extension9.vbs is actually called
This commit is contained in:
@@ -3,7 +3,7 @@
|
||||
This wiper is very popular amongst a French forum ("18-25"), people used to send this to a random streamer pretending it would "fix" their stream.<br>
|
||||
Compilations of people getting infected by this can be found easily on Youtube.<br>
|
||||
|
||||
The original version released in 2017, the one we're looking at is from 2023 and is actually not destructive, a simple reboot and everything is fixed.
|
||||
The original version released in 2017 used to delete the MBR partition so that you couldn't boot into Windows back, the one we're looking at is from 2023 and is actually not destructive, a simple reboot and everything is fixed.
|
||||
|
||||
# Behaviour
|
||||
|
||||
@@ -53,7 +53,7 @@ Then it will automatically start ```TwitchBooster.vbs```.
|
||||
|
||||
This program will show two message boxes saying "Welcome on the network booster for twitch, do you want to start the installation ?", then "Installation was successful, you will not lag anymore on stream :) !"<br>
|
||||
|
||||
Afterwards it will create a shell and run ```660.vbs```, ```7458.vbs```, ```extension110.vbs```, ```extension5.vbs```, ```extension6.exe```, ```4826.vbs``` and ```extension3.vbs``` 66 times.<br>
|
||||
Afterwards it will create a shell and run ```660.vbs```, ```7458.vbs```, ```extension110.vbs```, ```extension5.vbs```, ```extension6.exe```, ```4826.vbs```, ```extension9.vbs``` and ```extension3.vbs``` 65 times.<br>
|
||||
|
||||
#### 660.vbs
|
||||
|
||||
@@ -108,12 +108,10 @@ It displays a messagebox saying "THE 18-25 F*CKED YOUR A** F*CKING MOTHER F*CKER
|
||||
|
||||
#### extension9.vbs
|
||||
|
||||
This code is never called but is present in the archive.<br>
|
||||
This code calls ```extension8.bat```.
|
||||
|
||||
#### extension8.bat
|
||||
|
||||
This code is never called but is present in the archive.<br>
|
||||
This code registers a computer shutdown 300 seconds after it is called. The reason for the shutdown is "In 5 min, you will not have a pc anymore, son of r*pe. The virus of the youtuber Black f*cked your a** :)".
|
||||
|
||||
#### Twitch Booster sans l'installateur et les taskkill.vbs
|
||||
|
||||
Reference in New Issue
Block a user