Advertisement
shubshub

Registry Scanner

Jun 3rd, 2012
125
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.92 KB | None | 0 0
  1. @echo off
  2. :first
  3. echo Once we Find a Rouge Registry Key we will Pipe the output to the Main Scanner
  4. echo and this will just keep on scanning once you tell it to continue
  5. :start
  6. title Searching for Registries
  7. cls
  8. set spy_not1=0
  9. set spy_not2=0
  10. set spy_not3=0
  11. set ang_not1=0
  12. set ang_not2=0
  13. set mal_not=0
  14. reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v SpywareQuake || set /a spy_not1=%spy_not1%+1
  15. reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v SpyQuake2.com || set /a spy_not2=%spy_not2%+1
  16. reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v SpywareQuaked || set /a spy_not3=%spy_not3%+1
  17. reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v 76112549345328287 || set /a ang_not1=%ang_not1%+1
  18. reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce /v 65438761234587528 || set /a ang_not2=%ang_not2%+1
  19. reg query HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "Strong Malware Defender" || set /a mal_not=%mal_not%+1
  20. IF %spy_not1%==0 goto spyquake_alert
  21. IF %spy_not2%==0 goto spyquake_alert
  22. IF %spy_not3%==0 goto spyquake_alert
  23. IF %ang_not1%==0 goto ang_alert
  24. IF %ang_not2%==0 goto ang_alert
  25. IF %mal_not%==0 goto mal_alert
  26. goto start
  27. pause
  28. :spyquake_alert
  29. title Found SpywareQuake
  30. echo > "BAT_Patches\spyfound.bat"
  31. ping localhost >nul
  32. ping localhost >nul
  33. ping localhost >nul
  34. ping localhost >nul
  35. IF EXIST "BAT_Patches\spyfound.bat" del "BAT_Patches\spyfound.bat"
  36. goto start
  37. :ang_alert
  38. title Found ANG_AntiVirus
  39. echo > "BAT_Patches\angfound.bat"
  40. ping localhost >nul
  41. ping localhost >nul
  42. ping localhost >nul
  43. ping localhost >nul
  44. IF EXIST "BAT_Patches\angfound.bat" del "BAT_Patches\angfound.bat"
  45. goto start
  46. :mal_alert
  47. title Found Malware Defender
  48. echo > "BAT_Patches\malfound.bat"
  49. ping localhost >nul
  50. ping localhost >nul
  51. ping localhost >nul
  52. ping localhost >nul
  53. IF EXIST "BAT_Patches\malfound.bat" del "BAT_Patches\malfound.bat"
  54. goto start
  55. :eof
  56. exit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement