The Little Black Book of Computer Viruses phần 4 potx

... value in the code segment 60 The Little Black Book of Computer Viruses Offset Size Name Description 12H (Cont) properly. The INTRUDER virus will not alter the checksum. 14H 2 Initial ip The initial ... risk! It’s not like any other computer program you’ve ever run! 52 The Little Black Book of Computer Viruses infecting every EXE file on the system....

Ngày tải lên: 14/08/2014, 18:22

... Viruses :1001500016FD7D5BB870005033C050CB33D2F736FC :10016000187CFEC28AEA33D2F7361A7C8816297CBC :100170008BD0C3B402B106D2E60AF58BCA86E98AEF :1001800016FD7D8A36297CCD1372FEC3BE1E7CBF50 :100190001E05B9DF01F3A4BE007CBF0005B90B004A :1001A000F3A4C3BEC87DB40EAC0AC0 740 4CD10EB7A :1001B000F5C 349 424D4 249 4F202 043 4F4D494F20FE :1001C00020202020205359534B696C726F7920777F :1001D0006173206865726521...

Ngày tải lên: 14/08/2014, 18:22

... time for motor startup is 156 The Little Black Book of Computer Viruses In all, this CD is one of the most fascinating collections of secret underground computer software on earth—a full 157 megabytes ... Bit 4 - Subdirectory attribute Bit 5 - Archive attribute Bit 6 and 7 - Not used Function 47 H: Get Current Directory Registers: ah = 47 H 162 The Little Bla...

Ngày tải lên: 14/08/2014, 18:22

... writes. First, DEVIRUS finds the end of the host file and uses that as the offset for the new STRAT routine, writing this value into the header. Next it hides the address of the old STRAT routine internally ... routine internally in itself at STRJMP, and then writes the body of its code to the end of the SYS file. That’s all there is to it. The logic of DEVIRUS...

Ngày tải lên: 14/08/2014, 18:22

... Found Yes No 34 The Little Black Book of Computer Viruses cx:dx is used as the offset from the end of the file. Since the first thing the virus must do is place its code at the end of the COM file it ... like mov bx,WORD PTR [HANDLE] 44 The Little Black Book of Computer Viruses Now, with the main body of viral code appended to the end...

Ngày tải lên: 14/08/2014, 18:22

... DOS 92 The Little Black Book of Computer Viruses VIRUS_START: call GET_START ;get start address ;This is a trick to determine the location of the start of the program. We put ;the address of GET_START ... point of view) if it infects the diskette even when the disk is full, and it will have to overwrite a file to infect the disk 84 The Little Black...

Ngày tải lên: 14/08/2014, 18:22

... it. 109 The Little Black Book of Computer Viruses :10 049 000A2AF00FEC0A2FD00E80100C3E851007356 :1004A0004C803EFD0000 743 FFE0EFD00BFAF00BE5D :1004B000AA00E8BB0 047 57E8760075235F32C0AA60 :1004C000BFAF00BB4F00A0FD00B22BF6E203D88BFC :1004D000F3E89C0057E8C4FF 741 2E8760074DDFE70 :1004E00006FD005F32C0AAB0010AC0C35F32C0C3BC :1004F000BA0600B41ACD21BFAF00BEA300E8700059 :1005000057BAAF...

Ngày tải lên: 14/08/2014, 18:22