Virus.DOS.SSR (thanks for 60,000 subscribers)

flightcpuboy's analysis of this virus: malwareup.org/v...
huge thanks to flight for his work disassembling this virus and for making this video possible. and huge thanks to all of you for continuing to watch

[@jackmiller5675]

For those who are curious - after Aidstest it shows "А не пора ли г-ну Лозинскому на пенсию !" ("Is it not the time when mr. Lozinsky should retire?" - Lozinsky is a Dr. Web company director and an author of Aidstest antivirus)

[@Diwenry]

Yup, that's right

[@cameronbosch1213]

diwan “It isn’t time for Mr. Lozinsky to retire!” is the text.

[@mihaelkYeah]

This infects EXE files in such a way that they never run again. Looks like these executables are about to be _executed..._

[@FlightCPUboy]

Thanks for getting the payloads to work on the standalone--it's a whole lot different than what you see on the VM! The screen shaking effect is very well rendered in 60 FPS and the other payloads are just as cool yet menacing. I think what helped the most during analyzing this virus is recognizing the difference between garbage instructions and meaningful instructions in the disassembly listing. iirc, more than half of the virus is occupied by garbage instructions especially trivial jumps and calls. Look for instructions that directly modify memory. From thereon you can just follow the virus's decryption algorithm (it was just a xor for the most part but it became complicated soon enough) and emulate that through a script. I think that this channel will definitely new reach heights. Keep it up Dan! The quality of your videos will improve. There may be a limited number of viruses but there is still a lot of content to cover on the old vx scene. The possibilities are endless. Congrats on 60k subs and good luck on getting a master's and finding a career!

[@roxasthesquiddog]

Love the comment you made for the uploader, I appreciate that.

[@Lunar_Capital]

That alarm payload kinda spooks me ;-;

[@MayDay386]

Camo Yoshi yoshishy

[@Lunar_Capital]

oh definitely if i was 6-9 i would be frozen in shock for a minute!

[@MayDay386]

Camo Yoshi google this fluttershy lol

[@CoryC321]

Даниил Геймер Or we could not. .I'd rather not.

[@CoryC321]

Даниил Геймер What?

[@GlitchyPSI]

PRINT A RUSSIAN IN MUSHROOM LMFAO

[@Underappreciatedclassics]

GlitchyPSI i died XD

[@NigelMontezuma]

PRINT OUR A MESSAGE IN RUSSIAN

[@user-xi2pv3pk2h]

Россия тут

[@batorerdyniev9805]

NИva

[@notsu]

@@user-xi2pv3pk2h да

[@nasurak1345]

Someone should make an indie horror game based off of having to navigate a DOS network and recognizing and destroying viruses by their bizarre and sinister behaviors before they drop their destructive payload and destroy what you were looking for, and probably also scare the crap out of you. The different ways some of these behave and stop you from using common disinfecting methods are interesting, and would make a fun and tense low budget puzzle/horror game.

[@ChungusKhann]

100% this needs to happen.

[@Futuretitan4890]

Imma try to do that lol

[@Etobio]

danooct1 "This should print out a Russian in mushroom." I make those same mistakes my friend

[@grande1900]

@@Etobio Is it safe?

[@alfieclaborn4446]

grande1900 yes

[@CadrinTheWerecat]

I wonder if SS Rat managed to improve his English skills after all these years.

[@StefanSreto]

danooct at 4am is better than sex

[@DieNVA]

Being online on Discord, playing some music or some video games while listening to music or watching at 4am is much better than sex

[@CWINDOWSsystem32]

_"...a Russian in mushroom."_ ~Daniel White Trap House

[@thebible1338]

***** lol

[@TorutheRedFox]

+CWINDOWSsystem32 BIGST LAWL EVUR M80

[@InessaMaxinova]

"naivnij/наивный" (did I wrote it right?) means "foolish/naive" in russian. I speak polish, which is quite similar to russian.

[@xyzzy-dv6te]

You wrote "naiwnyj" and I speak Polish too

[@dydysh99]

Native speaker z rosyjskiego - masz rację:) наивный po rosyjsku też znaczy “naiwny” po polsku.

[@2xsaiko]

-"thanks for 60,000 subscribers"- Thank *YOU* for making awesome videos! You deserve all the subs :D Everytime you post a new video, I watch it instantly when I see it

[@Fyralism]

*"This should print out a russian in mushroom"* -Danooct1 or Daniel White 2015 I am crying laughing

[@roxasthesquiddog]

That is this KZbinrs real name?

[@roxasthesquiddog]

Danooct1 is Daniel white?

[@TELEK1NET1C]

@@roxasthesquiddog yeah

[@GabeofPlayStationLand]

WOW! Thanks for the long video, Dan! I am a fan of your videos and a Virtual Machine user (I'm a kid who installed DOS and Windows 3.1 for shiz and giggles). I am proud to be one of your 60,000 subscribers!

[@Pyromaster_]

When I was about 15 I got a virus on my grandparents computer that look like the cyber police we're going to come and arrest me. Ever since then I've been afraid to do anything on the internet that I didn't know. That's why I love watching your virus videos, is so I know what's going on and I can look for a way to disable the virus. And you can imagine how I got the virus on it

[@mclaine33]

Wow that's fucking cool man! Congrats on the 60K subs! This is a very unique virus that really do fucked with the users a lot! Never seen one as crazy as this before with a few exceptions like CIH and a few worm videos... That's crazy man. Thanks once again!

[@MayDay386]

Oh flutter.exe

[@fuzzywuzzy4564]

I love old viruses!! Theure so cool and the creative payloads have a creepy feel to them

[@underintact134]

was there a metallica refrence to the song seek and destroy in that payload?

[@mcj88]

Heh, that was my thought too. ♪ SEARCHIIIIN', SEEK AND DESTROY! ♪

[@wyzmith2840]

"Hey Danooct1, what you doing?" "Ooohh ya know, just printing out a Russian in 'Mushin'."

[@yunagamer]

You deserve every subscriber you have. Your awesone.

[@Nikku4211]

Some graphical payloads are impressive for DOS. Does this machine have VGA?

[@nottucks]

5 years late, but yes, he is using VGA.

[@fireflykoi1889]

Congratulations on 60,000 subscribers! Road to 100,000!

[@robertnussberger2028]

I did not really know that dos viruses mess with the crt screens.

[@SkyTheLeafeon]

"This should print out a Russian in mushroom." -danooct1, 2015

[@PVE1981]

I'm Russian and I hate mushrooms.

[@SkyTheLeafeon]

@@PVE1981 Well, I mean, there's nothing wrong with that. Lots of mushrooms are poisonous, if not deadly.

[@FairPlay137]

Oh, by the way, the MalwareUp link is dead.

[@avi8aviate]

Not sure how I'm going to print a Russian in mushroom.

[@life_bricks]

"This should print out a russian in mushroom" - danooct1, 2015

[@TheCanadianToast]

5:25 Kind of reminds me of a jumpy VHS tape playing. Lol. :P

[@team56th]

I wonder, does the second payload look the same on LCD monitors, or if it's different, how does it look?

[@danooct1]

team56th i might have to check that out, actually. I had a different CRT hooked up when i was doing initial tests and it just made the monitor blank out a lot (the shaking payload, that is, all the other stuff should be the same)

[@chrispychickin]

danooct1 it looks like it might be messing with refresh rate, I remember seeing stuff like that on my old win98 pc when you set the refresh rate to a value that was too high for the monitor to handle

[@GaminCow]

Been here since 20k and never disliked anything you uploaded Dan keep up the videos and thanks for many great videos!

[@SpunkMcKullins]

Congrats on your degree, Dan.

[@Tehstroyer]

So the computer is still "usable" during the shaking screen? Makes me wonder how would it look like when running an UI application, or even a game.

[@FairPlay137]

Tehstroyer I'd imagine all text-based programs will flicker. Not sure about graphics-based, though.

[@cameronbosch1213]

​@FairPlay137 I tried edit (in a VM), it crashed DOS. Like Dan said, running pretty much anything graphical crashes DOS.

[@ShadowNinja452]

DOOM would be awfully trippy then

[@Coburn64]

Some of those captions that youtube auto-generates is amazing. Need to watch more of these viruses with them turned on.

[@kritin6059]

All the videos of viruses are AMAZING!

[@5tronguy160]

At first I thought his camera was glitching when the screen shaking payload happened.

[@jojos9125]

I think your Chanel is very entertaining and cool, and you make me laugh. Congratulations on 60k!

[@avi8aviate]

When in doubt, print out a Russian in mushroom.

[@milkyfoks5495]

5:26 This is why you should never do drugs kids!

[@andresbravo2003]

The camera fov gives it a warp screen. Holy dell the SSR virus was just scared to me.

[@titasbartaska8261]

*"This Should Print Out A Russian In Mushroom"* -Danooct1 2015

[@paytonkirschman4820]

What happened to viruses that used to mess around with you like this? Now it is all,"GIVE ME ALL OF YOUR MONEY!".

[@FairPlay137]

3:20 Y'know, people make mistakes sometimes... ...but what Danooct1 just said was...umm......I have no words for it.

[@monkeymart]

Weird question: How do you remove the virus afterwords? Is it all the same computer when you run a DOS virus, or are there different ones?

[@KFISHOWPIGS]

Congrats on 60,000!

[@banditsuit]

>no videos from dan or rogue in a long time why live

[@octane613]

neat. can you do some more modern viruses?

[@Cyortonic]

Dan only does old viruses. If you want to see newer viruses, you should check out Rogueamp or Rougeamp 2

[@FairPlay137]

Magic Turtle Tag team Here I go again... *Rogueamp *rogues

[@FloofyLeFloofsta]

+MagicTurtle theres still people makeing viruses for fun.there just hard to find

[@clementpoon120]

5:40 damn I feel dizzy

[@actuallypauseless]

I want the alarm payload as a actual alarm for a antivirus or some sort of digital alarm with the screen shaking and glitched effect

[@pswitch9553]

The shaking thing looks like an old VHS tape.

[@planetarycube5988]

How nice, a destructive antivirus!

[@AndrosynthNuclear]

So was the shaking actually a hardware induced effect, or just a graphics hack done in software?

[@AureliusR]

To me, it looks like software messing with the graphics card refresh rate/resolution, switching back and forth between two modes extremely quickly. This causes the monitor to briefly lose sync, causing all the weirdness with the text wrapping around, etc. I don't really think this kind of effect could be easily done just in software, let alone that smoothly and without completely locking the system up.

[@FancyForeskin]

I thought you were shaking the camera at 5:26 good video man congrats on 60k

[@ProfessorHeavy1]

Probably worth mentioning that the link is no longer usable. Internet Archive has it there, though.

[@VirusVox]

Also, congrats on 60k!

[@pierolivera269]

Finally!!! I missed view some vintage viruses in action! :D

[@ThrustSSC13]

>>DON'T TOUCH THE KEYBOARD

[@theEpicjosh365]

What would the shaking effect look like in a non-CRT screen?

[@silentbloodyslayer98]

I doubt it, modern displays turn off the picture for protection when there are fluctuations on the vertical/horizontal frequency

[@jacquelineamelie5467]

Wow, you're back!

[@thecroatianbadger5398]

not bad for such an old virus very complicated an quite devestading payload

[@loki4295]

Danoct I'm your newest subscriber

[@superhacker35]

grats on 60k subscribers

[@Blackbird465]

Can you do another Windows virus? You haven't done one in forever.

[@thebatesbuster7580]

I agree ms dos viruses are cool but windows is the best

[@aleppogameingreal]

Russian in Mushroom goes hard

[@HybridEdits]

Can you do a setup tour?

[@OckGypsy]

3:15 I for one sure would like to learn, mushroom.

[@PopeCromwell]

Pope Cromwell pronounces a blessing upon your Masters, future career and uploads. Pope Cromwell knows you will succeed. Your Pope also adds that he is always pleased with these uploads.

[@jacknetarchive]

Congrats danooct1!

[@yumishindou5705]

When I see SSR i think silent reading time in english class in high school

[@thepirategamerboy12]

Techno Soft, the creators of Thunderforce II and Herzog Zwei made this? lol

[@VirusVox]

Man, this virus is really cool.

[@DOSgamer12]

1st payload: Okay? 2nd payload: Blueshark much? 3rd payload: Would be fitting for a creepypasta. 4th payload: Revenge? On what?

[@Icesan4096]

Probably Peter Norton.

[@muffinV136]

That payload could hurt anyone's eyes

[@joe564338]

Congrats on getting your master's

[@dangezzz]

Will you ever make a vid on Virtumonde/Vundo?

[@johnathanegbert9277]

I remember this from Destroy the Godmodder 0rigins.

[@cambridgeport90]

darn. As of right now, the link in the description is kinda broken.

[@pingwinit8611]

6 years late, but at 4:54, "Naivnij" means exactly "naive", just in Russian, I guess.

[@PVE1981]

You're right.

[@kit6041]

That's a crazy virus there

[@davidshulzy]

Do you use virtual machines for your videos? Just wondering.

[@no-kw4gg]

some of them, yes. but for this one, no

[@Lada333]

I might just be dumb af, or have misunderstood something, but why didnt we see the screen glitch payload at the last one?

[@danooct1]

Lada333 the machine hangs

[@DarkSmoke10]

danooct1 dancot please do you have a video of my doom virus i wana see it in action :(

[@chryastosslapat]

DarkSmoke 10 lol dancot

[@matthewbertrand4139]

Because the fiftieth file was run after fifteen minutes, but before twenty-three (when the shaking payload starts).

[@matthewbertrand4139]

And even if he had sat and watched the "revenge" payload long enough for the shaking to have started, it couldn't have because the computer was hanged at the moment the "revenge" payload began.

[@joshuaborges9709]

dan you should make your own virus/trojan or what ever and show it off to us

[@F22C1]

OH DANNY BOY!

[@labsupri6681]

yay

[@SRMsuperrandommoments]

This would scare the crap out of me if this happened to my pc.

[@dena3193]

Naivnij))

[@maro_1059]

I wonder if this virus was made by the same people who made bad rats. Also 60,000 K hype!

[@maro_1059]

FinnishGuy101 yep :D

[@jleuthardt]

The alarm payload scared me

[@JM2003]

Turn captions on at 2:03

[@lamie2882]

"Same for AIDS test" Lol

[@hippopotamus86]

Can you explain how these DOS worms infected other machines? How did the first person get infected?

[@ItsLeah43]

I heard they were generally spread by people downloading things from others through FTP servers.

[@asmcint]

That was one of many ways, often such things would also find their way onto a machine through an infected floppy disk.

[@KylesDigitalLab]

Floppy disks

[@ghostrecon420]

Wow that's a lot of detail on the forum post

[@chickerinoradio6617]

how would that screenshaking payload work on an LCD?

[@CWINDOWSsystem32]

I got a fucking Tai Lopez ad before this. I hope you're happy...

[@mwwve]

Comments: 100% Print a russian in mushroom

[@billman.]

You should make your own virus on a modern day computer.

[@vimb1717]

Thx

[@NesstheEchidna]

Good luck on getting your Master's degree, and America's job market still fucking sucks (I'm trying to find a job myself and I only have a GED) but I hope you can find one too.

[@LuxianYT]

How does he recover this physical computer after each time?

[@floweyseed]

There was another antivirus ad on this video.Still an AVG ad!

[@MKDSKairu763]

Dan, I can't find any more info about this virus anywhere else. Was it not well spread?

[@vinerym]

This is Revenge of -U- SSR