Batch Processing Application: logocompu.exe (Viking) immune

Source: Internet
Author: User

@ Echo off
Echo ===================================================== ======================================
We recommend that you first perform anti-virus and run the script as administrator before echo uses the script.
The echo script will generate rundl132.exe1_logocmd.exe and DLL. dll hidden files in the Windows directory.
The size of the file created by ECHO is 0. If it is not 0, it may be a Trojan.
Echo created by scz20061101
Echo ===================================================== ======================================
Echo.
CD/d % WINDIR %
FC logow..exe DLL. dll> NUL 2> & 1 & FC rundl132.exe DLL. dll> NUL 2> & 1 & (echo system has been immune. & Goto end)
Attrib rundl132.exe-r-H-S> NUL 2> & 1
Del rundl132.exe> NUL 2> & 1
If exist rundl132.exe (ECHO does not delete rundl132.exe, the program may be running. Check the script and run it again. & Goto end)
Attrib logocmd.exe-r-H-S> NUL 2> & 1
Del logocmd.exe> NUL 2> & 1
If exist logocmd.exe (ECHO does not allow you to delete logocmd.exe, the program may be running. Check the script and run it again. & Goto end)
Attrib DLL. dll-r-H-S> NUL 2> & 1
Del DLL. *> NUL 2> & 1
If exist DLL. DLL Ren DLL. DLL "DLL. dll % time: = % "> NUL 2> & 1 | (Echo cannot rename DLL. DLL, anti-virus software may prevent modification. Check the script before running it. & Goto end)
Copy NUL rundl132.exe> NUL 2> & 1 & (echo successfully created rundl132.exe) | (ECHO has no permission to write rundl132.exe, so check the script before running it. & Goto end)
Copy NUL logocmd.exe> NUL 2> & 1 & (echo successfully created logocmd.exe) | (Echo cannot establish logocmd.exe, and may not have permission to write data. Check the file before running this script. & Goto end)
Copy nul dll. DLL> NUL 2> & 1 & (echo successfully created DLL. DLL) | (Echo cannot create DLL. DLL, may not have permission to write. Check and then run this script. & Goto end)
Attrib rundl132.exe + R + H + S> NUL 2> & 1
Attrib logocmd.exe + R + H + S> NUL 2> & 1
Attrib DLL. dll + R + H + S> NUL 2> & 1
Echo.
FC logocmd.exe DLL. DLL> NUL 2> & 1 & FC rundl132.exe DLL. DLL> NUL 2> & 1 & ECHO file verification passed, immune program execution completed | ECHO file Verification Failed, please disinfect...
: End
Echo.
Press any key to exit Echo...
Pause> NUL

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.