PDA

View Full Version : Dangerous information



VirtualAce
08-16-2005, 06:27 PM
Given the recent events in computerdom............

Threads relating to obvious things like shutting down the system from a 'well-behaved' Windows program should probably be avoided.

http://cboard.cprogramming.com/showthread.php?t=18257&highlight=reboot+computer

Coincedence?

:confused:

sean
08-16-2005, 06:31 PM
Given the recent events in computerdom............

What events are you referring to?

VirtualAce
08-16-2005, 06:36 PM
The new computer worm that shut down the factory where I work and has also shut down several other systems.

The worm reboots the system after a certain time has past - then reboots again and again and so on and so on.

It only works under Win2K so far - which leads me to believe they might be doing a jmp FFFF:0000 under the DOS shell and rebooting that way - or they are simply gaining the privilege to reboot the system and doing so. Think about it.....the only hard part is getting the worm to propogate - rebooting the system is cake - Windows will let you do that with no problem. So once you can get your code on the system and run it - wallah - you've got a really bad worm.

major_small
08-16-2005, 07:03 PM
...who's signature is probably already matched by all the leading virus scanners...

MadCow257
08-16-2005, 07:26 PM
Aren't the programs which are supposed to auto run on startup simply remembered through keys in some folder? Would it be possible to delete the keys for the popular spyware/virus programs?

SMurf
08-17-2005, 03:19 AM
Bear in mind that MSDN tells you how to programmatically shutdown/reboot a computer anyway, it's just more of a challenge to read.

Eh, maybe they should work for their code. :rolleyes:

no-one
08-17-2005, 04:29 PM
There is no dangerous knowledge... only dangerous people.

>
...who's signature is probably already matched by all the leading virus scanners...
<

not if its anything 133+...

>
Aren't the programs which are supposed to auto run on startup simply remembered through keys in some folder? Would it be possible to delete the keys for the popular spyware/virus programs?
<

nope... there are about 5 bajillion ways to make something run at start-up...

Sang-drax
08-18-2005, 11:35 AM
Coincedence?

What do you mean? Can you please elaborate on your first post?

misplaced
08-21-2005, 10:48 AM
ExitWindows() doesn't kill computers, computers kill computers

Dweia
08-22-2005, 09:03 PM
Aren't the programs which are supposed to auto run on startup simply remembered through keys in some folder? Would it be possible to delete the keys for the popular spyware/virus programs?
<

nope... there are about 5 bajillion ways to make something run at start-up...

A bunch of different keys in the registry, the startup folder...

You could go through them all by hand if you really wanted to. Just google it, should be able to find which ones.

no-one
08-22-2005, 09:16 PM
yep... thats why virsus/trojans/worms are easy to keep from starting up on windows...

Queatrix
08-25-2005, 03:31 PM
I'm sure ExitWindows() is common knowledge.