After Some times Delphi as a RAD Development run without disturbance from any virus attack, and since it is
very popular the Delphi finaly got this attack , virus started to target any development tools to gain leverage
for distributing their loom , well bellow is a F&Q I Copy paste from Nick Hodge blog hope can make ,
all alldelphi.com reader’s fog clearer , enjoy guys and girls.

Frequently Asked Questions about the W32/Induc-A Virus (Compile-A-Virus)

By: Nick Hodges

Abstract: This is a set of Frequently Asked Questions about the W32/Induc-A “compile-a-virus” virus that can attack old versions of the Delphi development tool.

What versions of Delphi are affected?

This virus affects only Delphi versions 4 – 7 released between 1998 and 2002. The W32/Induc virus does not affect newer versions of Delphi from v2005 thru v2009 or the upcoming v2010.

What versions of Delphi are NOT affected?

This virus does not affect more current versions of Delphi. Delphi 2006, 2007, 2009, and the new 2010 release are not affected by this virus.

What is this virus?

This virus is called “Compile-a-Virus”. It is also referred to as “W32/Induc-A”.

Is the Delphi IDE or the language distributing this virus?

No, the versions of Delphi that are vulnerable to this attack (v4 thru v7) do not come with this virus nor is the virus in the language. It is “caught” by downloading and running an infected EXE or DLL.

Is Delphi Prism affected?

No, Delphi Prism is not affected by this virus.

What does this virus do?

This virus does nothing to versions of Delphi newer than Delphi 7 (2002). If a machine is infected, the virus W32/Induc-A doesn’t do anything malicious or create damage other than spread itself.
What the virus does do is embed itself into an installation of Delphi version 4, 5, 6 or 7. Then, when an infected version of Delphi builds an EXE or a DLL, it embeds itself into that resulting binary. When the code for that EXE or DLL is run, it then looks for installed versions of Delphi 4 thru 7 and replicates itself into any installations that it finds. Then, that installation will in turn produce EXE and DLL files that will look to replicate itself anywhere it is run.

Again, the virus looks only for an installation of Delphi 4 -7.  Specifically, if it finds one of those Delphi versions, it searches for the SYSCONST.PAS file.  It opens that file, injects code into it, compiles the file, and replaces the shipped version of SYSCONST.DCU with the new infected version. It then deletes the SYSCONST.PAS file it created. (The virus doesn’t alter any *.PAS files on the system).  The injected code simply causes the execution of code containing SYSCONST.DCU to replicate the virus.

Is this a problem unique to Delphi?

This particular virus seeks out Delphi v4 thru v7 but this type of virus is not in any way unique to Delphi and could effect any development environment from Eclipse to Visual Studio.

Who is vulnerable to this infection?

Installations of Delphi 4 – 7 can be affected by W32/Induc-A.  If an infected EXE or DLL file is run on a machine without Delphi 4 – 7 installed on it, then the virus does nothing. Virus scanners are now starting to report this infection as a virus to those people with infected binaries.

How do I know if I’ve been infected?

Detecting if your Delphi installation has been infected is fairly easy.  It only affects Delphi version from 4 to 7.  The easiest way to tell if you have been infected is to search for the presence of SYSCONST.BAK in the <delphi>\lib directory of your Delphi installation.  The virus creates this file as part of its actions.  If that file is present, you are likely infected (unless you know that you yourself created this file for some reason).

If you have a SYSCONST.BAK in your \lib directory, then you can open up SYSCONST.DCU in a hex editor or even in a text editor like notepad.  You can search for the code “CreateFile(pchar(d+$bak$),0,0,0,3,0,0);”  in that DCU file.  If it is present, you are infected.

If I have it, how did I get it?

If you have the virus, you got it buy running an EXE or DLL file on your machine that was already infected with this virus.   Delphi is a very popular development tool, particularly among ISV and MicroISV developers. Ii you received an infected binary you may have received it from an application download.

What are the implications of being infected?

If your machine is infected, the EXE and DLL files that you produce will infect any unprotected machine where your EXE or DLL is run and that has Delphi 4 – 7 installed.

But note again that this virus doesn’t do anything malicious apart from spreading itself. However, if you detect that you have the virus and have distributed known infected files, it is prudent to notify file recipients and point them to this FAQ for more information.

How do I remove the virus from my Delphi installation?

To remove the virus you should

1. Delete the infected SYSCONST.DCU file on your system
2. Replace it with the SYSCONST.DCU file from your installation media.  Delphi versions 4 -7 include a complete install image on their CD, so you can simply copy that file from your DVD to your installation.

How do I make sure that it doesn’t come back?

or

I don’t have the virus.  How do I make sure that I don’t get it?

This virus does not affect Delphi version 2005 thru 2010. However, if you are running older copies of Delphi v4 thru v7 then the most effective way to ensure that you don’t get the virus is to move your copy of DCC32.EXE to a different directory. The IDE of these older versions doesn’t require the command line compiler, so this will not affect the execution of the product.

You can also prevent the virus from doing anything to your installation again by leaving a file named SYSCONST.BAK in the same location where you found it.  The file can be empty.  The virus checks for the presence of this file, and if it finds it, it does nothing.  Leaving a blank SYSCONST.BAK file in the same location as your SYSCONST.DCU file will ensure that the virus will do nothing.

In addition, you can mark all of the files in your \lib directory as read-only. This will prevent the virus from changing them.

How do I tell if I have executable files on my system that are spreading this virus?

This is a relatively new virus, and so virus scanning software is just starting to recognize it.  A number of vendors are already identifying binaries with this infection, and undoubtedly, most will follow suit soon.  The best way to detect the virus is to ensure that your anti-virus software knows about W32/Induc-A and run a virus scan on your system.

The binaries I am producing are infected, what can I do?

Of course you first need to rid your system of the virus – See above.The only way to get rid of the virus that is already in an existing EXE or DLL is to recompile that binary with a clean system.

Does this affect packages built with Delphi 4 – 7?

It is possible but unlikely. By default, packages are not affected.  A package can become infected if you manually choose not to link against our RTL.DCP file and manually link in an infected SYSCONST.DCU. The overwhelming majority of developers will not have done this, and if you have, then you’ll be able to recompile those packages with a clean system.

What else can I do to protect myself?

There are a number of additional things you can do to protect yourself against this virus.  As mentioned above, you can mark all of the DCU files in your \lib directory as read-only.  And while you are at it, you might consider labeling all of the source code in the <delphi>\source directory as read-only as well.

To be absolutely safe, you can do a file compare between your \lib directory and the \lib directory on the install image on your CD.

If you need a file compare tool, there is a very powerful, open source tool called FreeFileSync which can be found at:

http://sourceforge.net/projects/freefilesync/

Keep in mind that it is possible that you may have altered these DCU files yourself, so if they show up as different, be sure that you yourself haven’t altered them. So far, this virus only affects the SYSCONST.DCU file.

In any event, it is highly recommended that you ensure that the files in the \lib directory of your Delphi 4 – 7 installation match those of the install image on your CD.

Is C++Builder affected?

No. It is theoretically possible for a C++Builder EXE to become infected, but a C++Builder developer would have to take a rather lengthy set of steps and actively change and recompile a number of different things on his system in order for the virus to affect C++Builder binaries.

I produce shareware and/or an ISV application built with Delphi? What does this mean?

If you are running newer versions of Delphi 2005 thru 2010 then it doesn’t affect you. If you are a Shareware or ISV vendor running an older version of Delphi v4 thru v7, then you should check that your machine is not infected. If it is infected you should clean it.

If you have distributed infected executables to your customers, you should immediately recompile your product and distribute a new, cleaned version. It would also be prudent to notify file recipients and point them to this FAQ for more information. As anti-virus programs begin to see this virus in binaries, customers will be getting reports of your binaries being infected and you’ll want to be ready with a clean binary for them.

Are there any special concerns for a Component Vendor?

Component vendors who are using versions of Delphi 7 or older should take the same precautions and steps as described in this document. Even if infected, component vendors have a low probability of infecting their customers via their components. The reason is that the virus doesn’t attach itself to other DCU files. It doesn’t affect any source code that you create. It is possible, as noted above, to link the virus into a package (BPL) file, but you would have to very deliberately be avoiding using the Delphi Run-time Library and be explicitly linking in the SYSCONST.DCU file.

What are you doing to harden Delphi against this or future viruses?

The best course of action is of course to run a secure development workstation and run anti-virus software; always keeping it updated. While this type of virus can be built to attack any development environment, we are looking for ways to help developers prevent future attacks on their systems.

hi all delphi readers for you that want to download the codegear Help Updates May/June, you can download from link below :

Here are some of the release note i took from codegear website.

Release Notes: Help Updates for CodeGear RAD Studio 2007

RAD Studio 2007 Help Updates provide bug fixes and other improvements to the Help system.

See http://dn.codegear.com/article/37542/ for updates to these release notes.

Visit CodeGear CodeCentral for versions of the RAD Studio Help in CHM and PDF formats.
Installation Notes

Installing this update uninstalls the current help and then installs and registers the newest Help Update.
Requirements

This Help Update can be applied to:

* CodeGear RAD Studio 2007
* C++Builder 2007 Update 3
* Delphi 2007 for Win32 Update 3

Important: This Help Update cannot be applied to prior software versions. You must update RAD Studio to one of the versions listed above to be able to use the Help Update mechanism.
Help Update History
Help Update 1: October 2007 (http://dn.codegear.com/article/37134)
Help Update 2: February 2008
Help Update 3: April 2008
Help Update 4: June 2008

Installing the Help Update from the Registered Users Site

You can obtain the help update download from the Registered Users Site. Install Help Updates using this command:

HelpSetup /upgrade

Known Problems with the Help Update Installer

* If you close the Update before the install completes, when you run Check Update again, a message says there is no Update available. The workaround is to download and run HelpSetup /upgrade from the Registered Users Site.
* If you have registered 3rd party help in the RAD Studio/5.0/Help/Doc/h2reg.ini file, you may have problems if you used syntax that is not compatible with RAD Studio Help. See How to Plug 3rd-Party Help into RAD Studio Help for instructions.

Improving Install Performance

1.

DisableRollback

The MSI-based Delphi installer uses a transactional database to keep track of its actions. This feature enables you to cancel and “rollback” the installation process, which means you can backtrack the install actions performed up to that point.

You can disable the rollback support by setting the following entry:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer]
“DisableRollback”=dword:00000001

You can also use the same setting under HKCU, which will be applied in a per-user basis.

Notice that this setting will affect *all* MSI-based installs, not only the help install.

Turn the registry setting back after you are done. Either delete the registry entry or set the value to 0.
2.

DisableAutomaticApplicationShutdown (Vista Only)

This registry entry setting disables the Restart Manager, which tracks files in use during an install process. (On Vista-based install, this can cause long delays.)

For the following registry entry:

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer

Set a DWORD value named DisableAutomaticApplicationShutdown to 1.

Improvements in Help Update 4, June 2008

* In the VCL:
o Descriptions of VCL elements have been added or updated in the following namespaces: ButtonGroup, Buttons, Forms, Math, System, Types, and TypInfo.
* The Doc team has fixed approximately 5 bugs in the online help.

Improvements in Help Update 3, April 2008

* In the VCL:
o Delphi and C++ code examples have been added or updated in the following namespaces: AppEvnts, Classes, Clipbrd, Comctrls, DB, Dialogs, ExtCtrls, FileCtrl, Forms, Graphics, Jpeg, Menus, StdCtrls, System, SysUtils, and Types.
o Descriptions of VCL elements have been added or updated in the following namespaces: Controls, Dialogs, Forms, Graphics.
* The Doc team has fixed approximately 15 bugs in the online help.

Improvements in Help Update 2, February 2008

* In the VCL:
o Delphi code examples have been added or edited in the following namespaces: Dialogs, SysUtils, SysInit, and System.
o C++ code examples have been added or edited in the following namespace: ActnList, AppEvnts, Controls, DB, Dialogs, Forms, Graphics, Grids, System, and SysUtils.
o The C++ classes in the System namespace have been restored to the help. This namespace includes the classes AnsiString, Currency, and so forth.
o The Delphi built-in functions (such as Copy, Read, ReadLn, Write, WriteLn, and so forth) have been restored to the System namespace.
o Internal hyperlinks have been corrected in a number of namespaces.
* The Blackfish SQL Developer’s Guide is now part of the online help, and appears in the Contents as a separate library.
* The Doc team has fixed approximately 60 bugs in the online help

Known Problems in the Help for RAD Studio 2007

* For Japanese, French, and German, there are minor issues in the table of contents.
* Some English content has not yet been translated.
* For VCL on .NET, F1 help is not working for properties in the Object Inspector.
* There are several areas where content is missing or incomplete, as tracked on Quality Central.
* When a function is overloaded, the function syntax may be repeated on the function list page, but the links go to the same page. There are many QC reports for this problem.

Part1
Part2
Part3
Part4
Part5
Part6
Part7
Part8

hi, lately i have frequently download tvseries,movies or other data from rapidshare search engine listing, so in the listing web they have humongous rapid link that we can download from. but when i want to copy and paste to my flashget download manager i got so lazy to read and filter all the unneccessary link, so i created a program that can parse and extract all rapid link from some html source page , also after that link that has been extracted can be added username and password for the rapid account. you see when we want to download from rapidshare using premium account flash get will get an error which is like it did not login at all so to overcome it we must put the username and password on the front of the link. the format will be like this ex: http://username:password@rapidshare.com/XXX/XXX/XXX.rar so here is how we used my program:

1. we must settings the domain named that will be search ..in my case was the rapidshare.com but my program can search more then one domain name, so we can just put like : rapidshare.com,rapidshare.com.de, etc
2. we also must put the compresion file extention in my case will be like .rar as same above we can also put other various extention like .rar,.zip,.tar.gx,.7zip,.7z, etc this is important because my parsing logic need to know what is end of one link is …because usually the rapid link will ending with “.rar” or “.zip” .
3. we save the page that have a lot of rapidlink by ..viewing in source code page (if using firefox then can choose to view–>pagesource) then saved as html files.
4. from my program open the saved html files. the extraction link will show on the memo in this state check the link for correctness since my logic can have error right ?
5. up till this phase if u dont have any premium account then u can just copy paste the link to browser but if you do have premium account and want to add it just enter the username and password on the edit box then just click edit button
6. my program also can saved the rapidlink as txt file. for future reference.

that’s it ..enjoy using my program oh also since i share it for free, please-please click my google adsense, it will surely support my website fee (every day if possible will be appreciates but if cannot then at least come often here for checking future update or any other application that i may post here) Download RapidShare Link Extractor HERE

Few days back, i got assignment from my boss to convert delphi application so can be run on vista, These application using TGif component to show some gif picture draw on the paint box. problem that i encounter when using vista is that now the windows have features to protect user from malicious software called User Access Control especially when the picture was put on one of mapped network drive.
the syntax of FileExists cannot find the respected file on that mapped network drive even the file was there, at first i try to find the caused why the FileExist cannot find the file even the file was laying there perfectly.it took a lot off pulling hair and scratch in the head that finally i found out that there was something fishy with UAC and the FIleExists incident, by disabling the UAC then the application work prefectly.by Now i wonder why microsoft making such features with out a proper documentation that we developer can read and understand…

Hi Everybody ,

Year 2007 already past, 2008 is already coming. May in this new year we all will have new improvement on ourself, so can be useful for everybody.

So let me say HAPPY NEW YEAR 2008

Finally , after thinking for some times…i finally have the gut to make my own web things…even it was only a blog.. so here we are …