 | VL-╧εΦ±Ω |
 |
| ╨σµΦ∞√ ∩≡εc∞ε≥≡α |
|
|
|
| ┬Φ≡≤±φ√Θ ΩαδσφΣα≡ⁿ - 7, ╚■φⁿ |
┬φΦ∞αφΦσ!
└Ω≥ΦΓφ√⌡ ΓΦ≡≤±εΓ: 13
|
|
2.
|
MtE, ±σ∞σΘ±≥Γε
├σφσ≡α≥ε≡√ ∩εδΦ∞ε≡⌠ΦΩ-ΓΦ≡≤±εΓ (ΓΦ≡≤±√ φα Φ⌡ ε±φεΓσ)
MtE (MuTation Engine) Γδ σ≥± ∩σ≡Γ√∞ ΦτΓσ±≥φ√∞ ∩εδΦ∞ε≡⌠ΦΩ-πσφσ≡α≥ε≡ε∞.
┬√∩≤∙σφ Γ 1991 πεΣ≤ Φ ∩ε ≥σ∞ Γ≡σ∞σφα∞ Γδ δ± φαΦßεδσσ ±δεµφ√∞
∩εδΦ∞ε≡⌠ΦΩ-ΓΦ≡≤±ε∞. ┬ ≡στ≤δⁿ≥α≥σ ≡αßε≥√ ∩εδΦ∞ε≡⌠ΦΩ-αδπε≡Φ≥∞α
Γ ≡α±°Φ⌠≡εΓ∙ΦΩσ ΓΦ≡≤±α ∞επ≤≥ Γ±≥≡σ≥Φ≥ⁿ± ε∩σ≡α÷ΦΦ SUB, ADD, XOR, ROR, ROL Γ
∩≡εΦτΓεδⁿφε∞...
|
|
|
3.
|
Macro.Excel.Emperor
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╟α≡αµα■≥ ²δσΩ≥≡εφφ√σ ≥αßδΦ÷√ Excel (XLS-⌠αΘδ√). ╤ε±≥ε ≥ Φτ εΣφεπε ∞αΩ≡ε±α
(∞εΣ≤δ ) ± Φ∞σφσ∞ Emperor<≈Φ±δε>, Ωε≥ε≡√Θ ±εΣσ≡µΦ≥ ∩ ≥ⁿ ⌠≤φΩ÷ΦΘ:
"Emperor.a": Auto_Open, keyplus, check_file, write_virus, run_virus.
"Emperor.b": Auto_Close, CheckFile, WriteVirus, ScreenTool,...
|
|
|
4.
|
Macro.Excel.Uedasun
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╟α≡αµασ≥ ≥αßδΦ÷√ Excel. ╤εΣσ≡µΦ≥ Γε±σ∞ⁿ ∩≡ε÷σΣ≤≡ Γ ∞εΣ≤δσ "A-TDK": Save,
auto_open, scan, Status, DO_EVERYTHING, DO_SOMETHING, nexts, check.
╟α≡αµσφΦσ ≥αßδΦ÷ ∩≡εΦ±⌡εΣΦ≥ ∩≡Φ ε≥Ω≡√≥ΦΦ τα≡αµσφφεΘ ≥αßδΦ÷√ ΦδΦ
αΩ≥ΦΓΦ≡εΓαφΦΦ δ■ßεπε Φτ δΦ±≥εΓ ΩφΦπ. ┬Φ≡≤± ±ετΣασ≥ τα≡αµσφφ≤■ ΩφΦπ≤ Γ
Ωα≥αδεπσ...
|
|
|
6.
|
Macro.Word.Zero
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╟α°Φ⌠≡εΓαφ, ≡αßε≥ασ≥ ≥εδⁿΩε ∩εΣ φσ∞σ÷ΩεΘ Γσ≡±ΦσΘ Word. ╤εΣσ≡µΦ≥ 9 ∞αΩ≡ε±εΓ:
dateischlie#en, dokumentschlie#en, dok, dsu, wrd, extrasmakro,
dateispeichern, dateidokvorlagen, dateispeichernunter
┬ Φ■φσ Γ√ΓεΣΦ≥ MessageBox ± ≥σΩ±≥ε∞:
Lisa, ich liebe...
|
|
|
7.
|
Macro.Word97.Satan
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
CεΣσ≡µΦ≥ 14 ∞αΩ≡ε±εΓ Γ ∞εΣ≤δσ "Satan666": Satan666, FileOpen, FileClose,
FileSaveAs, FileSave, FileNew, AutoExec, AutoNew, AutoSave, AutoClose,
AutoOpen, ToolsOptions, ViewVBCode, ToolsMacro. ╟α≡αµσφΦσ ±Φ±≥σ∞√ Φ ΣεΩ≤∞σφ≥εΓ ∩≡εΦ±⌡εΣΦ≥ ∩≡Φ τα∩≤±Ωσ δ■ßεπε Φτ ∞αΩ≡ε±εΓ.
╧≡ε±∞ε≥≡ ΩεΣα ΓΦ≡≤±α...
|
|
|
8.
|
3tunes.1784
╘αΘδεΓ√σ ΓΦ≡≤±√, DOS
═σε∩α±φ√Θ ≡στΦΣσφ≥φ√Θ ∩εδΦ∞ε≡⌠ΦΩ
-ΓΦ≡≤±. ╧σ≡σ⌡Γα≥√Γασ≥ INT 21h Φ
τα∩Φ±√Γασ≥± Γ Ωεφσ÷ COM- Φ EXE-⌠αΘδεΓ ∩≡Φ Φ⌡ τα∩≤±Ωσ ΦδΦ ε≥Ω≡√≥ΦΦ. ┬ Φ■φσ
∩σ≡σ⌡Γα≥√Γασ≥ INT 1Ch Φ ∩≡εΦπ≡√Γασ≥ ≥≡Φ...
|
|
|
9.
|
Jouce.1608
╘αΘδεΓ√σ ΓΦ≡≤±√, DOS
╬≈σφⁿ ε∩α±φ√Θ φσ≡στΦΣσφ≥φ√Θ ΓΦ≡≤±. ╧≡Φ τα∩≤±Ωσ Φ∙σ≥ COMMAND.COM, τα≥σ∞ .COM- Φ .EXE-⌠αΘδ√ Φ τα∩Φ±√Γασ≥± Γ Φ⌡ Ωεφσ÷. ╧ε ±≡σΣα∞ τα≥Φ≡ασ≥ MBR
±≥≡εΩεΘ:
*Jouce und Krisque*, Version 0001h.
Φ ∩σ≡σταπ≡≤µασ≥ Ωε∞∩ⁿ■≥σ≡. ╥αΩµσ ±εΣσ≡µΦ≥ ±≥≡εΩΦ:
*.EXE *.COM...
|
|
|
10.
|
Maca.1000
╘αΘδεΓ√σ ΓΦ≡≤±√, DOS
═σε∩α±φ√Θ ≡στΦΣσφ≥φ√Θ ΓΦ≡≤±. ╧≡Φ τα∩≤±Ωσ ∩σ≡σ⌡Γα≥√Γασ≥ INT 21h, τα≡αµασ≥
⌠αΘδ C:\COMMAND.COM, τα≥σ∞ τα∩Φ±√Γασ≥± Γ Ωεφσ÷ COM- Φ EXE-⌠αΘδεΓ ∩≡Φ Φ⌡
τα∩≤±Ωσ. ╧ε ≈σ≥φ√∞ ∞σ± ÷α∞ (⌠σΓ≡αδⁿ, α∩≡σδⁿ, ...) ∩ε 4-∞, 8-∞ Φ 12-∞ ≈Φ±δα∞
∩σ≡σ⌡Γα≥√Γασ≥ ≥αΩµσ INT 1Ch Φ ∩≡εΦπ≡√Γασ≥ ∞σδεΣΦ■. ╤εΣσ≡µΦ≥...
|
|
|
11.
|
Puppets.960
╘αΘδεΓ√σ ΓΦ≡≤±√, DOS
═σε∩α±φ√Θ ≡στΦΣσφ≥φ√Θ ΓΦ≡≤±. ╧σ≡σ⌡Γα≥√Γασ≥ INT 9, 10h, 21h Φ τα∩Φ±√Γασ≥± Γ Ωεφσ÷ .COM-⌠αΘδεΓ ∩≡Φ Φ⌡ τα∩≤±Ωσ ΦδΦ ε≥Ω≡√≥ΦΦ. ╧≡Φ "≥σ∩δεΘ" ∩σ≡σταπ≡≤τΩσ (Alt-Ctrl-Del) ΓΦ≡≤± ∩√≥ασ≥± ±ε⌡≡αφΦ≥ⁿ ±Γε■ ≡στΦΣσφ≥φ≤■ ≈α±≥ⁿ. ╧≡Φ ²≥ε∞ εφ
Γ√ΓεΣΦ≥ ≥σΩ±≥:
Phoenix ROM BIOS PLUS Version 5.23...
|
|
|
12.
|
Siskin, ±σ∞σΘ±≥Γε
╘αΘδεΓ√σ ΓΦ≡≤±√, DOS
═σε∩α±φ√σ ≡στΦΣσφ≥φ√σ ΓΦ≡≤±√. ╧σ≡σ⌡Γα≥√Γα■≥ INT 1Ch, 21h Φ τα∩Φ±√Γα■≥± Γ
Ωεφσ÷ COM-, EXE- Φ OVL-⌠αΘδεΓ. ┼µσ∞σ± ≈φε 7-πε ≈Φ±δα Φ±∩εδφ ■≥ ≥≡Φ ∞σδεΣΦΦ
(εΣφα Φτ φΦ⌡ -...
|
|
|
13.
|
Vortex, ±σ∞σΘ±≥Γε
╘αΘδεΓ√σ ΓΦ≡≤±√, DOS
╬≈σφⁿ ε∩α±φ√σ ≡στΦΣσφ≥φ√σ ΓΦ≡≤±√. ╧σ≡σ⌡Γα≥√Γα■≥ INT 9, 21h Φ τα∩Φ±√Γα■≥± Γ
Ωεφσ÷ τα∩≤±Ωασ∞√⌡ COM- Φ EXE-⌠αΘδεΓ. ╧≡Φ τα∩≤±Ωσ ≤µσ τα≡αµσφφεπε ⌠αΘδα
τα∩Φ±√Γα■≥± Γ C:\COMMAND.COM. ╧≡Φ φαµα≥ΦΦ φα DEL ⌠ε≡∞α≥Φ≡≤■≥ ΓΦφ≈σ±≥σ≡:
"Vortex.Day5" ∩ε 5-∞ ≈Φ±δα∞, "Vortex.Day7" ∩ε 7-∞ ≈Φ±δα∞,...
|
|
|
|