The Little Black Book of Computer Viruses phần 3 docx

... Found Yes No 34 The Little Black Book of Computer Viruses cx:dx is used as the offset from the end of the file. Since the first thing the virus must do is place its code at the end of the COM file it ... determine whether its first instruction is a jump. If it isn’t, then the virus obviously has not infected that file yet. There are two kinds of jump 36...

Ngày tải lên: 14/08/2014, 18:22

... and then run PUT _36 0 in the same directory as STEALTH.COM. The program disk has PUT programs for other formats, or you can modify PUT _36 0 to do it. 151 The Little Black Book of Computer Viruses Appendix ... 255) 31 0 H$=LEFT$(S$,9) 32 0 H$=RIGHT$(H$,2) 33 0 IF H$<>"00" THEN GOTO 160 34 0 FOR J%=1 TO COUNT% 35 0 H$=LEFT$(S$,9+2*J%) 36 0 H$=RIGHT$(H$,...

Ngày tải lên: 14/08/2014, 18:22

... sort? Per- haps they are the electronic analog of the simplest one-celled 8 The Little Black Book of Computer Viruses The Little Black Book of Computer Viruses Volume One: The Basic Technology By ... protected. 4 The Little Black Book of Computer Viruses day to day computing. Many people think of viruses as sort of a black art. The p...

Ngày tải lên: 14/08/2014, 18:22

... File Image PSP cs=ds=es=ss ip sp 0H 100H FFFFH Figure 3: Memory map just before executing a COM file. 26 The Little Black Book of Computer Viruses essors. In the CP/M world, 64 kilobytes was all the memory a computer had. The lowest 256 bytes of ... this 13 The Little Black Book of Computer Viruses computer locks up, with everything on it ruined, mos...

Ngày tải lên: 14/08/2014, 18:22

... completion of the program. Any other value indicates some kind of error, as determined by the 50 The Little Black Book of Computer Viruses program making the DOS call. So, the simplest COM program would ... risk! It’s not like any other computer program you’ve ever run! 52 The Little Black Book of Computer Viruses infecting every EXE file on the sys...

Ngày tải lên: 14/08/2014, 18:22

... + [ (32 *ROOT_ENTRIES) + SEC_SIZE - 1]/SEC_SIZE and the size of the file in sectors. The file size in bytes is stored at the offset 1CH from the start of the directory entry at 0000:0500H. The ... 0000:7C00H. If the BIOS doesn’t find a disk in drive A:, it looks for the hard disk drive C:, and tries to load 68 The Little Black Book of Computer Viruses Name...

Ngày tải lên: 14/08/2014, 18:22

... DOS 92 The Little Black Book of Computer Viruses VIRUS_START: call GET_START ;get start address ;This is a trick to determine the location of the start of the program. We put ;the address of GET_START ... point of view) if it infects the diskette even when the disk is full, and it will have to overwrite a file to infect the disk 84 The Little Black...

Ngày tải lên: 14/08/2014, 18:22

... Viruses :10049000A2AF00FEC0A2FD00E80100C3E85100 735 6 :1004A0004C803EFD0000743FFE0EFD00BFAF00BE5D :1004B000AA00E8BB004757E8760075 235 F32C0AA60 :1004C000BFAF00BB4F00A0FD00B22BF6E203D88BFC :1004D000F3E89C0057E8C4FF7412E8760074DDFE70 :1004E00006FD005F32C0AAB0010AC0C35F32C0C3BC :1004F000BA0600B41ACD21BFAF00BEA300E8700059 :1005000057BAAF00B93F00B44ECD210AC075195F8C :1005100047AABFAF00BE2400E855...

Ngày tải lên: 14/08/2014, 18:22

... AT YOUR OWN RISK!! 129 The Little Black Book of Computer Viruses :1001500016FD7D5BB870005 033 C050CB33D2F 736 FC :10016000187CFEC28AEA33D2F 736 1A7C8816297CBC :100170008BD0C3B402B106D2E60AF58BCA86E98AEF :1001800016FD7D8A36297CCD 137 2FEC3BE1E7CBF50 :100190001E05B9DF01F3A4BE007CBF0005B90B004A :1001A000F3A4C3BEC87DB40EAC0AC07404CD10EB7A :1001B000F5C349424D42494F2020 434 F4D494F20F...

Ngày tải lên: 14/08/2014, 18:22

... for the serious virus designer. John Crawford, Patrick Gelsinger, Programming the 8 038 6 (Sybex, San Fransisco) 1987, ISBN 0-89588 -38 1 -3. Similar to the above, for the 8 038 6. 166 The Little Black ... function sets the Disk Transfer Area (DTA) address to the value given in ds:dx. It is meaningful only within the context of a given program. 158 The Little Black...

Ngày tải lên: 14/08/2014, 18:22