 | VL-╧εΦ±Ω |
 |
| ╨σµΦ∞√ ∩≡εc∞ε≥≡α |
|
|
|
| ┬Φ≡≤±φ√Θ ΩαδσφΣα≡ⁿ - 1, ╚■φⁿ |
┬φΦ∞αφΦσ!
└Ω≥ΦΓφ√⌡ ΓΦ≡≤±εΓ: 35
|
|
1.
|
Win95.Shoerec
NewExe-ΓΦ≡≤±√ (Windows, Win95/98, WinNT/2000, OS/2 Φ Unix)
╬≈σφⁿ ε∩α±φ√Θ ≡στΦΣσφ≥φ√Θ τα°Φ⌠≡εΓαφφ√Θ Win9x-ΓΦ≡≤± ΣδΦφεΘ εΩεδε 10Kb.
┬Φ≡≤± ≡ατ∞φεµασ≥± ΩαΩ εß√≈φ√Θ φσ≡στΦΣσφ≥φ√Θ ΓΦ≡≤± - ±ΩαφΦ≡≤σ≥ ∩εΣΩα≥αδεπΦ
≥σΩ≤∙σπε ΣΦ±Ωα, Φ∙σ≥ PE EXE-⌠αΘδ√ Φ τα≡αµασ≥ Φ⌡, - εΣφαΩε ΓΦ≡≤± Σσδασ≥ ²≥ε
∩α≡αδδσδⁿφε ± Γ√∩εδφσφΦσ∞ ∩≡επ≡α∞∞√-φε±Φ≥σδ (Γ ⌠εφεΓε∞ ≡σµΦ∞σ). ┬...
|
|
|
2.
|
Win32.Champ
NewExe-ΓΦ≡≤±√ (Windows, Win95/98, WinNT/2000, OS/2 Φ Unix)
╬∩α±φ√Θ φσ≡στΦΣσφ≥φ√Θ ∩εδΦ∞ε≡⌠ΦΩ Win32-ΓΦ≡≤±. ╧≡Φ τα∩≤±Ωσ Φφ⌠Φ÷Φ≡εΓαφφεπε ⌠αΘδα Φ∙σ≥ Φ τα≡αµασ≥ Γ√∩εδφ σ∞√σ ⌠αΘδ√ Win32 (PE EXE-⌠αΘδ√) Γ ≥σΩ≤∙σ∞ Ωα≥αδεπσ. ╧≡Φ τα≡αµσφΦΦ °Φ⌠≡≤σ≥ ±σß Φ τα∩Φ±√Γασ≥ Γ Ωεφσ÷ ⌠αΘδα, α Γ ±≥α≡≥εΓ≤■ ∩≡ε÷σΣ≤≡≤ τα≡αµασ∞επε ⌠αΘδα τα∩Φ±√Γασ≥ ∩εδΦ∞ε≡⌠ΦΩ-ΩεΣ, Ωε≥ε≡√Θ ∩σ≡σΣασ≥...
|
|
|
4.
|
Win95.Spaces
NewExe-ΓΦ≡≤±√ (Windows, Win95/98, WinNT/2000, OS/2 Φ Unix)
╬∩α±φ√Θ ≡στΦΣσφ≥φ√Θ Windows-ΓΦ≡≤±. ╨ατ∞φεµασ≥± ∩εΣ Win95/98 Φ τα≡αµασ≥
Γ√∩εδφ σ∞√σ ⌠αΘδ√ Windows - PE EXE-⌠αΘδ√ (Portable Executable). ╧≡Φ τα∩≤±Ωσ
τα≡αµσφφεπε ⌠αΘδα ΓΦ≡≤± Φφ±≥αδδΦ≡≤σ≥ ±σß Γ Σ≡ε Windows, ∩σ≡σ⌡Γα≥√Γασ≥
εß≡α∙σφΦ Ω ⌠αΘδα∞ Φ τα≡αµασ≥ PE-⌠αΘδ√ ∩≡Φ Φ⌡ ε≥Ω≡√≥ΦΦ. ╧≡Φ...
|
|
|
5.
|
MtE, ±σ∞σΘ±≥Γε
├σφσ≡α≥ε≡√ ∩εδΦ∞ε≡⌠ΦΩ-ΓΦ≡≤±εΓ (ΓΦ≡≤±√ φα Φ⌡ ε±φεΓσ)
MtE (MuTation Engine) Γδ σ≥± ∩σ≡Γ√∞ ΦτΓσ±≥φ√∞ ∩εδΦ∞ε≡⌠ΦΩ-πσφσ≡α≥ε≡ε∞.
┬√∩≤∙σφ Γ 1991 πεΣ≤ Φ ∩ε ≥σ∞ Γ≡σ∞σφα∞ Γδ δ± φαΦßεδσσ ±δεµφ√∞
∩εδΦ∞ε≡⌠ΦΩ-ΓΦ≡≤±ε∞. ┬ ≡στ≤δⁿ≥α≥σ ≡αßε≥√ ∩εδΦ∞ε≡⌠ΦΩ-αδπε≡Φ≥∞α
Γ ≡α±°Φ⌠≡εΓ∙ΦΩσ ΓΦ≡≤±α ∞επ≤≥ Γ±≥≡σ≥Φ≥ⁿ± ε∩σ≡α÷ΦΦ SUB, ADD, XOR, ROR, ROL Γ
∩≡εΦτΓεδⁿφε∞...
|
|
|
6.
|
Stoned, ±σ∞σΘ±≥Γε
╟απ≡≤τε≈φ√σ ΓΦ≡≤±√
╬≈σφⁿ ε∩α±φ√σ ≡στΦΣσφ≥φ√σ ταπ≡≤τε≈φ√σ ΓΦ≡≤±√. ╧σ≡σ⌡Γα≥√Γα■≥ INT 13h Φ
τα≡αµα■≥ ∩σ≡Γ√σ ⌠ΦτΦ≈σ±ΩΦσ ±σΩ≥ε≡α ΣΦ±ΩεΓ: φα≈αδⁿφ√Θ ±σΩ≥ε≡ ⌠δε∩∩Φ-ΣΦ±ΩεΓ Φ
MBR ΓΦφ≈σ±≥σ≡α. ─Φ±Ωσ≥√ Φφ⌠Φ÷Φ≡≤■≥± ∩≡Φ ≈≥σφΦΦ ± φΦ⌡ (INT 13h, AH=02),
ΓΦφ≈σ±≥σ≡ - ∩≡Φ ταπ≡≤τΩσ DOS ± τα≡αµσφφεΘ ΣΦ±Ωσ≥√.
╤ε±≥ε ≥ Φτ ΣΓ≤⌡...
|
|
|
7.
|
WScript.KakWorm
╚φ≥σ≡φσ≥-≈σ≡ΓΦ
▌≥ε≥ Φφ≥σ≡φσ≥-≈σ≡Γⁿ φα∩Φ±αφ φα τ√Ωσ Visual Basic Script. ─δ ±Γεσπε
≡α±∩≡ε±≥≡αφσφΦ ≈σ≡Γⁿ Φ±∩εδⁿτ≤σ≥ MS Outlook Express. ┬ ε≥δΦ≈Φσ ε≥
ßεδⁿ°Φφ±≥Γα ≈σ≡ΓσΘ ²≥επε Ωδα±±α εφ φσ ∩≡ΦΩ≡σ∩δ σ≥ Ω ∩Φ±ⁿ∞≤ Σε∩εδφΦ≥σδⁿφ√Θ
⌠αΘδ, α Γ±≥≡αΦΓασ≥ ±Γεσ ≥σδε Γ ∩εΣ∩Φ±ⁿ ∩εδⁿτεΓα≥σδ , Φ±∩εδⁿτ≤σ∞≤■ ∩ε...
|
|
|
8.
|
Macro.Word.Constructor.Cvck
╩εφ±≥≡≤Ω≥ε≡√ ΓΦ≡≤±εΓ
╩εφ±≥≡≤Ω≥ε≡ Word-∞αΩ≡ε-ΓΦ≡≤±εΓ Φ ±σ∞σΘ±≥Γε ±πσφσ≡σφφ√⌡ Φ∞ ΓΦ≡≤±εΓ. ╧≡Φ
τα∩≤±Ωσ Γ√Σασ≥ MessageBox Φ, σ±δΦ Γ√ßΦ≡ασ≥± ε≥Γσ≥ "Agree", Ωε∩Φ≡≤σ≥ ±σß Γ
NORMAL.DOT:
Warning !!
You are about to installing the Macro Virus Construction Kit. This
Construction can make a working Macro...
|
|
|
9.
|
Macro.Excel.Emperor
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╟α≡αµα■≥ ²δσΩ≥≡εφφ√σ ≥αßδΦ÷√ Excel (XLS-⌠αΘδ√). ╤ε±≥ε ≥ Φτ εΣφεπε ∞αΩ≡ε±α
(∞εΣ≤δ ) ± Φ∞σφσ∞ Emperor<≈Φ±δε>, Ωε≥ε≡√Θ ±εΣσ≡µΦ≥ ∩ ≥ⁿ ⌠≤φΩ÷ΦΘ:
"Emperor.a": Auto_Open, keyplus, check_file, write_virus, run_virus.
"Emperor.b": Auto_Close, CheckFile, WriteVirus, ScreenTool,...
|
|
|
10.
|
Macro.Excel.Uedasun
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╟α≡αµασ≥ ≥αßδΦ÷√ Excel. ╤εΣσ≡µΦ≥ Γε±σ∞ⁿ ∩≡ε÷σΣ≤≡ Γ ∞εΣ≤δσ "A-TDK": Save,
auto_open, scan, Status, DO_EVERYTHING, DO_SOMETHING, nexts, check.
╟α≡αµσφΦσ ≥αßδΦ÷ ∩≡εΦ±⌡εΣΦ≥ ∩≡Φ ε≥Ω≡√≥ΦΦ τα≡αµσφφεΘ ≥αßδΦ÷√ ΦδΦ
αΩ≥ΦΓΦ≡εΓαφΦΦ δ■ßεπε Φτ δΦ±≥εΓ ΩφΦπ. ┬Φ≡≤± ±ετΣασ≥ τα≡αµσφφ≤■ ΩφΦπ≤ Γ
Ωα≥αδεπσ...
|
|
|
13.
|
Macro.Word.Zero
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╟α°Φ⌠≡εΓαφ, ≡αßε≥ασ≥ ≥εδⁿΩε ∩εΣ φσ∞σ÷ΩεΘ Γσ≡±ΦσΘ Word. ╤εΣσ≡µΦ≥ 9 ∞αΩ≡ε±εΓ:
dateischlie#en, dokumentschlie#en, dok, dsu, wrd, extrasmakro,
dateispeichern, dateidokvorlagen, dateispeichernunter
┬ Φ■φσ Γ√ΓεΣΦ≥ MessageBox ± ≥σΩ±≥ε∞:
Lisa, ich liebe...
|
|
|
|