Page 2 of 5 FirstFirst 1234 ... LastLast
Results 11 to 20 of 50

Thread: I HAVE A unknow VIRUS

  1. #11
    Senior Member
    Join Date
    Feb 2004
    Posts
    197
    no it wont

    to disable it you can quarintine it or encrypt it. but i recomend encrypting it

  2. #12
    Regal Making Handler
    Join Date
    Jun 2002
    Posts
    1,668
    I just submitted it to Symantec, so i guess we'll find out.
    What happens if a big asteroid hits the Earth? Judging from realistic simulations involving a sledge hammer and a common laboratory frog, we can assume it will be pretty bad. - Dave Barry

  3. #13
    Senior Member
    Join Date
    Feb 2004
    Posts
    197
    do any of you test viruses?

  4. #14
    Banned
    Join Date
    Apr 2003
    Posts
    3,839
    I used to, but i gave my 2 test machines away. I dont wanna try things out on this one, too many important file on it.

  5. #15
    Regal Making Handler
    Join Date
    Jun 2002
    Posts
    1,668
    This is what i got,

    78: !This program cannot be run in DOS mode.
    441: .text
    480: `.data
    522: .rsrc
    577: MSVBVM60.DLL
    4123: PDssRsaTQs
    4174: TQs\BDs
    4198: EDssADs
    4251: QsmYOs
    4262: `Os0XQsaUQs
    4310: ADstEDs
    4318: UQsPOQs
    4363: Qs"DDsi
    5487: kColorDRR
    5605: Form1
    5615: > DRR 2004
    6255: fffff
    6279: 3ff3f
    6399: f3ff3
    6423: 33f33
    6770: ]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
    7698: ]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
    7892: Form1
    7934: TahomaDF
    7952: Command1
    7996: Text1
    8024: }Welcome to DRR 2004.
    8049: An unknown error has now occured in order to
    8096: remove this error then please restart your computer.
    8167: Image1
    8188: GIF89a
    8207: 333qqqwwdbba
    8255: }}}yyy,,,JII
    8282: UUFEEE
    8300: {{p^]]
    8309: RQQ###
    8441: jjj::9
    8450: lllnnnfff
    8497: zKK>qq[
    8597: ff_PPK
    8609: ooowvvNMFEEA
    8672: >>6jjf
    8699: tssppp
    8717: ???!!!
    8741: GGG/..SSRhgh[[[WWWiii666
    8777: mmmTTTfeecc`HHH
    8843: 888cccLLL
    8855: ```POPKKK
    8885: CCC100\\\
    8933: ;;;
    9188: NJ\*0
    9269: )4=3G
    9366: !W4Q$
    10279: A,XX@tS
    10682: =(F1F0
    10871: `D2P!
    11456: F6 99
    11666: p&Rs%
    11727: PO`ur
    12006: $4`}
    12417: 2RPa7
    14544: -Zw.R
    14758: +Xpq?
    14862: 9zn`N
    15492: <78X=
    16303: m}k\K
    16388: HE:FQ
    16710: B2H^U
    16745: UA]QCg
    16781: Dq1L@QH
    16840: x0/{8
    16855: W0?"P
    17053: +d2+Xx
    17446: zKNzK
    17912: nPRBZ
    18060: exJg@
    18071: //8QK3
    18189: )0&eS]
    18735: e0<"h
    18927: 3`h?sM
    19258: \FHUv
    19475: (hoR0
    19614: D:\u
    19623: :w9LP
    19918: ES"mS
    19924: ]0p K#'
    20211: AEhu%B
    20270: +S|6]
    20582: F2j#Y
    21364: RXE ,`PD
    22077: H)(#;?
    22170: Qo?1X,i:
    22356: +4B4\
    22698: B9D#5f
    22721: TcWfe6
    22761: %@YM&P
    22955: 7AA0x
    23258: aF-kFQd
    23392: kTg""
    23641: YjV(0
    23871: qBdHB
    23994: &FU;0
    24043: N35Os4
    24163: (XB!Dt-
    24422: 6PBqsvg
    25149: v<1F#
    25360: *GA^V
    25995: CZd)@
    26056: \8(XY
    26193: EXb~z
    26316: D:3SU
    26561: @P#(?
    27157: E-Gc+|a
    28115: #x`'S
    28785: Drr 2004
    30329: Form1
    30337: Module1
    30426: Command1
    30454: C:\Program Files\Microsoft Visual Studio\VB98\VB6.OLB
    30531: v@,w@
    30570: Text1
    30618: Image1
    30729: user32
    30741: PaintDesktop
    30813: advapi32.dll
    30833: RegDeleteValueA
    30905: ExitWindowsEx
    30977: RegOpenKeyExA
    31049: RegCloseKey
    31153: RegCreateKeyA
    31225: RegDeleteKeyA
    31297: RegQueryValueExA
    31373: RegSetValueExA
    38337: VBA6.DLL
    38349: __vbaFreeVar
    38365: __vbaVarDup
    38377: __vbaFreeStr
    38393: __vbaSetSystemError
    38413: __vbaStrToAnsi
    38429: __vbaOnError
    38445: __vbaFreeObj
    38461: __vbaHresultCheckObj
    38517: __vbaObjSetAddref
    38537: __vbaNew2
    39169: __vbaVarCmpNe
    39441: __vbaVarAdd
    39453: __vbaVarCmpEq
    39469: __vbaVarOr
    39481: __vbaBoolVarNull
    39501: __vbaInStr
    39513: __vbaErrorOverflow
    39533: __vbaStrCat
    39545: __vbaFreeVarList
    39565: __vbaStrCmp
    39577: __vbaStrCopy
    39593: __vbaStrVarMove
    39609: __vbaFreeStrList
    39629: __vbaStrI2
    39641: __vbaAryUnlock
    39661: __vbaAryLock
    39677: __vbaVarForNext
    39693: __vbaStrMove
    39709: __vbaUI1I2
    39721: __vbaGenerateBoundsError
    39749: __vbaI4Var
    39761: __vbaVarForInit
    39777: __vbaRedim
    39789: __vbaLenBstr
    39805: __vbaVarCopy
    39821: __vbaVarMove
    39837: __vbaStrToUnicode
    46977: MSVBVM60.DLL
    46993: __vbaStrI2
    47007: _CIcos
    47017: _adj_fptan
    47031: __vbaVarMove
    47047: __vbaFreeVar
    47063: __vbaLenBstr
    47079: __vbaStrVarMove
    47097: __vbaFreeVarList
    47117: _adj_fdiv_m64
    47133: _adj_fprem1
    47147: __vbaStrCat
    47161: __vbaVarCmpNe
    47177: __vbaSetSystemError
    47199: __vbaHresultCheckObj
    47223: _adj_fdiv_m32
    47239: __vbaVarForInit
    47257: __vbaOnError
    47273: _adj_fdiv_m16i
    47291: __vbaObjSetAddref
    47311: _adj_fdivr_m16i
    47329: __vbaBoolVarNull
    47349: _CIsin
    47359: __vbaChkstk
    47373: EVENT_SINK_AddRef
    47393: __vbaGenerateBoundsError
    47421: __vbaStrCmp
    47435: DllFunctionCall
    47453: __vbaVarOr
    47467: _adj_fpatan
    47481: __vbaRedim
    47495: EVENT_SINK_Release
    47517: __vbaUI1I2
    47531: _CIsqrt
    47541: EVENT_SINK_QueryInterface
    47569: __vbaExceptHandler
    47591: __vbaStrToUnicode
    47611: _adj_fprem
    47625: _adj_fdivr_m64
    47643: __vbaFPException
    47663: _CIlog
    47673: __vbaErrorOverflow
    47695: __vbaInStr
    47709: __vbaNew2
    47721: _adj_fdiv_m32i
    47739: _adj_fdivr_m32i
    47757: __vbaStrCopy
    47773: __vbaFreeStrList
    47793: _adj_fdivr_m32
    47811: _adj_fdiv_r
    47825: __vbaI4Var
    47839: __vbaVarCmpEq
    47855: __vbaAryLock
    47871: __vbaVarAdd
    47885: __vbaStrToAnsi
    47903: __vbaVarDup
    47917: __vbaVarCopy
    47933: _CIatan
    47943: __vbaStrMove
    47959: _allmul
    47969: _CItan
    47979: __vbaAryUnlock
    47997: __vbaVarForNext
    48015: _CIexp
    48025: __vbaFreeObj
    48041: __vbaFreeStr
    54635: fffff
    54659: 3ff3f
    54779: f3ff3
    54803: 33f33
    55150: ]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
    56078: ]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
    What happens if a big asteroid hits the Earth? Judging from realistic simulations involving a sledge hammer and a common laboratory frog, we can assume it will be pretty bad. - Dave Barry

  6. #16
    Senior Member
    Join Date
    Feb 2004
    Posts
    197
    same with me, fixed and gave my test machine to a freind

    this is my second favorite type of virus to test because its cool but not as cool as overwriting viruses

  7. #17
    HeadShot Master N1nja Cybr1d's Avatar
    Join Date
    Jul 2003
    Location
    Boston, MA
    Posts
    1,840
    now....my question is, How did u figure out that its a virus? Where did you download it from?

    What tools did u guys use to analyze the file? Where can I get some of those tools, preferably for windows.

  8. #18
    Doesnt this have the same name as that program grim_reaper was claming could make jpeg viruses?

  9. #19
    Senior Member
    Join Date
    Feb 2004
    Posts
    197
    i know thats its a virus because it contained a read me file (i always read those ) and it said what the virus deos.and it came with snapshots

    dont want to sound meen but im not tellling u where i got it from

  10. #20
    Senior Member
    Join Date
    Feb 2004
    Posts
    197
    can u give me a link to that post

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •