sc0rpi0

V'cent, sablefoxx is right. The executable will be decrypted into memory at _some_ point, and the AV will grab it. The only other solutions are making a rootkit or recompiling source with different settings/addded dummy code. Really n00b question: How would I go about making a rootkit?

Where do you get the process hider?

But won't it stop the program from running until it CAN decode it?

Hacksaw batch file n00b question: in this line, reg.exe add HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun /v USBMedia /t REG_SZ /d "%systemroot%$NtUninstallKB931337$sbs.exe" /f || "%appdata%sbsshortcut.exe" /f:"%USERPROFILE%Start MenuProgramsStartup .lnk" /A:C /T:"%appdata%sbssbs.exe" /W:"%appdata%sbs" /I:"%appdata%sbsblank.ico" I understand what everything here does except one small part. what exectly does "||" do? Much appreciated.

This looks good...but not quite as good as: http://www.esmartstart.com/ You get 250 mg. instead of only 110. Really fast/easy setup and usage too. Of course, if it's just a couple of text files, it won't really matter as much. Reading the FAQ at esmartstart.com I noticed that it doesn't support server side scripting, which doesn't leave many options for expansion. 110mb on the other hand does offer this and actually allows 5GB of space. I see...I *should* check out 110mb. I assumed wrongly from the title that one only gets 110 megabytes of storage.

This looks good...but not quite as good as: http://www.esmartstart.com/ You get 250 mg. instead of only 110. Really fast/easy setup and usage too. Of course, if it's just a couple of text files, it won't really matter as much.

I've been making these programs for years now. Good that you posted them though since most people [as far as I know] don't have a clue how to make them.

I'm taking your word for it. I haven't used Opera yet.

Nice job. Keep up the good work!

QFE! Where is Vako? I need one of his one-liner n00b killers right about now. Don't worry, you won't need him. I found a solution using nircmd. Thanks anyway. Now for the explanation of why I asked this question: I am constructing a self-progating hacksaw [For experimental purposes only :-)] Frankly, I've never hacksawed anyone or intend to. When someone plugs an infected usb drive into their computer, I want to ensure that no one knows that their usb drive has been modified. So, I have a batch file autorun which first hides the computer's hidden and system files before installing the hacksaw. The registry change that must take place does not refresh fast enough for the files to avoid detection. Obviously, I am not on the person's computer so I can't just walk up and tap "F5." Not all computers have all hidden and system files hidden. but the ones that do will be MUCH more likely to notice Is there a way to quickly check if hiding system and hidden folders is on?

QFE! Where is Vako? I need one of his one-liner n00b killers right about now. Don't worry, you won't need him. I found a solution using nircmd. Thanks anyway. Now for the explanation of why I asked this question: I am constructing a self-progating hacksaw [For experimental purposes only :-)] Frankly, I've never hacksawed anyone or intend to. When someone plugs an infected usb drive into their computer, I want to ensure that no one knows that their usb drive has been modified. So, I have a batch file autorun which first hides the computer's hidden and system files before installing the hacksaw. The registry change that must take place does not refresh fast enough for the files to avoid detection. Obviously, I am not on the person's computer so I can't just walk up and tap "F5." Not all computers have all hidden and system files hidden.

Killing explorer is too slow for me. I'm looking for something that does exactly what F5 does, only something that can be put in a batch file. Sorry I have not been more clear.

You see, I'm trying to make a usb dumper batch file which is always looping in the backround. So I can't make them very relative. This works: xcopy "A:*.doc" "C:folder" /s/c/q/r/h >null Only, I get popup error messages when a drive does not exist. Is there a way [registry, etc] of disabling/masking these error messages safely? Thanks.

I am currently trying to automate the "backing up" of usb drives. I don't want to use the usb dumper, because it is detected by av. So, I am trying to do it via a batch file. When I run this command however, xcopy "D:*.doc" "c:files" /s/c/q/r/h it always prompts me whether I want to copy files or directories. Is there a way to make it automatically copy all documents from drive D *without* prompting? Thanks.

-

Rephrasing of question: Is it possible to create a batch file which when run refreshes windows. For example, when I select "show hidden folders" in control panel, it takes my computer about a minute to automatically recognize this Confused. However, once I right click on my desktop and select "refresh" from the menu that pops up, the change is recognized instantly and my hidden folders are viewable. I am wondering if there is a way to create a batch file to automate the process of "refreshing." [Not referring to the web but to my pc] Thanks very much.

hmm....not as simple as I thought. I was thinking about either a vbscript or a batch file. thanks nevertheless.

Recently, I have been thinking about a method of automatically detecting when a usb drive is plugged into a computer. Is this possible? How would I go about doing this? Much appreciated.

Although this idea has probably been thought of before I'll mention it anyway. If one setup a hacksaw gmail account to force all email skip the inbox and forward it to their yahoo account, one could get unlimited space.

cool

Can perl be compiled into a windows executable? If yes, how would I go about doing so? Thanks very much.

IE is an OK browser. Not the most secure though. Would I use it for my own computer? Definitely not. However, IE 7 is not as bad as you make it out to be. I personally use Mozilla Firefox. Most people I know use IE. So, of course I use that as the default when I am speaking to people. Did rebooting fix your problem?

black...it didn't say "cruz slide" just sandisk cruzer micro. However, it slides.

For some reason, sometimes when I close my browser, it stays open in the processes, making the change not possible. kill ie.exe in taskmanager. If this doesn't work, restart your computer. If neither works, boy, something is downright wrong with your computer. Make sure that the changes to the hosts file were saved and that an av didn't block you re-editing it. Sorry if this has caused you any trouble.

I am working on a better unblocking part of the program. For the moment, I just have the HOSTS file you need to edit pop up. As stated by another member of this forum, when the file pops up, just delete the bottom line and save the file. Please mention any simpler methods of unblocking a site. Here's an example of how the bottom line might look if you replaced the barbie site with hak5: 74.208.74.96 www.barbiegirls.com