PDA

View Full Version : Guess what this 5.5kb program does.



Queatrix
10-10-2006, 12:45 PM
Guess what this 5.5kb program does.

http://queatrix.awardspace.com/value.com

whiteflags
10-10-2006, 12:47 PM
It's a TRAP!

Queatrix
10-10-2006, 12:54 PM
Oh come now, would I do that?

Decrypt
10-10-2006, 01:02 PM
Ummm...wastes my time?

Queatrix
10-10-2006, 01:29 PM
Have you executed it yet?

>> Ummm...wastes my time?
No more than browsing the GD board does.

swgh
10-10-2006, 01:34 PM
It does nothing

dwks
10-10-2006, 03:02 PM
Where did you get that program from? (Or) How did you make it?

SlyMaelstrom
10-10-2006, 03:28 PM
Executing this program followed by a series of heavy strikes from a steel mallet has officially destroyed my computer... I hope you're happy.

CrazyNorman
10-10-2006, 04:03 PM
If only I knew assembly...
A whole ton of "add [bx+si],al", perhaps an unrolled loop?
It appears you are pushing something out of some port, wow, I give up

Wraithan
10-10-2006, 04:09 PM
Honestly who executes a program that they have no idea what it does. No offence but posting something like this seems really dumb to me.

MadCow257
10-10-2006, 04:28 PM
I exectuted it but nothing happened? The only thing I noticed was that command prompt recongnized the program value as "value.com" under DIR

Decrypt
10-10-2006, 10:26 PM
Have you executed it yet?
Of course not. I don't know what it does.

CrazyNorman
10-10-2006, 10:28 PM
I figure that a user who has been around as long as Cool August probably won't try posting a virus or spyware on a message board, plus, a group of C/C++ programmers is probably the wrong group to try to victimize.

Even if it didn't, what are the chances of it running under Wine if nothing else does?

Dave_Sinkula
10-10-2006, 10:32 PM
Visit my website (http://queatrix.awardspace.com/).
Visit my website (http://queatrix.awardspace.com/).

Why Twice?
Why Twice?

Parse error: parse error, unexpected T_ECHO, expecting ',' or ';' in /home/www/queatrix.awardspace.com/metatags.php on line 4

jverkoey
10-10-2006, 10:42 PM
Visit my website (http://queatrix.awardspace.com/).
Visit my website (http://queatrix.awardspace.com/).

Why Twice?
Why Twice?

--Parse error: parse error, unexpected T_ECHO, expecting ',' or ';' in /home/www/queatrix.awardspace.com/metatags.php on line 4
Nice.

Decrypt
10-10-2006, 10:43 PM
I figure that a user who has been around as long as Cool August probably won't try posting a virus or spyware on a message board, plus, a group of C/C++ programmers is probably the wrong group to try to victimize.
Me too, but I also figure that since he's asking, it's obviously not what I'll think it does. As I have almost zero knowledge of how to figure out what a program is really doing when it's running, and the program in question is trying to trick me, I really don't stand a chance. Besides, he asked me to guess and it was the first thing that came to my head.

VirtualAce
10-10-2006, 11:41 PM
I won't execute a binary COM program w/o knowing what it does.

Queatrix
10-11-2006, 11:13 AM
>> It does nothing
Yes ... it does. :D

>> No offence but posting something like this seems really dumb to me.
None taken.

>> Why Twice?
>> Why Twice?
Hmmm ... you got me there.

BTW: I fixed the parse error on my site.

>> I figure that a user who has been around as long as
>> Cool August probably won't try posting a virus or spyware
>> on a message board, plus, a group of C/C++ programmer
>> is probably the wrong group to try to victimize.
No, it's not a virus or spyware, or anything that's going to hurt your computer.
I mean, when you think about it, what kind of spyware are you going to put in a 5.50kb file? :p

>> I won't execute a binary COM program w/o knowing what it does.
It's not a COM program, I had to change the extention from .exe to .com to get the server to let me upload it. And .com will still execute on a system without renaming.


*hint* hkey

Wraithan
10-11-2006, 12:16 PM
Doesn't take many commands to make something that copies itself to another place in memory.

Salem
10-11-2006, 12:26 PM
> what kind of spyware are you going to put in a 5.50kb file?
Well since old viruses used to fit in a couple of hundred bytes, and there was once a chess program for the zx81 in all of 1K, who knows. Could be an entire OS.

Wraithan
10-11-2006, 12:28 PM
Isn't there a like 80kb FPS game that does proceddually generated graphics?

psychopath
10-11-2006, 12:38 PM
Yes, kkreiger (http://www.theprodukkt.com/kkrieger.html)

CrazyNorman
10-11-2006, 04:24 PM
> what kind of spyware are you going to put in a 5.50kb file?
Back in my day, the operating system fit in one byte, and the viruses fit in a nibble

maxorator
10-12-2006, 01:44 AM
DOS viruses used to be about 100-200 bytes and could do anything, I think they used DEBUG command
They just edited some memory at some location.

Queatrix
10-12-2006, 07:14 AM
It's not a virus, okay?

maxorator
10-12-2006, 07:15 AM
We're not suspecting it's a virus. We are just discussing how small programs can be.

BTW, I once made a 1.25Kb PE.

Mario F.
10-12-2006, 07:20 AM
It's not a virus, okay?

Why don't you simply say what it does for those that actually care and be done with it.

Is it that hard for you to understand most people aren't willing to download an executable from someone they don't know? Especially when they are asked to find out what it does? Are you dense?

Queatrix
10-12-2006, 07:33 AM
>> Is it that hard for you to understand most people aren't
>> willing to download an executable from someone they don't know?
I see you point.

>> Are you dense?
I resent that.

It places a sz value in the registry.

Mario F.
10-12-2006, 08:00 AM
> It places a sz value in the registry.

Thank you. Now we know what it does and we may better decide if we want to download and run it or not. Was it that hard?

twomers
10-12-2006, 08:10 AM
>> It places a sz value in the registry.
... and the benifit of that is ...

>> chess program for the zx81 in all of 1K ...
With AI and all?

psychopath
10-12-2006, 08:34 AM
Sorry, but this thread seems pretty useless.

Salem
10-12-2006, 10:01 AM
Yeah, had it been from a real noob with very few posts, it would have gone straight into the trash.
It would also have gone in the trash if there we're any warning signs of trouble in the executable (yes I looked at the code with a hex editor).

CornedBee
10-12-2006, 10:25 AM
It's malware: it clutters your registry :)

Decrypt
10-12-2006, 01:09 PM
Sorry, but this thread seems pretty useless.
I was right! :D

dwks
10-12-2006, 04:28 PM
It gives you an error message!

bash: malware.com: cannot execute binary file
;)

maxorator
10-13-2006, 01:57 AM
dwks, then run it through WINE :D

Queatrix
10-13-2006, 02:54 PM
>> Sorry, but this thread seems pretty useless.
Yeah, guess your right.
Got a lot of attention though. :D

>> (yes I looked at the code with a hex editor).
What hex editor do you use? I found a very nice one, but it's 30 days are over.

dwks
10-13-2006, 03:35 PM
dwks, then run it through WINE

bash: wine: command not found
I know, I know . . . get WINE. :)

I use hexedit, a Debian package. :) hex-<TAB> reveals that there's also something called hexeditor . . .

DavidP
10-13-2006, 05:54 PM
that 5.5 kb program sucks....

this 96 kb program rocks:

http://en.wikipedia.org/wiki/Kkrieger

whiteflags
10-13-2006, 06:20 PM
And this kid can't wait to play it (http://www.youtube.com/watch?v=lxfOhQ0cc1s).

joeprogrammer
10-13-2006, 10:24 PM
And this kid can't wait to play it (http://www.youtube.com/watch?v=lxfOhQ0cc1s).
Noooo!!! How come threads like these always turn into stupid link dumps? :)

Queatrix
10-14-2006, 10:16 AM
When I download and load kkreiger, it's load progress bar goes about %16 of the way and exits with no error. Any one else have that?

maxorator
10-14-2006, 10:18 AM
No...

Wraithan
10-14-2006, 11:05 AM
Crashed about 5% in on my desktop... haven't gotten around to trying it on any other ocmputers in my house though.

SlyMaelstrom
10-14-2006, 12:19 PM
It crashed the first time for me after load, before the intro screen... then it worked the second time. It's really easy, but it looks very good for its size.

maxorator
10-14-2006, 12:21 PM
It is good. A real masterpiece I would say.

Queatrix
10-14-2006, 02:31 PM
>> then it worked the second time

That's not it, I tried it 4 times and it still didn't work.