====================== Soupy Virus Source By The Attitude Adjuster and AccuPunk ====================== With the release of this virus marks the absolute end for all boring direct-action COM infectors from Virulent Graffiti... if some pop up in the future, bearing our name, and do not have revolutionary or funny activation stages, they are NOT from us... Anyway, I am at a loss as to why I should use anything but the DOC I wrote for this, but, here's what Patti says, and what I say, you compare and contrast who does it better! ========================================================================== Virus Name: Soupy Aliases: V Status: New Discovered: January, 1993 Symptoms: .COM file growth; TSR; message; system hangs Origin: United States Eff Length: 1,072 Bytes Type Code: PRC - Parasitic Resident .COM Infector Detection Method: Novi 1.15a+, CPAV/N Removal Instructions: Delete infected files General Comments: The Soupy virus was submitted in January, 1993, and is from the United States. Soupy is a non-resident, direct action infector of .COM programs, but not COMMAND.COM. In the case of advanced infections, it may install a portion of itself memory resident in order to facilitate the activation mechanism in the virus. When a program infected with the Soupy virus is executed, the Soupy virus will infect one .COM file located in the current directory, as well as update a counter within the viral code. Programs infected with the Soupy virus will have a file length increase of 1,072 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The Soupy virus activates once the counter within the viral code has reached 11, indicating the 11th generation of the virus has been reached. At this time, the virus will install a portion of itself in memory of 736 bytes, hooking interrupt 08. Once the memory resident portion of the virus has been installed, it will display the following messages one at a time every three minutes: "Unsuspecting user, 12 o'clock!" "Get ready... 'cause... THERE'S A VIRUS IN YOUR SOUP!" "From the guys that brought you Lythyum, Radyum, and VioLite comes:" "The Soupy Virus, (k) 1992 VG Enterprises, 216/513/602/904/703" "By The Attitude Adjuster & AccuPunk!" "Hurry! Hire an Anti-Virus Professional! Increase Wallet Space!" "...hmmm, ya' know, I think I''ll halt now..." Once the last message above is displayed, the system will be halted or hung. The above messages are encrypted within the Soupy viral code, as are the following additional text strings: "[Soupy] The Attitude Adjuster & AccuPunk, VG 08/23/92 to 12/02/92" "*.COM" "Bad command or file name" ========================================================================== ...and now me... ========================================================================== Virus Name: Soupy Aliases: Virus in Your Soup Author: The Attitude Adjuster & AccuPunk Group: Virulent Graffiti Scan ID: V Status: Frozen to Death Discovery: See, we were in this guy's disk box... Symptoms: .COM files altered; Messages; Orgin: West Bumblefuck, Ohio Eff Length: 1073 Bytes Res Length: 736 Bytes Type Code: Parasitic Non-Resident .COM Infector Detection Method: Removal Instructions: Delete infected files General Comments: The Soupy virus is a self-encrypting direct action infector of .COM programs. The virus, upon execution, will search the current directory for an uninfected .COM program. If none are found, the virus will restore the host file and continue execution. The Soupy virus mantains an infection counter. When this counter reaches 11, the virus will check for a copy of itself in memory, and if not found, make itself the owner of INT 8 and go resident. Approximately every 3 minutes, the virus will display the next of 7 messages, finally causing the machine to do a dynamic halt on the final message. ========================================================================== And, just to get the story straight, I wrote all the resident stuff out of boredom, and, the COM engine was what AccuPunk presented as his coding example to join the group. I just optomized the code, and added my residency, and I was ready to go... This virus sucks... mainly because I didn't know enough back then, but, that has all changed... ==========================================================================