Thursday, June 19, 2008

Virus Generation Tools - The Dark Aspects of Programming

Anyone who has ever had to combat malicious code on their computer wonders about the people who make computer viruses. And while most of us don't want to do it, we can't help but wonder about the process,
about how to create a computer virus. The popularity of this questionable activity is such that software exists to allow people to make email viruses or create computer virus code with little or no programming knowledge. The following are examples of such "kits."
VCS (Virus Construction Set)
VCS, published in Germany in 1990, was the first software to be created exclusively for the purpose of creating viruses. It is available in both English and German versions and is responsible for approximately fifteen virus variants.
GenVirus
Originally marketed by a Frenchman as an anti-virus evaluation tool, a cracked version by the virus authoring group NuKE appeared in 1993. Approximately ten viruses produced by GenVirus are known to exist.
VCL (Virus Creation Library)
VCL is one of the better known virus creation tools. It generates source assembler files, OBJ modules, and infected master files. Through a menu selection process a wide variety of options can be incorporated to create viruses that append their code to files, overwrite them, or use companion technology.
PS-MPC (Phalcon-Skism Mass-Produced Code Generator)
Created by the American virus authoring group, Phalcon-Skism, in particular the member Dark Angel, PS-MPC has no user interface but rather operates through an ASCII configuration file. It can create memory-resident viruses to affect both COM and EXE files and provides a versatile encryption layer. PS-MPC is responsible for the creation of hundreds of viruses.
NGVC (Next Generation Virus Construktion Kit)
This kit, the work of SnakeByte, first appeared in the Matrix N3 zine. It infects Win32 PE-Executable files. All viruses created by the package are different in structure and opcode making it impossible to catch all variants with one scan string.
VBSWG Kit
The VBSWG Kit was the first advanced VBS work creation package developed by [K]alamar in Argentina. It was not a highly successful program. The viruses and worms created with it did not work. The kit featured a standard Windows user interface.
NRLG (NuKE's Randomic Life Generator)
Authored by Azrael is a virus creation tool originated in Argentina. To make computer viruses it uses a simple and friendly interface and has been responsible for producing hundreds of viruses, all detectable by modern anti-virus software scanners.

No comments:

Send free SMS....Just register for FREE