Warning ! Virus !

┌────────────────── ──────────────────── ─────────────────── ───────────────────┐ ░Forwarded by: Igor Gruzdev (2:5030/362.2) ░From the echo: ZX.SPECTRUM (About zx-spectrum according to ex-USSR.) ░From: Andrey Mihaylow, 2:5050/16.16 (Wed Jun 04 1997 00:52) ░To: All ░About: Warning! Virus! ├────────────────────────────bite─here s────────────────────────────────────┤ Greetings dear All! If you know assembly language and know how to use a bug, then go ahead: ORG 32876 D.I. LD SP,SHT SHT POP HL EX (SP),HL Now assemble and go to debug, isn’t it funny? And if you remove DI, isn’t that an idea for xorking? (IMHO: 4944 bytes per interrupt (Pentagon)) Best regards, Andy Man -+- + Origin: 8000 F3 31 04 80 E1 E3 (2:5050/16.16) └────────────────────────────bite─here s────────────────────────────────────┘ Hello, All! Who will explain with their fingers, to me, who does not understand assembly language, what’s going on here? funny? With all kinds of regards and wishes. Igor.

* Message from gate SpbZxNet<=>FidoNet. Hello Paul! Somehow 06/11/97 at 04:21 Paul Falcon wrote something for Igor Gruzdev on the topic "Re:Warning! Virus!", responding to the letter written by the above Tovaarischem numbers like 10-06-97 at 18:42... >> If you know assembly language and know how to use a bug, then go ahead: >>ORG 32876 >> DI >> LD SP,SHT >> SHT POP HL >> EX (SP),HL [skip] IG>> Who can explain to me, who doesn’t understand assembly language, what’s going on IG>> funny? [skip] PF> I'm like a smart hedgehog, the first thing I do is in sts PF> useful, I don’t understand anything, well, I don’t know PF> what's the sex in it.... [skip] Hmm... Pash, are you a coder or where? ;-))) 10 minutes was enough for me to do everything - this is ru-rulezz! So, if you run this program, then we get the following... so: 0000 LD SP,MMM ;when we are here, SP points to ;cell 0003 0003 MMM POP HL ;SP now points to cell 0005, ;and in HL we have: in [L] the command code POP HL ;in [H] we have the command code EX (SP),HL 0004 EX (SP),HL ;transfer HL content to addresses ;0005/0006 0005 NOP 0006 NOP ;and now ^^^^ there are not 2 NOPs sitting here, but0005 POP HL 0006 EX (SP),HL ;!!!!!! 0007 NOP 0008 NOP 0009 NOP 000A NOP After executing commands at addresses 0005/0006 to addresses 0007/0008 will be POP HL teams: EX (SP),HL. The implementation of which will lead to the appearance at addresses 0009/000A POP HL commands: EX (SP),HL, etc. And if the interrupter is turned off, then the memory will fill with this garbage, and if enabled - a good basis for XOR'ki.... that's it! Well, that's all... Best regards, Aleksandr (*MAS*) -+- Is-dos with macro size 4.5nm + Origin: 'Cinema' - rules! (812/00.00)