| |
|
|
- Page 1 - |
|
Gary12345 | Hi,
i want gladly a BKA Remover basteln. The basiert on one very leichtem Testcode, the Nich runs. If the Testcode walk would, would the remainder only yet Frauensache.
Vll a small introduction in things BKA and Trojaner:
for a long time hovers in the gefährlichem internet one sogenannter BKA Trojaner rum. this blackmail The People with money, so these again "entsperrt" go can (to payment). now - usually goes this BKA Trojaner to the equal principle. it nistet itself in the explorer one (means swaps The Real explorer.exe with the Schaddatei from. now determined my idea not only whom BKA Trojaner separate too others Trojaner (only Ransomware).
now have I me virtual, The bekanntesten Schaddateien for such Trojaner into eindimensionales aray To pack (speak a list). i will these list then with Fileexist inquire, whether these Files too present are.
BKA Remover
Window 0,0 - 500,500
Window Title "BKA Remover"
Window Style 64
Def @GetUserNameA(2) !"Advapi32.dll", "GetUserNameA"
Def &CSIDL_COMMON_APPDATA $23
Declare Button1%, Button2%,Button3%,Button4%,Button5%,Files$
'Procedures
Proc GetSpecialDir
Parameters csidl&
Declare Result$
Result$ = Space$(256)
If External("Shell32", "SHGetSpecialFolderPathA", 0, Addr(Result$), csidl&, 0)
Return Trim $(Result$)
EndIf
Return ""
ENDPROC
Proc GetUserName
Declare Buffer#, Size&, User$
Size& = 255
Dim Buffer#, 256
GetUserNameA(Buffer#, Addr(Size&))
User$ = String $(Buffer#, 0)
Dispose Buffer#
Return User$
ENDPROC
Dateien$ = Create("List", 1)
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\wvf0rsf.js")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\WvF0RsF.pad")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\dsgsdgdsgdsgw.js")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\dsgsdgdsgdsgw.pad")
AddStrings(Files$, "C:\documents and Settings\All Users\Startmenü\programs\Autostart\ctfmon.lnk")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Anwendungsdaten\wvf0rsf.js")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Anwendungsdaten\WvF0RsF.pad")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Anwendungsdaten\dsgsdgdsgdsgw.js")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Anwendungsdaten\dsgsdgdsgdsgw.pad")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Startmenü\programs\Autostart\ctfmon.lnk")
AddStrings(Files$, "C:\ProgramData\dsgsdgdsgdsgw.pad")
AddStrings(Files$, "C:\documents and Settings\All Users\wgsdgsdgdsgsd.exe")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\wgsdgsdgdsgsd.exe")
AddStrings(Files$, "C:\ProgramData\RWvESYd.js")
AddStrings(Files$, "C:\Users\All Users\AppData\Roaming\Microsoft\windows\Start Menu\Programs\Startup\runctf.lnk")
AddStrings(Files$, "C:\Users\"+GetUserName()+"\AppData\Roaming\Microsoft\windows\Start Menu\Programs\Startup\runctf.lnk")
AddStrings(Files$, "C:\ProgramData\RWvESYd.pad")
AddStrings(Files$, "C:\ProgramData\dsgsdgdsgdsgw.pad")
AddStrings(Files$, "C:\ProgramData\dsgsdgdsgdsgw.js ")
AddStrings(Files$, "C:\Users\All Users\wgsdgsdgdsgsd.exe")
AddStrings(Files$, "C:\Users\"+GetUserName()+"\wgsdgsdgdsgsd.exe")
AddStrings(Files$, "C:\ProgramData\k5wtzba.js")
AddStrings(Files$, "C:\ProgramData\k5wtzba.reg")
AddStrings(Files$, "C:\ProgramData\k5wtzba.bat")
AddStrings(Files$, "C:\ProgramData\k5wtzba.pad")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\0tbpw.pad ")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\0tbpw.js ")
'Mainwindow
Button1% = Create("Button",%HWND,"Scan",150,50,200,50)
Create("Tooltip",%HWND,Button1%,"Einen Scan to Trojanern ausführen")
Button2% = Create("Button",%HWND,"Updaten",150,100,200,50)
Create("Tooltip",%HWND,Button2%,"Das Program updaten")
Button3% = Create("Button",%HWND,"Andere Remover suchen",150,150,200,50)
Create("Tooltip",%HWND,Button3%,"Nach like Tools suchen")
Button4% = Create("Button",%HWND,"Spende,Contact and Sonstiges",150,200,200,50)
Create("Tooltip",%HWND,Button4%,"Spende make, with me Contact take in or other Aktionen")
Button5% = Create("Button",%HWND,"Beenden",150,250,200,50)
Create("Tooltip",%HWND,Button5%,"Das jeweilige Program beenden")
PopUp "&Programm"
AppendMenu 101, "Scan"
AppendMenu 102, "Updaten"
AppendMenu 103, "Andere Remover suchen"
AppendMenu 104, "Spende, Contact and Sonstiges"
Separator
AppendMenu 105, "Beenden"
While 1
WaitInput
If clicked(Button1%)
If FileExists(Files$)
Print Files$
EndIf
EndIf
EndWhile
The Loop is only so To Testzwecken made, should still To Whileloop made go.
I have already a Tipp get, the me but not logical appeared:
- I should something with InsertString make. naturally lies I me The Help through: "Die row s becomes on the position n2 into list the Controls n1 eingefügt. These function power naturally only sense with of/ one unsortierten Controls. has n2 the value -1 becomes The row end appended."
and the I will even not. i will only Files a Lieste insert in beliebiger Order.
How your testing can, that the program goes:
prepares still one Textdokument, save it under of/ one Malwaredatei into right Ordner ex and schaut whether the Remover the recognize.
yet are missing me jegliche ideas, Why the program Nich goes.
what planned is for the Program:
i'd yet a Autostartlister install. (have there too Includes). so could one too dangerous Deleting Entries.
love Regards |
|
|
| |
|
|
| |
|
- Page 2 - |
|
|
| Richte I you one and send you The Zugangsdaten by PN. |
|
|
| |
|
|
|
Gary12345 | Vielen Thanks over again. |
|
|
| |
|
|
|
| gladly happen.
you have mail and are owner the: [...] . |
|
|
| |
|
|
|
Gary12345 | and there I will then a Website time draufladen. tappt im dunkeln goes circa Programming and over Malwareentfernung
fetch me then FileZilla, then load I any Files high.
be now utterly vernarrt into Website, The I building will be. will be now weiterproggen and schaun pointed goes.
Opportunities you a lovely day |
|
|
| |
|
|
|
RGH | Ähem ... I faith, there's one "e" To plenty. it ought to well "malware" hot, with the angry software meant is. "maleware" with "male" for man/manly sound then still something dirty ... ;)
Greeting Roland |
|
|
| XProfan X2Intel Duo E8400 3,0 GHz / 4 GB RAM / 1000 GB HDD - ATI Radeon HD 4770 512 MB - Windows 7 Home Premium 32Bit - XProfan X4 | 01/23/13 ▲ |
|
|
|
|
| löl, is correct - @ Garry: should I Change?
PS: rather WinSCP instead of this Zilla... |
|
|
| |
|
|
|
Gary12345 | Jo would rather so - Please Change in malwareboard
OK then nehm I WinSCP |
|
|
| |
|
|
|
| OK, give me 5 minutes.
with WinSCP hereon respect the log on FTP instead of SFTP To to put. |
|
|
| |
|
|
|
| OK, have again mail. The "falsche" malewareboard.XProfan.com have I removes.
thanks Roland for Info.
RGH (23.01.13)
Ähem
Hähähäh! |
|
|
| |
|
|
|
Gary12345 | OK thanks |
|
|
| |
|
|
|
Gary12345 | latest question:
1. The whole Filenames should I into Textdokument write and nothing around?
in example
Test1.exe Test2.exe
so the program deletes now Files and can tappt im dunkeln find -> is Yes super so |
|
|
| |
|
|
|
| Yes clear, simply among themselves write. |
|
|
| |
|
|