Исходные тексты компьютерных вирусов

Hiewg - Virus for Windows by roy g biv

Virus for Windows

roy g biv
Show all viruses by this author

2009-09-09

Download hiewg.zip (12571 bytes) or browse online

Author's comments

parasitic direct-action infector of PE exe/dll (but not looking at suffix)
infects files when Hiew loads them
last section appender
uses CRCs instead of API names
section attributes are never altered (virus is not self-modifying)
no infect files with data outside of image (eg self-extractors)
uses new method to find kernel address (no hard-coded addresses, Windows 7 RC compatible!)

yes, just a W32.Hidan remake that infects Hiew instead of IDA