Tuesday, April 7, 2009

SCARY!

(5:13:06 PM) sal: ok
(5:13:09 PM) sal: here we go
(5:13:21 PM) sal: this is a ghost story
(5:13:27 PM) sal: its meant to scare you
(5:13:56 PM) sal: once upon a time in an old installer there was a need to find out what websites were installed
(5:14:09 PM) sal: so instead of using WMI to enumerate them right there
(5:14:26 PM) sal: a witch doctor crafted an evil installscript function
(5:14:41 PM) sal: its parameters were a command and a batch file
(5:15:06 PM) sal: this installscript function was so evil it would call a vbs file that was included! but...
(5:15:09 PM) sal: its invisible
(5:15:14 PM) sal: some may call it a ghost
(5:15:51 PM) sal: legend has it that inside of this vbs file was code, that took the aformentioned parameters
(5:15:52 PM) sal: FIRST
(5:16:02 PM) sal: it wrote the command to the batch file that was specified
(5:16:21 PM) sal: but it was so gruesome there was not one comment or extra whitespace to make it more readable
(5:16:44 PM) sal: then...once it was written it created a scripting shell and executed NOT THE BATCH FILE
(5:16:51 PM) sal: but a cmd prompt
(5:17:00 PM) sal: and passed the batch file as a parameter to this
(5:17:18 PM) sal: the batch file might spit something out
(5:17:20 PM) sal: or it might not
(5:17:25 PM) sal: and you have no way of knowing
(5:18:16 PM) sal: and no one realized the call to the function was coming from inside the INSTALLER!
(5:18:22 PM) sal: muahahahahaha

No comments:

Post a Comment