virus source code -part 2

http://www.koin.org/files/virii/

[ ] 1992b.zip 17-May-2007 19:08 1k 
[ ] Avlist.zip 17-May-2007 19:08 11k 
[ ] BULK2.zip 17-May-2007 19:08 60k 
[ ] amilia_1.zip 17-May-2007 19:08 1k 
[ ] antiexe.zip 17-May-2007 19:08 1k 
[ ] antitbav.zip 17-May-2007 19:08 12k 
[ ] arab.zip 17-May-2007 19:08 1k 
[ ] armagedn.zip 17-May-2007 19:08 12k 
[ ] assassin.zip 17-May-2007 19:08 3k 
[DIR] backdoors/ 17-May-2007 19:01 - 
[ ] beeper.zip 17-May-2007 19:08 2k 
[ ] carovil.zip 17-May-2007 19:08 1k 
[ ] caser.zip 17-May-2007 19:08 225k 
[ ] digpol.zip 17-May-2007 19:08 1k 
[ ] eliza.zip 17-May-2007 19:08 1k 
[ ] et110.zip 17-May-2007 19:08 13k 
[ ] firfly.zip 17-May-2007 19:08 1k 
[ ] insuff.zip 17-May-2007 19:08 3k 
[ ] inv-evil.zip 17-May-2007 19:08 4k 
[DIR] irc bots/ 17-May-2007 19:04 - 
[ ] k-hate.zip 17-May-2007 19:08 1k 
[ ] krttdemo.zip 17-May-2007 19:08 3k 
[ ] logs.zip 17-May-2007 19:08 107k 
[ ] lurch.zip 17-May-2007 19:08 2k 
[ ] melissa.zip 17-May-2007 19:08 9k 
[ ] michael.zip 17-May-2007 19:08 4k 
[ ] michelan.zip 17-May-2007 19:08 2k 
[ ] nrlg.zip 17-May-2007 19:08 24k 
[ ] parasit1.zip 17-May-2007 19:08 1k 
[ ] pebbles.zip 17-May-2007 19:08 1k 
[ ] plague.zip 17-May-2007 19:08 3k 
[DIR] pws/ 17-May-2007 19:04 - 
[ ] renexts_1.36.zip 17-May-2007 19:08 23k 
[ ] sid.zip 17-May-2007 19:08 51k 
[DIR] spybots/ 17-May-2007 19:04 - 
[DIR] sub7/ 17-May-2007 19:06 - 
[DIR] trojans/ 17-May-2007 19:08 - 
[ ] ufester.zip 17-May-2007 19:08 2k 
[ ] ultimate.zip 17-May-2007 19:08 1k 
[ ] ultimute.zip 17-May-2007 19:08 8k 
[ ] unk.zip 17-May-2007 19:08 1k 
[ ] unlock.zip 17-May-2007 19:08 1k 
[ ] ussr-696.zip 17-May-2007 19:08 1k 
[ ] ussr1049.zip 17-May-2007 19:08 1k 
[ ] ussr492.zip 17-May-2007 19:08 1k 
[ ] ussr711.zip 17-May-2007 19:08 1k 
[ ] vip.zip 17-May-2007 19:08 7k 
[ ] virii gen 3.zip 17-May-2007 19:08 24k 
[ ] virii gen.zip 17-May-2007 19:08 17k 
[ ] vxcheck.zip 17-May-2007 19:08 211k 
[ ] whocares.zip 17-May-2007 19:08 2k

Read more...

virus source code - part 1

ttp://www.koin.org/files/virii/trojans/

[ ] AcidShiverSource.zip 17-May-2007 19:06 23k 
[ ] AiTrojan4.zip 17-May-2007 19:06 1k 
[ ] Amitis1[1].4.3b.zip 17-May-2007 19:06 224k 
[ ] BWv0[1].3Beta.zip 17-May-2007 19:06 1k 
[ ] BackAtTacK1[1].6.zip 17-May-2007 19:06 420k 
[ ] BackLash-Alpha.zip 17-May-2007 19:06 25k 
[ ] BioNet_4-0-5.zip 17-May-2007 19:06 13k 
[ ] BlackCore_v2[1].1.zip 17-May-2007 19:06 94k 
[ ] Blade Run Client.zip 17-May-2007 19:06 168k 
[ ] Blade Runner Serv.zip 17-May-2007 19:06 1k 
[ ] BoBo.zip 17-May-2007 19:06 2k 
[ ] ByPassFireWall.zip 17-May-2007 19:06 1k 
[ ] Devil6.zip 17-May-2007 19:07 3k 
[ ] Dk_Server_Pub260.zip 17-May-2007 19:07 10k 
[ ] Doly16.zip 17-May-2007 19:07 4k 
[ ] EvilHTTPServer-0[1]...> 17-May-2007 19:07 2k 
[ ] Fantasy-X1[1].3.zip 17-May-2007 19:07 1.4M 
[ ] Fiendishperson16.zip 17-May-2007 19:07 1k 
[ ] File Injector v2.zip 17-May-2007 19:07 1k 
[ ] ForcedControl.zip 17-May-2007 19:07 1k 
[ ] FrEaK-v1[1].01.zip 17-May-2007 19:07 116k 
[ ] GC12.zip 17-May-2007 19:07 1k 
[ ] GreenScreen1[1].0Fre..> 17-May-2007 19:07 1k 
[ ] Herman-Agent-1[1].0.rar 17-May-2007 19:07 734k 
[ ] Hornet-v1[1].00.zip 17-May-2007 19:07 88k 
[ ] LANfiltrator1[1].1fi..> 17-May-2007 19:07 118k 
[ ] MafiaDownloaderV1[1]..> 17-May-2007 19:07 86k 
[ ] Massaker1[1].2.zip 17-May-2007 19:07 1.3M 
[ ] MiniMoClient.zip 17-May-2007 19:07 1k 
[ ] PortLess12.zip 17-May-2007 19:07 1k 
[ ] Silent Spy-v2[1].10.zip 17-May-2007 19:08 86k 
[ ] Sinique10.zip 17-May-2007 19:08 294k 
[ ] Spook3[1].0.zip 17-May-2007 19:08 207k 
[ ] TechKiller.zip 17-May-2007 19:08 1k 
[ ] XtrMLair_v0[1].1.zip 17-May-2007 19:08 46k 
[ ] acidShiver.zip 17-May-2007 19:06 27k 
[ ] acidhead.zip 17-May-2007 19:06 1k 
[ ] bo120.zip 17-May-2007 19:06 38k 
[ ] bo121unix.tgz 17-May-2007 19:06 27k 
[ ] bo2k_dist_1_0_us.zip 17-May-2007 19:06 43k 
[ ] buschtrommel.zip 17-May-2007 19:06 6k 
[ ] cafe11.zip 17-May-2007 19:06 7k 
[ ] cafe8.zip 17-May-2007 19:06 2k 
[ ] cain151.zip 17-May-2007 19:06 1k 
[ ] capture.zip 17-May-2007 19:06 1k 
[ ] ccobra1_0.zip 17-May-2007 19:07 580k 
[ ] coma.zip 17-May-2007 19:07 1k 
[ ] darkangel251-1.zip 17-May-2007 19:07 1k 
[ ] darkangel251.zip 17-May-2007 19:07 1k 
[ ] espionage_selfinstal..> 17-May-2007 19:07 1k 
[ ] flux.rar 17-May-2007 19:07 147k 
[ ] frenzy.zip 17-May-2007 19:07 1k 
[ ] fs122.zip 17-May-2007 19:07 61k 
[ ] gf135.zip 17-May-2007 19:07 2k 
[ ] hackatack11.zip 17-May-2007 19:07 3k 
[ ] hammerstd20.rar 17-May-2007 19:07 751k 
[ ] iarefilter106.zip 17-May-2007 19:07 175k 
[ ] indoctrination.zip 17-May-2007 19:07 1k 
[ ] koko2.zip 17-May-2007 19:07 1k 
[ ] lancomBAT.zip 17-May-2007 19:07 12k 
[ ] magic25.zip 17-May-2007 19:07 842k 
[ ] millenium.zip 17-May-2007 19:07 1k 
[ ] mini13a.zip 17-May-2007 19:07 1k 
[ ] moddedAcidShiver.zip 17-May-2007 19:07 1k 
[ ] neotrojan-1.ZIP 17-May-2007 19:07 1k 
[ ] neotrojan.ZIP 17-May-2007 19:07 1k 
[ ] netdevil1[1].4.zip 17-May-2007 19:07 115k 
[ ] nethack-1.rar 17-May-2007 19:07 372k 
[ ] nethack.rar 17-May-2007 19:07 372k 
[ ] nk1_2c-1.zip 17-May-2007 19:07 43k 
[ ] nk1_2c.zip 17-May-2007 19:07 43k 
[ ] oblivionmini.zip 17-May-2007 19:07 3k 
[ ] paradise99.zip 17-May-2007 19:07 1k 
[ ] remotehackv[1].1.5.c..> 17-May-2007 19:07 454k 
[ ] rewind_1[1].4.zip 17-May-2007 19:08 641k 
[ ] theth15.zip 17-May-2007 19:08 268k 
[ ] thething16.zip 17-May-2007 19:08 4k 
[ ] trojancow.zip 17-May-2007 19:08 20k 
[ ] trojanfriend1-1[1].0..> 17-May-2007 19:08 1k 
[ ] trojanfriend1[1].0.zip 17-May-2007 19:08 1k 
[ ] voodoo.zip 17-May-2007 19:08 1k 
[ ] wartrojan.zip 17-May-2007 19:08 1k 
[ ] zz2[1].0.zip 17-May-2007 19:08 739k

Read more...

Identify the tricks in the Computer Virus

Perhaps there is in your computer virus or malware, but you would not know. Here are some signs that your computer infected with a virus or malware. 

Computer running slow. If you have your computer slower than usual, then you may be exposed to computer viruses or malware. Creator of the virus can send you spam email, directing you to a page or page that your browser to fake, and stake out or steal your important files. 

Email random. Many viruses can spread to your email. The virus can spread to the entire contact list in the email address. If you receive an email that displays a word such as "Undeliverable", then it was likely the virus is. 

Damage to the Internet browser. If you start the browser 'frozen' or 'dead', your computer may have been infected. Virus happy to use the Internet to disseminate infeksinya. By doing so, the virus will 'eat' out memory or hard disk resource and berimbas to the performance of your browser. 

Error messages when booting up. If the startup process for your computer, you then receive an error message, the message is a sign of the other. Malware programs usually also will participate in the startup when you start the computer.

source : beritanet.com

Read more...

8 Step Eliminate 'Hopeless' in Computers

Just like a virus, in general, local, part II Hopeless virus spread through the media usb flash / external drive. In addition to the 3 main virus file, will also be Hopeless virus duplicate files on all folders. 

See tips & tricks from Vaksincom, on Monday (5/12/2008), to eradicate the virus even though your computer is not 'hopeless': 
1. Disconnect the computer that will be cleared from the network. 
2. Should do the cleaning in safe mode. 
3. Turn off the virus by using the tools of task manager, as itty Bitty Process Manager. 
4. Make 'kill process', the file the virus is active, namely: C: \ WINDOWS \ system32 \ spool \ idle.exe 
5. Remove string registry was created by the virus. To facilitate the registry can use the script below: 

[Version] 

Signature = "$ Chicago $" 

Provider = Vaksincom Oyee 


[DefaultInstall] 

AddReg = UnhookRegKey 

DelReg = del 

[UnhookRegKey] 

HKLM, Software \ CLASSES \ batfile \ shell \ open \ command ,,,"""% 1 ""% * " 

HKLM, Software \ CLASSES \ comfile \ shell \ open \ command ,,,"""% 1 ""% * " 

HKLM, Software \ CLASSES \ exefile \ shell \ open \ command ,,,"""% 1 ""% * " 

HKLM, Software \ CLASSES \ piffile \ shell \ open \ command ,,,"""% 1 ""% * " 

HKLM, Software \ CLASSES \ regfile \ shell \ open \ command,,, "regedit.exe" "% 1" "" 

HKLM, Software \ CLASSES \ scrfile \ shell \ open \ command ,,,"""% 1 ""% * " 

HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon, Shell, 0, "Explorer.exe" 

HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Windows, AppInit_DLLs, 0 

HKLM, SYSTEM \ ControlSet001 \ Control \ SafeBoot, AlternateShell, 0, "cmd.exe" 

HKLM, SYSTEM \ CurrentControlSet \ Control \ SafeBoot, AlternateShell, 0, "cmd.exe" 



[del] 

HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, DisableRegistryTools 

HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, DisableTaskMgr 

HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoFolderOptions 

HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoRun 

HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoFind 

HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, StartMenuLogoff 

HKLM, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, DisableRegistryTools 

HKLM, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, DisableTaskMgr 

HKLM, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoFolderOptions 

HKLM, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoRun 

HKLM, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoFind 

HKCU, SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run, Repair 

HKLM, SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run, Repair 



6. Use notepad, then save with the name 'Repair.inf'. Then a Save As Type All Files to avoid an error occurred. 
7. Repair.inf run with the right-click and select install. Repair.inf should create a file on a clean computer, so that the virus is not active. 
8. Hapuskan master file and duplicate files that have been created by the virus Hopeless, where files are discrete icon folder, the file size is 247 kb, the file extension. Exe file and type 'application'. 

Additional simply, to facilitate the removal of facilities can use the search. In addition to the optimal cleaning and prevent re-infection, use anti-virus that is able to recognize both the virus.

source : detikinet.com

Read more...

'Hopeless' Virus in New Years

Please be careful if you find a folder called false 'Credit Card', 'Hack' and 'XXX'. Never opened, if your computer does not want to be without hope 'because the virus infected the latest Hopeless. 

Analysts Vaksincom virus from Adi Saputra, said the virus has actually Hopeless appear at the end of 2007, but this time seems to continue preceding Hopeless part II again appear to find prey. 

"Norman Security Suite detects variants Hopeless part II with the name Dloader.ERQB. Unlike the preceding, the virus is created with the script using the BASIC language software Autoit version 3 which is then compressed with the UPX program," he said to detikINET, Monday (5 / 1 / 2009). 

With UPX program, go Adi, the virus can be compressed so that it is not too big in size and can facilitate the spread of. Goal mengkompres this size is due to the small size of the file a virus it will automatically be easier. 

Once compressed with UPX, virus Hopeless part II will have the characteristics using the icon folder, the file size is 247 kb, the file extension. Exe file and type 'application'. 

Meanwhile, for the victims of the computer that is' hopeless' is exposed to the virus will occur following symptoms: 
Some of the functions of the windows will be blocked, such as Task Manager, Command Prompt and Registry Editor. 
Functions such as windows Run, Find, Folder Options, and Log Off will be lost. 
IE window will be opened with the URL link http://wewe.helo_iam_hopeles_.com. 
There was a duplication of virus files on all drives and folders both root and sub folders.

Read more...