Internet and hi-tech means of information have become everyday tools, but how safe?
When you are connected to the Internet opens the doors of their computer to a world wild and difficult to control, because there are a myriad of opportunities to catch your IP, or have it downloaded to your PC for malicious software As to the "health" of your system both for what concerns more generally, the security of personal information, sometimes very important especially if you use transactions to make money with your PC. The percentage of virus created specifically to track password codes credit card and personal information has risen dramatically in recent years dangerously putting at risk the security of thousands of people. Trojan.Vundo Virus as have the purpose of idendificare your personal information (including passwords) to certain details are difficult to find sites whose goals are still unclear. Products of this kind in addition to being locked by any built-in firewall with sdhelper Explorers have adopted protection strategies as very effective in certain particular protected dll can autogenerate the virus in a suitably masked even after automatic removal from the your antivirus. To As regards the operating system, there are no secure systems but only more secure than another. The most armored currently is Windows Vista (with all updates installed) follow Linux and MacOS. Wanting to rank 1) Windows Vista 2) Linux 3) MacOs 4) Windows XP 5) Windows 2000 6) Windows 9x and Me, notes that were not taken into account in server systems such as Solaris Win Server etc.. The fact that on Linux and MacOS viruses are very rare due to the fact that the vast majority of hackers trying to involve as many victims as possible and being much less common than Windows has put them a little safe. Even Linux and MacOS in particular have security flaws that may impair files and personal data. The basic problem is that security flaws in programmable systems can not be no (or you should greatly reduce the flexibility of the system). On systems earlier than Windows Vista, however, the freedom to run any kind of program is scandalous, in fact, very few steps you can create and Trojan programs that generally can destroy the integrity of the system. You want proof?
to create original and innovative computer viruses (which are mere paragraphs by copying others' ideas) qualke must have knowledge of programming ...
BUT WHAT IS 'SIMPLE USERS hurts the poor ...
We shall see below how to create autoit trojan using a program that uses a high-level programming language similar to Basic, but with limited functions. Despite
Autoit possesses limited functions and therefore takes up little space on the HDD does not mean that a program is bad, in fact, the few features we included enable us to create small applications that run on Windows.
Open the editor from all the programs / Autoit / SciTE Script Editor, you will be faced with an interface very clean and clear (despite the English language), from here we can start planning our Aplications, string to string.
Since, as already explained, functions are very few compared to basic but it cmq qualkosa 80/90 functions as it is impossible to cover here as well as useless, while beginning to address some of these with practical examples (I know the idea that inspires you;).
Saturation of RAM.
We know that to fill the mamori a PC, just open a number of processes and applications, and that's exactly what will our future when virus will run: try to open a particular programa indefinitely, until the exhaustion of resources.
is what we should write the editor: While 1 = 1
Run ("notepad.exe") Wend
We have chosen to open notepad as we are sure you can find it on any Windows system, but we can very well choose another one in which case it may be necessary (usually when a program is not installed with windows such as paint and notepad) specify the address (run ("c: / Program to eseguire.exe") for example ) but we could easily run more than one different, we just need to enter more commands execution, to be clear run ("... cascade specifying each program.
While the first string 1 = 1 and the last string has Wend meaning Bikes simple: when 1 = 1 will always execute the commands that contained up to Wend.
operations in the system registry.
Well, we saw that autoit is shown to have an excellent relationship with windows as allows us to make internal programi very easily in this regard I can say that it is also able to control open programs such cliccandoal spot checks of our program. But if we wanted to automate the execution of a program or the virus itself on startup? nothing easier than with the functions reg.
RegWrite ("HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows \\ CurrentVersion \\ Run", "Autostart", "C: \\ Program from eseguire.exe)
With this string we write in the register a new key in the address (already seen in action above) which contains all the keys to use at startup. in this case when running the application we created every time you log on to Windows will run that program.
RegDelete ("HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows \\ CurrentVersion \\ Run" "AutoStart")
seems to me that this string is not too difficult to understand, simply allows us to delete certain keys, in this case, delete the key you created in above.
File Operations.
So how do we deal with the registry keys we can also handle the files, we can copy a file to a folder of your choice, so we make sure that the virus is copied to a location "strategic" such as C: / Windows/System32
a folder of vital importance for the system and that contains a host of files including the virus may go unnoticed by an ordinary user.
FileCopy ("A: / Virus made by te.exe", "C: / Windows/System32/Virus made by te.exe)
With this string we can copy our resident virus on a floppy in the system32 directory.
FileDelete ("C: / Windows/System32/Virus made by te.exe)
By this string instead delete the virus that we copied them before.
interaction with the user. If
qualke reason we wanted to mock the victim to open a notification window. The procedure is very similar to Basic.
MsgBox (0, "Message title", "First line of message text." & @ CRLF & "Second line of message text.")
This will open a window with just OK button but it does not take into account the user's response, ie, closing the message window or by clicking the x to close we will get the same effect ... allla go next string of our program.
An important note is given by that number (in this case 0) in parentheses, it determines that buttons, according to the number we have: 0 = Ok button Sl, 1 = OK and Cancel 2 = Abort, retry, ignore etc. ... for the other keys is enough profit quard internal Autoit Help and search for "MsgBox. Now we see how to understand our application what the user said.
$ Response = MsgBox (4, "Message title", "First line of the message" & @ CRLF & "Second line of message") If $ answer = 6
then
Do this Else Do this other
Endif
Abiamo added only one variable declared with the $ simboo that contains the user's response (button press), now must decide what to do based on what the user has clicked, and if we use a loop If the answer is equal to 6, in this case, if the user clicked Yes, insert the string in place of "Do this" a command to our Shopping basket such as our now open notepad otherwise hated going to exclusion if the user has clicked on or close on No instead of "Do that", for example, we could put a command output from our application by simply typing in the string: Exit
Operations "special".
Finally to close this list of elementary functions suggest that some little things that could still be useful.
sleep (100)
Tartt is simply a kind of timer, Notre apply when such a string will stop for as long as we specify in parenthesis (in milliseconds), in this case for 100 'MS. Beep
command that issue to the typical PC biip power, very annoying! especially if repeated at intervals and forever! Turning off secured ache effect le casse risulta inutile.. eh eh.
CdTray ("E:","open")
Comando che cntrolla il drive CD, basta specificare il nome del drive e lo stato da fargli assumere open o close, anche questo fà morir dal ridere se fatto a ripetizione open e close, il lettore cd continuerà a uscire e rientrare! effetto risate a manetta assicurato!
Queste sono solo alcune delle "limitate funzioni" di AutoIt, è una buona strada per creare dei virus originali senza dovere ricorrere al Basic, molto pesante e complesso o al C, C++, Pascal, PHP, Delphi ecc...
Resta a voi poi cercare di combinare tra loro le funzioni che vi ho descritto e cercarne di nuove, imparare ad utilizzarle per giungere alla realizzazione di un nostro progetto sia questo un virus o un aplicazione benevola, un consiglio è quello di utilizare molto l'Help interno che oltre a descrivere tute le funzioni mette anche esempi e sintassi del comando, se poi volete vederle in modo più ordinato potete visitare il sito di Autoit alla sezione dei documenti.
Una volta scritto il vostro programma non resta che salvarlo in formato .AU3 e sucessivamente convertirlo in .EXE andando in tutti i programmi/AutoIt/Compile Script to .exe se prima volete provare la vostra applicazione potete direttamente eseguire lo script cliccando su Run Script.
NOTA CHE: I veri virus devono essere scritti in C o un qualsiasi linguaggio che non sia basato su una macchina virtuale(tipo Java per intenderci), l'esempio che ho mostrato just wanted to show that it is banal compromise a computer.
TO ALL THE FANS OF LINUX
As for lightness and stability of Linux compared to Vista I have nothing to object to those who do not agree that Vista is the most armored, well, even if it is true that if you keep installed Linux much safer than anyone with a Vista system (which is why I used the term "sealed" and not the word "safe") because there is an incredibly minor proportion of viruses and malware as much as to be almost negligible compared to Microsoft systems, the ' current analysis of vulnerabilities on the two systems covering blindatezza focuses on Vista than Linux: 17 vulnerabilità per Vista e non meno di 70 vulnerabilità per qualsiasi distribuzione di Linux, distribuzioni come la Red Hat Enterprise Linux 4 Workstation inoltre hanno dato risultati sconvolgenti sono state riscontrate 129 vulnerabilità di cui una cinquantina considerate di livello grave, (certo su ciò influisce in maniera molto pesante il fatto che Vista sia ancora un sistema giovane e altri buchi siano ancora da scoprire e fattore molto determinante il fatto che Linux sia open source quindi vedendo nei minimi dettagli come è strutturato il sistema per quanto possa essere ben realizzato è molto più semplice trovare punti deboli). Su questa questione prossimamente verrà pubblicata sul mio blog una rassegna esaudiente di tutte security flaws in Vista and Linux, and how they could exploit to the detriment of the user!
If you are interested in the security of telephony in general, I invite you to keep an eye on the site will be published shortly esaudienti information about it.
0 comments:
Post a Comment