the giant black book of computer viruses phần 8 pot
the giant black book of computer viruses phần 8 pot
... in the directory where the file is missing, and you don’t have integrity data for any of them anymore. You scan them, sure, but the scanner turns up nothing. Why was the file missing? Are any of ... much work. All one has to do is calculate the size of the file from the EXE header, rather than from the file system, and use that to add the virus to the file. An altern...
Ngày tải lên: 14/08/2014, 18:22
the giant black book of computer viruses phần 3 potx
... free at the time of the ;execution of the boot sector. ORG 0500H DISK_BUF: DB ? ;Start of the buffer ;Here is the start of the boot sector code. This is the chunk we will take out ;of the compiled ... read would require in the cx register, e.g., the sector number is in the low 6 bits of the low byte, and the cylinder number is in the high byte and the...
Ngày tải lên: 14/08/2014, 18:22
the giant black book of computer viruses phần 4 potx
... writes. First, DEVIRUS finds the end of the host file and uses that as the offset for the new STRAT routine, writing this value into the header. Next it hides the address of the old STRAT routine internally ... DPMI function 7. 4. Set the limit (size) of the new segment using DPMI function 8. This is just the size of the memory we allocated above. 5. Set the a...
Ngày tải lên: 14/08/2014, 18:22
the giant black book of computer viruses phần 5 pot
... function and then disassemble it. the virus is run. Thus, all of Developer A and Developer B’s clients could suffer loss from the virus, regardless of whether or not they developed software of their ... very hypothetical, though I got the feeling some of these guys were trying these ideas out. Looking back, I don’t know if the discussion was just born of intellectual curiosi...
Ngày tải lên: 14/08/2014, 18:22
the giant black book of computer viruses phần 6 pot
... relative to the end of the file using Function 42H, Subfunction 2 must be adjusted to be relative to the end of the host. The virus handles this by first doing a move to the end of the file with the ... that in the PSP of the process calling DOS, starting at offset 18H. When DOS opens a file and creates a file handle for a process, it keeps a table of them at thi...
Ngày tải lên: 14/08/2014, 18:22
the giant black book of computer viruses phần 7 pot
... 21H ;Interrupts must be off when the following routine is called! It moves the ;base of the hardware interrupts for the 82 59 from 8 to NEW_INT_LOC. It also ;masks all interrupts off for the 82 59. CHANGE_INTS: ... memory. TASK1.ASM is the startup routine in protected mode. It sets up the paging and launches the V86 monitor. GPFAULT.ASM is the General Protection Fault...
Ngày tải lên: 14/08/2014, 18:22
The Little Black Book of Computer Viruses phần 8 potx
... Viruses :106F8000BB357A8A073C807502B004B303F6E3058B :106F900041718BD88A2F8A77018A4F028A56068BD5 :106FA0005E0A8B46028EC0B801029CFF1E00708AEA :106FB000460C3C01746C5D071F5A595B 588 1C30035 :106FC0000250FEC8FEC 180 FA8075345351525657A4 :106FD0001E55061FC607008BF38BFB47B400BB0092 :106FE00002F7E38BC849F3A4F89C 588 946145D1F47 :106FF0005F5E5A595B58B400FEC 981 EB0002CF9C1A :107000002EFF1E007050558B...
Ngày tải lên: 14/08/2014, 18:22
the giant black book of computer viruses phần 1 ppsx
... of viruses, you will already understand the majority of viruses being written today. Most of them are one of these three types and nothing more. Before we dig into how the simplest of these viruses, ... 14. 3 The Crypt Newsletter, No. 8. Part I Self-Reproduction The GIANT Black Book of Computer Viruses by Mark Ludwig American Eagle Publications, Inc. Post O...
Ngày tải lên: 14/08/2014, 18:22
the giant black book of computer viruses phần 2 pdf
... relative to the start of the code in the EXE file. This is relocated by DOS at load time. 18H 2 Reloc Tbl Offset Offset of the start of the relocation table from the start of the file, in ... be the first byte of the virus. 3. Write the virus code currently executing to the end of the EXE file being attacked. 4. Write the initial value of ss:sp, as s...
Ngày tải lên: 14/08/2014, 18:22
the giant black book of computer viruses phần 9 pdf
... 44, 184 ,231, 188 ,56,212,0,241,70,135 ,82 ,39,191,197,2 28, 132,39, 184 ,52,206, 136,74,47,31,190,20 ,8, 38, 67,190,55,1,77,59,59,120,59,16,212,1 48, 200, 185 , 1 98, 87, 68, 224,65, 188 ,71,130,167,197,209,2 28, 169,42,130,2 08, 70,62,15,172, ... 113,52,246, 189 ,1 38, 12,199,233,67,57,57,31,74,123,94,1,25,74, 188 ,30,73, 83 ,225,24,23,202,111,209,77,29,17,234, 188 ,171, 187 ,1 38, 195...
Ngày tải lên: 14/08/2014, 18:22