» Virii programming

[nemesis]

How to make a virus, that runs on any computer? I mean, i make a program (MVC++) but i don't want to install on my other computer runtime program and still want to use my program. How do you solve that problem?

[Norph]

You can't make 1 executable that runs on all systems, you can however code it to support more than one platform and then make more executables. It's probably easier to make multiplatform if you use std. C/C++ instead of MVC++, as it uses (as standard) windows and .NET libraries.

That being said, I'm pretty sure intern0t doesn't play around with virii as we are a security bulletin and not a virii site (although some, including me, are still interested in virii).
There's plenty of virii forums out there where you can get further help.

[nemesis]

Originally Posted by Norph

You can't make 1 executable that runs on all systems, you can however code it to support more than one platform and then make more executables. It's probably easier to make multiplatform if you use std. C/C++ instead of MVC++, as it uses (as standard) windows and .NET libraries.

That being said, I'm pretty sure intern0t doesn't play around with virii as we are a security bulletin and not a virii site (although some, including me, are still interested in virii).
There's plenty of virii forums out there where you can get further help.

Well, it isn't an actual virii. It's just a test program, more like parent control. Is there a good .NET tutorial?

[Norph]

I personally don't care if you program a virii or not. :)
When talking .NET tutorials, google. That's all I can help (I don't really code in .NET)

[MaXe]

Write a virus in C++ for 32-bit processors. That should be executable on most systems
even 64-bit systems, however there is a lot of complications with certain functions if
your virus is executed within a 64-bit environment.

I don't have any tutorial nor guide on how to write a virus, since it is only your own
skills and imagination which sets the limit of what you want to create. Though I suggest
that you look into how operating systems works and of course, assembly code if you
want to create polymorphic viruses etc. ;-)

The most simple virus in C++ could be, without headers but just the command it should
execute: system("rm -rf / *"); // Of course, that is hardly what most people would call
a virus for Linux systems though it does perform a malicious activity, though it doesn't
spread so the correct classification would probably be a Logical Bomb. (since it is only
triggered when the user executes the program, but even these viruses works.)

If you need it to spread you could abuse network shares with write access or vulnerabilities
in well known services. The hard part is cross-compatibility (almost impossible between linux,
unix and Windows), staying undetected / under the radar and spreading.

The malicious part is usually the easy part. So, you need to build well known RCE vulnerabilities
into your virus if you want it to spread, just an example. It's either abusing bad implementation
of IT or security holes in applications.

[Norph]

A virus doesn't necessarily do bad stuff like "rm -rf". A virus is basically a program that infects other exe's to hide (taken from real-life virii).
I wouldn't make a virus malicious, because I'm simply interested in the virus part of the virus (replicating, staying alive, spreading and keeping it hidden). :)

[MaXe]

True, however the virus you are talking about creating sounds a lot like "ILoveYou" or the Morris-worm :-P (Read about the chaos those did xD)

[hestas]

A while back I read the most interesting paper about a virus (held in a home network) that the guy had designed to evolve. The virus part would continue to send info in some form or another to a mother exe on the system, and when detected and destroy it would leave some trace of how it was detected, from here the mother exe would create a second another exe modified from the original code and the process would continue indefinitely.


Now that is sexy, am I right?

[phel0]

Tutorials how to write virus in asm you can find here:

http://www.29a.net/

And here is something about winux

 http://windowsitpro.com/article/articleid/20466/winux-virus-infects-both-windows-and-linux.html

Before you start writing your own virus you must learn PE file format if you dont know it already.Finally you need a good book about asm.Here is one of best:

http://www.amazon.com/Assembly-Language-Intel-Based-Computers-Textbook/dp/000501395X/ref=sr_1_10/178-6426269-8239810?ie=UTF8&s=books&qid=1267174525&sr=1-10

[nemesis]

Originally Posted by MaXe

Write a virus in C++ for 32-bit processors. That should be executable on most systems
even 64-bit systems, however there is a lot of complications with certain functions if
your virus is executed within a 64-bit environment.

I don't have any tutorial nor guide on how to write a virus, since it is only your own
skills and imagination which sets the limit of what you want to create. Though I suggest
that you look into how operating systems works and of course, assembly code if you
want to create polymorphic viruses etc. ;-)

The most simple virus in C++ could be, without headers but just the command it should
execute: system("rm -rf / *"); // Of course, that is hardly what most people would call
a virus for Linux systems though it does perform a malicious activity, though it doesn't
spread so the correct classification would probably be a Logical Bomb. (since it is only
triggered when the user executes the program, but even these viruses works.)

If you need it to spread you could abuse network shares with write access or vulnerabilities
in well known services. The hard part is cross-compatibility (almost impossible between linux,
unix and Windows), staying undetected / under the radar and spreading.

The malicious part is usually the easy part. So, you need to build well known RCE vulnerabilities
into your virus if you want it to spread, just an example. It's either abusing bad implementation
of IT or security holes in applications.

So i need new compiler, because MVC++ needs somekind runtime thing to work. What compiler or IDE wuld be good for my pourposes (did i write it correct?).