| |
|
|
- Page 1 - |
|
Gary12345 | Hi,
i want gladly a BKA Remover basteln. The basiert on one very leichtem Testcode, the Nich runs. If the Testcode walk would, would the remainder only yet Frauensache.
Vll a small introduction in things BKA and Trojaner:
for a long time hovers in the gefährlichem internet one sogenannter BKA Trojaner rum. this blackmail The People with money, so these again "entsperrt" go can (to payment). now - usually goes this BKA Trojaner to the equal principle. it nistet itself in the explorer one (means swaps The Real explorer.exe with the Schaddatei from. now determined my idea not only whom BKA Trojaner separate too others Trojaner (only Ransomware).
now have I me virtual, The bekanntesten Schaddateien for such Trojaner into eindimensionales aray To pack (speak a list). i will these list then with Fileexist inquire, whether these Files too present are.
BKA Remover
Window 0,0 - 500,500
Window Title "BKA Remover"
Window Style 64
Def @GetUserNameA(2) !"Advapi32.dll", "GetUserNameA"
Def &CSIDL_COMMON_APPDATA $23
Declare Button1%, Button2%,Button3%,Button4%,Button5%,Files$
'Procedures
Proc GetSpecialDir
Parameters csidl&
Declare Result$
Result$ = Space$(256)
If External("Shell32", "SHGetSpecialFolderPathA", 0, Addr(Result$), csidl&, 0)
Return Trim $(Result$)
EndIf
Return ""
ENDPROC
Proc GetUserName
Declare Buffer#, Size&, User$
Size& = 255
Dim Buffer#, 256
GetUserNameA(Buffer#, Addr(Size&))
User$ = String $(Buffer#, 0)
Dispose Buffer#
Return User$
ENDPROC
Dateien$ = Create("List", 1)
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\wvf0rsf.js")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\WvF0RsF.pad")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\dsgsdgdsgdsgw.js")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\dsgsdgdsgdsgw.pad")
AddStrings(Files$, "C:\documents and Settings\All Users\Startmenü\programs\Autostart\ctfmon.lnk")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Anwendungsdaten\wvf0rsf.js")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Anwendungsdaten\WvF0RsF.pad")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Anwendungsdaten\dsgsdgdsgdsgw.js")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Anwendungsdaten\dsgsdgdsgdsgw.pad")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\Startmenü\programs\Autostart\ctfmon.lnk")
AddStrings(Files$, "C:\ProgramData\dsgsdgdsgdsgw.pad")
AddStrings(Files$, "C:\documents and Settings\All Users\wgsdgsdgdsgsd.exe")
AddStrings(Files$, "C:\documents and Settings\"+GetUserName()+"\wgsdgsdgdsgsd.exe")
AddStrings(Files$, "C:\ProgramData\RWvESYd.js")
AddStrings(Files$, "C:\Users\All Users\AppData\Roaming\Microsoft\windows\Start Menu\Programs\Startup\runctf.lnk")
AddStrings(Files$, "C:\Users\"+GetUserName()+"\AppData\Roaming\Microsoft\windows\Start Menu\Programs\Startup\runctf.lnk")
AddStrings(Files$, "C:\ProgramData\RWvESYd.pad")
AddStrings(Files$, "C:\ProgramData\dsgsdgdsgdsgw.pad")
AddStrings(Files$, "C:\ProgramData\dsgsdgdsgdsgw.js ")
AddStrings(Files$, "C:\Users\All Users\wgsdgsdgdsgsd.exe")
AddStrings(Files$, "C:\Users\"+GetUserName()+"\wgsdgsdgdsgsd.exe")
AddStrings(Files$, "C:\ProgramData\k5wtzba.js")
AddStrings(Files$, "C:\ProgramData\k5wtzba.reg")
AddStrings(Files$, "C:\ProgramData\k5wtzba.bat")
AddStrings(Files$, "C:\ProgramData\k5wtzba.pad")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\0tbpw.pad ")
AddStrings(Files$, "C:\documents and Settings\All Users\Anwendungsdaten\0tbpw.js ")
'Mainwindow
Button1% = Create("Button",%HWND,"Scan",150,50,200,50)
Create("Tooltip",%HWND,Button1%,"Einen Scan to Trojanern ausführen")
Button2% = Create("Button",%HWND,"Updaten",150,100,200,50)
Create("Tooltip",%HWND,Button2%,"Das Program updaten")
Button3% = Create("Button",%HWND,"Andere Remover suchen",150,150,200,50)
Create("Tooltip",%HWND,Button3%,"Nach like Tools suchen")
Button4% = Create("Button",%HWND,"Spende,Contact and Sonstiges",150,200,200,50)
Create("Tooltip",%HWND,Button4%,"Spende make, with me Contact take in or other Aktionen")
Button5% = Create("Button",%HWND,"Beenden",150,250,200,50)
Create("Tooltip",%HWND,Button5%,"Das jeweilige Program beenden")
PopUp "&Programm"
AppendMenu 101, "Scan"
AppendMenu 102, "Updaten"
AppendMenu 103, "Andere Remover suchen"
AppendMenu 104, "Spende, Contact and Sonstiges"
Separator
AppendMenu 105, "Beenden"
While 1
WaitInput
If clicked(Button1%)
If FileExists(Files$)
Print Files$
EndIf
EndIf
EndWhile
The Loop is only so To Testzwecken made, should still To Whileloop made go.
I have already a Tipp get, the me but not logical appeared:
- I should something with InsertString make. naturally lies I me The Help through: "Die row s becomes on the position n2 into list the Controls n1 eingefügt. These function power naturally only sense with of/ one unsortierten Controls. has n2 the value -1 becomes The row end appended."
and the I will even not. i will only Files a Lieste insert in beliebiger Order.
How your testing can, that the program goes:
prepares still one Textdokument, save it under of/ one Malwaredatei into right Ordner ex and schaut whether the Remover the recognize.
yet are missing me jegliche ideas, Why the program Nich goes.
what planned is for the Program:
i'd yet a Autostartlister install. (have there too Includes). so could one too dangerous Deleting Entries.
love Regards |
|
|
| |
|
|
|
| |
|
- Page 2 - |
|
Gary12345 | Jo would rather so - Please Change in malwareboard
OK then nehm I WinSCP |
|
|
| |
|
|
|
| OK, give me 5 minutes.
with WinSCP hereon respect the log on FTP instead of SFTP To to put. |
|
|
| |
|
|
|
| OK, have again mail. The "falsche" malewareboard.XProfan.com have I removes.
thanks Roland for Info.
RGH (23.01.13)
Ähem
Hähähäh! |
|
|
| |
|
|
|
Gary12345 | OK thanks |
|
|
| |
|
|
|
Gary12345 | latest question:
1. The whole Filenames should I into Textdokument write and nothing around?
in example
Test1.exe Test2.exe
so the program deletes now Files and can tappt im dunkeln find -> is Yes super so |
|
|
| |
|
|
|
| Yes clear, simply among themselves write. |
|
|
| |
|
|
| |
|
- Page 3 - |
|
|
Gary12345 | then wars the for today |
|
|
| |
|
|
|
| be tensely on your Tool. |
|
|
| |
|
|
|
Gary12345 | I had me never think can, that so one wichtiges Tool in 70 Lines To write is. (without Buttons). |
|
|
| |
|
|
|
| Klare strength of XProfan.
And if one deliberating the it in quasi 4 minutes written is...
If you it hereon anlegst... it went too with ~30 Lines. |
|
|
| |
|
|
|
Gary12345 | Nö must Nich his. then Better get going sure unübersichtlich, Have I right? now must I only yet investigate circa Malwaredateien. |
|
|
| |
|
|
|
E.T. | Perhaps. time into list of AddBlock look,there stand very helpful Info's moreover |
|
|
| XProfan X2Grüße aus Sachsen... Mario WinXP, Win7 (64 Bit),Win8(.1),Win10, Win 11, Profan 6 - X4, XPSE, und 'nen schwarzes, blinkendes Dingens, wo ich das alles reinschütte... | 01/24/13 ▲ |
|
|
|