Description: Immunity.exe the presence of the virus is not memory, nor the use of encryption, compression, deformation, such as technology, time to start, first of all, the API function to obtain the required address, then search in the current directory host_pe.exe documents, if not found, then In the Windows directory, System/System32 directory to continue search
- [hidereg] - against a icesword (kernel detection sof
- [WIN32virus] - Which contains the N个virus code. Compila
- [BillyBelceb] - Billy Belceb virus preparation of curric
File list (Check if you may need any files):
host_pe.exe
Immunity.asm
Immunity.obj
病毒实验报告1.doc
病毒实验报告2.doc
Download