Viral Rewind: Virus.DOS.Odious

Visit my Linktree to access my socials and other channels: linktr.ee/mausolfb
-----------------------------------------------------------
. Odious (which I've found is misleadingly called "Creeper" sometimes due to a piece of text within the viral code) is a direct-action infector of .COM files in DOS. When run it searches out a .COM file in the present directory and infects it.
Payload: When it's the month of May and the day falls on a Monday, after multiple instances of Odious is loaded from infected .COM programs it will "remove" one character from the DOS character set making them "invisible". This will build progressively as more instances of Odious are run; more and more characters will no longer appear "visible" and this condition extends to fullscreen DOS programs like the MS-DOS text editor. Exiting from the DOS command prompt to a shell or something similar seems to reset the payload effect.
Odious does not appear to affect displaying numbers; only letters and special characters.
#virus #dos #malware
-----------------------------------------------------------
Like the Facebook page: / brian.mausolf
Follow me on Twitter: / mausolfb

[@maxmuster7003]

I use a function for changing the pixel of eight 8x16 character capital letter from A-H: @echo off REM Panda.bat echo a>tmp.deb echo mov ax,1110>>tmp.deb echo mov bp,118>>tmp.deb echo mov cx,8>>tmp.deb echo mov dx,41>>tmp.deb echo xor bl,bl>>tmp.deb echo mov bh,10>>tmp.deb echo int 10>>tmp.deb echo ret>>tmp.deb echo org 0118>>tmp.deb echo DB 0,0,1,7,1f,3f,7f,7f,7f,7e,7c,7c,7c,7c,7c,7c>>tmp.deb echo DB 0,3f,ff,ff,ff,ff,ff,ff,1f,f,7,7,7,7,7,7>>tmp.deb echo DB 0,fc,ff,ff,ff,ff,ff,ff,f8,f0,e0,e0,e0,e0,e0,e0>>tmp.deb echo DB 0,0,80,e0,f8,fc,fe,fe,fe,7e,3e,3e,3e,3e,3e,3e>>tmp.deb REM REM 00000000 00000000 00000000 00000000 REM 00000000 00111111 11111100 00000000 REM 00000001 11111111 11111111 10000000 REM 00000111 11111111 11111111 11100000 REM 00011111 11111111 11111111 11111000 REM 00111111 11111111 11111111 11111100 REM 01111111 11111111 11111111 11111110 REM 01111111 11111111 11111111 11111110 REM 01111111 00011111 11111000 11111110 REM 01111110 00001111 11110000 01111110 REM 01111100 00000111 11100000 00111110 REM 01111100 00000111 11100000 00111110 REM 01111100 00000111 11100000 00111110 REM 01111100 00000111 11100000 00111110 REM 01111100 00000111 11100000 00111110 REM 01111100 00000111 11100000 00111110 REM echo DB 7c,7c,7c,7c,7c,3e,3f,3f,1f,7,3,1,0,0,0,0>>tmp.deb echo DB 7,7,7,7,7,7,1f,fe,fc,fc,ff,c0,f0,7f,f,0>>tmp.deb echo DB e0,e0,e0,e0,e0,e0,f8,7f,3f,3f,ff,3,f,fe,f0,0>>tmp.deb echo DB 3e,3e,3e,3e,3e,7c,fc,fc,f8,e0,c0,80,0,0,0,0>>tmp.deb REM REM 01111100 00000111 11100000 00111110 REM 01111100 00000111 11100000 00111110 REM 01111100 00000111 11100000 00111110 REM 01111100 00000111 11100000 00111110 REM 01111100 00000111 11100000 00111110 REM 00111110 00000111 11100000 01111100 REM 00111111 00011111 11111000 11111100 REM 00111111 11111110 01111111 11111100 REM 00011111 11111100 00111111 11111000 REM 00000111 11111100 00111111 11100000 REM 00000011 11111111 11111111 11000000 REM 00000001 11000000 00000011 10000000 REM 00000000 11110000 00001111 00000000 REM 00000000 01111111 11111110 00000000 REM 00000000 00001111 11110000 00000000 REM 00000000 00000000 00000000 00000000 REM echo.>>tmp.deb echo n Panda.com>>tmp.deb echo rcx>>tmp.deb echo 98>>tmp.deb echo wcs:100>>tmp.deb echo q>>tmp.deb debugnul del tmp.deb Panda.com del Panda.com echo ABCD echo EFGH