ÚÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ¿ ³ OŸŸSpring v0.89 - By Virogen - 10/03/93³ ÀÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÙ Here's yet another release of this never ending virus. I really wanted to wait a little longer before I released a new version, but I wanted to get a new version out ASAP. v.90 will probably follow soon. so.. what the hell did I change in this version? well.. - now infects on int 21h function calls as follows : 0Eh - Change drive - Infects up to 5 files in the current directory, ONLY if a program is not running. Kills ANTI-VIR.DAT and CHKLIST.* also. 3Bh - Change directory - Same as above 4Bh - Execute - Infects anytime, whether a program is running or not, does not delete ANTI-VIR.DAT and CHKLIST.* files. - After alot of expiermenting I came up with a few trix (not the ceral) to get around TBAV 607 heuristics (which plagued the last version) for the most part. A few infected files will get a warning, and the others will set off 3 or 4 flags but it's not enough to cause TBAV to warn the user. - No longer detectable by Fprot Heuristics - Mutation engine was improved, although still not completly polymorphic. Type : PSRhA - Parastic & Spawning Resident - Mutating Origin : Virogen's Drunken Programming Inc. Length : 1556-1606 Interrupts Hooked : 20h 21h (24h e.h.) 27h Infection Method : Once memory resident, the virus infects up to five files in the current directory everytime a file is execucted, and when a program is NOT running it will infect on directory changes and disk changes. It will also kill ANTi-VIR.DAT and CHKLIST.* files at the time of infection on the two latter occurances. Anyway, it will first infect EXE files (spawning) in a directory, once all the EXE files have been infected, it moves to COM files (parastic). Your Faithful Comrad, Virogen