![╨α±°Φ≡σφφ√Θ ∩εΦ±Ω...](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/setup.gif) | VL-╧εΦ±Ω |
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) | ╨σµΦ∞√ ∩≡εc∞ε≥≡α |
|
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
![┬σ≡φ≤≥ⁿ± Ω ∩≡ε±∞ε≥≡≤ ∞σ± ÷α...](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/setup.gif) | ┬Φ≡≤±φ√Θ ΩαδσφΣα≡ⁿ - 26, ╚■φⁿ |
┬φΦ∞αφΦσ!
└Ω≥ΦΓφ√⌡ ΓΦ≡≤±εΓ: 44
|
2.
|
MtE, ±σ∞σΘ±≥Γε
├σφσ≡α≥ε≡√ ∩εδΦ∞ε≡⌠ΦΩ-ΓΦ≡≤±εΓ (ΓΦ≡≤±√ φα Φ⌡ ε±φεΓσ)
MtE (MuTation Engine) Γδ σ≥± ∩σ≡Γ√∞ ΦτΓσ±≥φ√∞ ∩εδΦ∞ε≡⌠ΦΩ-πσφσ≡α≥ε≡ε∞.
┬√∩≤∙σφ Γ 1991 πεΣ≤ Φ ∩ε ≥σ∞ Γ≡σ∞σφα∞ Γδ δ± φαΦßεδσσ ±δεµφ√∞
∩εδΦ∞ε≡⌠ΦΩ-ΓΦ≡≤±ε∞. ┬ ≡στ≤δⁿ≥α≥σ ≡αßε≥√ ∩εδΦ∞ε≡⌠ΦΩ-αδπε≡Φ≥∞α
Γ ≡α±°Φ⌠≡εΓ∙ΦΩσ ΓΦ≡≤±α ∞επ≤≥ Γ±≥≡σ≥Φ≥ⁿ± ε∩σ≡α÷ΦΦ SUB, ADD, XOR, ROR, ROL Γ
∩≡εΦτΓεδⁿφε∞...
|
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
3.
|
Smeg, ±σ∞σΘ±≥Γε
├σφσ≡α≥ε≡√ ∩εδΦ∞ε≡⌠ΦΩ-ΓΦ≡≤±εΓ (ΓΦ≡≤±√ φα Φ⌡ ε±φεΓσ)
╬≈σφⁿ ε∩α±φ√σ ≡στΦΣσφ≥φ√σ ∩εδΦ∞ε≡⌠ΦΩ-ΓΦ≡≤±√. ═α∩Φ±αφ√ ∩≡Φ ∩ε∞ε∙Φ ∩εδΦ∞ε≡⌠ΦΩ-πσφσ≡α≥ε≡α SMEG.
╥≡α±±Φ≡≤■≥ Φ ∩σ≡σ⌡Γα≥√Γα■≥ INT 21h, τα≥σ∞ τα∩Φ±√Γα■≥± Γ Ωεφσ÷ COM- Φ EXE-⌠αΘδεΓ ∩≡Φ Φ⌡ τα∩≤±Ωσ ΦδΦ ε≥Ω≡√≥ΦΦ. "Smeg.Queeg" ∩σ≡σ⌡Γα≥√Γασ≥ ≥αΩµσ INT 13h, 20h. ═σ τα≡αµα■≥ ⌠αΘδ√ ± Φ∞σφα∞Φ CO*.*, F-*.*,...
|
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
4.
|
Macro.Excel.Emperor
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╟α≡αµα■≥ ²δσΩ≥≡εφφ√σ ≥αßδΦ÷√ Excel (XLS-⌠αΘδ√). ╤ε±≥ε ≥ Φτ εΣφεπε ∞αΩ≡ε±α
(∞εΣ≤δ ) ± Φ∞σφσ∞ Emperor<≈Φ±δε>, Ωε≥ε≡√Θ ±εΣσ≡µΦ≥ ∩ ≥ⁿ ⌠≤φΩ÷ΦΘ:
"Emperor.a": Auto_Open, keyplus, check_file, write_virus, run_virus.
"Emperor.b": Auto_Close, CheckFile, WriteVirus, ScreenTool,...
|
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
6.
|
Macro.Excel.Uedasun
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╟α≡αµασ≥ ≥αßδΦ÷√ Excel. ╤εΣσ≡µΦ≥ Γε±σ∞ⁿ ∩≡ε÷σΣ≤≡ Γ ∞εΣ≤δσ "A-TDK": Save,
auto_open, scan, Status, DO_EVERYTHING, DO_SOMETHING, nexts, check.
╟α≡αµσφΦσ ≥αßδΦ÷ ∩≡εΦ±⌡εΣΦ≥ ∩≡Φ ε≥Ω≡√≥ΦΦ τα≡αµσφφεΘ ≥αßδΦ÷√ ΦδΦ
αΩ≥ΦΓΦ≡εΓαφΦΦ δ■ßεπε Φτ δΦ±≥εΓ ΩφΦπ. ┬Φ≡≤± ±ετΣασ≥ τα≡αµσφφ≤■ ΩφΦπ≤ Γ
Ωα≥αδεπσ...
|
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
8.
|
Macro.Word.Emperor
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╤σ∞σΘ±≥Γε τα°Φ⌠≡εΓαφφ√⌡ ΩΦ≥αΘ±ΩΦ⌡ ∞αΩ≡ε-ΓΦ≡≤±εΓ.
Emperor.a
╤εΣσ≡µΦ≥ 5 ∞αΩ≡ε±εΓ: AutoOpen, Emperor, VirusMessage, FileTemplates,
ToolsMacro (±≥σδ±). ╧≡Φ ε≥Ω≡√≥ΦΦ τα≡αµσφφεπε ΣεΩ≤∞σφ≥α (AutoOpen) ßσ≡≤≥±
Γ±σ ≥σΩ≤∙Φσ εΩφα, σ±δΦ εΩφε ∩≡ΦφαΣδσµΦ≥ ΣεΩ≤∞σφ≥≤, ≥ε ΓΦ≡≤± σπε...
|
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
10.
|
Macro.Word.Monday
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╩Φ≥αΘ±ΩΦΘ Word-∞αΩ≡ε-ΓΦ≡≤±. ╟α°Φ⌠≡εΓαφ, ±εΣσ≡µΦ≥ 8 ∞αΩ≡ε±εΓ:
Mon, AutoExec, AutoOpen, FileSave, Organizer, FileSaveAs, ToolsMacro, FileTemplates.
╟α≡αµσφφΦσ πδεßαδⁿφεΘ εßδα±≥Φ ∞αΩ≡ε±εΓ (NORMAL.DOT) ∩≡εΦ±⌡εΣΦ≥ ∩≡Φ ε≥Ω≡√≥ΦΦ
ΣεΩ≤∞σφ≥εΓ (AutoOpen), α ΣεΩ≤∞σφ≥εΓ ∩≡Φ Φ⌡ ±ε⌡≡αφσφΦΦ ΦδΦ ±ε⌡≡αφσφΦΦ...
|
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
11.
|
Macro.Word.Sam
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╬≈σφⁿ ε∩α±φ√Θ τα°Φ⌠≡εΓαφφ√Θ ∞αΩ≡ε-ΓΦ≡≤±. ╨αßε≥ασ≥ ≥εδⁿΩε Γ ΩΦ≥αΘ±ΩεΘ Γσ≡±ΦΦ
Word. ╤εΣσ≡µΦ≥ 7 ∞αΩ≡ε±εΓ: AutoOpen, AutoExec, AutoNew, FileSaveAs,
ToolsMacro, FileTemplates, Monday. ╟α≡αµασ≥ ±Φ±≥σ∞≤ Φ ΣεΩ≤∞σφ≥√ ∩≡Φ Γ√τεΓα⌡
AutoNew, AutoOpen Φ FileSaveAs. ╤εΣσ≡µΦ≥...
|
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
12.
|
Macro.Word.Zero
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╟α°Φ⌠≡εΓαφ, ≡αßε≥ασ≥ ≥εδⁿΩε ∩εΣ φσ∞σ÷ΩεΘ Γσ≡±ΦσΘ Word. ╤εΣσ≡µΦ≥ 9 ∞αΩ≡ε±εΓ:
dateischlie#en, dokumentschlie#en, dok, dsu, wrd, extrasmakro,
dateispeichern, dateidokvorlagen, dateispeichernunter
┬ Φ■φσ Γ√ΓεΣΦ≥ MessageBox ± ≥σΩ±≥ε∞:
Lisa, ich liebe...
|
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
13.
|
Macro.Word97.Opim
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
╤≥σδ± Word-∞αΩ≡ε-ΓΦ≡≤± Σδ Office97. ╤εΣσ≡µΦ≥ 6 ⌠≤φΩ÷ΦΘ: AutoOpen,
AutoClose, ToolsMacro, Toolscustomize, ViewVBcode, OPIM. ╧≡Φ ε≥Ω≡√≥ΦΦ
⌠αΘδα ΓΦ≡≤± Γ√Ωδ■≈ασ≥ ε∩÷Φ■ VirusProtection. ╨ατ∞φεµασ≥± ∩≡Φ ε≥Ω≡√≥ΦΦ Φ
ταΩ≡√≥ΦΦ ΣεΩ≤∞σφ≥εΓ (AutoOpen, AutoClose).
╧≡Φ Γ√τεΓσ ∞σφ■ Tools/Macro...
|
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
14.
|
Macro.Word97.Satan
╠αΩ≡ε-ΓΦ≡≤±√ (MS-Word, Excel, Access, PowerPoint, AmiPro Φ Visio)
CεΣσ≡µΦ≥ 14 ∞αΩ≡ε±εΓ Γ ∞εΣ≤δσ "Satan666": Satan666, FileOpen, FileClose,
FileSaveAs, FileSave, FileNew, AutoExec, AutoNew, AutoSave, AutoClose,
AutoOpen, ToolsOptions, ViewVBCode, ToolsMacro. ╟α≡αµσφΦσ ±Φ±≥σ∞√ Φ ΣεΩ≤∞σφ≥εΓ ∩≡εΦ±⌡εΣΦ≥ ∩≡Φ τα∩≤±Ωσ δ■ßεπε Φτ ∞αΩ≡ε±εΓ.
╧≡ε±∞ε≥≡ ΩεΣα ΓΦ≡≤±α...
|
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
15.
|
3tunes.1784
╘αΘδεΓ√σ ΓΦ≡≤±√, DOS
═σε∩α±φ√Θ ≡στΦΣσφ≥φ√Θ ∩εδΦ∞ε≡⌠ΦΩ
-ΓΦ≡≤±. ╧σ≡σ⌡Γα≥√Γασ≥ INT 21h Φ
τα∩Φ±√Γασ≥± Γ Ωεφσ÷ COM- Φ EXE-⌠αΘδεΓ ∩≡Φ Φ⌡ τα∩≤±Ωσ ΦδΦ ε≥Ω≡√≥ΦΦ. ┬ Φ■φσ
∩σ≡σ⌡Γα≥√Γασ≥ INT 1Ch Φ ∩≡εΦπ≡√Γασ≥ ≥≡Φ...
|
![](/file/23527/CHIPCD_6_2000.iso/chip/viruses/images/shim.gif) |
|
|