2
Parzi
4y

looking at more DOS malware. 12 samples in this set of 80 (out of 16 looked at) read the time then overwrite the registers 5 or 6 lines later. The other 4 don't even bother.

Comments
  • 3
    What do you expect?
    The only interesting one i remember was the parasite one who encrypted 1/2 of the hdd and put the decypher key in the memory so you could use the pc but you needed the virus to continiously dectrypt that encrypted part... So once you got it you couldnt remove it.
  • 3
    @Gregozor2121 OneHalf. It encrypts 2 tracks at a time, 2 every boot, until the halfway mark of the drive is reached. Then, it prints a message "Dis is one half." and lets you continue. A utility was made to disinfect and decrypt your data if you didn't delete it like an idiot.
  • 1
    @pythonInRelay how is this a comment?
  • 1
    @Parzi Yep, you are right. I have learned about this on a random yt vid. Is it a malware that you are looking for that isnt too boring?
  • 1
    @Gregozor2121 One or several in tandem, yes. I haven't actually dug into most of my samples, so I thought I'd disassemble them and fuck with them some, maybe hybridize some of them... (DOS/Win16/Win9x stuff tend to hybridize and they tend to break during the process, so sometimes with hybridization they break in such a way that they do completely new things that neither alone can do. This is why "several in tandem" is also an option. Order and currently-unknown variables also usually matter with that too. It's really interesting...)
Add Comment