DWI Virus Source
By The Attitude Adjuster and AccuPunk

Here's  the source to one of our new older viruses... Both 'Punk and
I  did a  little bit  on this  one, but,  'Punk thought it all up... I just
kinda fucked  around with  the code  when he  said he  was bored with it...
Anyway,  I can't  really give you too much help here, as this code isn't at
all the greatest, but, I include it to get this virus out into the world.

Umm,  assemble  two pass,  and  link to an EXE. Modfiy the header to
make  the maximum  memory  allocation equal  to the minimum, and the fucker
should run...  I'm  really not  going to test it  right now, mainly because
it's late, and I AM releasing this tonight...

Virus Name:  Damn Windows Idiot!
Aliases:     Anti-Windows
Author(s):   AccuPunk/The Attitude Adjuster
Group:       Virulent Graffiti
Scan ID:     [DWI]
V Status:    Abortion
Discovery:   Well, see, we were in LIST.COM and we saw this code...
Symptoms:    EXE growth; messages; something to do with WIN.COM
Orgin:       WestBumbleFuck, Ohio   DipShitPeak, New York
Eff Length:  1063 Bytes
Res Length:  1280 Bytes
Type Code:   PRhE - Parasitic Resident EXE Infector
Detection Method:
Removal Instructions: Cry... Delete Windows... Increase wallet space,
hire and Antivirus Professional ("...two words together that can't
make sense!").

General Comments:

DWI will become resident after first checking for it's own
presence in memory. DWI places itself into high memory, and
changes it's MCB owner to the usual DOS MCB owner segment.
This may be changed to retrive the DOS MCB owner from DOS,
in the future, but this suffices at the present.

Int 21h is revectored to Int 30h where the virus uses it for
DOS calls. The FAR PTR at Int 30h+1 is lost.

Upon the execution of any program using Int 21h/Ax=4B00h, DWI
will check the file for an 'MZ' header, and if found, infect
the file, leaving the time, date, and attributes of the file
unchanged.

DWI seems to have an adverse effect on WIN.COM when it is run.

Other than the offensive WIN.COM program, DWI will not harm any
data... If DESQView is found, the host system owner will be wired
$100,000 for choosing a decent multitasking operating system...
err... maybe not, but, we'll not screw any .COM files.

Strings Contained in the Virus:

'[DWI] AccuPunk/The Attitude Adjuster Virulent Graffiti'
'WIN.COM'

Future Revision Notes:

There will probably be no future revisions of DWI. We may optomize
it a little, and rip the engine for use in a planned virus, but,
as I said, there will probably be no DWI-B.