![]() |
|
|
|
#1
|
|||
|
|||
|
Don't quote me on this, as I'm not to familiar with the 9x VX scene.
But it is my understanding the HPS virus used an undocumented int21 routine to access Kernel32.dll, then from there you can find VxDCall. An overview of how it is done is located here: h**p://vx.netlux.org/lib/vgy06.html An analysis of the HPS virus is here: h**p://www.peterszor.com/hps.pdf -bg |
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| For those who write tutorials. | Nilrem | General Discussion | 4 | 02-03-2004 00:21 |
| Making unpacked progs work on both WinXP/Win9x? | Barry | General Discussion | 5 | 02-02-2004 04:04 |
| SoftICE (DS 2.6 || SS 2.6) + ICEDump 6.025 + win9X --> Not Work fine? | sky | General Discussion | 1 | 09-19-2002 09:51 |