, :
;
;
.
: ; (); ; .
: , , .
( ), - (-), (link-).
(boot-), , (Master Boot Record), boot-.
- .
.
, - , , . , , , , - -. , , .
(, , ) . - DOS, Windows, OS/2 . . MS Word MS Excel. .
:
;
-;
;
.
, . . . , . .
, . , " " .
|
|
"" DOS- DOS-, .
- . - - - , . .
, . - (polymorphic) ; , . . . - . -.
, , , (, Flash-BIOS) . .
:
, . . ( );
, , ;
, ;
, , , , , , , .
, , , . , , , , .
, - .
. , DOS: (), (SYS, IO.SYS MSDOS.SYS) (, ). , Win32, OS/2, Macintosh, Unix.
, , , . , , . , , .
|
|
overwriting, (parasitic), - (companion), link-, - , (OBJ), (LIB) .
Overwriting-. : , . , . , .
Parasitic-. , , . , (prepending), (appending) (inserting). , (cavity-).
. , , . , .
- - DOS. , - DOS, Windows Linux. , , , , ( , ), (. . ).
. , , , .
. . . , . , . cavity, . , , - , .
, (- Entry Point Obscuring viruses). , -. - , , . (, - ). "" .
|
|
Companion-. - , . , -, , . . .
-, DOS .-, , . .. - -, , .. - -. DOS -, . . , -. -, --.
, , - , ( -) . , , . , , , DOS, Windows, OS/2.
Path-companion-, "" DOS PATH. , "" PATH (DOS, , -), - . .
Link-. Link-, -, , . .
. , . , . , , .
. (worms) -, - . - , - . "" , , INSTALL.EXE WINSTART.BAT.
- . - , .
OBJ-, LIB- . , , , . , OBJ- LIB-, .
|
|
. "" - -, OBJ/LIB- . , : OBJ/LIB-, () .
. ( ) ( ). .
(boot) boot- Master Boot Record (MBR) . : (, . .) :, : CD-ROM, , BIOS Setup.
CD- boot- , ( BIOS Parameter Block), , . , , boot- , .
, MBR . (Disk Partition Table), boot- ( boot- :), . , boot- , boot- .
- , . , , : "" , .
: boot- . : MBR, boot- ( :), boot- Disk Partition Table, MBR .
boot- ( MBR) - (, ). , , (, ).
: ; ; , .
, ( ), , , ( "" ).
. ( ), MBR boot-, .
, , , , .
. . : boot- Disk Partition Table ( ), "" .
|
|
. ( ), , 40- 360 80- 1,2 1,4 . , , , , .
(macro viruses) (), ( , . .). ( ) . Microsoft Word Excel.
:
1) ;
2) ;
3) ( ).
" ". , .
Word- () ("" ), MacroCopy, Organizer. . , , , .
Word ( ) DOT- ( NORMAL.DOT). , Word , WinWord , . . .
( ) (, FileOpen, FileSave, FileSaveAs, FilePrint) . , . Template ( , . . - -Template-) , .
, FileSaveAs, DOC-, . FileOpen, .
. Add-in-, . . , Word. NORMAL.DOT , a Word ( ), Add-in. , NORMAL.DOT, - .
Excel- Word-. (, Sheets.Copy) NORMAL.DOT, ( ) STARTUP- Excel.
, . . "" , , "" .
80-, (worms). , Cristmas Tree Wank Worm. . .
, , -, . , . , ( ).
. .
1997 . Macro.Word.ShareFun Win.Homer. Microsoft Mail. , - (ShareFun ), MS-Mail . MS-Mail , MS Word, "" .
, Word Excel , , .
(Homer) FTP (File Transfer Protocol) ftp- Incoming. FTP , , .