VBS.Desktuk je računalni crv otkriven 25. kolovoza 2007. godine. Zaražava računala koja rade pod operativnim sustavom Microsoft Windows (Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000).
Crv pravi datoteke %System%\explorar.vbs i %System%\destruckto.html te u Windows Registry dodaje vrijednost HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"Explorer" = "%System%\explorar.vbs" kako bi se pokretao tijekom sljedećeg podizanja sustava. VBS.Desktuk potom umanjuje sigurnost računala mijenanjem registarskih vrijednosti HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Window Title" = "DESTRUKTO!!!!!",HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoFind" = "1", HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoRun" = "1", HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\"DisableRegistryTools" = "1", HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\"DisableTaskMgr" = "1", HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"ShowSuperHidden" = "0", HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoFolderOptions" = "1", HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\"DisableConfig" = "1", HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\"DisableSR" = "1", HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoDriveTypeAutoRun" = "0"
Crv se poslije toga kopira na svim izmjenjivim diskovima (removable drives) zaraženog računala kao datoteke %DriveLetter%\autorun.inf i %DriveLetter%\explorar.vbs.
Wikiwand in your browser!
Seamless Wikipedia browsing. On steroids.
Every time you click a link to Wikipedia, Wiktionary or Wikiquote in your browser's search results, it will show the modern Wikiwand interface.
Wikiwand extension is a five stars, simple, with minimum permission required to keep your browsing private, safe and transparent.
