Replacing AutoIT Error MessageBox

[michaelslamet]

When AutoIT script die because of unexpected error, it will throw an messgebox with title "AutoIT Error"

Line 99999 (File "c:balblblablblbla.exe")

Error: reason of error

This kind of error will not intercepted by

$objErr = ObjEvent("AutoIt.Error","MyErrFunc")

How to change this error messagebox title and body?

 

[water]

Modify your script so the error doesn't occur.

[michaelslamet]

Hi Water,

That is what we are all try to do, but who knows it will throw an error someday, maybe when the script is run on another environment

[water]

But why so you want to add code to your script to modify the title and content of the error message box?

[michaelslamet]

Hi Water,

Because I dont want user know we create the application using what computer language

We do anything we can to make the script hard to decompile but when user/attacker know what language is that, it will be easier for them to decompile or gain control.

[water]

Save your time. It took me 10 seconds to find this string in the compiled code: "This is a compiled AutoIt script".

If a user wants to decompile your script he will find a way. Changing the text of rare error messages won't make it safer.

The forum is full of threads covering this subject.

[Melba23]

michaelslamet,

I understand that Jon added the string Water mentioned in an attempt to stop the AV companies flagging the interpreter stub each time they came across some malware coded in AutoIt. As we all know, it failed as the companies appear not to take any notice.

And in my role as Honorary President of the Oozlum Bird Preservation Society, I would be grateful if you did not let another one loose in this thread.

M23

[michaelslamet]

Save your time. It took me 10 seconds to find this string in the compiled code: "This is a compiled AutoIt script".

If a user wants to decompile your script he will find a way. Changing the text of rare error messages won't make it safer.

The forum is full of threads covering this subject.

 

Are you using Hexa Editor to find it? Can you still find it if:

1. The source code is obfuscated before compile

2. The exe file is packed with commercial packer like Armadillo

3. Obsfuscated + packed with commercial packer

[michaelslamet]

michaelslamet,

I understand that Jon added the string Water mentioned in an attempt to stop the AV companies flagging the interpreter stub each time they came across some malware coded in AutoIt. As we all know, it failed as the companies appear not to take any notice.

And in my role as Honorary President of the Oozlum Bird Preservation Society, I would be grateful if you did not let another one loose in this thread.

M23

 

Hi Melba,

I'm sorry for my poor english: what are you trying to said? Say it in plain and simple english please

Even plain and simple english usually bring me to google translate

[water]

Are you using Hexa Editor to find it? Can you still find it if:

1. The source code is obfuscated before compile

2. The exe file is packed with commercial packer like Armadillo

3. Obsfuscated + packed with commercial packer

I simply used Notepad.

Don't have the time to test but I'm sure it still can be found. Because if it is a notice to AV companies it should easily be found.

[water]

Hi Melba,

I'm sorry for my poor english: what are you trying to said? Say it in plain and simple english please

Even plain and simple english usually bring me to google translate

You mean Melba's sentence about "Honorary President"? He just wants to tell you that this subject has been discussed many, many times and even 100 new threads can't add anything new to the subject.

[michaelslamet]

I simply used Notepad.

Don't have the time to test but I'm sure it still can be found. Because if it is a notice to AV companies it should easily be found.

 

Noted. Thanks, Water

[michaelslamet]

You mean Melba's sentence about "Honorary President"? He just wants to tell you that this subject has been discussed many, many times and even 100 new threads can't add anything new to the subject.

 

Aha! Understand now

I already read those thread about this, but I'm going to read them again.

Ok, back to topic: whatever the reason(s), is there any way to change the AutoIT error message box title and body?

[guinness]

Simple answer, no. water already answered this.

Long answer, yes, but you will have to search for JScript's UDFfor catching syntax errors, though it's  probably less time consuming to actually fix the error (error checking) than jumping through hoops.

Edited June 22, 2013 by guinness

[michaelslamet]

Simple answer, no. water already answered this.

Long answer, yes, but you will have to search for JScript's UDFfor catching syntax errors, though it's  probably less time consuming to actually fix the error (error checking) than jumping through hoops.

 

Got it!

But I still courious, is there really no "easy" way to archieve that?

[FireFox]

No, this is internal to autoit and not editable.

Edit: Remembering another topic, better fix your errors instead of hiding them

Edited June 26, 2013 by FireFox

[guinness]

I agree, but did you search the Udf?