hello everyone today we're returning to
be were made malware with very fun a
Trojan written and submitted by T diff
so thank you very much for writing and
sending this one in very fun is a lot
like Zika and that it's incredibly
random however it operates on a much
shorter time span it directly affects
the memory of applications that are
running and causes all sorts of weird
things to happen starts writing to the
registry and drawing lines on the screen
so it's just a real sight to behold
we'll go and run a couple programs here
no not search well we can have search
open that's fine we'll run paint and
we'll have calculator why not alright
now we are ready we'll go ahead and run
the Trojan see what it does and once
it's done doing whatever it does we'll
just go ahead and reset the virtual
machine and we'll take a look at three
or four iterations of this Trojan as the
results are different every time you run
it so get a message that a very funny
thing is happening we get a data
execution prevention it's probably bad
sign we've got some nice rainbow lines
being drawn on the screen paint crash no
not paint uh-oh the system's shutting
down got an RPC call error the screen is
refreshing incredibly oddly about five
times six how we do 30 okay weirdo oh no
we blue screen and will the system
restart I don't know okay seems like
we're booting up okay we'll just let it
go ahead and do that and see how our
system is holding up Oh or maybe not
holding up well press the double square
button I did not have a login password
hello this isn't good admin admin I did
not type five slides but okay
well the options button is not as
helpful as I might have hoped I think
we're pretty screwed and it's time to
restore the virtual machine try a second
time here we go round two fight go and
launch and an instant blue screen nice
okay that's quite oh no VMware crashed
that's not good
we'll try force restarting this
with any luck this will still boot up
and not be just totally ruined okay
everything boots okay so this is still
technically round two we'll run it one
more time okay we get a very funny thing
is happening here we go
no more instant blue screens for us we
got the lines go on we can still open no
never mind we can't open anything right
clicking is not working VMware tools is
dead we can oh we can draw awesome
here we go solitaire mode let's go it's
kind of layout they're all beautiful
I'll help you tire we go a nice royal
blue solitaire I always love it when
stuff crashes in Windows XP cuz you can
do this
make a nice spiral here we go
and there we go blue screen to death
well the computer still boot I'm not
sure
well the computer was booting but seems
to have hanged here on the screen
let's try force restart okay round two
is still holding on nothing critical has
been damaged so go ahead and run it
again
ooh we got a memory reference error okay
it's still going user and it logon
application is dead another memory error
okay mmm the instruction could not be
read and there goes Explorer Oh LS a SS
died okay
Reis a sir now system has detected
tampering with your registered product
type this is a violation of your
software license tampering with product
type is not permitted okay that sounds
bad oh we are not having fun we've had a
nice little pattern drawn on our screen
here now it's time to see if the
computer will actually still boot back
up well the system was supposed to be
shutting down but we're still getting
memory errors and blue screen nice and
there we go the registry is corrupted so
no we cannot do it up anymore so rip
iteration two let's move on to the third
and final attempt at running very fun
well I walked away before attempting to
work on this iteration and the virtual
machine crash so that's pretty cool I
hadn't even run it yet so this is
entirely unrelated to the actual
children which is neat
okay we've rebooted the virtual machine
hasn't completely killed itself for no
reason so here we go round three
last round very funny thing is happening
get our standard crashes here looking
we've run what's a different thing about
Fred let's edit there we go
here we go or drawn colors funny things
are happening strange things are
happening to me
Oh VMware tools under coverable error
software exception VMware Oh No Oh
services dot exe terminated we tampered
with the product type apparently
registry seems effed up again
everything is going wrong
well we lost a cash bar but recycle bins
go here can we open it no I don't think
we can
farewell iteration three well I said
farewell but it's been about a minute
and nothing was happening so we run the
Trojan again no cycle Ben also does not
work everything's frozen now I think
it's time we force your start
and the registry has been corrupted
again so that is about it for very fun
Thank You T diff for writing and sending
this one in it's so cool and I know
there was supposed to be a chiptune
component and several of the things that
are supposed to do however I could never
get that variant to work so I just went
with an older version of it so I can get
those new features to work maybe we can
make an updated video sometime but thank
you very much for watching if you'd like
to submit your own viewer made in
malware you can check out the links in
the description by my forums read the
rules and submit your stuff that's about
it thank you very much for watching
take care
[Music]