{"id":19,"date":"2014-01-28T11:46:55","date_gmt":"2014-01-28T11:46:55","guid":{"rendered":"http:\/\/www.fax.squaredisc.com\/?p=19"},"modified":"2014-01-28T22:40:01","modified_gmt":"2014-01-28T22:40:01","slug":"homer","status":"publish","type":"post","link":"http:\/\/www.fax.squaredisc.com\/?p=19","title":{"rendered":"Homer.bat"},"content":{"rendered":"<p><span style=\"line-height: 1.5em;\"><strong>Homer.bat<\/strong> was part of a fun spamming script I made for my friend Chris (just to annoy him). The final edition could be seen as a form of virus\/worm as it would procreate itself into a system folder, add registry files to help keep persistence and replace the original file with a non damaging version so the user had no idea what it had done. <\/span><\/p>\n<p><span style=\"line-height: 1.5em;\">Once the computer reboots the script will automatically load with a persistence script so if the user closed the spamming <strong>Homer.bat<\/strong> script it would automatically load up again until 1 of 3 outcomes occurred (by random):<\/span><\/p>\n<ol>\n<li>Forces a Windows reboot<\/li>\n<li>Starts a spamming script, causing Windows to crash<\/li>\n<li>Completely removes itself and all registry entries<\/li>\n<\/ol>\n<span class=\"collapseomatic \" id=\"id3249\"  title=\"<strong>Homer.bat<\/strong> (stripped down version)\"><strong>Homer.bat<\/strong> (stripped down version)<\/span><div id=\"target-id3249\" class=\"collapseomatic_content \"><\/p>\n<pre>@echo off\r\nset NUM=0 1 2 3 4 5 6 7 8 9 A B C D E F\r\nmode con cols=50 lines=25\r\n:homer\r\nset rnd=%random%\r\nfor %%x in (%NUM%) do (\r\nfor %%y in (%NUM%) do (\r\ncolor %%x%%y\r\ntitle %rnd%\r\n)\r\n)\r\ncls\r\necho              _ _,---._          \r\necho           ,-','       `-.___  \r\necho          \/-;'               `._  \r\necho         \/\\\/          ._   _,'o \\  \r\necho        ( \/\\       _,--'\\,','\"`. )  \r\necho         ^|\\      ,'o     \\'    \/\/\\  \r\necho         ^|      \\        \/   ,--'\"\"`-.  \r\necho         :       \\_    _\/ ,-'         `-._  \r\necho          \\        `--'  \/                )  \r\necho           `.  \\`._    ,'     ________,','  \r\necho             .--`     ,'  ,--` __\\___,;'  \r\necho              \\`.,-- ,' ,`_)--'  \/`.,'  \r\necho               \\^( ;  ^| ^| )      ^(`-\/  \r\necho                 `--'^| ^|^)       ^|-\/  \r\necho                   ^| ^| ^|        ^| ^|  \r\necho                   ^| ^| ^|,.,-.   ^| ^|_  \r\necho                   ^| `.\/ \/   )---`  )  \r\necho                  _^|  \/    ,',   ,-'  \r\necho                 ^|    `--'---.     \\\/ \\  \r\necho                 ^|          \/ \\    \/\\  \\  \r\necho               ,-^---._     ^|  \\  \/  \\  \\  \r\necho            ,-'        \\----'   \\\/    \\--`.  \r\necho           \/            \\              \\   \\   \r\ngoto homer<\/pre>\n<p><\/div>\n<p><a href=\"http:\/\/www.fax.squaredisc.com\/wp-content\/uploads\/2014\/01\/homer.gif\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-20\" alt=\"homer\" src=\"http:\/\/www.fax.squaredisc.com\/wp-content\/uploads\/2014\/01\/homer-300x241.gif\" width=\"300\" height=\"241\" \/><\/a><br \/>\n<img alt=\"\" src=\"http:\/\/www.fax.squaredisc.com\/wp-content\/uploads\/2014\/01\/homer.ico\" \/><\/p>\n<blockquote><p>Chris: God And, what have you done to my compu&#8230;&#8230;.<br \/>\nAndy: Hahahaha \ud83d\ude42<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>Homer.bat was part of a fun spamming script I made for my friend Chris (just to annoy him). The final edition could be seen as a form of virus\/worm as it would procreate itself into a system folder, add registry files to help keep persistence and replace the original file with a non damaging version <a class=\"read-more\" href=\"http:\/\/www.fax.squaredisc.com\/?p=19\">[&hellip;]<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[6],"tags":[8],"_links":{"self":[{"href":"http:\/\/www.fax.squaredisc.com\/index.php?rest_route=\/wp\/v2\/posts\/19"}],"collection":[{"href":"http:\/\/www.fax.squaredisc.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.fax.squaredisc.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.fax.squaredisc.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.fax.squaredisc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=19"}],"version-history":[{"count":55,"href":"http:\/\/www.fax.squaredisc.com\/index.php?rest_route=\/wp\/v2\/posts\/19\/revisions"}],"predecessor-version":[{"id":97,"href":"http:\/\/www.fax.squaredisc.com\/index.php?rest_route=\/wp\/v2\/posts\/19\/revisions\/97"}],"wp:attachment":[{"href":"http:\/\/www.fax.squaredisc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=19"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.fax.squaredisc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=19"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.fax.squaredisc.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=19"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}