\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
Welcome to Omnicron Software
/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\

 

Home

Scripts

Malicious Scripts

DSINs

Help

About

Employment

Employees

Contact Us

Links

AMS Scanner Version 2

// ///////////////
// AMS Version 2//
// By OmniSoft//
// ///////////////

// Needed to restore original settings
getcolor
getbgcolor

// For the choice areas.
var menuchoice
var helpchoice

// For the Scanner
var scanned
var instr

// Each MS is declared sperately in the
// scanner itself.

// This sets the FG and BG to seperate colors
// But has small chance of failing
// as they are black on black.
color 4
bgcolor 5

/////////////
//Main Menu//
/////////////

@menu
cls
color blue
say 10 /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
color orange
say 10 OmniSoft AMS Scanner
say 10 Version 2
color blue
say 10 \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
skipline
say 10 Welcomt to OmniSoft's
say 10 AMS Scanner V2.
skipline
say 10 1. Scan A File
say 10 2. Version Information
say 10 3. Help
say 10 4. Quit
skipline
color grey
// More refined menu
INPUT menuchoice Please select a number.
skipline

// the choices
IF menuchoice = 1
GOTO scanner
END IF

IF menuchoice = 2
GOTO version
END IF

IF menuchoice = 3
GOTO help
END IF

IF menuchoice = 4
GOTO quit
END IF

// ELSE
color blue
SAY 10 Sorry. Invalid Choice.
skipline
GOTO menu

// Only coding basic stuff near
// the top of the script.
//
// The scanner and help system
// are below.

// //////
// Quit//
// //////

@quit
color blue
say 10 Thank you for choosing
color orange
say 10 OmniSoft AMS Scanner V2
skipline
color blue
say 10 Visit us on the web at
color green
say 10 http://clix.to/omnisoft
skipline

// Free all variables
FREE menuchoice
FREE helpchoice
FREE exists
FREE scanned
FREE instr

// Return all original values
color 4
bgcolor 5
color %getcolor%
bgcolor %getbgcolor%
END

// ////////
// Version/
// ////////

@version
color blue
Say 10 You are currently using
SAY 10 Version 2
skipline
SAY 10 Version 2 looks for the
SAY 10 following MS
skipline
color red
SAY 10 ChangeDir
SAY 10 HiddenChangeDir
SAY 10 Worms
SAY 10 Comment Guard
SAY 10 Protection for startup.script
skipline
pause
skipline
GOTO menu

// //////
// Help//
// //////

@help
color blue
Say 10 Please visit
color green
SAY 10 http://clix.to/omnisoft
color blue
say 10 for help.
skipline
pause
skipline
GOTO menu

// Bit simplified now :D

// /////////
// Scanner//
// /////////

@scanner
color white
INPUT scanned Which file do you want to scan?

exists %scanned%

IF exists = true
GOTO scanning
END IF

// ELSE
color blue
SAY 10 Sorry. That file doesn't exist.
SAY 10 Check you spelt it right.
skipline
pause
skipline
GOTO menu

@scanning
// ///////////////////////////////////////////
// Comment Guard Disabler//
// ///////////////////////////////////////////

color blue
SAY 10 Disabling Comment Guard

// Disable comment guard
write OSDeleteMe Comment Guard Off
merge OSDeleteme %scanned%

// Store new file to filedata
filedata OSDeleteMe

color green
say 10 Comment Guard Disabled

// scanning part
color blue
SAY 10 Scanning %scanned%
skipline

// //////////////
// ChangeDir MS//
// //////////////

var changedir
color blue
say 10 Scanning for ChangeDir MS
! changedir = ..\
instr filedata changedir

IF instr > 0
color red
music off
keysound on
skipline
say 10 ALERT!!!
say 10 ALERT!!!
say 10 Potential MS detected!!!
skipline
color blue
say 10 Please go to www.darksigns.com
say 10 and submit %scanned% to an AMS Agent
FREE %filedata%
skipline
keysound off
say 10 DarkSigns will now exit
pause
music on
keysound off
DEL OSDeleteMe
EXIT
END IF

// ELSE
color green
SAY 10 ChangeDir not detected
skipline
FREE instr
FREE changedir

// ////////////////////
// HiddenChangeDir MS//
// ////////////////////
color blue
say 10 Scanning for HiddenChangedir MS

var hiddenchangedir
! hiddenchangedir = Chr 92
instr filedata hiddenchangedir

// Found HiddenChangeDir?
IF instr > 0
music OFF
keysound on
color red
skipline
SAY 10 ALERT!!!
SAY 10 ALERT!!!
SAY 10 HiddenChangeDir MS detected!!!
skipline
color blue
say 10 Please go to
color green
say 10 www.darksigns.com
color blue
say 10 and submit %scanned% to a
say 10 registered AMS Agent.
skipline
SAY 10 DarkSigns will now quit.
skipline
PAUSE
music on
keysound off
DEL OSDeleteMe
EXIT
END IF

// ELSE
color green
SAY 10 HiddenChangeDir not detected
skipline
FREE instr
FREE hiddenchangedir

// /////////
// Worm MS//
// /////////

// The Worm is a bit different
// to other MS as it needs
// 2 commands to be evil.
// Write and Goto.

color blue
say 10 Scanning for Worm MS

var worm
! worm = Write
instr filedata worm

// Found Worm Write?
IF instr > 0
FREE instr
color orange
Say 10 Write command found.
SAY 10 Looking for goto.

var loop
! loop = goto
instr filedata loop
END IF

// Found Worm goto?
IF instr > 0
music OFF
keysound on
color red
skipline
SAY 10 ALERT!!!
SAY 10 ALERT!!!
SAY 10 Worm MS detected!!!
skipline
color blue
say 10 Please go to
color green
say 10 www.darksigns.com
color blue
say 10 and submit %scanned% to a
say 10 registered AMS Agent.
skipline
say 10 DarkSigns will now quit.
skipline
PAUSE
music on
keysound off
DEL OSDeleteMe
EXIT
END IF

// ELSE
color green
SAY 10 Worm not detected
skipline
FREE instr
FREE worm

/////////////////////////////
//STARTUP.SCRIPT Protection//
/////////////////////////////
color blue
say 10 Protecting startup.script

var startup
! startup = startup.script
instr filedata startup

// Found Startup
IF instr > 0
music OFF
keysound on
color red
skipline
SAY 10 ALERT!!!
SAY 10 ALERT!!!
SAY 10 startup.script MS detected!!!
skipline
color blue
say 10 Please go to
color green
say 10 www.darksigns.com
color blue
say 10 and submit %scanned% to a
say 10 registered AMS Agent.
skipline
SAY 10 DarkSigns will now quit.
skipline
PAUSE
music on
keysound off
DEL OSDeleteMe
EXIT
END IF

// ELSE
color green
SAY 10 No attacks on startup.script detected
skipline
FREE instr
FREE startup


//////////////
// All clear//
//////////////
skipline
skipline
color green
say 10 All clear.
say 10 No known MS detected.
DEL OSDeleteMe
skipline
PAUSE
skipline
GOTO menu
 

STATS

Website (C) Omnicron Software 2003
Dark Signs is (c) Terminal Zero

1