Jump to content
Sign in to follow this  
MAgerly666

I found this and thought it was pretty interesting as a resource...

Recommended Posts

MAgerly666

This code I came across is something called a GEMA trojan. I tested it in a VMWare XP image and it locked me down pretty hard. Even when I tried to boot into Safe Mode with command prompt, it attempts to display a non-existent web site and you can't do anything else. Booting into a LiveCD and removing the file, 1.exe, from your application data path and then rebooting into safe mode with command prompt allowed me to run explorer.exe. But it still wasn't cleaned up.

****SO IF YOU DO TEST THIS, MAKE SURE TO USE VMWARE OR SOMETHING SIMILAR TO PREVENT YOUR MACHINE FROM BEING LOCKED DOWN****

I wanted to share this, because it is a great look at windows manipulation and I like going through code and learning new things.

Plus I don't usually run across much trojan type code...

Here is an excerpt and I will also include a txt file with the full source...enjoy!

<snip>
Edited by Melba23
Removed code and attached file

Share this post


Link to post
Share on other sites
Melba23

MAgerly666,

Do not post this sort of thing here! :mad:

Please read the Forum Rules - particularly the bit about not discussing malware - before you post again. Thread locked and code removed. :naughty:

M23


Public_Domain.png.2d871819fcb9957cf44f4514551a2935.png Any of my own code posted anywhere on the forum is available for use by others without any restriction of any kind

Open spoiler to see my UDFs:

Spoiler

ArrayMultiColSort ---- Sort arrays on multiple columns
ChooseFileFolder ---- Single and multiple selections from specified path treeview listing
Date_Time_Convert -- Easily convert date/time formats, including the language used
ExtMsgBox --------- A highly customisable replacement for MsgBox
GUIExtender -------- Extend and retract multiple sections within a GUI
GUIFrame ---------- Subdivide GUIs into many adjustable frames
GUIListViewEx ------- Insert, delete, move, drag, sort, edit and colour ListView items
GUITreeViewEx ------ Check/clear parent and child checkboxes in a TreeView
Marquee ----------- Scrolling tickertape GUIs
NoFocusLines ------- Remove the dotted focus lines from buttons, sliders, radios and checkboxes
Notify ------------- Small notifications on the edge of the display
Scrollbars ----------Automatically sized scrollbars with a single command
StringSize ---------- Automatically size controls to fit text
Toast -------------- Small GUIs which pop out of the notification area

 

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.
Sign in to follow this  

×