     ASMVirus
     
     The ASMVirus is a dangerous nonmemory resident overwriting virus. It
     searches for .ASM-files, renames the file with BAK file name
     extension, then overwrites the .ASM-file with the hexadecimal code
     of the virus that is converted to ASM format.
     The result of the infection looks as follows:

 .MODEL TINY
 .CODE
 ORG 256
 a:
      DB     0FCh
      DB     0B4h
      ...

      ...
 ENDS
 END a

     The result of assembly of such a file is the copy of the virus.
     
     The virus contains the internal text strings:

 0123456789ABCDEF.MODEL TINY
 .CODE
 ORG 256
 a:
 ENDS
 END a
 h
 DB
 *.asm bak 0

     &copy; Copyright 1995 Eugene V. Kaspersky - All Rights reserved.
     GV221195
