About | Buy Stuff | News | Products | Rants | Search | Security
Home » Resources » Rants

This is a WinXP patch > I expect you would like it

Week of September 7, 2002
What's your preference - hex or text?

Subject: Re: A  WinXP patch
Date: Sat, 7 Sep 2002 00:42:00 -0500
From: Dr Gerry
To: Chxrule73 <Chxrule73@hotmail.com>

ohhhh....too bad...your little virus is so easily dissected on a real
operating system---see---no registry keys for it to overwrite---do you even
know you sent this thing or are you just another clueless winblows user whose
address book is launching these things out and you don't even know what is
going on and why your computer is so slow...poor baby....here's what you sent
me in all its moron glory---how do you want to see it? in hexadecimal or
plain text? Let me know when you graduate 2nd grade and want to learn how to
write a real virus...what a loser. And, as I said you are now ready for some
real pain...how's about I send you a copy of everything you type on your
keyboard from now on and every website you browse...and...maybe I can send
copies to others as well...yea...I wonder who should receive these gifts?
 -------------------------------start-----------------------------------
MZê

$ C∆ 3 CÉE¯ Î ãu ã} Î ãu ∂Eˇã 0@ C∆ 3 CÉE¯ äE˝ã 0@ C∆ 3 CÉE¯ ∂Eˇã 0@ C∆ 3
CÉE¯ ∂¡ã 0@ Ñà ;r¡ÎGj A çÖ‰˛ˇˇPË;) Yã¬âE¯ô˜˘Ö“u Ël˝ˇˇSj «ÖÃ˛ˇˇ( ∏ ˇ6ˇ $—@
P˃ «Ü âM¸É¿ âM¯˜ÿPçE¸PË32 øM˙AA;¡~ CÉ« ;]Ù|ì;]Ù çÖ Y˜ÒÖ“ Ö' h8@ ˇˇˇS«Ü
àù¯˜ˇˇY˜ÒçÖ¯˚ˇˇP;”u/SËâ+X A A VËÔ Vˇ A A çÖxˇˇˇj PËô ∏ j «Ü§

j «Ü§ «Ü§

«É§ «Ü§ ˇ ‹—@ <0| <9~ 3€WFËÛD Y˜Òã¬É¿0Î`ˆ√ t Wˇ Y˜ÒãÚÉ∆0ã∆_^[√Sã\$ VWã|$
ãÛ;˚~ j ˇu ËìˇˇˇÖ¿Yt-ˇu ËܡˇˇÖ¿Yt FˇE ãE FˇE H;} ãE ä ˇu ËÓ˝ˇˇÖ¿Yu∏Ä$; Ç @ɯ

|Ù3¿_^[…√j XΈˇt$ ËùˇˇˇY√UãÏ∏ F F;˜|Ïj XÎ 3¿_^[√UãÏÅÏ AˇˇÖ¿t çMÏËzŸˇˇj

X…√3¿…√UãÏÅÏ Y˜ÒɬT¡‚ ;U¸s âU¸ãE¸V ¿PËi= çÖ¸˛ˇˇQPhÏ7I A ˇu WË≈3 ä
P˨˜ˇˇÖ¿Yuπ3€ãEãM +}¯Ä$ 9EÙu ãM â ãE¸ ∆Î çF _^[…√UãÏÅÏ Fɲ ågˇˇˇçEËPh‹3I A
9I A ΩˇˇçÖ»˛ˇˇP˲„ˇˇY3¿_^[…√UãÏÅÏ( AΠɡúu SjˇjˇVËz çÖÙ¸ˇˇPËifiˇˇYÖ¿t j h A
çÖÙ¯ˇˇPË_¯ˇˇYSçÖ¯˝ˇˇSPçÖ¸˛ˇˇPçÖÙ¯ˇˇPËä çEúj PËΩ‘ˇˇÉƒ
çEúççÏ˝ˇˇPË;ŒˇˇÉ∆dççÏ˝ˇˇVËÍŒˇˇh–1I çEúj PË÷”ˇˇÉƒ çEúççÏ˝ˇˇPËTÕˇˇçFdççÏ˝ˇˇPË
ŒˇˇVççÏ˝ˇˇËNÕˇˇççÏ˝ˇˇË·…ˇˇÖ¿t ççÏ˝ˇˇËm…ˇˇÈkˇˇˇˇu Ëì |j X_^]Ƀ √ÅÏ h`Í h`Í
ÕˇˇÉƒ(8 âE‰ Ñï

A A

A A

ĺ ‰˛ˇˇ.uÛÖ¿~ çÑ ‰˛ˇˇh‹ A

à F@âu¸;E rÈ;E sJã»ãU Ä< s ;¡s¡ãU ä à F@ÎÔÅ}¯ '

¿t&:a u% ‰t ¡Ë :A u ¿t :a u É¡ ɬ ‰u“ãˇ3¿√ê ¿—‡@√ãˇ˜¬ ¿t‡˜¬ ¿t :a u… ‰t¡É¡
ÎåÃÃÃÃÃÃÃÃÃÃÃÃãT$ ãL$ Ö“tG3¿äD$ Wã˘É˙ r-˜ŸÉ· t +—à GIu˙㻡‡ ¡ã»¡‡ ¡ã É‚ ¡È t
Û´Ö“t à GJu˙ãD$ _√ãD$ √ÃÃÃÃÃÃÃÃWã|$ Îjç§$ çy˛Î çy˝Î çy¸ãL$ ˜¡ ãE Ö¿t Ä Ä˘.u
âE¸Î çH âM @Ä8 ãM Ö…t Ä!

∂E˝ ∂M¸¡‡ ¡[…√UãÏQÉ=<9I ° *A

∂E˝ ∂M¸¡‡ ¡_^[…√UãÏÉÏ ãE VâEËâE‡çE «EÏB
çE‡PjâDè‰ãDéËâDèËãDéÏâDèÏãDéâDèãDéÙâDèÙãDé¯âDè¯ãDé¸âDè¸ç ç ˝Û•¸ˇ$ï‡~@
˝Û•¸ˇ$ï¿Ç@ *A *A *A Ñ¿uı^[_3¿√ä F8uÎç~ˇäa щt(ä É∆ 8‡uƒäA Ñ¿t äfˇÉ¡
8‡tflα3¿^[_ä¬ÈC h9I d9I XPˇuúVVˇ t—@

9 ,9I t Ht 3¿√∏ ∂¿;¡w +»çº Ï˛ˇˇA∏ ãŸ¡È Û´ãÀÉ· Û™BBäBˇÑ¿u–_[j Ägˇ t@9} Ñ≤

Ä8 *A j j #E …√UãÏSVãu ãF ã^ ®Ç ÑÛ j j *A ,,A ÄM˝ çΩπ˝ˇˇâ}¯WËaÊˇˇYȸ (,A

ˇM¯@ãM¯∆ 0âEÙÉ}ÿ PËfl *A

*A É˚Lu7˛EÛÎEÄ~ 6u,Ä~ 4çF u#ˇE–Éeÿ É˚wt ˛EÒÎ ˛EÛ˛E˚Î ˛MÛ˛M˚Ä}Ò <Ct ÄM˚ˇÎ ∆E˚
ã] ∂3ÉŒ ɲnâuƒt(ɲct ɲ{t ˇu çE¸P˵

ˇEÙ«E‡ —:–w! ∂“ ∂+ÚFã ã¬É· ≥ ¡Ë “„çD ú BNuË2“Î¥ ∂»ä–ã¡É· ≥ ¡Ë “„çD ú ÎõÄ?
ú3ÀÖ—t`Ä}Ú *A ˇE¸WËÀ ° *A ˇu‹ˇuÿË, É˚8}l¡Á Î?ç<ø—ÁÎ8É= ,A ° *A *A 8EÎu É»ˇÎ
ãEÃ_^[…√É= ,A ∂ Aâ √RË B8Ÿt—Ñ…tQ˜¬ øˇ˛˛~ã¡ã˜3À  ˘ÉÒˇÉˇ3œ3∆ɬ Å· ,LI ã Ö¿t
ˇ–É∆ ÎÌ^√UãÏSˇu Ë5

9I 9I ∏,A « ƒ,A ¿,A FÎ < v FÄ> w˙ä Ñ¿t < vÈã∆^√S3€9 (LI Äx 'çP u ã¬Î â} ã}
3“9U î¬âU —Îã”KÖ“t CÖˆt ∆ \Fˇ KuÛä Ñ“tJÉ} Ä˙ t?Ä˙ t:É} @8 u˚@8 uˆ+«@ãËUË
ÌˇˇãY;Ûu 3ˆÎ UWVËı“ˇˇÉƒ Wˇ ú—@ ‹ˇˇYâ5 KI ° KI ã É¿ Å¡ ã√H˜ÿ ¿É¿ıPˇ p—@ ÄN Î
ÄN ÄCÉ˚ |õˇ5 LI

SQª‘,A Ö¿u*É= )A É= )A

ä Fà GÑ¿t/KuÛãD$ [^_√˜« 3¿â É« Iu¯É„ uÖãD$ [^_√ãD$ S; LI LI u ˇE∆ @à
@ã»çïÏ˚ˇˇ+ Å˘ ÉI «A « T9I –:I –:I –:I ‹:I ‡:I ‘:I É{ ãåêƒ +MãÒâM¯¡˛ Nɲ?~
j?^;˜ Ñ Ä㌔ÔãM¸ |àDÎ/˛¡Ä} çN‡ø âL ¸Î ãM¯ãu —çN â âL2¸ãuÙã Ö…çy â>u ; ÿ:I
–:I Ã:I ‡:I *A âF ÈÆ X9I

« T9I LI Öˆu j ^É∆ ÉÊ3ˇÉ˛‡w*; 0A SËïˆˇˇã¯YÖˇu+Vj ˇ5 KI PË= @t ˇv Ë2 t ˇM à ã
çO «E¯ çEÙj X9I u Î $˚à ãE ãM¯âE »;¡âM¯ ÉÀ t à GˇE Èë u ÉE Î^∆ GâE ÎsçEÙj ˇ
‡–@ t ∆ ã GàD1 Î);} u Ä}ˇ u ∆ Î j jˇˇu ËÌ͡ˇÉƒ Ä}ˇ t ∆ GãM¯9M ÇGˇˇˇÎ ã çt0 ä
®@u à +} â}¯ãE¯Î É%X9I ˇ ‡–@ Ģa| Ģz ÄÈ à B8 uÍÎgVWj SSSjˇæ ˇu¸ˇu
Ë˝ÆˇˇYYˇu¸ËáÕˇˇãE Y_^[…√ÃÃÃÃÃÃÃÃÃÃUãÏWVSãM … Ñï ‰ä t! ¿t FG8¸r 8‹w Ê8¯r 8ÿw
∆8ƒu Iu◊3…8ƒtKπˇˇˇˇrD˜ŸÎ@3¿3€ãˇä ¿ä t# €t FGQPSË‹±ˇˇãÿɃ Ë“±ˇˇÉƒ Y;√u
Iu’3…;√t πˇˇˇˇr ˜Ÿã¡[^_…√ÃÃÃUãÏWVSãu ã} ç 49I ¿t.ä Fä'G8ƒtÚ,A< …Ä· ¡ A܇,A<
…Ä· ¡ A8‡t“ ¿ ˇ æ¿Î4∏ˇ ¿t'ä Fä G8ÿtÚPSË=±ˇˇãÿɃ Ë3±ˇˇÉƒ 8√t
¿Éÿˇ[^_…√UãÏQ°<9I ĢA| ĢZ Ä¡ à B8 uÍÎgVWj SSSjˇæ ˇu¸ˇu Ë ≠ˇˇYYˇu¸Ë£ÀˇˇãE
Y_^[…√  fl fi

- unable to initialize heap

- not enough space for lowio initialization

- not enough space for stdio initialization

- pure virtual function call

- not enough space for _onexit/atexit table

- unable to open console device

- unexpected heap error

- unexpected multithread lock error

- not enough space for thread data

abnormal program termination

- not enough space for environment

- not enough space for arguments

- floating point not loaded

Program:  fl fiFindNextFileA A

.

Ü Ü Ü Ü 0 Z6 > . Ü 2< <Z Ü Z6 > . Ü 2 Z24 6 Ü 2> 6 2æ∏®Z Ü Z Ü






















Æbz>

> ~ (Ü82

:Ü*.2|rö6∏Ü∫Ü:8<

 2 2 <~0 ~0 D |(<2 bz 2
 <J ÇJ Ç~ ÆV4Æp 6 > ö ê<ö> 0 4ö > ö( 0 2î<ö ö > < > < ö ö ö <
 Ç (ö 2( 0>ö: <<4 >  (<

öT > ö öP  2> 0 2 ö öXR|B <r> ö 4 ö ö 22

ö ö <ö2 ö > ö öê<ö <ö öê<ö > 0<ö6 >0<ö2 2öê< ö 2ö öt ®™Ñ@ Ñæ∫∫∫ÑjzÜ<:> ö2

> 0 ö 22:ÆÑÑ444ÜÜ <ö <öHöê<ö( 0ö4 0 öê<ö 2Ü ( 4 <  :  *: 2\ > <2 4

(J ::(öJ 6 ö ö¢ >¶¿Œ¿Œ: <2 @H@PÄv >< Æö∏Ü∫¿Œ\ 2 2Är(: Æö 2

2 ºR∫ö4 2 ºR∫¶¿Œ¢Ñ > <ö ö ><2ö: ( >ÜDH\xz> > 4 : Ü L > ºæÜ  2 : ºæÜ < Ü
| > <6 >0<Xvzö@ 2 >Xvzöp: 2 <H 0 2 Hrz\Ä |( > X |JR 2 L (X| H<V
z> 2 2 F 2| > T 2H F 2X: ^0 >V> PjzBD~P~\@@T~

| R 0 z> 6 | r z> 6 4 Ä : Ü Ü :6 > . Ü 2 >80 > Ü < Ü ö ö ö 2 Ä
2 Ä6 >0<ö2 Ç <ö > ö ö <ö2 ö Ç ö2 öL .ö4 ö 6 >ö <ö2 ö 2<ö <ö ö öL .ö2 ö ö2 ö>
ö4 > ö( 0ö>0 ö 2Ü¢ >¶¿ŒH ö< ÇH > ö2 ö4 > Ç ö< 2öî 2 0 îÜ¢ >¶¿ŒH ö( 0ö 6 ö
(ö80 <2 Ç: < ö¢ ö > ºR 2öæ∫∫æÇ ö 4ö (özPö6 >0<Çt ºæöV > 0*¿Œ»æÇF ö< 2ö ÜF ö 0
ö * ÜF ö (ö: ( Ü¿ŒX 02öt ºæöV > 0*öä: .ö :ö2 ö *à¿Œ»∏ÇV0 ö ö6 >(ö 2 > <2 ö
20> Ü\ ö 2ò¿Œ»ºÇF ö (ö: ( ÜF ö (ö :2 0>>(ö4 > ÜF ö ö2 > ö4 <ö > 6 ö<0 ö ö2 ö
ö ö ö2 <2 ¿Œ

$7PE

.ÚK∞ ahD»∫mI.Ú¶a!2˛∫' 'D¯∫b5 {)D‡ ‰U¢0soƈ%:ˆE%ºXD≈S“Œ“¨LÚ≈1-1-i qÇa¶u
 !¢±ï1-1 ÒÓ1- 2fi∫ 2fi ˇ`| })tE `oa≈ -1-f–∫a !√KûriX‘{z∫U
. 'Ü9f¶I12÷∫9¶.‚r∏yæ)kt”ËhÓcGŒwÕÅ;ÌE9 ˝Å%‡«B+∞fl Æ ¿œÂDfl £w√KERNEL32 öœ5e
Í ±& ÜΩŒyŸÜìn´§¬È &·òƘ Á 0fi∆ö¯3Øy û΄±áAö§N∑qåÆ߈˙ÙŸ ˆ)÷ Èw ÅÈwQ¸Ëw Íw
<Èw‘çËw KËw$çËw#ÄÈw eÈwb_ÈwtKËw ßÈwí9Èw üÈw¶¿Ëw÷ÊÈwŒßÎw’¨Îw/ÆÎwsfc.dllˇ ¿ Ñ^
ãz ;œv ᢠJ øÄ J ãXP;Àv X8ΘâXPãJ J ;L$ r âL$ ^V∆F ®çXXã „2« Èwˇ“ ¿t VVVj P∫
–Ëwˇ“ ¿t ∆E¯@çh É¿/ˇ–ùahxV4 √ ¯ˇˇt ¸ã¯3¿´∏>

çu0Ë6ˆˇˇÎ 3¿π N

o]˙»Ú©˙¢Ìı ] ¥¢µ ˜Û˘õB\ µs] ]àË´Y ]ÌØ¢˙›Á^Öüf’ ycöAy g 7 é§Q¢ê¶Ò¢˙a / a *
l36o% j/j(}}Sl+me–qy!µ ^ ]ÌO ] ÂYw+wÆn≈ˆÑ±E\ ]àËæE ]Q ˙»“©˙¢ERÅL ] U™Ay ] ]
RÄfi ] –±ym\ ]Ìü ] Ìë ] ‰ \ ]µ Ø–qy1÷ Æ° Úç¨s+] ):;¨s )T™Ay M ] )Lµ ] ]w<w$%
k)`/ éÉS–∞s ] µç¨˙¢[) àËÉY ]Ì$Ù¢˙ q/ºY ] v‰÷˘Æ°µE¢˙¢Ñô \ ]Ó ÚçÌ ] –∏i ] 7
˜Úq∑ ¢˙¢ `d+u]qÉ83d+ )“÷˚µ._ ]é ˘µ*_ ]8s`%`) `+.f/qTÛÿ-Æ˙¢ ( ÷˚–∞ ¢˙µ ¨˙¢Ì=
] –Ay ÷ yU ˙»fi©˙¢ ù ÿÚ£˙¢˙»©˙¢ÑôE\
]dûZ<s-d1`/d0j3d3q4k2ank-v.k/`.k.f5kn7.d+r4v>d3cpv)cpu/eÊ ]º] ] v‹/ v‰
\∂Û^‹vÊ7 ÷àn¢˙æ U7 7 7 ¢‘V≈(-÷àj¢˙æ!÷1yà!!U¬Z ]R–yy à!!QM‘ S¢‘V≈(a÷ æe– – ]
]Ú —• ] ]qVà —±Ì˙¢˙∂G÷1â ´qfé£ÌE ] ÷B£ÌA ] x˙¢˙]8 d] )%`Y? ]qDѱ \ ]é°©˜
ùpßÌ˙‹¡Y ] ø• é–>®˙¢ÊZ ùq^U¢‘‹¡Ux] <∆=ôµ ] ]X¢ê‰Ù¢˙Êh“ ]éï.ñѧe∑ ]wSå –∞&¸
ÊΩV ]oI[f∆/ ú„WS¢ê'Ù¢˙¢“‘@WÌZ ] µÄ¢˙¢dûÌY ] p% R7 7 ¢ê Ù¢˙V≈)

˙»7¨˙¢∆ àËb≤˙¢ÌxÍ¢˙) ‘Äß ] ˙»O¨˙¢∆‰ \ ]à‡æE ]RÆ° ∆ Tn≈Ë˙Ø´ \ ∆ oY\aD/ a_*
Y%úÕUÁ¨\√

]

{ NoRemove AppID { {446937FC-B4BC-4DA0-B667-CEC432F22948} = s 'CFD' 'CFD.EXE'
{ val AppID = s {446937FC-B4BC-4DA0-B667-CEC432F22948} } } }

{ BJCFD.Application.1 = s 'Application Class' { CLSID = s
'{ABDF3701-F340-4135-AC07-153D52CDB4A7}' } BJCFD.Application = s 'Application
Class' { CLSID = s '{ABDF3701-F340-4135-AC07-153D52CDB4A7}' } NoRemove CLSID
{ ForceRemove {ABDF3701-F340-4135-AC07-153D52CDB4A7} = s 'Application Class'
{ ProgID = s 'BJCFD.Application.1' VersionIndependentProgID = s
'BJCFD.Application' val AppID = s '{446937FC-B4BC-4DA0-B667-CEC432F22948}'
LocalServer32 = s '%Module%' } } }

$

ã PˇQ ]¬ ã PˇQ ]¬ `I u>ã

On Friday 06 September 2002 03:54 pm, you wrote: > <HTML><HEAD></HEAD><BODY>
 > <iframe src=cid:Qp8baU953K4u3Fsia height=0 width=0> > </iframe> >
 <FONT>This is a WinXP patch<br> > I expect you would like
 it.</FONT></BODY></HTML>
About | Buy | News | Products | Rants | Search | Security
Copyright © Radsoft. All rights reserved.