The Anel Windows worm has few specific payloads … … they depend either on today’s day or specific time. Let me run notepad to run few payloads now. If today’s day is equal to seconds, it will type one message, and if … minutes are equal to seconds it will type another message. Let me run it so you can see the message… So it has to be 2 seconds in here to run the message. To show the message, actually. That’s the first message. “Shut up when… I’m talking” … “Shut up when I’m talking to U” or something like that. Can’t read it actually if it’s typing at the moment. Okay, second payload will come soon… So, it’s “Shut Up When I’m Talking To U!” “KID GET THE FU*K UP” Or … “GET THE FU… nah … GET THE FU*K UP KID”, that’s the message it will type. And it will type that … for a while … until it stops. So, it will keep doing that all time… … until you … … either kill the worm or … … leave it on. This doesn’t just affect the notepad or something. Anything what’s highlighted (set as active window), it will… It will type. Let me show when… … it stops. Okay… For example, in Date and Time. *gibberish* Okay, it’s not like something special, but it did change the date. *gibberish* Let me show you this. Okay. And that’s how it changed few… Checkboxes, but that’s normal it’s uh, how to say that… … a hotkey. If I try to type A… it will… nah. It won’t do anything. Actually, it will apply changes. If we type C, it will change one checkbox for clock. It depends on this… … how to call it … hotkey underline or something. Nevermind. One more payload… to show. Okay, let’s see it will work in Start. Not sure how… how… uh, keys will actually affect it … … because it’s typing too quickly and … … that may cause some … … unexpected things. *gibberish* Oops. Let’s close… … let’s try again. And there’s one more payload with time comparison. If minutes are equal to hours, it will shut down your computer. Uh, wait. Keeps loading. Okay, that’s pretty much enough… … with that. What else should I show you with that… Let’s try it in Word. Just for… … no reason. Any second … Ugh… ah. Well, that’s short. That seems to work better in notepad for some reason. Okay, let’s set the time. Set it to… 21 minute. And set the clock to… Whoa. And now it should shut down… … when it comes to 22 hours and 22 minutes. On 1st of any month, the worm will delete all Dial-Up connections… … and it will show you a message. Let’s just show you one connection. Okay, let’s go back and run it. “Wow, Sorry For U! All Ras Fu*ked Up! So what u gonna do? Fu*k up me or fu*k up u? Hehehetete!, rafieBiggs” Okay, let’s go back to Dial-Up Networking and all connections, actually only one gone of mine. And this again… Okay, moving on… On 7th of any month, it will add an entry to AUTOEXEC.BAT file to format your hard drive. Actually it will format only C drive. Okay, now it’s clean, let’s run it… It’s in addition, hidden, let’s edit it now… Okay, now we have the “@Echo OFF” to disable commands to be seen. Ugh. Okay, go back. So we have this message, to show up “Please wait wile loading Windows ….” … then it will format the hard drive … … and then this message: “WOW, rafieBiggs Fu*ked Ur C: , Sorry For U! And Fu*k U!”… … but main problem is that after formatting, the ECHO command file won’t exist so… … you won’t see the message. Let’s just restart the computer… when this ends up. OH *… Now it should start formatting. And as it said, it can’t go on. Actually, the main problem is that batch file is missing, not the ECHO file is missing. So…Windows cannot continue because there is nothing on C drive. Okay, moving on. On 9th of any month, it will… create a file on C drive called… “ReadThisPage”, and when you open it… … it will run a script which is supposed to send/spread the mail with worm. Let me just open Outlook so you can see sample … So, this is the sample mail. You get the subject “Hehetete…” … And the message: “Hello Buddy, Check the attachment And Have Fun With that, Yoohooo.” The attachment has an icon with bell, like this and the name is “checkwin.exe”. Okay. Moving on… On 15th of any month, it will do almost every payload. It will try to me show you a message, it will format C: drive with AUTOEXEC batch file… … it will spread itself by mail and then it will shutdown. Let’s run it… “Take A Look To The Sky Just Befor U Die, It’s the last Time u will” Okay, and everything will blow up. I didn’t even click. And it’s empty again… formatted, everything is gone… … moving on. On 20th of any month, it will kill the taskbar. Pretty much, that’s it. No taskbar, but everything else should still work. If you kill Explorer file and then re-run it, it should go back to normal. Well… … next one… On 29th of any month … it will show you a message and shut down your computer. “rafieBiggs, If U think PapaRoach is Nothing! Just kick Ur Ass! And Fu*k Ur self!” Okay, and shutdown. There are few more payloads, but I don’t know do they work at all. On 17th of any month, something happens, but I don’t know what. In addition, the worm will replace the clipboard with its own name. Actually it’s a message. Let me just… copy some text. Let’s run the worm… Pretty much nothing happens. This does not depend on 17th of any month, but it should happen whenever it comes. So, this is the message: “U FU*KED BY RAFIEBIGGS” That’s pretty much about it. There’s nothing else I … know about it. So yeah, formatting, mail, shutdown, messages, what else… Typing and so on… So, that’s pretty much about it. Bye.
account and Anel apple basic Computer Worm computers Conficker (Software) demonstration desktop E-Mail Google hack Hacker (Character Power) Hacker (Interest) Hotmail infection install Linux mail maker malware Messenger Microsoft Microsoft Windows (Operating System) MSN Myspace program security Security (Literature Subject) Software Software (Industry) System tech technology the Tom.K tutorial ubuntu virii virus visual will windows Worm YouTube