"Off by one day" error? As I recall, there was a shortcut in the virus code, and a problem with how some machines handled time, and so, since 1992 was, as this year is, a leap year, "March 6" came a day early in that year. For some people.
http://blogs.securiteam.com/index.php/archives/1611 OK, having now had this conversation twice, I've gone back to the true source of all wisdom on all things viral, "Viruses Revealed." I got it off my shelf, of course, but some helpful vxer (who probably thought he was going to harm our sales) posted it on the net, and saved David and I the bother. http://vx.netlux.org/lib/ars08.html Michelangelo is covered between pages 357 and 361, which is slightly over halfway through the book. However, since I guess he's missed out the index and stuff, it turns out to be at about the 2/3 or 3/4 mark on the page he's created. Anyway, Michelangelo checks the date via Interrupt 1Ah. many people did not understand the difference between the MS-DOS clock and the system clock read by Interrupt 1Ah. The MS-DOS DATE command did not always alter the system clock. Network-connected machines often have "time server" functions so that the date is reset to conform to the network. The year 1992 was a leap year, and many clocks did not deal with it properly. Thus, for many computers, 6th March came on Thursday, not Friday. ====================== (quote inserted randomly by Pegasus Mailer) [email protected] [email protected] [email protected] To define recursion, we must first define recursion. victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links http://blogs.securiteam.com/index.php/archives/author/p1/ http://twitter.com/rslade _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
