Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- @echo off
- :first
- echo Once we Find a Rouge Registry Key we will Pipe the output to the Main Scanner
- echo and this will just keep on scanning once you tell it to continue
- :start
- title Searching for Registries
- cls
- set spy_not1=0
- set spy_not2=0
- set spy_not3=0
- set ang_not1=0
- set ang_not2=0
- set mal_not=0
- reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v SpywareQuake || set /a spy_not1=%spy_not1%+1
- reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v SpyQuake2.com || set /a spy_not2=%spy_not2%+1
- reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v SpywareQuaked || set /a spy_not3=%spy_not3%+1
- reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v 76112549345328287 || set /a ang_not1=%ang_not1%+1
- reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce /v 65438761234587528 || set /a ang_not2=%ang_not2%+1
- reg query HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "Strong Malware Defender" || set /a mal_not=%mal_not%+1
- IF %spy_not1%==0 goto spyquake_alert
- IF %spy_not2%==0 goto spyquake_alert
- IF %spy_not3%==0 goto spyquake_alert
- IF %ang_not1%==0 goto ang_alert
- IF %ang_not2%==0 goto ang_alert
- IF %mal_not%==0 goto mal_alert
- goto start
- pause
- :spyquake_alert
- title Found SpywareQuake
- echo > "BAT_Patches\spyfound.bat"
- ping localhost >nul
- ping localhost >nul
- ping localhost >nul
- ping localhost >nul
- IF EXIST "BAT_Patches\spyfound.bat" del "BAT_Patches\spyfound.bat"
- goto start
- :ang_alert
- title Found ANG_AntiVirus
- echo > "BAT_Patches\angfound.bat"
- ping localhost >nul
- ping localhost >nul
- ping localhost >nul
- ping localhost >nul
- IF EXIST "BAT_Patches\angfound.bat" del "BAT_Patches\angfound.bat"
- goto start
- :mal_alert
- title Found Malware Defender
- echo > "BAT_Patches\malfound.bat"
- ping localhost >nul
- ping localhost >nul
- ping localhost >nul
- ping localhost >nul
- IF EXIST "BAT_Patches\malfound.bat" del "BAT_Patches\malfound.bat"
- goto start
- :eof
- exit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement