Blackcom - Revision history

Screamer1234 at 03:53, 21 September 2025

2025-09-21T03:53:24Z

← Older revision		Revision as of 20:53, 20 September 2025
Line 24:		Line 24:

	After several seconds pass, the trojan initiates a system shutdown and corrupts the "hal.dll" in the System32 directory, something required for Windows to boot up. Furthermore, even if Windows were bootable at that point, Blackcom will go further to change the homepage to a [[YouTube]] [[screamer]]; though it is currently unknown what this screamer really was.		After several seconds pass, the trojan initiates a system shutdown and corrupts the "hal.dll" in the System32 directory, something required for Windows to boot up. Furthermore, even if Windows were bootable at that point, Blackcom will go further to change the homepage to a [[YouTube]] [[screamer]]; though it is currently unknown what this screamer really was.

	== Showcase Videos==		== Showcase Videos==
	<u>NOTE</u>: Although this trojan contains a [[screamer]], it is not visible in these showcase videos.		<u>NOTE</u>: Although this trojan contains a [[screamer]], it is not visible in these showcase videos.
Line 30:		Line 31:
	<youtube width="320" height="180">zIXIJCopsDo</youtube>		<youtube width="320" height="180">zIXIJCopsDo</youtube>
	</div>		</div>

	{{Maliciousnav}}		{{Maliciousnav}}
	{{Comments}}		{{Comments}}

	[[Category:Partially lost]]		[[Category:Partially lost]]
	[[Category:Malware]][[Category:2009]]		[[Category:Malware]]
			[[Category:2009]]
	[[Category:Other makers]]		[[Category:Other makers]]
	[[Category:Malicious scripts]]		[[Category:Malicious scripts]]

Scratch&RobloxFan100 at 19:26, 18 April 2025

2025-04-18T19:26:46Z

← Older revision		Revision as of 12:26, 18 April 2025
Line 1:		Line 1:
	{{~~Lost~~}}		{{PLS}}{{Infobox
	{{Infobox
	\|title = Blackcom		\|title = Blackcom
	\|image = VBScript_icon.png		\|image = VBScript_icon.png
Line 9:		Line 8:
	}}		}}

	'''Blackcom''' is a [[screamer]] [[application]] created by FlashUpload~~. It was~~ written in [[wikipedia:VBScript\|VBScript]].		'''Blackcom''' is a 2009 [[screamer]] [[application]] that was created by FlashUpload and written in [[wikipedia:VBScript\|VBScript]]. The download for it is currently lost, though there is still some footage confirming its existence.

	When launched, it displays a false MSWORD.exe error message that reads: "Microsoft Word cannnot open this document because it contains characters MSWORD.EXE does not understant".		When launched, it displays a false MSWORD.exe error message that reads: "Microsoft Word cannnot open this document because it contains characters MSWORD.EXE does not understant".
Line 20:		Line 19:
	01011001 01101111 01110101 00100000 01000111 00100000 01110100 00100000 01100101 00100000 00100000 00100000		01011001 01101111 01110101 00100000 01000111 00100000 01110100 00100000 01100101 00100000 00100000 00100000
	</pre>		</pre>
	This message is then followed by [[wikipedia:Microsoft_text-to-speech_voices#Windows_2000_and_Windows_XP\|Microsoft Sam]] saying: "~~CAUTION!~~ A virus has been detected."		This message is then followed by a [[wikipedia:Microsoft_text-to-speech_voices#Windows_2000_and_Windows_XP\|Microsoft Sam]] voice saying: "Caution: A virus has been detected."

	Blackcom then displays more fake error messages about svchost.exe and DRVSTORE, then displays a message stating: "An important system file is not found and WINDOWs can no longer run."		Blackcom then displays more fake error messages about nonexistent applications titled "svchost.exe" and "DRVSTORE", then displays a message stating: "An important system file is not found and WINDOWs can no longer run."

	After several seconds pass, the trojan initiates a system shutdown and corrupts "hal.dll" in the System32 directory, ~~rendering~~ Windows ~~unbootable~~. Furthermore. Blackcom will change the homepage to a [[YouTube]] [[screamer]]~~, but~~ it is unknown what ~~the~~ screamer was.		After several seconds pass, the trojan initiates a system shutdown and corrupts the "hal.dll" in the System32 directory, something required for Windows to boot up. Furthermore, even if Windows were bootable at that point, Blackcom will go further to change the homepage to a [[YouTube]] [[screamer]]; though it is currently unknown what this screamer really was.
	== ~~Showcases~~==		== Showcase Videos==
	<u>NOTE</u>: Although this trojan contains a [[screamer]], it is not visible in these ~~showcases~~.		<u>NOTE</u>: Although this trojan contains a [[screamer]], it is not visible in these showcase videos.
	<div style="text-align: center;">		<div style="text-align: center;">
	<youtube width="320" height="180">zh8ceqtyGVI</youtube>		<youtube width="320" height="180">zh8ceqtyGVI</youtube>
Line 33:		Line 32:
	{{Maliciousnav}}		{{Maliciousnav}}
	{{Comments}}		{{Comments}}
			[[Category:Partially lost]]
	[[Category:Malware]][[Category:2009]]		[[Category:Malware]][[Category:2009]]
	[[Category:Other makers]]		[[Category:Other makers]]

Hilarious Username at 11:53, 6 April 2025

2025-04-06T11:53:21Z

← Older revision		Revision as of 04:53, 6 April 2025
Line 38:		Line 38:
	[[Category:Applications]]		[[Category:Applications]]
	[[Category:Other scary images]]		[[Category:Other scary images]]
			[[Category:Non-indicative title]]

SkyTheWanderer at 05:24, 18 December 2023

2023-12-18T05:24:25Z

← Older revision		Revision as of 22:24, 17 December 2023
Line 33:		Line 33:
	{{Maliciousnav}}		{{Maliciousnav}}
	{{Comments}}		{{Comments}}
	[[Category:~~Malicious softwares~~]]		[[Category:Malware]][[Category:2009]]
	[[Category:2009]]
	[[Category:Other makers]]		[[Category:Other makers]]
	[[Category:Malicious scripts]]		[[Category:Malicious scripts]]
	[[Category:Applications]]		[[Category:Applications]]
	[[Category:Other scary images]]		[[Category:Other scary images]]

Nemesis6051 at 22:07, 10 July 2023

2023-07-10T22:07:49Z

← Older revision		Revision as of 15:07, 10 July 2023
Line 12:		Line 12:

	When launched, it displays a false MSWORD.exe error message that reads: "Microsoft Word cannnot open this document because it contains characters MSWORD.EXE does not understant".		When launched, it displays a false MSWORD.exe error message that reads: "Microsoft Word cannnot open this document because it contains characters MSWORD.EXE does not understant".


	After a couple seconds, it displays a false binary error message that reads:<pre>		After a couple seconds, it displays a false binary error message that reads:<pre>
	Microsoft Word Cannot Complete The Operation Requested Due To Security Risks		Microsoft Word Cannot Complete The Operation Requested Due To Security Risks

Nemesis6051 at 22:07, 10 July 2023

2023-07-10T22:07:29Z

Nemesis6051 at 18:56, 10 June 2023

2023-06-10T18:56:16Z

← Older revision		Revision as of 11:56, 10 June 2023
Line 9:		Line 9:
	}}		}}

	'''Blackcom''' is a [[screamer]] [[~~Application\|program~~]] created by FlashUpload. It was written in [[wikipedia:VBScript\|VBScript]].		'''Blackcom''' is a [[screamer]] [[application]] created by FlashUpload. It was written in [[wikipedia:VBScript\|VBScript]].

	When launched, it displays a false MSWORD.exe error message that reads:		When launched, it displays a false MSWORD.exe error message that reads:

Nemesis6051 at 18:54, 10 June 2023

2023-06-10T18:54:29Z

← Older revision		Revision as of 11:54, 10 June 2023
Line 4:		Line 4:
	\|image = VBScript_icon.png		\|image = VBScript_icon.png
	\|maker = FlashUpload		\|maker = FlashUpload
	\|type = [[Application]]		\|type = Application
	\|date = 2009		\|date = 2009
	\|imagecaption = The '''BLACKCOM.VBS''' icon.		\|imagecaption = The '''BLACKCOM.VBS''' icon.
	}}		}}

	'''Blackcom''' is a [[screamer]] ~~trojan~~ created by FlashUpload. It was written in [[wikipedia:VBScript\|VBScript]].		'''Blackcom''' is a [[screamer]] [[Application\|program]] created by FlashUpload. It was written in [[wikipedia:VBScript\|VBScript]].

	When launched, it displays a false MSWORD.exe error message that reads:		When launched, it displays a false MSWORD.exe error message that reads:

Nemesis6051 at 03:51, 10 June 2023

2023-06-10T03:51:21Z

← Older revision		Revision as of 20:51, 9 June 2023
Line 25:		Line 25:
	Blackcom then displays more bogus fake error messages about svchost.exe and DRVSTORE, then displays a message stating:		Blackcom then displays more bogus fake error messages about svchost.exe and DRVSTORE, then displays a message stating:
	An important system file is not found and WINDOWs can no longer run.		An important system file is not found and WINDOWs can no longer run.
	After several seconds pass, the trojan initiates a system shutdown and corrupts <code>hal.dll</code> in the System32 directory, rendering Windows unbootable. Furthermore. Blackcom will change the homepage to a [[YouTube]] [[screamer]], but it is unclear what the [[screamer]] was.		After several seconds pass, the trojan initiates a system shutdown and corrupts <code>hal.dll</code> in the System32 directory, rendering Windows unbootable. Furthermore. Blackcom will change the homepage to a [[YouTube]] [[screamer]], but it is unclear what the screamer was.
	== Showcases==		== Showcases==
	<u>NOTE</u>: Although this trojan contains a [[screamer]], it is not visible in these showcases.		<u>NOTE</u>: Although this trojan contains a [[screamer]], it is not visible in these showcases.

Nemesis6051 at 03:50, 10 June 2023

2023-06-10T03:50:59Z

← Older revision		Revision as of 20:50, 9 June 2023
Line 13:		Line 13:
	When launched, it displays a false MSWORD.exe error message that reads:		When launched, it displays a false MSWORD.exe error message that reads:
	Microsoft Word cannnot open this document because it contains characters MSWORD.EXE does not understant		Microsoft Word cannnot open this document because it contains characters MSWORD.EXE does not understant
	After a couple seconds, it displays binary ~~false~~ error message that reads:<pre>		After a couple seconds, it displays a false binary error message that reads:<pre>
	Microsoft Word Cannot Complete The Operation Requested Due To Security Risks		Microsoft Word Cannot Complete The Operation Requested Due To Security Risks

← Older revision		Revision as of 15:07, 10 July 2023
Line 11:		Line 11:
	'''Blackcom''' is a [[screamer]] [[application]] created by FlashUpload. It was written in [[wikipedia:VBScript\|VBScript]].		'''Blackcom''' is a [[screamer]] [[application]] created by FlashUpload. It was written in [[wikipedia:VBScript\|VBScript]].

	When launched, it displays a false MSWORD.exe error message that reads:		When launched, it displays a false MSWORD.exe error message that reads: "Microsoft Word cannnot open this document because it contains characters MSWORD.EXE does not understant".
	Microsoft Word cannnot open this document because it contains characters MSWORD.EXE does not understant

	After a couple seconds, it displays a false binary error message that reads:<pre>		After a couple seconds, it displays a false binary error message that reads:<pre>
	Microsoft Word Cannot Complete The Operation Requested Due To Security Risks		Microsoft Word Cannot Complete The Operation Requested Due To Security Risks
Line 18:		Line 19:
	Please include the following in your error report		Please include the following in your error report

	~~01011011~~ 01101111 01110101 00100000 01000111 00100000 01110100 00100000 01100101 00100000 00100000 00100000		01011001 01101111 01110101 00100000 01000111 00100000 01110100 00100000 01100101 00100000 00100000 00100000
	~~01011011~~ 01101111 01110101 00100000 01000111 00100000 01110100 00100000 01100101 00100000 00100000 00100000		01011001 01101111 01110101 00100000 01000111 00100000 01110100 00100000 01100101 00100000 00100000 00100000
	</pre>		</pre>
	This message is then followed by [[wikipedia:Microsoft_text-to-speech_voices#Windows_2000_and_Windows_XP\|Microsoft Sam]] saying: "CAUTION! A virus has been detected."		This message is then followed by [[wikipedia:Microsoft_text-to-speech_voices#Windows_2000_and_Windows_XP\|Microsoft Sam]] saying: "CAUTION! A virus has been detected."

	Blackcom then displays more ~~bogus~~ fake error messages about svchost.exe and DRVSTORE, then displays a message stating:		Blackcom then displays more fake error messages about svchost.exe and DRVSTORE, then displays a message stating: "An important system file is not found and WINDOWs can no longer run."
	An important system file is not found and WINDOWs can no longer run.
	After several seconds pass, the trojan initiates a system shutdown and corrupts ~~<code>~~hal.dll~~</code>~~ in the System32 directory, rendering Windows unbootable. Furthermore. Blackcom will change the homepage to a [[YouTube]] [[screamer]], but it is ~~unclear~~ what the screamer was.		After several seconds pass, the trojan initiates a system shutdown and corrupts "hal.dll" in the System32 directory, rendering Windows unbootable. Furthermore. Blackcom will change the homepage to a [[YouTube]] [[screamer]], but it is unknown what the screamer was.
	== Showcases==		== Showcases==
	<u>NOTE</u>: Although this trojan contains a [[screamer]], it is not visible in these showcases.		<u>NOTE</u>: Although this trojan contains a [[screamer]], it is not visible in these showcases.