Description: 病毒吧~因为该变种病毒不但要攻击RPC漏洞，还会将自身复制到%system%\Wins文件夹下，创建FTP服务和Wins Client服务。其中FTP服务开启系统的FTP功能用于传播病毒。“冲击波杀手”感染一台机器后就会使用Ping命令或ICMP echo方式探测随机产生的IP地址是否有效，如果有效便开始进行攻击。该病毒会在受感染的系统中随机使用666-765端口与攻击系统进行连接。该病毒还会检查系统版本和微软补丁包的版本号，然后根据不同的操作系统尝试从微软下载有关RPC漏洞的补丁程序，并自动运行补丁程序，给系统打上RPC漏洞的补丁-virus because it was not only the variant of the virus to attack RPC vulnerability, but also copies itself into% system% \ Wins folder, FTP services and the creation Wins Client services. FTP services which opened the FTP function for the transmission of the virus. "Shock killer" an infected machine will be used after the Ping orders or ICMP echo mode detection randomly generated IP address whether and, if they start to attack. The virus in infected systems use random ports 666-765 and attack systems for the connection. The virus will also inspect system version and Microsoft patch version, then under different operating systems to try to download the Microsoft RPC vulnerability patches, and automatically patch to the RPC loopholes permitting system patches Platform: |
Size: 2048 |
Author:美美 |
Hits:
Description: getmail收集邮件病毒，运行后能自动在后台扫描本机所有文件获取email地址并且保存-getmail collect mail virus after running in the background, automatically scanning all documents for the acquisition and preservation of email addresses Platform: |
Size: 447488 |
Author:哈哈 |
Hits:
Description: EXE文件自我修改演示,可在自身EXE文件内增加数据。有点像病毒操作。-EXE file amended self-presentation, in its own EXE document for additional information. Operate somewhat like virus. Platform: |
Size: 3072 |
Author:blueice |
Hits:
Description: 此代码为前段时间在网络上广为流传的熊猫烧香病毒源代码。-earlier this code for the network on the wide-spread of the virus in Lhasa panda source code. Platform: |
Size: 2048 |
Author:jinmao |
Hits:
Description: Iexplorer专杀程序 能够较好的杀死和清除Iexplorer 病毒及其相关自动运行文件,能够识别它的多个变种.-Iexplorer the scrapping process can be used to kill and remove the virus and Iexplorer Automatic operation of the relevant documents, to be able to identify its variants. Platform: |
Size: 15360 |
Author:孙先声 |
Hits:
Description: 写病毒程序可以使用很多种语言来写比如C,汇编，甚至有人用Dephi这样可视化编程工具都能写出来。但是最适合写病毒程序的还是汇编语言。本文交你如何用汇编编写简单的病毒程序，以此了解病毒机理。-Write virus program can be used to write very many languages such as C, compile, and even someone such Delphi visual programming tools can write it down. But the most suitable for write-virus program or assembly language. In this paper, how you pay to prepare the compilation of a simple virus program in order to understand the mechanism of the virus. Platform: |
Size: 9216 |
Author:晓龙 |
Hits:
Description: 本工具可对选定磁盘进行特别的免疫处理；还可禁用磁盘自动运行特性，从而避免带毒的移动磁盘插入本机后病毒立即自动执行。-This tool can be selected for a special disk immune treatment can also disable the automatic operation of the disk, thus avoiding the virus to insert the removable disk virus immediately after the machine automatically. Platform: |
Size: 79872 |
Author:梁超 |
Hits:
Description: 教你编写一个可破坏文件的小程序，当然离真正的病毒还差老远，不过，尽管是DELPHI编译，它的个头还是非常地小，里面有值得你参考的。-Teach you to prepare a document could undermine applet, of course, from a real virus is still far away, but, although DELPHI compiler, and its head is still very small, there are worthy of your consideration. Platform: |
Size: 4096 |
Author:zhangyu |
Hits:
Description: 以服务方式定时检查网关IP与MAC地址是否相符，若不符则改正。用于防ARP病毒造成电脑无法上网等使用。-Be checked regularly in order to service the gateway IP and MAC address match, if not the correction. ARP for the anti-virus and other computer can not use the Internet. Platform: |
Size: 356352 |
Author:HM.L |
Hits:
Description: Morphine v2.7，程序压缩源码，保护程序不被恶意修改-Morphine is very unique application for PE files encryption. Unlike
other PE encryptors and compressors Morphine includes own PE loader which
enables it to put whole source image to the .text section of new PE file. This
one is very powerful because you can compress source file with your favourite
compressor like UPX and then encrypt its output with Morphine. Another powerful
thing here is polymorphic engine which always creates absolutely different
decryptor for the new PE file. This mean if your favourite trojan horse is
detected by an antivirus you can encrypt it with Morphine. You will not get
the virus alert again. Platform: |
Size: 31744 |
Author:hack |
Hits:
Description: 禹盾hips是一个完全免费且开放源代码的主机入侵防御系统，利用禹盾hips可以保护您的系统免受病毒入侵。他是一种能监控你电脑中文件的运行和文件运用了其他的文件以及文件对注册表的修改，并向你报告请求允许的的软件。如果你阻止了，那么它将无法运行或者更改。比如你双击了一个病毒程序，HIPS软件跳出来报告而你阻止了，那么病毒还是没有运行的。引用一句话：”病毒天天变种天天出新，使得杀软可能跟不上病毒的脚步，而HIPS能解决这些问题。”。 HIPS是以后系统安全发展的一种趋势，只要你有足够的专业水平，你可以只用HIPS而不需杀毒软件。但是HIPS并不能称为防火墙，最多只能叫做系统防火墙，它不能阻止网络上其他计算机对你计算机的攻击行为。-Yu hips Shield is a completely free and open source host intrusion defense systems, the use of hips Yu shield to protect your system from viruses. He is a computer you can monitor the operation and file documents the use of the documents and other files on the registry changes, and requested permission to report to you the software. If you stop, then it will be unable to run or change. For example, you double-click on a virus program, HIPS software to report and you jump out of a block, then run the virus or not. Quoted saying: "HIV every day, every day a new variant, the soft-kill virus could not keep up the pace, and HIPS can solve these problems.". HIPS is a system security after the development of a trend, as long as you have sufficient professional level, you can only HIPS without antivirus software. However, HIPS and firewall can not be called up to the system can only be called a firewall, it can not prevent other computer network attacks on your computer. Platform: |
Size: 1290240 |
Author:zzage |
Hits:
Description: Source program, which shows an example of a search engine for signatures in files. Support for RAR and ZIP archives, support signatures "masks", support of conventional signatures, just a quick search of large kolchistva signatures in files. In the example, access virus scanning Virut and Induc Platform: |
Size: 270336 |
Author:Andrey |
Hits:
Description: 一个比较小的绿色版本，常用的控件都是全的。免安装，无病毒，很适合广大编程爱好者放到u盘里面，出门时用别人的电脑就方便多了！-A relatively small green version of the commonly used controls are full of. Free installation, no virus, it is suitable for general programmer to put it into the sundrives, when they go out and work on others computers, it will be much easier! Platform: |
Size: 37086208 |
Author:combeatle |
Hits:
Description: 利用业余时间，仿照Elecard H.264 StramEye写的 中国AVS视频标准的码流分析工具，exe文件 不是源码，代码用delphi写的，需要的话请和我联系。支持逐帧分析，图形化显示每个宏块的信息。由于没有开发自己的解码引擎，所以解码速度有些慢 （最好别用太大的码流来测试它 :)）。大家试用后有什么意见可以反馈给我。
解压后直接运行就可以了，绝没有病毒。 -Exe file is not source code, code written with delphi, if required, please contact me. Support for frame by frame analysis, graphical display of information for each macro block. In the absence of developing its own decoding engine, decoding speed and some slow (better not to use too much stream to test it:)). You have any comments after the trial can feedback to me. After extracting run directly on it, absolutely no virus. Platform: |
Size: 451584 |
Author:linxiao |
Hits:
Description: Q尾巴病毒在近来的网络上是越来越常见了，它之所以这么流行，我认为其中一个原因就是编写这种软件的技术含量很低，不需要任何高深的手段就可以做出个7，8分像。-Q tail of the virus in the recent network is becoming more common, and it is the reason why so popular, I think one reason for the preparation of the technical content of this software is very low, without any means of advanced can make a 7, 8 points like. Platform: |
Size: 6144 |
Author:fd3355 |
Hits:
Description: 硬盘杀手病毒的破坏力全面超越CIH病毒：它利用网络漏洞和共享目录进行网络感染-Full destructive power of the hard disk killer virus beyond the CIH virus: its use of the network shared directory for network vulnerabilities and infections Platform: |
Size: 2048 |
Author:洪淡定 |
Hits:
Description: 卡巴斯基软件源代码泄露
卡巴斯基的安全套装产品之一的源代码已经泄露，并可以从网上下载(压缩包大小约300MB)。并称，源代码涉及的版本是Kaspersky Internet Security 8.0/2009的一个测试版。
该代码是C + +和Delphi编写的，涵盖反病毒引擎，以及反钓鱼，反拨号器，防垃圾邮件，家长控制等模块。据包内的发行说明，被泄露的源码是卡巴斯基实验室在2008年和过去所做的更改从2007年12月他们的日期。
这里提供的是该源代码包内包含的AVZ部分的源代码,是完全使用delphi开发的,用于检查和修补系统漏洞和安全隐患,其使用的是FASTSCRIPT的内建脚本机制.-Kaspersky software source code leaked
One of Kaspersky s security suite of products has been leaked source code, and can be downloaded from the Internet (compressed packet size of about 300MB). Adding that the version of source code related to Kaspersky Internet Security 8.0/2009 is a beta version.
The code is C++ and Delphi and covers the anti-virus engine, and anti-phishing, anti-dialer, anti-spam, parental control module. According to the release notes package, source code was leaked Kaspersky Lab in 2008 and has done from December 2007 to change their date.
Provided here is the source code package contains the AVZ part of the source code is completely developed using delphi for inspection and repair system vulnerabilities and security risks, the use of the built-in script is FASTSCRIPT mechanism.
Platform: |
Size: 24171520 |
Author:顶点 |
Hits:
Search - delphi for virus