Hi, I'm newbie of newbie in RCE.

I have a sample of VB virus(maybe), and I do analyze.

something is solved but complete not yet.

I guess this virus on VBVM by MDI&ebLoadRuntime.
maybe not binary, maybe bytecode so this running on VBVM.

but I can't image actualy how excuting.
anyone who teach me, I'm very appriciate.

thx for reading have a nice day ~

ps. sorry, I can't upload file. download by this link plz

http://rapidshare.com/files/395008855/Download-Server.exe.html ("http://rapidshare.com/files/395008855/Download-Server.exe.html")

Hi,
Go through this ...there are couple of VB reversing tutorials as well. It should be a good starting point.

http://www.tuts4you.com/download.php?list.17


Charlie

I have mistake. I'm newbie . but not new-one.
I want you understand about I'm no good.

download & open & RCE .

this VB sample is not normal. interest working~~