Hello everyone, and welcome to the 8th installation of Viewer-Made Malware!
...And this video is already extra funny! Because, you get it, it's a pun.
...Installation... because we're... we're installing malware... YA GET IT?
HA! That's funny! Anyway this one is called MEMZ and was written and contributed by
Leurak so hopefully I'm pronouncing your name correctly,
Sorry if I'm not but thank you very much for sending this in.
...because it's really cool, and this is pretty much completely automated.
Does a lot of cool things and does it all on its own as time progresses over about 5 minutes so we...
just run the batch file and check it out!
So we get a message telling us, "Your computer has been fucked by the MEMZ
Trojan. Your computer won't boot up again,
so use it as long as you can!", and a little happy face! "Trying to kill MEMZ
will cause your system to be destroyed instantly, so don't try it."
Sage advice. And now we pretty much just wait.
As it progresses through more and more payloads that get cooler and cooler as
time goes on this is a really, really fun one. I really like this!
So, first things first, we get pop-ups in our Google searches searching for
various 'script kiddie' type searches such as "how 2 remove a virus" and there will be others shortly.
Ooh, Club Penguin, time to get banned!
It now opened the system configuration utility because we definitely need to be
doing that. Now, if you notice my hand is not on the mouse right now but it is
very slowly moving the cursor on its own.
Now we're looking for batch viruses and if we click in this text box we can see
It is very slowly typing random keys. Just any random characters.
And it's still moving the mouse on its own.
I am not touching that. I promise you. You can't see me, but my time is now?
No I'm not touching it and now it starts playing random error messages or message
sounds, error sounds which is fun and we can see the mouse is going a little bit
more crazy.
Oh good, Bonzi Buddy, that's just what this video needs is even more memes!
*error sounds persistently play*
So this progressively just picks up from here; which is great!
Batch Virus download once again, and now every second
it inverts the screen colors which is really cool!
We're still going!
How to buy weed...
Now I get message box is asking us, "Still using this computer?"
Yes, we are, and I don't think i'm going to be making any more cuts in this video;
we're just gonna let this play out- and more cool things start, drawing error
icons on the screen, and also has one follow your cursor,
so you can draw... "my computer is doing weird things wtf is happening pls halp"
We can draw a spiral...
We got PC Optimizer Pro, this is fun!
This is good, I like this.
We got Command Prompt..
This is going nuts.. and now it begins
reversing strings in open boxes; like "Still using this computer?" is reversed
If we click on Start it turns to "tratS"; which is great..
All of the taskbar windows also changed. Open date and time properties, it all still changes.
Ok, kO, close out of some of this, and we're almost to the last payload here
"What happens if you delete system32" We're still going.
We're almost there!
Oh my. So I'm not touching the mouse, it's going on its own now, and now it begins
taking images of your screen and sort of scaling them into each other; so it's
kind of like when you're in OBS or XSplit or any screen capturing software
and you capture the screen capture you get that kind of tunnel effect and this
gradually get faster and faster just like the mouse cursor payload and
everything else and slowly begins adding in random images to random parts of the
screen from the little tunnel effect; which makes it even crazier.
So right now, your computer is pretty much unusable
but it's great. This is everything I want in my computer.
There are no words.
Like, this is just nuts, like, look at this, this is so cool!
We're still going..
Okay. Now we're going to look at the very last payload here.
So, remember how it told us our computer was fucked?
Well It was not lying; we're going to go ahead and restart..
So, "your computer has been trashed by the MEMZ trojan, now enjoy the Nyan Cat..."
It's a very, very nicely replicated version of the animation but no sound but there is
sound; and we will hear that in just a bit.
However, VMware does not support the onboard speaker so we cannot hear it
so I actually installed Windows XP and ran this Trojan on my Pentium 4 and
we'll go ahead and take a look at that.
But first one more thing to see. Ok, so this last thing I wanted to take a look
at before we hear the actual sound of the nyan cat payload is that this Trojan
does make good on its threat that if you try to kill MEMZ; your computer will be destroyed.
So basically, it launches several different processes- processes of itself;
these are all monitoring each other and then when we end one; it gets a little pissed at us,
and blue screens computer. And of course, once this happens, your boot
sector has already been overwritten and when we reset; we go right into Nyan Cat.
so let's take a look at the actual music part of this payload
Ok it's time for the last payload here of the MEMZ trojan and sorry this might be a little quiet, as
the computer is a little ways away from the microphone but
this will demonstrate that it is actually playing the music via the PC
speaker so let's go ahead and boot this up.
Now the boot sector has already been overwritten so we should just go straight into the Nyan Cat payload.
*Nyan Cat plays via computer beeps*
And that's really the last thing I needed to demonstrate for this,
hopefully you enjoy this as much as I did, it's such a cool Trojan and really
looking forward to what the rest of you guys can come up with; so if you'd like
to submit your own user made malware, Viewer Made Malware, whatever you want to call it,
please read the instructions in the description of this video,
sign up on my forums and from there you can find more information on how you can submit stuff for future videos.
So, thank you for watching, take care.