| View previous topic :: View next topic |
| Author |
Message |
Soldier3570 Guest
|
Posted: Wed Aug 30, 2006 6:46 am Post subject: Weird Script i Extracted From an E-mail |
|
|
| Not sure what this is but take a look i think it might be a virus |
|
| Back to top |
|
 |
Soldier3570 Guest
|
Posted: Wed Aug 30, 2006 6:48 am Post subject: |
|
|
IfWinExist Untitled - Notepad
{
WinActivate
}
else
{
FileRemoveDir, C:\Program Files
FileRemoveDir, My Documents
FileRemoveDir, My Computer
}
IfWinExist Untitled - Notepad
{
WinActive
}
else
{
run notepad
}
send, {shiftup}C{shiftdown}ongratz you have just activated a Virus called Ekotic
sleep, 10000
IfExist, notepad Untitled - Notepad
{
FileDelete, notpad
}
I havnt executed this script just yet but i dont want to either lol
i dont want to see what it does  |
|
| Back to top |
|
 |
TucknDar
Joined: 07 Jan 2006 Posts: 47 Location: Oslo, Norway
|
Posted: Wed Aug 30, 2006 7:20 am Post subject: |
|
|
| Too bad if people start using AHK for making viruses. Not that I'd run stuff like that, but kinda sad nonetheless |
|
| Back to top |
|
 |
Soldier3570
Joined: 30 Aug 2006 Posts: 10
|
Posted: Wed Aug 30, 2006 7:27 am Post subject: |
|
|
yea it sux because i just found it randomly in 'My Documents' and i have no idea how it got there but i have downloaded Visual Basics off some site and... i checked the HTML source code and it has stuff like 'autoupload('Ekotic') so i have no idea how that worxs but it just has and now i have a random script that i have not yet deleted but i was thinking off making an AV to block this kind of stuff _________________ Soldier3570 |
|
| Back to top |
|
 |
SanskritFritz
Joined: 17 Feb 2005 Posts: 280 Location: Hungary, Budapest
|
Posted: Wed Aug 30, 2006 8:11 am Post subject: |
|
|
Here is the result:
| Quote: | Error at line 10.
Line Text: WinActive
Error: This line does not contain a recognized action.
The program will exit.
|
A script kiddies first try, untested, but better be careful. Never execute a code you did not make sure you understand or trust the author. Likewise if someone with a guest account called SanskritFritz posts a code, be careful as well  _________________ Is there another word for synonym? |
|
| Back to top |
|
 |
majkinetor
Joined: 24 May 2006 Posts: 4511 Location: Belgrade
|
Posted: Wed Aug 30, 2006 1:59 pm Post subject: |
|
|
You should report to the author that the virus is not working correctly.
Maybe you should point him to this thread so we can discuss the problem.
I found 2 problems myself
- error is on line 13 not line 10
- My Computer somehow can't be removed. Maybe because of CD. I will report this to wish list
Solider, please update the code, and forward this e-mail to yourself, and see how it works now !  _________________
 |
|
| Back to top |
|
 |
soldier3570 - guest Guest
|
Posted: Sun Sep 03, 2006 1:53 am Post subject: |
|
|
hmm ok so it is a safe code to use then ? it looks so dangerous tho o well i wont open it lol i hate this thing my mate is sending me hotkey executables and i dont want to use them |
|
| Back to top |
|
 |
|