
                                    29A Labs
                                       &
                  Information Weapon Developing Center (IWDC)
                                   PRESENTS:

                        AVP 3.0 Weekly Update Generator

                    generator build 666 for AVP builds 120+

     copyright (c) 1998 by AVP research and distribution team & Z0MBiE/29A
                         proudly made in Moscow, Russia

                                 Seek & Enjoy!



                               *** WHAT IS IT ***

   This program is a generator of trojan addons for AVP 3.0 build 120+

   It produces file RULEZ.AVC which can be renamed and sent to one of
   your friends (but better to all)

   Trojan code executed without any user prompts when AVP??.EXE is just
   launched, i.e. when it checks own integrity.

   Addon contains trojan code sections for both Dos & Win32. Dos section
   writes trojan mbr code to C:\IO.SYS, and Win32 section writes trojan mbr
   directly to hd 0/0/1. After that PC is rebooted using PCI port.

   And when trojan mbr is executed, you can relax - nothing can help.
   Btw, it also contains recursive extended partition entry. |-)

                           *** REQUIRED SOFTWARE ***

                TASM             MASM            TP
                 ÃÄ tasm.exe      ÀÄ ml.exe       Ã- tpc.exe
                 ÀÄ tlink.exe                     ÀÄ turbo.tpl

                             *** FILES OVERVIEW ***

   AVP_TROJ\
   ÃÄ set_path.bat           edit this file to setup paths
   ÃÄ _go.bat                batch file to make rulez.avc
   ÃÄ rulez.avc              result of this package
   À- MAKE_AVC\
      ÃÄ _go.bat             batch file to make trojan addon
      ÃÄ eicar.avc           base-addon (to take some headers from it)
      ÃÄ -stamm.bin          virus stamm entry for trojan addon
      ÃÄ -name.bin           virus name entry for trojan addon
      ÃÄ make!!!!.pas        main program to create trojan addon
      ÃÄ avp__.pas           unit; addon headers / checksum
      ÃÄ tpu.pas             unit; file management
      ÀÄ MAKE_OBJ\
         Ã- _go.bat          batch file to compile code-sections
         Ã- add_8b.pas       utility to insert 8 bytes to begin of .obj file
         Ã- bin2inc.pas      binary -> .inc convertor
         Ã- dos.asm          dos section of trojan code
         Ã- win.asm          win32 section of trojan code
         À- fuckup.asm       mbr trojan code

                              *** HOW IT WORKS ***

   Directory of MAKE_OBJ\

     bin2inc.pas          -> [tp]         -> bin2inc.exe
     add_8b.pas           -> [tp]         -> add_8b.exe

     fuckup.asm           -> [tasm,tlink] -> fuckup.bin
     fuckup.bin           -> [bin2inc]    -> fuckup.inc
     dos.asm + fuckup.inc -> [ml]         -> dos.obj
     win.asm + fuckup.inc -> [ml]         -> win.obj
     dos.obj              -> [add_8b.exe] -> ..\-dos.bin
     win.obj              -> [add_8b.exe] -> ..\-win.bin

   Directory of MAKE_AVC\

  make!!!!.pas +
       tpu.pas +
     avp__.pas -> [tp] -> make!!!!.exe

     eicar.avc +
    -stamm.bin +
      -dos.bin +
      -win.bin +
     -name.bin -> [make!!!!.exe] -> rulez.avc
