- [Duke's Virus Labs #6] - [Page 23] -

  AVP
(c) by SMT/SMF


       室  Flame ᬮ   堪
⥫쭮,   訫  ,   ணࠬ  win32.
쥪⮬    ࠫ ᥬ  AVP,  祭 ᠦ
 ᢮ ⨪. (, ,   ᨣ  Win95.CIH'a,
   ࠢ, , 㣠, , , , ࠭  win32 ...)
 ⠪ , ᪠  ணࠬ (⫠稪, SPY,   ⠪ - ⥫ 
registry monitor  file monitor ,   ⮫쪮 㤠  
ᯮᮡ  ࠪ   ਤ㬠). , , handl'  AVP,
祪, ⡮ᮢ,  ..  ⠢ ४   ᮮ饭 windows, 
⠬ ᬮ५  SDK, ଠ 맮 ᮮ饭.  , , ਬ,
᫥ ⨥     ப  listbox   
믠 祩 ᮮ饭,  뫠 窠  ஬ ⢠.
⥫  䨫஢   ⮦ : ஡ 㣠,  AVP
   -   LB_ADDSTRING,   LB_INSERTSTRING,  
 LVM_祣-... 饬, ᥬ騩 GUI   .    
⠫ ⠢   訫: -,  ਭ ⢥ . ⠢
窨 ⠭  樨 ࠡ  䠩,   ⮬ ,  ⠥ 
 䠩, 㪠   ࠧ , .. , ᪠, ᪮쪨
 ⠢ 0. 筮   ࠡ⠫.   ᤥ ,  
⮩ 堪,  ⠢ AVP. 筮, ᠤ 뫮,   ⮭ ࠡ
諮 த஢ ⮤ 㡮 ᨫ... AVP ᫥ ⮣ த
।   ,  ᯮ 娢  㯠騪 (pklite
 ..) ᪠஢ 祭  -  ᮢᥬ  ,  ⥫ .
   ⮬  訫   ⮩ ࠡ  த   ᫥ ...
० ᥣ  ᬮ५   ⥪  㭪権, 뢠 AVP, 
祭 ࠤ,  㢨  AVPBASE.DLL AVP_AddMask, AVP_LoadBase,
AVP_UnloadBase  ᮡ AVP_ProcessObject,   ஢﫠 쥪.
 ஢ ᫥ 㭪  襫,  ᯮ ஢ન:
(᭠砫  㠫 ,   㧨 DLL,  ⮬ ᬥ饭
 䠩 AVPBASE.DLL)

⠪, .10004b96 00003f96        -  00 - ஢ઠ  (⥯ 㤥
                                     , .. ஢
                                      ᨣ)
      .10003266                 -  室  ᪠஢ 娢,
                                   ⠢  , ⮡ ᮧ
                                   ஢ન 娢.
      .1000329b                 - 室 ᫨  pklite, diet, etc...
                                    ⢠,    娢...
      .1000331c 0000271c        -    㦥 . ⠢ 
                                   E9 89 00 -    㤥 㦥...
      .1000346e 0000286e        - , 㬠,   㦨 
                                   ⮣ 墠? , 筮! 襬 
                                  90 90   ७ ⥯  
                                   ᯮ.

 ⮣ - CRK-䠩  ਬ  ᢮  㦨 AVP:

===== Cut here =====
AVP 3.00 build 129

Comparing files AVPBASE.old and AVPBASE.dll
AVPBASE.DLL
0000271C: 0F E9
0000271D: 84 89
0000271E: 88 00
0000286E: 74 90
0000286F: 0B 90
00003F96: 19 00
===== Cut here =====
