English
Forum

BKA Remover question

 
- Page 1 -



Gary12345
Hi,

i want gladly a BKA Remover basteln. The basiert on one very leichtem Testcode, the Nich runs. If the Testcode walk would, would the remainder only yet Frauensache.

Vll a small introduction in things BKA and Trojaner:

for a long time hovers in the gefährlichem internet one sogenannter BKA Trojaner rum. this blackmail The People with money, so these again "entsperrt" go can (to payment). now - usually goes this BKA Trojaner to the equal principle. it nistet itself in the explorer one (means swaps The Real explorer.exe with the Schaddatei from. now determined my idea not only whom BKA Trojaner separate too others Trojaner (only Ransomware).

now have I me virtual, The bekanntesten Schaddateien for such Trojaner into eindimensionales aray To pack (speak a list).
i will these list then with Fileexist inquire, whether these Files too present are.
BKA Remover
Window 0,0 - 500,500
Window Title "BKA Remover"
Window Style 64
Def @GetUserNameA(2) !"Advapi32.dll", "GetUserNameA"
Def &CSIDL_COMMON_APPDATA $23
Declare Button1%, Button2%,Button3%,Button4%,Button5%,Files$
'Procedures

Proc GetSpecialDir

    Parameters csidl&
    Declare Result$
    Result$ = Space$(256)

    If External("Shell32", "SHGetSpecialFolderPathA", 0, Addr(Result$), csidl&, 0)

        Return Trim $(Result$)

    EndIf

    Return ""

ENDPROC

Proc GetUserName

    Declare Buffer#, Size&, User$
    Size& = 255
    Dim Buffer#, 256
    GetUserNameA(Buffer#, Addr(Size&))
    User$ = String $(Buffer#, 0)
    Dispose Buffer#
    Return User$

ENDPROC

Dateien$   = Create("List", 1)
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\wvf0rsf.js")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\WvF0RsF.pad")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\dsgsdgdsgdsgw.js")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\dsgsdgdsgdsgw.pad")
AddStrings(Files$, "C:\documents and Settings\All Users\Startmenü\programs\Autostart\ctfmon.lnk")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Anwendungsdaten\wvf0rsf.js")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Anwendungsdaten\WvF0RsF.pad")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Anwendungsdaten\dsgsdgdsgdsgw.js")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Anwendungsdaten\dsgsdgdsgdsgw.pad")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Startmenü\programs\Autostart\ctfmon.lnk")
AddStrings(Files$, "C:\ProgramData\dsgsdgdsgdsgw.pad")
AddStrings(Files$, "C:\documents and Settings\All Users\wgsdgsdgdsgsd.exe")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\wgsdgsdgdsgsd.exe")
AddStrings(Files$, "C:\ProgramData\RWvESYd.js")
AddStrings(Files$, "C:\Users\All Users\AppData\Roaming\Microsoft\windows\Start Menu\Programs\Startup\runctf.lnk")
AddStrings(Files$, "C:\Users\"+GetUserName()+"\AppData\Roaming\Microsoft\windows\Start Menu\Programs\Startup\runctf.lnk")
AddStrings(Files$, "C:\ProgramData\RWvESYd.pad")
AddStrings(Files$, "C:\ProgramData\dsgsdgdsgdsgw.pad")
AddStrings(Files$, "C:\ProgramData\dsgsdgdsgdsgw.js ")
AddStrings(Files$, "C:\Users\All Users\wgsdgsdgdsgsd.exe")
AddStrings(Files$, "C:\Users\"+GetUserName()+"\wgsdgsdgdsgsd.exe")
AddStrings(Files$, "C:\ProgramData\k5wtzba.js")
AddStrings(Files$, "C:\ProgramData\k5wtzba.reg")
AddStrings(Files$, "C:\ProgramData\k5wtzba.bat")
AddStrings(Files$, "C:\ProgramData\k5wtzba.pad")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\0tbpw.pad ")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\0tbpw.js ")
'Mainwindow
Button1% = Create("Button",%HWND,"Scan",150,50,200,50)
Create("Tooltip",%HWND,Button1%,"Einen Scan to Trojanern ausführen")
Button2% = Create("Button",%HWND,"Updaten",150,100,200,50)
Create("Tooltip",%HWND,Button2%,"Das Program updaten")
Button3% = Create("Button",%HWND,"Andere Remover suchen",150,150,200,50)
Create("Tooltip",%HWND,Button3%,"Nach like Tools suchen")
Button4% = Create("Button",%HWND,"Spende,Contact and Sonstiges",150,200,200,50)
Create("Tooltip",%HWND,Button4%,"Spende make, with me Contact take in or other Aktionen")
Button5% = Create("Button",%HWND,"Beenden",150,250,200,50)
Create("Tooltip",%HWND,Button5%,"Das jeweilige Program beenden")
PopUp "&Programm"
AppendMenu 101, "Scan"
AppendMenu 102, "Updaten"
AppendMenu 103, "Andere Remover suchen"
AppendMenu 104, "Spende, Contact and Sonstiges"
Separator
AppendMenu 105, "Beenden"

While 1

    WaitInput

    If clicked(Button1%)

        If FileExists(Files$)

            Print Files$

        EndIf

    EndIf

EndWhile


The Loop is only so To Testzwecken made, should still To Whileloop made go.

I have already a Tipp get, the me but not logical appeared:

- I should something with InsertString make. naturally lies I me The Help through:
"Die row s becomes on the position n2 into list the Controls n1 eingefügt. These function power naturally only sense with of/ one unsortierten Controls. has n2 the value -1 becomes The row end appended."

and the I will even not. i will only Files a Lieste insert in beliebiger Order.

How your testing can, that the program goes:

prepares still one Textdokument, save it under of/ one Malwaredatei into right Ordner ex and schaut whether the Remover the recognize.

yet are missing me jegliche ideas, Why the program Nich goes.

what planned is for the Program:

i'd yet a Autostartlister install. (have there too Includes). so could one too dangerous Deleting Entries.

love Regards
 
MfG
Gary12345
01/23/13  
 



 
- Page 2 -


Richte I you one and send you The Zugangsdaten by PN.
 
01/23/13  
 




Gary12345
Vielen Thanks over again.
 
MfG
Gary12345
01/23/13  
 



gladly happen.

you have mail and are owner the: [...]  .
 
01/23/13  
 




Gary12345
and there I will then a Website time draufladen. tappt im dunkeln goes circa Programming and over Malwareentfernung

fetch me then FileZilla, then load I any Files high.

be now utterly vernarrt into Website, The I building will be. will be now weiterproggen and schaun pointed goes.

Opportunities you a lovely day
 
XProfan X2
MfG
Gary12345
01/23/13  
 




RGH
Ähem ... I faith, there's one "e" To plenty. it ought to well "malware" hot, with the angry software meant is. "maleware" with "male" for man/manly sound then still something dirty ... ;)

Greeting
Roland
 
XProfan X2
Intel Duo E8400 3,0 GHz / 4 GB RAM / 1000 GB HDD - ATI Radeon HD 4770 512 MB - Windows 7 Home Premium 32Bit - XProfan X4
01/23/13  
 



löl, is correct - @ Garry: should I Change?

PS: rather WinSCP instead of this Zilla...
 
01/23/13  
 




Gary12345
Jo would rather so - Please Change in malwareboard

OK then nehm I WinSCP
 
MfG
Gary12345
01/23/13  
 



OK, give me 5 minutes.

with WinSCP hereon respect the log on FTP instead of SFTP To to put.
 
01/23/13  
 



OK, have again mail. The "falsche" malewareboard.XProfan.com have I removes.

thanks Roland for Info.

RGH (23.01.13)
Ähem


Hähähäh!
 
01/23/13  
 




Gary12345
OK thanks
 
XProfan X2
MfG
Gary12345
01/23/13  
 




Gary12345
latest question:

1. The whole Filenames should I into Textdokument write and nothing around?

in example

Test1.exe
Test2.exe

so the program deletes now Files and can tappt im dunkeln find -> is Yes super so
 
XProfan X2
MfG
Gary12345
01/23/13  
 



Yes clear, simply among themselves write.
 
01/23/13  
 




Answer


Topictitle, max. 100 characters.
 

Systemprofile:

no Systemprofil laid out. [anlegen]

XProfan:

 Posting  Font  Smilies  ▼ 

Please register circa a Posting To verfassen.
 

Topic-Options

23.681 Views

Untitledvor 0 min.
rquindt04/15/18
Georg Teles03/10/18
Muemmelmann03/20/16
Matthias Arlt02/18/16
More...

Themeninformationen

this Topic has 4 subscriber:

Gary12345 (15x)
iF (13x)
E.T. (1x)
RGH (1x)


Admins  |  AGB  |  Applications  |  Authors  |  Chat  |  Privacy Policy  |  Download  |  Entrance  |  Help  |  Merchantportal  |  Imprint  |  Mart  |  Interfaces  |  SDK  |  Services  |  Games  |  Search  |  Support

One proposition all XProfan, The there's!


My XProfan
Private Messages
Own Storage Forum
Topics-Remember-List
Own Posts
Own Topics
Clipboard
Log off
 Deutsch English Français Español Italia
Translations

Privacy Policy


we use Cookies only as Session-Cookies because of the technical necessity and with us there no Cookies of Drittanbietern.

If you here on our Website click or navigate, stimmst You ours registration of Information in our Cookies on XProfan.Net To.

further Information To our Cookies and moreover, How You The control above keep, find You in ours nachfolgenden Datenschutzerklärung.


all rightDatenschutzerklärung
i want none Cookie