 | VL-╧εΦ±Ω |
 |
| ╨σµΦ∞√ ∩≡εc∞ε≥≡α |
|
|
|
| ┬Φ≡≤±φ√Θ ΩαδσφΣα≡ⁿ - 17, ╚■φⁿ |
┬φΦ∞αφΦσ!
└Ω≥ΦΓφ√⌡ ΓΦ≡≤±εΓ: 26
|
|
1.
|
Win32.Mental
NewExe-ΓΦ≡≤±√ (Windows, Win95/98, WinNT/2000, OS/2 Φ Unix)
╬∩α±φ√Θ ≡στΦΣσφ≥φ√Θ ∩εδΦ∞ε≡⌠φ√Θ Win32-ΓΦ≡≤±. ╚∙σ≥ PE EXE-⌠αΘδ√ ±
≡α±°Φ≡σφΦ ∞Φ .EXE, .SCR, .CPL Γ ≥σΩ≤∙σ∞ Ωα≥αδεπσ, Ωα≥αδεπσ Windows Φ
±Φ±≥σ∞φε∞ Ωα≥αδεπσ Windows Φ τα≡αµασ≥ Φ⌡. ╧≡Φ τα≡αµσφΦΦ °Φ⌠≡≤σ≥ ±ΓεΘ ΩεΣ Φ
τα∩Φ±√Γασ≥ σπε Γ ±σΩ÷Φ■ φα±≥≡εσΩ αΣ≡σ±εΓ (Fixup section - εß√≈φε
≡α±∩εδεµσφα Γ...
|
|
|
2.
|
MtE, ±σ∞σΘ±≥Γε
├σφσ≡α≥ε≡√ ∩εδΦ∞ε≡⌠ΦΩ-ΓΦ≡≤±εΓ (ΓΦ≡≤±√ φα Φ⌡ ε±φεΓσ)
MtE (MuTation Engine) Γδ σ≥± ∩σ≡Γ√∞ ΦτΓσ±≥φ√∞ ∩εδΦ∞ε≡⌠ΦΩ-πσφσ≡α≥ε≡ε∞.
┬√∩≤∙σφ Γ 1991 πεΣ≤ Φ ∩ε ≥σ∞ Γ≡σ∞σφα∞ Γδ δ± φαΦßεδσσ ±δεµφ√∞
∩εδΦ∞ε≡⌠ΦΩ-ΓΦ≡≤±ε∞. ┬ ≡στ≤δⁿ≥α≥σ ≡αßε≥√ ∩εδΦ∞ε≡⌠ΦΩ-αδπε≡Φ≥∞α
Γ ≡α±°Φ⌠≡εΓ∙ΦΩσ ΓΦ≡≤±α ∞επ≤≥ Γ±≥≡σ≥Φ≥ⁿ± ε∩σ≡α÷ΦΦ SUB, ADD, XOR, ROR, ROL Γ
∩≡εΦτΓεδⁿφε∞...
|
|
|
3.
|
I-Worm.MyPics
╚φ≥σ≡φσ≥-≈σ≡ΓΦ
┬Φ≡≤±-≈σ≡Γⁿ, ≡α±∩≡ε±≥≡αφ ■∙ΦΘ± ∩ε ±σ≥ ∞ ╚φ≥σ≡φσ≥ ∩≡Φ ∩ε∞ε∙Φ ²δσΩ≥≡εφφεΘ
∩ε≈≥√. ▀Γδ σ≥± 35-ΩΦδεßαΘ≥φ√∞ EXE-⌠αΘδε∞ Windows, ±Ωε∞∩ΦδΦ≡εΓαφφ√∞
∩≡Φ ∩ε∞ε∙Φ Ωε∞∩Φδ ≥ε≡α VisualBasic. ╨α±∩≡ε±≥≡αφ σ≥± Γ ΓΦΣσ ∩Φ±σ∞ ±
Γδεµσφφ√∞ EXE-⌠αΘδε∞ "Pics4you.exe"; τα≡αµσφφ√σ ∩Φ±ⁿ∞α Φ∞σ■≥ ∩≤±≥εσ ∩εδσ
Subject,...
|
|
|
4.
|
Macro.Excel.Emperor
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╟α≡αµα■≥ ²δσΩ≥≡εφφ√σ ≥αßδΦ÷√ Excel (XLS-⌠αΘδ√). ╤ε±≥ε ≥ Φτ εΣφεπε ∞αΩ≡ε±α
(∞εΣ≤δ ) ± Φ∞σφσ∞ Emperor<≈Φ±δε>, Ωε≥ε≡√Θ ±εΣσ≡µΦ≥ ∩ ≥ⁿ ⌠≤φΩ÷ΦΘ:
"Emperor.a": Auto_Open, keyplus, check_file, write_virus, run_virus.
"Emperor.b": Auto_Close, CheckFile, WriteVirus, ScreenTool,...
|
|
|
6.
|
Macro.Excel.Uedasun
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╟α≡αµασ≥ ≥αßδΦ÷√ Excel. ╤εΣσ≡µΦ≥ Γε±σ∞ⁿ ∩≡ε÷σΣ≤≡ Γ ∞εΣ≤δσ "A-TDK": Save,
auto_open, scan, Status, DO_EVERYTHING, DO_SOMETHING, nexts, check.
╟α≡αµσφΦσ ≥αßδΦ÷ ∩≡εΦ±⌡εΣΦ≥ ∩≡Φ ε≥Ω≡√≥ΦΦ τα≡αµσφφεΘ ≥αßδΦ÷√ ΦδΦ
αΩ≥ΦΓΦ≡εΓαφΦΦ δ■ßεπε Φτ δΦ±≥εΓ ΩφΦπ. ┬Φ≡≤± ±ετΣασ≥ τα≡αµσφφ≤■ ΩφΦπ≤ Γ
Ωα≥αδεπσ...
|
|
|
8.
|
Macro.Word.Emperor
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╤σ∞σΘ±≥Γε τα°Φ⌠≡εΓαφφ√⌡ ΩΦ≥αΘ±ΩΦ⌡ ∞αΩ≡ε-ΓΦ≡≤±εΓ.
Emperor.a
╤εΣσ≡µΦ≥ 5 ∞αΩ≡ε±εΓ: AutoOpen, Emperor, VirusMessage, FileTemplates,
ToolsMacro (±≥σδ±). ╧≡Φ ε≥Ω≡√≥ΦΦ τα≡αµσφφεπε ΣεΩ≤∞σφ≥α (AutoOpen) ßσ≡≤≥±
Γ±σ ≥σΩ≤∙Φσ εΩφα, σ±δΦ εΩφε ∩≡ΦφαΣδσµΦ≥ ΣεΩ≤∞σφ≥≤, ≥ε ΓΦ≡≤± σπε...
|
|
|
12.
|
Macro.Word.Veneno
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╟α°Φ⌠≡εΓαφ, ±εΣσ≡µΦ≥ 12 ∞αΩ≡ε±εΓ: Veneno, Travel1, Travel2, AutoExec, AutoOpen, Trinitron, ArchivoAbrir, ArchivoSalir, InsertVeneno,
ArchivoImprimir, ArchivoGuardarComo, ArchivoImprimirPredeter.
╟α∩Φ±√Γασ≥± Γ εßδα±≥ⁿ πδεßαδⁿφ√⌡ ∞αΩ≡ε±εΓ ∩≡Φ ε≥Ω≡√≥ΦΦ τα≡αµσφφεπε ΣεΩ≤∞σφ≥α ΦδΦ τα∩≤±Ωσ Word...
|
|
|
13.
|
Macro.Word.Zero
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╟α°Φ⌠≡εΓαφ, ≡αßε≥ασ≥ ≥εδⁿΩε ∩εΣ φσ∞σ÷ΩεΘ Γσ≡±ΦσΘ Word. ╤εΣσ≡µΦ≥ 9 ∞αΩ≡ε±εΓ:
dateischlie#en, dokumentschlie#en, dok, dsu, wrd, extrasmakro,
dateispeichern, dateidokvorlagen, dateispeichernunter
┬ Φ■φσ Γ√ΓεΣΦ≥ MessageBox ± ≥σΩ±≥ε∞:
Lisa, ich liebe...
|
|
|
14.
|
Macro.Word97.Satan
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
CεΣσ≡µΦ≥ 14 ∞αΩ≡ε±εΓ Γ ∞εΣ≤δσ "Satan666": Satan666, FileOpen, FileClose,
FileSaveAs, FileSave, FileNew, AutoExec, AutoNew, AutoSave, AutoClose,
AutoOpen, ToolsOptions, ViewVBCode, ToolsMacro. ╟α≡αµσφΦσ ±Φ±≥σ∞√ Φ ΣεΩ≤∞σφ≥εΓ ∩≡εΦ±⌡εΣΦ≥ ∩≡Φ τα∩≤±Ωσ δ■ßεπε Φτ ∞αΩ≡ε±εΓ.
╧≡ε±∞ε≥≡ ΩεΣα ΓΦ≡≤±α...
|
|
|
15.
|
3tunes.1784
╘αΘδεΓ√σ ΓΦ≡≤±√, DOS
═σε∩α±φ√Θ ≡στΦΣσφ≥φ√Θ ∩εδΦ∞ε≡⌠ΦΩ
-ΓΦ≡≤±. ╧σ≡σ⌡Γα≥√Γασ≥ INT 21h Φ
τα∩Φ±√Γασ≥± Γ Ωεφσ÷ COM- Φ EXE-⌠αΘδεΓ ∩≡Φ Φ⌡ τα∩≤±Ωσ ΦδΦ ε≥Ω≡√≥ΦΦ. ┬ Φ■φσ
∩σ≡σ⌡Γα≥√Γασ≥ INT 1Ch Φ ∩≡εΦπ≡√Γασ≥ ≥≡Φ...
|
|
|
|