NYEVENBA@WEIZMANN.BITNET (Baruch Even) (10/09/90)
Hello all, I'm sorry for all those mail's but I'm just a starter... The new info concerns the temporary damage and the permanent damage... The temporary one is printing a string the counter is counting just the following functions of INT 21h: 3Dh, 0Fh, 4Bh, 0Eh, 5Bh, 16h, 3Ch, 41h, 13h, 56h, and 17h. the permanent damage is changing the first 3 bytes but it seems that the virus restores those bytes after the virus install himself... this means the program wont be truly damaged and would run just fine... the virus also stores for this porpuse the first 3 bytes... Baruch Even +-------------------------------------------------------+ | Baruch Even | | | | BitNet - NYEVENBA@WEIZMANN.BITNET | | InterNet - nyevenba%weizmann.bitnet@cunyvm.cuny.edu | | | | Enjoy The Silence - Depeche Mode | +-------------------------------------------------------+