00 00 00 | 31 30 32 34 00 57 68 65 |ram.....|1024.Whe|
|00006190| 6e 20 74 68 65 20 76 69 | 72 75 73 20 69 73 20 61 |n the vi|rus is a|
|000061a0| 63 74 69 76 65 20 6f 6e | 20 74 68 65 20 68 6f 75 |ctive on| the hou|
|000061b0| 72 2c 20 64 69 61 6d 6f | 6e 64 73 20 65 78 70 6c |r, diamo|nds expl|
|000061c0| 6f 64 65 20 61 6e 64 20 | 62 6f 75 6e 63 65 20 61 |ode and |bounce a|
|000061d0| 72 6f 75 6e 64 20 74 68 | 65 20 73 63 72 65 65 6e |round th|e screen|
|000061e0| 2e 00 00 00 00 41 20 76 | 61 72 69 61 6e 74 20 6f |.....A v|ariant o|
|000061f0| 66 20 74 68 65 20 44 69 | 61 6d 6f 6e 64 20 76 69 |f the Di|amond vi|
|00006200| 72 75 73 20 62 61 73 65 | 64 20 6f 6e 20 70 72 69 |rus base|d on pri|
|00006210| 6e 74 65 64 20 73 6f 75 | 72 63 65 20 63 6f 64 65 |nted sou|rce code|
|00006220| 2e 00 00 00 00 50 72 6f | 67 72 61 6d 73 20 77 69 |.....Pro|grams wi|
|00006230| 74 68 20 43 4f 4d 20 61 | 6e 64 20 45 58 45 20 65 |th COM a|nd EXE e|
|00006240| 78 74 65 6e 73 69 6f 6e | 73 20 61 72 65 20 6f 76 |xtension|s are ov|
|00006250| 65 72 77 72 69 74 74 65 | 6e 20 77 69 74 68 20 6f |erwritte|n with o|
|00006260| 74 68 65 72 20 63 6f 64 | 65 20 61 6e 64 20 64 6f |ther cod|e and do|
|00006270| 20 6e 6f 74 20 66 75 6e | 63 74 69 6f 6e 20 70 72 | not fun|ction pr|
|00006280| 6f 70 65 72 6c 79 2e 20 | 49 6e 66 65 63 74 65 64 |operly. |Infected|
|00006290| 20 70 72 6f 67 72 61 6d | 73 20 63 6f 6e 74 61 69 | program|s contai|
|000062a0| 6e 20 74 68 65 20 74 65 | 78 74 20 22 43 29 20 44 |n the te|xt "C) D|
|000062b0| 49 47 47 45 52 22 2e 00 | 00 57 68 65 6e 20 74 68 |IGGER"..|.When th|
|000062c0| 65 20 76 69 72 75 73 20 | 69 73 20 61 63 74 69 76 |e virus |is activ|
|000062d0| 65 20 61 74 20 39 20 50 | 2e 4d 2e 20 74 68 65 20 |e at 9 P|.M. the |
|000062e0| 6d 65 73 73 61 67 65 20 | 22 39 70 6d 22 20 61 70 |message |"9pm" ap|
|000062f0| 70 65 61 72 73 2e 20 41 | 20 63 6f 6c 64 20 62 6f |pears. A| cold bo|
|00006300| 6f 74 20 6d 61 79 20 62 | 65 20 72 65 71 75 69 72 |ot may b|e requir|
|00006310| 65 64 20 61 66 74 65 72 | 20 72 75 6e 6e 69 6e 67 |ed after| running|
|00006320| 20 61 6e 20 69 6e 66 65 | 63 74 65 64 20 70 72 6f | an infe|cted pro|
|00006330| 67 72 61 6d 2e 00 00 00 | 44 69 72 56 69 72 00 50 |gram....|DirVir.P|
|00006340| 72 6f 67 72 61 6d 73 20 | 77 69 74 68 20 43 4f 4d |rograms |with COM|
|00006350| 20 65 78 74 65 6e 73 69 | 6f 6e 73 20 61 72 65 20 | extensi|ons are |
|00006360| 69 6e 66 65 63 74 65 64 | 20 77 68 65 6e 20 74 68 |infected| when th|
|00006370| 65 20 44 4f 53 20 44 49 | 52 20 63 6f 6d 6d 61 6e |e DOS DI|R comman|
|00006380| 64 20 69 73 20 75 73 65 | 64 2e 20 54 68 65 20 44 |d is use|d. The D|
|00006390| 4f 53 20 43 48 4b 44 53 | 4b 20 70 72 6f 67 72 61 |OS CHKDS|K progra|
|000063a0| 6d 20 72 65 70 6f 72 74 | 73 20 66 69 6c 65 20 61 |m report|s file a|
|000063b0| 6c 6c 6f 63 61 74 69 6f | 6e 20 65 72 72 6f 72 73 |llocatio|n errors|
|000063c0| 20 6f 6e 20 61 20 64 72 | 69 76 65 20 77 69 74 68 | on a dr|ive with|
|000063d0| 20 69 6e 66 65 63 74 65 | 64 20 70 72 6f 67 72 61 | infecte|d progra|
|000063e0| 6d 73 2e 00 43 72 65 65 | 70 69 6e 67 20 44 65 61 |ms..Cree|ping Dea|
|000063f0| 74 68 00 43 68 61 6e 67 | 65 73 20 64 69 72 65 63 |th.Chang|es direc|
+--------+-------------------------+-------------------------+--------+--------+
Only 25.0 KB of data is shown above.