Path: utzoo!utgpu!news-server.csri.toronto.edu!bonnie.concordia.ca!uunet!bellcore!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: frisk@rhi.hi.is (Fridrik Skulason)
Newsgroups: comp.virus
Subject: Processor-specific viruses and other subjects (PC)
Message-ID: <0010.9101221404.AA12733@ubu.cert.sei.cmu.edu>
Date: 21 Jan 91 10:11:46 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 46
Approved: krvw@sei.cmu.edu


			Processor-specific viruses

When the first viruses appeared, some of them were discovered to work
only on 8088/8086 but not on '286 or '386 computers.  The best example
of this are two early boot-sector viruses:

	Ping-Pong (Italian, Bouncing Ball) - the standard version uses
	the MOV CS,AX instruction which only exists on 8088 and 8086.

	Alameda (Yale) - The first version used the POP CS instruction,
	for the same purpose - which also generates an "invalid instruction"
	interrupt on later processors.

The reason for this was assumed to be that the authors of the viruses
only had access to an 8088/8086 computer.

Now we have a different, but equally interesting situation.  One of
the recent viruses from Eastern Europe fails to execute on the 8088
and 8086 processors, but works perfectly on a '386.  The reaon is its
use of the PUSH IMMEDIATE instruction (hex opcode 68), which did not
exixt on the 8088/86.  The author of this otherwise non-remarkable 492
byte virus can therefore safely be assumed to have access to a more
powerful computer than the virus writers two years ago... :-)

			Translations wanted....

From the Bebe virus comes this text - what does it mean - and what
language is this ?

	 VIRUS!      Skagi "bebe"    Fig Tebe !

The MLTI virus contains this text - clearly a reference to the "Eddie"
virus, but what does "RED DIAVOLYATA" mean ?  (I want to emphasize
that "Dark Avenger" is the name of the author of the "Eddie" virus -
not the name of the virus itself.)

	Eddie die somewhere in time!
	This programm was written in the city of Prostokwashino
	(C) 1990   RED DIAVOLYATA
	Hello! MLTI!

From the POLIMER comes this text - is this Polish ? And what does it
mean ?

        A le'jobb kazetta a POLIMER kazetta !   Vegye ezt !