Altering programs

***HTRegz*** · August 18th, 2006, 04:13 AM

Hey Hey,

As far as I think, what he is trying to ask is HOW can he make a file which is actually an EXE with another extension but still is able to be executed without user interference on the file.

This is actually quite simple to do.. however it won't get you overly far..

Command Prompt:

Code:

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Administrator&gt;cd \windows

C:\WINDOWS&gt;copy notepad.exe notepad.txt
        1 file(s) copied.

C:\WINDOWS&gt;notepad.txt

C:\WINDOWS&gt;start notepad.txt

While you can't see it... both notepad.txt and start notepad.txt will cause notepad to launch... However, if you go to run and type notepad.txt it will open the notepad binary inside notepad.

Just because you've changed the extension of a file (something that you have to register anyways (Windows is the only operating system in high use that relies on file extensions)) doesn't mean you've changed the file type...
Example:

Code:

htregz@desktop:~/.wine/drive_c/windows&gt; file notepad.exe
notepad.exe: PE executable for MS Windows (GUI) Intel 80386

htregz@desktop:~/.wine/drive_c/windows&gt; file notepad.txt
notepad.txt: PE executable for MS Windows (GUI) Intel 80386

I've changed the extension but the file is still the same type... That's why it works for you at the command prompt and not from run... WIth run it first looks to the file types associations and see "oh... .txt I open that with notepad"..

Peace,
HT

**Mystery Man** · August 18th, 2006, 06:30 AM

You must spread your AntiPoints around before giving it to HTRegz again.

Not Again !!

That was excellent !! Thanks for the info !!

***Tedob1*** · August 18th, 2006, 07:18 AM

changeing the 'exe' etention to 'gif' will still run the program from the cmd prompt

U:\>rename wget.exe wget.gif

U:\>wget.gif
wget: missing URL
Usage: wget [OPTION]... [URL]...

Try `wget --help' for more options.

U:\>

therefore the saying "beware of geeks bearing gifs"

**miag01** · August 18th, 2006, 11:37 AM

Thanx!!Appreciate your helping e-hands!!!!!!!
What programming editors and compilers would you recommend me, and how do i find out what language is used for a specific program?Can a program be written in multiple languages?How do i know what languages are read by an specific system?How can i access the windows registry?What language does it "speak"?Where can i find out what is doable on the registry?
Can anyone help me on those?
E-cheers!

**nihil** · August 18th, 2006, 12:36 PM

Try this: http://www.google.com/

You need to learn about programs, files and operating systems before you do anything else.

What programming editors and compilers would you recommend me

Ones specifically designed for the programming language you have chosen.

how do i find out what language is used for a specific program?

From its source code or from the header of its binary executable.

Can a program be written in multiple languages?

Yes.

How do i know what languages are read by an specific system?

You don't............basically all computers use binary at the lowest level. The question would be whether their operating system understood the instructions.

How can i access the windows registry?

What language does it "speak"?

It doesn't, it is basically a repository of information about the (Windows) system.

Where can i find out what is doable on the registry?

Check the link at the top.

***sec_ware*** · August 18th, 2006, 12:45 PM

Hi

miag01, you certainly know the most important step: how to ask questions

What programming editors and compilers would you recommend me

If you want to develop programs for Linux, try KDevelop. I used it about 2 years ago.
If you want to develop programs for Windows, there is nothing that beats the Visual Studio line,
in particular VS2005 Express[1] is free. You could also start with Dev-C++[2], if you like to
use C/C++.
In any case, nowadays, I would recommend the .NET-Environment.

and how do i find out what language is used for a specific program?

It is possible, but not always 100%. Have a look at Aaron's place[3], a valuable resource.

Can a program be written in multiple languages?

Certainly. It happens that libraries are written in some language like
Fortran, while the main-"program" is written in c/c++. In the .NET-world,
it does not really matter either - some functions can be written in VB.NET,
others in C#, ...

How do i know what languages are read by an specific system?

In principle, any OS understands any language:
That's what compilers/linkers[4] are for: they translate the source code in some
language into a binary executable for a certain platform
(simplified: PE for windows, ELF for Linux).

How can i access the windows registry?What language does it "speak"?Where can i find out what is doable on the registry? Can anyone help me on those?

Besides regedit, see[5], where I illustrate the programmatical usage of
the registry. In that sense, the registry does not speak a language - windows
will offer you functions (an API), which you can use.

A simple advice for your following questions (which I expect

):
Try to research a little bit - and ask more specifically in the sense of:
"I have seen this and that - can you recommend it? Can you recommend something else?"

/edit: ...or as nihil puts it: "http://www.google.com"

Cheers

[1] http://msdn.microsoft.com/vstudio/express/
[2] http://www.bloodshed.net/devcpp.html
[3] http://www.exetools.com/file-analyzers.htm
[4] http://www.antionline.com/showthread...hreadid=266406 (and references therein)
[5] http://www.antionline.com/showthread...hreadid=266630

**jockey0109** · August 18th, 2006, 01:10 PM

Well thanks HT. However I knew that...I already saw the effect in Linux...when i saw that some renamed JPG files were still displayed..then I came to know thst every file type has its own signature....and that certainly means that changing extension will not change the file type....however I really didnt know that the START command is going to do that!!!! Thats awesome info BTW.

**rock_bill** · August 18th, 2006, 05:41 PM

Hi sec_ware

Yep. Once you have opened startme.txt with notepad, you can alter the text

Im not able to understand what are you saying.....

Did you mean that if we alter that text some changes will be made in that .exe..

nihil

No, it will still be an .exe and will look nothing like a .jpg, for example. Changing the name does not change the file's fundamental characteristics.

Well nihil I do agree with you....

My Dearest jockey0109 or VK

And by his question of making a program identical to some other file of other extension....I think that pretty much resembles the question of rock_bill who asked how do non-exe files infect the PC...is he the same person??? And I think that nihil is right.

I am not that person who wants to enter thru backdoor.... Yeah this question somewhat

resembles my question but thats not me..

Hey HTRegz

You did a marvellous job......

**jockey0109** · August 19th, 2006, 01:12 AM

OK rock_bill, You hit me right on the head. You seem to be a genuine person. ANyway by telling that "you can alter the text of startme.txt after opening the program in notepad, he probably means that you can change the program in text mode by opening notepad".

Thanks

**miag01** · August 19th, 2006, 03:42 AM

Thanx once again,specially to sec_ware!I intend to run viruses on a partitioned windows/linux box, so i can see them working without damaging the whole damn thing....Would this be a reliable (safe) laboratory?If i get to download a back door creating utility, would norton take it for a trojan horse,even if it didn't cause harm to my box? What does an AV exactly look for?
I promise to try Google!!!

Thread: Altering programs

Thread Tools

Display

altering programs

Altering programs

Posting Permissions