Thursday, August 16, 2012

GOLD-BUG Virus

Virus Name:  GOLD-BUG
Aliases:     AU, GOLD, GOLD-FEVER, GOLD-MINE
V Status:    New, Research
Discovery:   January, 1994
Symptoms:    CMOS checksum failure; Creates files with no extension. Modem answers on 7th ring; BSC but it is hidden; Most virus scanners fail to run or are Deleted; CHKLIST.??? files deleted.
Origin:      USA
Eff Length:  1,024 Bytes
Type Code:   SBERaRbReX - Spawning Color Video Resident and Extended HMA Memory Resident Boot-Sector and Master-Sector Infector
Detection Method:  None
Removal Instructions:  See Below


Wednesday, August 15, 2012

FIREFLY - More than A Smart Virus

Firefly is an encrypted, memory resident virus which infects
.COM files on load.  It incorporates code from Proto-T, 
LokJaw and YB-X viruses and, when in memory, attacks a large election of anti-virus programs as they are executed.  Anti-virus programs identified by Firefly's execute/load handler are deleted.
Firefly incorporates simple code from previous issues of the newsletter signed to de-install generic VSAFE resident virus activity
filters designed for Microsoft by Central Point Software.



Tuesday, August 14, 2012

Anti-Debugger Techniques


-THE-MASTER-HIDES-BEHIND-THE-MASK-


        Ok, now the AV can not even get your virus to infect their bait
files, and if they do finally manage,  they will have great problems in
getting a complete,  accurate view of what they are dealing with.



--By Sibidharan




KEYSPY : Password Capturing Made Easy


A little something I cooked up when I was bored one afternoon ...

KEYSPY is a program which is intended to capture keystrokes when a password-protected or login program is run and save them in a hidden file in the root directory. This will enable the resourceful user to find plenty of login names and passwords.

By Sibidharan v 0.90