Maximize
Bookmark

VX Heaven

Library Collection Sources Engines Constructors Simulators Utilities Links Forum

Source code of computer viruses

Probe v1.1 - Virus for QNX by NoNE

Virus for QNX

NoNE
Show all viruses by this author

2001-07-17

Comments
Download probeb.zip (5867 bytes) or browse online

Author's notes

QNX ELF files parasitic prepender. Works as the background process to hide itself's presention from the user. Infects all ELF esecutable files in the directiory tree. Victim is stored in RDA-crypted form in the end of the infected file. Each block of victim's body is crypted with a different key. While the uncrypting, this key is selected with help of the 4-bytes checksums of the each block, which are stored in the crypted body. This checksums are stored before each block.

Version 1.1: Optimized, bugfixed, modified. Added the payload - if random number is equal to 555 than 1 day is added to the system time. It is done with a QNX library function, so, now it is a real QNX virus :)) Payload works only with root or superuser permissions.


By accessing, viewing, downloading or otherwise using this content you agree to be bound by the Terms of Use! vxer.org aka vx.netlux.org