Printable View
Well, I think Denial-of-Service is a bigger problem than both. DoS is much easier to execute then virii. One thing to bear in mind is that virii are used mostly by crackers whereas spyware is used by inscrupuolous advertisers for the most part. Most virus coders nowadays use Visual Basic, as opposed to ASM like they used to. Just an interesting trend.....
I think spyware is worse.
not in damage systemwise or economicly. But a virus is yust something that damages is most
of the cases. Spyware and stuff like that violate my privacy, slow down my computer(I'm a gamer performance is everything), create network traffic thus steal bandwith(although virii do also).
And most inportant, spyware and adware and things like that are being developped by company's
who choose to do so. We are not talking about some skiddy with a new script. We are talking about someone making a profit out of this stuff. And then when it has been develop another company or site goes and uses this stuff. Again that is a choice to do so and it's not like there playing with it or some 13 year old kid that wants to see what happens when he DDoses yahoo.
It gives me the creeps.
-MoonWolf
Actually thats only because the boxes that are in play have already been compromised. The reason why dDoS is even possable is because why? Well usually because of worms/trojans on computers first of all which aid in dDoS attacking for starters. Visual Basic, as opposed to ASM like they used to?
Actually if you hang around a few VX boards and read a few e-zines you'll find that there are MANY peaple still into assembly. You could maybe make a worm or virus in VB, sure. But it sucks when you need to create a dropper that checks for runtimes, if they aren't around then install them before droping your trojan or (ect).
To Undertaker, the email you gave seems to not be working. I sent it twice and nothing. Email me back with either another email or try to give it to me again. I typed exactly what you gave me before. I'll wait till then to resend it.
grim_reaper1.. Last email i recieved.. you asked for my email addy.. I take it you have not recieved my reply? that from my yahoo account?
I will send an alt addy
cheers
PM'd the addy.. 1 min after the original post of this reply..
I hope you didn't title them "Banged in the Back Seat" they were the most popular mails removed from the bulk mail folder..on Yahoo..
just for the record.. the first address.. undertaker_0_2 at yahoo dot com
hey Soda.. you getting bored?
Got a back log of PC's with various Malware and user problems
Oh yeh: bigest virus I used to have .. was "usr.IDtenT.xxx" .. normaly noticed after the user cleared some hdd space, or removed some unwanted programs.. or the good ol "somtin is fill'n me hdd" when the user thinks that removing the Start menu entries is the deletion or removal of progs..
GR.... mcgoo32 at yahoo dot com
others can email to confirm its existence, if you're bored.
Hey were's my reply, i've been waiting and waiting and still no reply.Quote:
GR.... mcgoo32 at yahoo dot com
others can email to confirm its existence, if you're bored.
That's false advertisement, i wanted confirmation that it existed.
Me still waiting.
cheers
f2b:.
Dude, why'd you have to do that? you know... put all those spaces there?? It's kind of annoying ;).
So what's the latest news?? Did he send the "infected" pics??? If so, is it legit?
Moonwolf, your absolutly right, im a gamer myself, performance is everything! lol.
Hey front ta back... you didn't send nuttin... :p
Grim... yeah im bored
GR.. recieved your .jpeg, and it nothing happened. No changes to my system, just a error, with 3 different picture progs... including fax viewer. Maybe you can hint us to the symptoms? It sounded like it would crash... :p
Opening the file in notepad as well gave me some juicy keywords.
Thats some text I was able to pull out of the file. The "binder" was written is the leetest language ever, VB. I think its called DRR, or somethingQuote:
This program must be run under Win32
CODE DATA ÀPD BSS À.idata À.tls À.rdata P.reloc P.rsrc kernel32.dll DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection VirtualFree VirtualAlloc LocalFree LocalAlloc GetCurrentThreadId GetStartupInfoA GetModuleFileNameA GetLastError GetCommandLineA FreeLibrary CreateDirectoryA ExitProcess WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException GetStdHandle GetFileSize GetFileType CreateFileA CloseHandle user32.dll GetKeyboardType MessageBoxA CharNextA advapi32.dll RegQueryValueExA RegOpenKeyExA RegCloseKey kernel32.dll TlsSetValue TlsGetValue LocalAlloc GetModuleHandleA kernel32.dll GetWindowsDirectoryA GetSystemDirectoryA DeleteFileA CopyFileA CompareStringA user32.dll CharUpperBuffA shell32.dll ShellExecuteA UTypes ÇSystem SysInit ¸untPos KWindows +untExtras yFrEaK_ReadWrite This program cannot be run in DOS mode.Rich PE .text.data À.rsrc MSVBVM60.DLLBKPs DRR Form1 DRR 2004 Form1 TahomaD Command1 Text1 Welcome to DRR 2004An unknown error has now occured in order to remove this error then please restart your computer.
Image1 D : \ M y P r o g r a m s VB5 DRR Drr 2004 DRR D:\My Programs\Darkside\DRR 2004\Project1.vbp
Network\ SRemoteAccess\ ControlPanel\AppEvents\Config\Hardware\System\.DEFAULT\Display\PSystem\CurrentControlSet\Control\Update\,ControlPanel\Colours\*RemoteAccess\Profile\0Software\Microsoft\IEAK\ Software\Yahoo\JSoftware\Microsoft\InternetExplorer\.Software\Microsoft\IE4\HSoftware\Microsoft\InternetDomains\\Software\Microsoft\InternetConnectionWizard\ Software\Kazaa\ SOFTWARE\KAZAA\HSoftware\Microsoft\MessengerService\@Software\Microsoft\MSNMessenger\$Software\Symantec\$SOFTWARE\Symantec\4Software\Microsoft\Office\ Software\Adobe\ SOFTWARE\Adobe\>Software\Microsoft\MediaPlayer\`System\CurrentControlSet\Control\Print\Printers\xConfig\0001\System\CurrentControlSet\Control\Print\Printers\BControlPanel\Appearance\Schemes\4Software\Microsoft\Telnet\@Software\Microsoft\TelnetServer\DSoftware\Yahoo\AudioConferencing\*Software\Yahoo\Pager\6Software\Yahoo\YFriendsBar\.Software\Yahoo\YServer\xSoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer\lSoftware\Microsoft\WindowsNT\CurrentVersion\Policies\ Network\Logon\__vbaStrToAnsi__vbaOnErrordSYSTEM\ControlSet001\Services\RemoteAccess\Policy\$SOFTWARE\Policies\$Software\Policies\tSoftware\Microsoft\Windows\CurrentVersion\Policies\System\VBA6.DLL__vbaFreeStr__vbaSetSystemError__vbaFreeObj__vbaHresultCheckObj__vbaObjSetAddref__vbaNew2˜v@ä£@
Error"HKEY_CLASSES_ROOT"HKEY_CURRENT_USER$HKEY_LOCAL_MACHINEHKEY_USERS*HKEY_PERFORMANCE_DATA&HKEY_CURRENT_CONFIGHKEY_DYN_DATABTheRegistryDatabaseiscorrupt!BadKeyName Can'tOpenKey Can'tReadKey8Accesstothiskeyisdenied Can'tWriteKeyOutofmemory"InvalidParameter|Thereismoredatathanthebufferhasbeenallocatedtohold..UndefinedErrorCode:\
HKEY_"IncorrectFormat:__vbaVarAdd__vbaStrVarMove__vbaVarCmpEq__vbaVarCmpNe__vbaVarOr__vbaBoolVarNull__vbaInStr__vbaErrorOverflow__vbaStrCat__vbaStrCmp__vbaStrCopy__vbaFreeStrList__vbaStrI2__vbaAryUnlock__vbaAryLock__vbaVarForNext__vbaStrMove__vbaUI1I2__vbaGenerateBoundsError__vbaI4Var__vbaVarForInit__vbaRedim__vbaLenBstr__vbaVarCopy__vbaVarMove__vbaFreeVar__vbaFreeVarList__vbaStrToUnicodeMSVBVM60.DLL__vbaStrI2_CIcos_adj_fptan__vbaVarMove__vbaFreeVar__vbaLenBstr__vbaStrVarMove__vbaFreeVarList_adj_fdiv_m64_adj_fprem1__vbaStrCat__vbaVarCmpNe__vbaSetSystemError__vbaHresultCheckObj_adj_fdiv_m32__vbaVarForInit__vbaOnError_adj_fdiv_m16i__vbaObjSetAddref_adj_fdivr_m16i__vbaBoolVarNull_CIsin__vbaChkstkEVENT_SINK_AddRef__vbaGenerateBoundsError__vbaStrCmpDllFunctionCall__vbaVarOr_adj_fpatan__vbaRedimEVENT_SINK_Release__vbaUI1I2_CIsqrtEVENT_SINK_QueryInterface__vbaExceptHandler__vbaStrToUnicode_adj_fprem_adj_fdivr_m64__vbaFPException_CIlog__vbaErrorOverflow__vbaInStr__vbaNew2_adj_fdiv_m32i_adj_fdivr_m32i__vbaStrCopy__vbaFreeStrList_adj_fdivr_m32_adj_fdiv_r__vbaI4Var__vbaVarCmpEq__vbaAryLock__vbaVarAdd__vbaStrToAnsi__vbaVarCopy_CIatan__vbaStrMove_allmul_CItan__vbaAryUnlock__vbaVarForNext_CIexp__vbaFreeObj__vbaFreeStrVS_VERSION_INFO½ïþDVarFileInfo$Translation °€StringFileInfo\040904B0,CommentsDRR2004(CompanyNameDRR4ProductNameDRR2004,
FileVersion2.000
ProductVersion2.00(InternalNameDRR8OriginalFilenameDRR.exeDRR.exe
Any thoughts, GR?Quote:
Welcome to DRR 2004
:D
edit-
stuff attached.... supposedly a virus, open at risk
Hmm...that's a pretty hard question. If we're talking within the context of the question, and the question only, then i would have to say that i consider virii as a more dangerous threat to users. Isnt it sometimes a virus can also act as spyware in some sense? Like when it sends information from the infected computer to a remote terminal, in some ways, that alone is already an act of spying...similar to what spyware would do. Well, at least that's my view... :) Of course, each one of us has different views and opinions this this is a highly debatable topic... ;) I've read through the other replies though, and i believe that most if not all also have merit...like i said, this is a highly debatable topic. :rolleyes: