CHESS@YKTVMV.BITNET (David.M.Chess) (10/20/90)
There are now four known viruses in this series; all are based heavily on the JV, with the addition of a timer-interrupt handler that plays music periodically, some routines to make the occasional disk-write fail, and (in the later ones) code to infect boot records as well as executables; the later two (I think) also infect on OPENs of files called EXE or COM, as well as on executions. Most or all of them also react in various ways to attempts to execute any program called ACAD.EXE (is that familiar to everyone?). Each one contains a string (stored garbled in all but the first, earliest virus). I give the strings in clear (and slightly reformatted) below. Does anyone know where Fen Chia U. is? (I've also removed the vowel from the leading obscenity in the first message...) DC >From the one just discovered at Western Michigan U: > Sh*t! As you can see this document, you may know what this > program is. But I must tell you: DO NOT TRY to WRITE ANY ANTI-PROGRAM > to THIS VIRUS.This is a test-program, the real dangerous code will > implement on November. I use MASM to generate varius virus > easily and you must use DEBUG aginst my virus hardly, that is > foolish. Save your time until next month. OK? Your Sincerely, ABT > Group., Oct 13th, 1989 at FCU. >From the "Plastique 4.51": > Program: Plastique 4.51 (plastic bomb), > Copyright (C) 1988, 1989 by ABT Group. > Thanks to: Mr. Lin (IECS 762??), > Mr. Cheng (FCU Inf-Center) >From the "Plastique 5.21": > PLASTIQUE 5.21 (plastic bomb) > Copyright (C) 1988-1990 by ABT Group > (in association with Hammer LAB.) > WARNING: DON'T RUN ACAD.EXE! >From the "Invader": > by Invader, Feng Chia U., > Warning: Don't run ACAD.EXE!