Virus.DOS.SSR (thanks for 60,000 subscribers)
HTML-код
- Опубликовано: 5 окт 2024
- flightcpuboy's analysis of this virus: malwareup.org/v...
huge thanks to flight for his work disassembling this virus and for making this video possible. and huge thanks to all of you for continuing to watch
For those who are curious - after Aidstest it shows "А не пора ли г-ну Лозинскому на пенсию !" ("Is it not the time when mr. Lozinsky should retire?" - Lozinsky is a Dr. Web company director and an author of Aidstest antivirus)
Yup, that's right
diwan “It isn’t time for Mr. Lozinsky to retire!” is the text.
This infects EXE files in such a way that they never run again.
Looks like these executables are about to be _executed..._
That alarm payload kinda spooks me ;-;
Camo Yoshi yoshishy
oh definitely if i was 6-9 i would be frozen in shock for a minute!
Camo Yoshi google this fluttershy lol
Даниил Геймер Or we could not. .I'd rather not.
Даниил Геймер What?
Thanks for getting the payloads to work on the standalone--it's a whole lot different than what you see on the VM! The screen shaking effect is very well rendered in 60 FPS and the other payloads are just as cool yet menacing. I think what helped the most during analyzing this virus is recognizing the difference between garbage instructions and meaningful instructions in the disassembly listing. iirc, more than half of the virus is occupied by garbage instructions especially trivial jumps and calls. Look for instructions that directly modify memory. From thereon you can just follow the virus's decryption algorithm (it was just a xor for the most part but it became complicated soon enough) and emulate that through a script.
I think that this channel will definitely new reach heights. Keep it up Dan! The quality of your videos will improve. There may be a limited number of viruses but there is still a lot of content to cover on the old vx scene. The possibilities are endless. Congrats on 60k subs and good luck on getting a master's and finding a career!
Love the comment you made for the uploader, I appreciate that.
PRINT A RUSSIAN IN MUSHROOM
LMFAO
GlitchyPSI i died XD
PRINT OUR A MESSAGE IN RUSSIAN
Россия тут
NИva
@@Газь да
_"...a Russian in mushroom."_
~Daniel White
Trap House
***** lol
+CWINDOWSsystem32 BIGST LAWL EVUR M80
Someone should make an indie horror game based off of having to navigate a DOS network and recognizing and destroying viruses by their bizarre and sinister behaviors before they drop their destructive payload and destroy what you were looking for, and probably also scare the crap out of you. The different ways some of these behave and stop you from using common disinfecting methods are interesting, and would make a fun and tense low budget puzzle/horror game.
100% this needs to happen.
Imma try to do that lol
danooct1 "This should print out a Russian in mushroom." I make those same mistakes my friend
@@Etobio Is it safe?
grande1900 yes
danooct at 4am is better than sex
Being online on Discord, playing some music or some video games while listening to music or watching at 4am is much better than sex
*"This should print out a russian in mushroom"* -Danooct1 or Daniel White 2015
I am crying laughing
That is this RUclipsrs real name?
Danooct1 is Daniel white?
@@roxasthesquiddog
yeah
I wonder if SS Rat managed to improve his English skills after all these years.
-"thanks for 60,000 subscribers"-
Thank *YOU* for making awesome videos!
You deserve all the subs :D
Everytime you post a new video, I watch it instantly when I see it
"naivnij/наивный" (did I wrote it right?) means "foolish/naive" in russian. I speak polish, which is quite similar to russian.
You wrote "naiwnyj" and I speak Polish too
Native speaker z rosyjskiego - masz rację:) наивный po rosyjsku też znaczy “naiwny” po polsku.
WOW! Thanks for the long video, Dan! I am a fan of your videos and a Virtual Machine user (I'm a kid who installed DOS and Windows 3.1 for shiz and giggles). I am proud to be one of your 60,000 subscribers!
I love old viruses!! Theure so cool and the creative payloads have a creepy feel to them
"Hey Danooct1, what you doing?"
"Ooohh ya know, just printing out a Russian in 'Mushin'."
When I was about 15 I got a virus on my grandparents computer that look like the cyber police we're going to come and arrest me. Ever since then I've been afraid to do anything on the internet that I didn't know. That's why I love watching your virus videos, is so I know what's going on and I can look for a way to disable the virus. And you can imagine how I got the virus on it
"This should print out a Russian in mushroom."
-danooct1, 2015
I'm Russian and I hate mushrooms.
@@PVE1981 Well, I mean, there's nothing wrong with that. Lots of mushrooms are poisonous, if not deadly.
Wow that's fucking cool man! Congrats on the 60K subs! This is a very unique virus that really do fucked with the users a lot! Never seen one as crazy as this before with a few exceptions like CIH and a few worm videos... That's crazy man. Thanks once again!
Oh flutter.exe
was there a metallica refrence to the song seek and destroy in that payload?
Heh, that was my thought too.
♪ SEARCHIIIIN', SEEK AND DESTROY! ♪
Congratulations on 60,000 subscribers! Road to 100,000!
You deserve every subscriber you have. Your awesone.
Some graphical payloads are impressive for DOS. Does this machine have VGA?
5 years late, but yes, he is using VGA.
"This should print out a russian in mushroom" - danooct1, 2015
Not sure how I'm going to print a Russian in mushroom.
I did not really know that dos viruses mess with the crt screens.
5:25 Kind of reminds me of a jumpy VHS tape playing. Lol. :P
Some of those captions that youtube auto-generates is amazing. Need to watch more of these viruses with them turned on.
Been here since 20k and never disliked anything you uploaded Dan keep up the videos and thanks for many great videos!
All the videos of viruses are AMAZING!
Oh, by the way, the MalwareUp link is dead.
Congrats on your degree, Dan.
I wonder, does the second payload look the same on LCD monitors, or if it's different, how does it look?
team56th i might have to check that out, actually. I had a different CRT hooked up when i was doing initial tests and it just made the monitor blank out a lot (the shaking payload, that is, all the other stuff should be the same)
danooct1 it looks like it might be messing with refresh rate, I remember seeing stuff like that on my old win98 pc when you set the refresh rate to a value that was too high for the monitor to handle
At first I thought his camera was glitching when the screen shaking payload happened.
So the computer is still "usable" during the shaking screen? Makes me wonder how would it look like when running an UI application, or even a game.
Tehstroyer I'd imagine all text-based programs will flicker. Not sure about graphics-based, though.
@FairPlay137 I tried edit (in a VM), it crashed DOS. Like Dan said, running pretty much anything graphical crashes DOS.
DOOM would be awfully trippy then
I think your Chanel is very entertaining and cool, and you make me laugh. Congratulations on 60k!
When in doubt, print out a Russian in mushroom.
*"This Should Print Out A Russian In Mushroom"* -Danooct1 2015
5:26 This is why you should never do drugs kids!
What happened to viruses that used to mess around with you like this? Now it is all,"GIVE ME ALL OF YOUR MONEY!".
How nice, a destructive antivirus!
The camera fov gives it a warp screen. Holy dell the SSR virus was just scared to me.
Finally!!! I missed view some vintage viruses in action! :D
>no videos from dan or rogue in a long time
why live
I thought you were shaking the camera at 5:26 good video man congrats on 60k
3:20 Y'know, people make mistakes sometimes...
...but what Danooct1 just said was...umm......I have no words for it.
Pope Cromwell pronounces a blessing upon your Masters, future career and uploads. Pope Cromwell knows you will succeed. Your Pope also adds that he is always pleased with these uploads.
The shaking thing looks like an old VHS tape.
neat. can you do some more modern viruses?
Dan only does old viruses. If you want to see newer viruses, you should check out Rogueamp or Rougeamp 2
Magic Turtle Tag team Here I go again... *Rogueamp *rogues
+MagicTurtle theres still people makeing viruses for fun.there just hard to find
Congrats on 60,000!
5:40 damn I feel dizzy
I want the alarm payload as a actual alarm for a antivirus or some sort of digital alarm with the screen shaking and glitched effect
Russian in Mushroom goes hard
Danoct I'm your newest subscriber
Probably worth mentioning that the link is no longer usable. Internet Archive has it there, though.
Man, this virus is really cool.
3:15 I for one sure would like to learn, mushroom.
That payload could hurt anyone's eyes
Techno Soft, the creators of Thunderforce II and Herzog Zwei made this? lol
not bad for such an old virus very complicated an quite devestading payload
1st payload: Okay?
2nd payload: Blueshark much?
3rd payload: Would be fitting for a creepypasta.
4th payload: Revenge? On what?
Probably Peter Norton.
Also, congrats on 60k!
>>DON'T TOUCH THE KEYBOARD
I got a fucking Tai Lopez ad before this.
I hope you're happy...
Weird question: How do you remove the virus afterwords? Is it all the same computer when you run a DOS virus, or are there different ones?
So was the shaking actually a hardware induced effect, or just a graphics hack done in software?
To me, it looks like software messing with the graphics card refresh rate/resolution, switching back and forth between two modes extremely quickly. This causes the monitor to briefly lose sync, causing all the weirdness with the text wrapping around, etc. I don't really think this kind of effect could be easily done just in software, let alone that smoothly and without completely locking the system up.
That's a crazy virus there
Congrats on getting your master's
Can you do a setup tour?
Comments:
100% Print a russian in mushroom
When I see SSR i think silent reading time in english class in high school
Wow, you're back!
Can you do another Windows virus? You haven't done one in forever.
I agree ms dos viruses are cool but windows is the best
grats on 60k subscribers
OH DANNY BOY!
I wonder if this virus was made by the same people who made bad rats. Also 60,000 K hype!
FinnishGuy101 yep :D
The alarm payload scared me
These old viruses are cruel. If something made my computer start beeping//some other loud noise when it is infected, I'd end up jumping out of my seat.
Seriously love your channel, though.
Hopscotch Jr Trust me, that'd be the best case scenario. Then you'd have those that just fully fry your BIOS chip and delete your drive.
THOSE you'd be scared of
too late to be scared
Congrats danooct1!
dan you should make your own virus/trojan or what ever and show it off to us
Naivnij))
Wow that's a lot of detail on the forum post
There was another antivirus ad on this video.Still an AVG ad!
Will you ever make a vid on Virtumonde/Vundo?
\m/ Searchin'... SEEK AND DESTROY! \m/
6 years late, but at 4:54, "Naivnij" means exactly "naive", just in Russian, I guess.
You're right.
I might just be dumb af, or have misunderstood something, but why didnt we see the screen glitch payload at the last one?
Lada333 the machine hangs
danooct1 dancot please do you have a video of my doom virus i wana see it in action :(
DarkSmoke 10 lol dancot
Because the fiftieth file was run after fifteen minutes, but before twenty-three (when the shaking payload starts).
And even if he had sat and watched the "revenge" payload long enough for the shaking to have started, it couldn't have because the computer was hanged at the moment the "revenge" payload began.
What would the shaking effect look like in a non-CRT screen?
I doubt it, modern displays turn off the picture for protection when there are fluctuations on the vertical/horizontal frequency
This would scare the crap out of me if this happened to my pc.
yay
I remember this from Destroy the Godmodder 0rigins.
darn. As of right now, the link in the description is kinda broken.
yay dan
how would that screenshaking payload work on an LCD?
Can you explain how these DOS worms infected other machines? How did the first person get infected?
I heard they were generally spread by people downloading things from others through FTP servers.
That was one of many ways, often such things would also find their way onto a machine through an infected floppy disk.
Floppy disks
“it’s huge! it’s just over 20kb”
You should make your own virus on a modern day computer.
RUclips reverts itself randomly
dan too busy making mixtapes with rouge
+Dubstep Kitteh ur mom
wow so creative -.-
Good luck on getting your Master's degree, and America's job market still fucking sucks (I'm trying to find a job myself and I only have a GED) but I hope you can find one too.