The computer industry believe that everyone hates a computer virus, she gives us a lot of trouble and losses, you know that the virus preparation methods and process it? I only prepared VB, for example, lifted her veil.
VB with the preparation of the virus needs to take into account the following:
* Infected host
First of all infected files after the first run to determine whether or not to host the virus, which is the main virus file to determine whether there is, if the virus does not exist will be the main copy to the designated location (for example:
Virus will copy files to c: \ \ Windows \ \ system \ \), can be used to achieve filecopy statement; if the virus has infected host is the end of the judge.
For example, to determine C: \ \ windows \ \ system \ \ Killer.exe existence, if withdrawn from the judge if there is no proof of this machine is not infected with HIV, the virus immediately Kaoru document.
Virus known as the source file game.exe
Statement:
"" Definition of function FileExists%
public success%
Function FileExists% (fname $)
On Local Error Resume Next
Dim ff%
Ff% = FreeFile
Open fname $ For Input As ff%
If Err Then
FileExists% = False
Else
FileExists% = True
End If
Close ff%
End Function
Code:
"" Determine the existence of documents
success% = FileExists% ( "C: \ \ windows \ \ system \ \ Killer.exe")
If success% = False Then "" virus does not exist then copy to the computer virus
FileCopy "game.exe", "C: \ \ windows \ \ system \ \ Killer.exe"
... "" Modify the registry, add in RUN. (Omitted a number of code)
End If
* Start-up virus
Infection in the host, will start its own accession to the operation of the registry, which is host to the virus Kaoru is carried out at the same time, the host after infection no longer modify the registry. Through programming and API function calls to the registry WIN operate to achieve, so that each time the virus automatically when your computer starts. (Please refer to the specific method of preparation of other information)
* Task Manager
In the Task Manager list of prohibited virus itself was set out, can be achieved through the program. App.TaskVisible = false use of code can be achieved; another is to call Win API function to achieve, there will not be introduced.
* The virus attacks the conditions
Available Day (Date) to determine the date today, with the date to make sure good compared to the same show is the main destructive virus, or not attack. Can also be used Time, Date or other methods as a virus attack to determine the conditions. For example:
if day (date) = 16 then "" 16 is the date of the attack, as the value of an integer 1-31
... ... "" Kill ******* date when the line running when the destructive code (formatting, remove the designated file types, to send a packet network, such as Doucet, a number of code omitted)
end if
* Destructive virus
The preparation of this part of the code determines the strength of the power of the virus. The light can reduce the system resources rapidly until death (you need to know that the principle of worms), that is, start to realize that the effects of death; hard disk can become productive members of a bomb code, cut back the system files. The re-enable the complete paralysis of the computer (no, you can see the other virus-related information).
* Virus reproduction
The principle is very simple, that is, its own merger with other executable file, that is, and the two papers into a document. Also available via E-Mail spread of the virus is to read the infected host the mailing list, with virus attachments E-Mail sent to the list of everyone (which you need to know how to network programming VB). |
