A.I.S.F. Virus: --------------- Length: 8708 Bytes This virus will be probably spreaded as a faked VirusChecker update.The file works with all kind of Kickstarts and memory- configurations and has no problems with faster processors. This file opens a window ith the following name: 'VIRUS-CHECKER V6.72' 'by A.I.S.F. !!!' The window has no funtion.It`s only a trick to irritate the users. The $6c Vector in the Zeropage will be patched. Following routine will be installed in the vector: 1.Decrease a counter by 1 2.Compare if it $50000 3.If not,do nothing 4.If $50000 is reached,then display the following alert,which will be decrypted first: `!! CRIME DO NOT PAY !!!` `WHY ARE YOU SWAPPING ILLEGAL SOFT ?` `BECAUSE YOU ARE A CRIMINAL !!!!` `AND BE SURE:` `WE (A.I.S.F.) WILL GET YOU !` `(A)NTI` `(I)ILLEGAL` `(S)WAPPING` `(F)OUNDATION` `-PRESS MOUSE TO CONTINUE-` If you then press a mousebutton,then the destroyroutine will be started.Your drivemotorhead steps around on the disk. I am only wondering,why the value $50000 was chosen.If you count only the VBI interrupt then the virus would start its work after nearly 2 hours. At the end of the file (which is not crunched),you can see a non- crypted text,which says several times: ' THE A.I.S.F. INTERLAMER-VIRUS ' VirusWorkshop removes the useless and the patched $6c vector. Thanks must go to Ingo Schmidt for sending me this virus. Test by Markus Schmall Detection tested on 11.09.1993. [Go back]