bootkit 样本

时间:2013-05-30 10:49:30
【文件属性】:

文件名称:bootkit 样本

文件大小:278KB

文件格式:RAR

更新时间:2013-05-30 10:49:30

BOOTKIT ROOTKIT MBR 样本

很好的BOOTKIT样本 ######################################################## ;## 32 bit Code,is called before execution of KERNEL ## ;######################################################## CODE32START: pushfd pushAd mov word [ds:0B8000h], 0x024E ; mov word [ds:0B8002h], 0x0269 mov word [ds:0B8004h], 0x0274 mov word [ds:0B8006h], 0x0269 mov word [ds:0B8008h], 0x026E mov word [ds:0B800Ch], 0x024B ; mov word [ds:0B800Eh], 0x0275 mov word [ds:0B8010h], 0x026D mov word [ds:0B8012h], 0x0261 mov word [ds:0B8014h], 0x0272


【文件预览】:
mbrrootkit.exe

网友评论