如何获得病毒样本如何获得病毒样本 How to get samples of the virus to acquire the virus samples

1. 拿一张干净启动软盘A(如果你还能弄到的话),再搞一个小.com和一个小.exe放在上面. 下面称它们为b1.com和b2.exe.有的病毒会判文件大小...可自己编一个原码文件..在编译...(可用空白码eg nop (Masm) and so so)调整它们的个数即可! 1 Take a clean boot floppy disk A (if you can get it), then engage in a little. Com and a small. Exe on top. The following call them b1.com and b2.exe. Some viruses sentenced to compile the file size ... can own a original code file is compiled ... .. (available blank code eg nop (Masm) and so so) you can adjust the number of them!

2.diskcopy A->另一张软盘B. 1 & 2 都是在一台干净机上完成. 2.diskcopy A-> another floppy disk B. 1 & 2 are done on a clean and machine.

3. 拿B 到你的染毒机器上用: 把那b1.com 和b2.exe copy-> 硬盘, rename-> b1.v_c 和b2.v_e, 把B的引导区存入文件b3.v_b.把它们(b1.v_c, b2.v_e, b3.v_b)upload上来就行了.最好把A盘的b1.com,b2.exe和引导区也upload, 以供对照. 3 B to get on with your infected machine: put b1.com and b2.exe copy-> hard disk, rename-> b1.v_c and b2.v_e, the B's boot sector into a file b3.v_b. them (b1.v_c, b2.v_e, b3.v_b) upload up on the line, preferably the A disk b1.com, b2.exe and boot also upload, for comparison.

4.如果是慢性病毒,可能需要多重复几次才行.还可以在b1.asm中插入若干条nop ,来增大b1.com b1.exe 文件的长度. 4 If a chronic virus, may need to repeat several times more than the job. You can also insert a number of articles in b1.asm nop, to increase b1.com b1.exe file length.

if是系统类的病毒,then 用一干净的盘(diskettes)放进driver if a system like a virus, then use a clean plate (diskettes) into the driver
一读就ok!but without any write-protected! First reading on ok! But without any write-protected!
use debug... use debug ...
-l100 0 0 1 -L100 0 0 1
-na:virus -Na: virus
-rcx 200 -Rcx 200
-w -W
-q -Q
ok. ok.
来源:bbs.ncic.ac.cn Source: bbs.ncic.ac.cn