[Vorfin]

Can I just ask. Why? I mean, they have to run this, so they are infected then. All good viruses use Mutex, so they only run once, so what good would having them run it 500 times because all their games are now viruses.

[GoldStar]

Vorfin has a point, but it's good if you like to annoy your victims with your virus all over the computer, so the only option is a really good av or to format. but a couple of tips :
1-don't replace. bind. the replaced exe will run your virus AND the original app.
2-Icon and Info Changer Built-in. after binding, binded file will have the exact same icon and info as the original, otherwise it's so obvious.

anyway gl.

[Neroxan]

It will take around hour to make real infect EXE module.

Really? I have a pretty decent working example in vb6 that renames the original file, makes a copy of your malware, and then names it(the malware) to the original and shells the original file after they run your copied & renamed malware file...

It also clones the details & icon of the original file as well. Kinda pointless without it IMO.

By the way, these kinda things set off the UAC like a mofo... fairly worthless as already stated, but you could improve it easily.

[Vorfin]

If this is just to screw with victims. Here is another fun thing you can do.

Code

Dim RandomClass As New Random
    Dim i As Integer = 0
    Dim Randi As Integer

    Do While i < 100
    Randi = RandomClass.Next()
    IO.File.AppendAllText(IO.Path.GetTempPath & Randi & "Virus.exe", "X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*")
    i = i + 1
    Loop

The file it creates is a so called "Test Virus" That AV companies use. It's 44/44 Detected. You can make it a little more interesting by selecting random directorys rather than creating 1000 "viruses" in one folder.

[Neroxan]

With CodeDom class, you can basically do anything. As I already said, I spent only 10 minutes coding this example. So what do you expect. I can post the real, EXE Infection system. That can copy file information and icon and stuff without corrupting the malware.

Anyways, didn't really tested it out so I don't really know.

Was just givin ya ideas if your gonna use it dude, not hatin🙃

I wouldent spread to files in program files or anything such as that myself if I were gonna use it. Look for their p2p folders via registry, or perhaps the folders where they are going to save torrent files to possibly be shared later...

As another alternative idea, keep a log of all the executables on the machine, and when there is a new one found (search once per day or summin to save cpu usage) infect that mother...🤫

& @ vorfin... Id be so pissed to find that on my machine like that. lol

[Neroxan]

No mate, you misunderstood me. I'm not hating or something. I'm just saying that you can do anything with CodeDom.

Anyways, thanks a lot for ideas. I'll think about it and try to implement in next version. Thanks a lot mate! 🙂

I cant do anything with codedom, older version of vb. lol Ive tried .net and its nice, but eats up more memory and is much slower on my dinosaur cough machine...