Packet Storm - Information Security News, Files, Tools, Exploits, Advisories and Whitepapers http://packetstormsecurity.org/ en-us Mon, 28 May 2012 13:39:44 GMT 144400 http://packetstormsecurity.org/ http://www.google-analytics.com/__utm.gif?utmwv=1.3&utmn=1496846397&utmcs=ISO-8859-1&utmsr=31337x31337&utmsc=32-bit&utmul=en-us&utmje=0&utmfl=-&utmcn=1&utmdt=Files%u2248%20Packet%20Storm&utmhn=packetstormsecurity.org&utmr=-&utmp=%2Fviral-db%2F&utmac=UA-18885198-1&utmcc=__utma%3D32867617.1496846397.1338212384.1338212384.1338212384.1%3B%2B__utmz%3D32867617.1338212384.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none) http://packetstormsecurity.org/files/57029/dis2.c http://packetstormsecurity.org/files/57029/dis2.c http://packetstormsecurity.org/files/57029/dis2.c.html Thu, 07 Jun 2007 01:00:00 GMT Gaara virus disinfector type 2 for the TI-89. http://packetstormsecurity.org/files/57028/dis1.c http://packetstormsecurity.org/files/57028/dis1.c http://packetstormsecurity.org/files/57028/dis1.c.html Thu, 07 Jun 2007 00:59:28 GMT Gaara virus disinfector type 1 for the TI-89. http://packetstormsecurity.org/files/56890/ti89_gaara.asm.txt http://packetstormsecurity.org/files/56890/ti89_gaara.asm.txt http://packetstormsecurity.org/files/56890/ti89_gaara.asm.txt.html Tue, 22 May 2007 01:54:45 GMT Gaara is world's first resident entry-point-obscuring virus for ti89 Titanium calculators. Written fully in Motorola 68K assembly. For educational purposes only. http://packetstormsecurity.org/files/35048/infect.S http://packetstormsecurity.org/files/35048/infect.S http://packetstormsecurity.org/files/35048/infect.S.html Thu, 18 Nov 2004 04:43:03 GMT ELF binary infector written in assembly. Infects all binaries in /bin and opens a backdoor on port 30464. Shellcode can be added at the end. http://packetstormsecurity.org/files/34900/File-Scan-1.36.tar.gz http://packetstormsecurity.org/files/34900/File-Scan-1.36.tar.gz http://packetstormsecurity.org/files/34900/File-Scan-1.36.tar.gz.html Mon, 01 Nov 2004 03:35:22 GMT File::Scan allows users to make multiplatform virus scanners which can detect Windows/DOS/Macintosh viruses. It includes a virus scanner and signature database. http://packetstormsecurity.org/files/34385/UPolyXv0.3.rar http://packetstormsecurity.org/files/34385/UPolyXv0.3.rar http://packetstormsecurity.org/files/34385/UPolyXv0.3.rar.html Fri, 17 Sep 2004 06:49:04 GMT UPolyX version 0.3 is a simple polymorphic open-source UPX scrambler. Comes with VC6 source code. http://packetstormsecurity.org/files/30913/nowar.tgz http://packetstormsecurity.org/files/30913/nowar.tgz http://packetstormsecurity.org/files/30913/nowar.tgz.html Mon, 17 Mar 2003 05:58:38 GMT Virus disinfection utility to be used against the Win32.HLLP.Sharp virus. Windows executable and source code included. http://packetstormsecurity.org/files/24539/crew.tgz http://packetstormsecurity.org/files/24539/crew.tgz http://packetstormsecurity.org/files/24539/crew.tgz.html Wed, 28 Mar 2001 19:53:26 GMT Crew.tgz is the executable package for the lion worm. Includes 1i0n.sh and helper binaries. http://packetstormsecurity.org/files/24430/PolyPedoWorm.zip http://packetstormsecurity.org/files/24430/PolyPedoWorm.zip http://packetstormsecurity.org/files/24430/PolyPedoWorm.zip.html Fri, 09 Mar 2001 19:41:42 GMT PolyPedoWorm is an example of a way to create a polymorphic, Microsoft Encoded Worm. Features include Polymorphism, Varying file size, and renaming of the variants. http://packetstormsecurity.org/files/24380/AnnaKlean.cpp http://packetstormsecurity.org/files/24380/AnnaKlean.cpp http://packetstormsecurity.org/files/24380/AnnaKlean.cpp.html Wed, 28 Feb 2001 02:06:30 GMT AnnaKlean is a Console Application To Wipe Out Anna Kournikova Worm From Registry. http://packetstormsecurity.org/files/24379/AnnaKournikova-source.txt http://packetstormsecurity.org/files/24379/AnnaKournikova-source.txt http://packetstormsecurity.org/files/24379/AnnaKournikova-source.txt.html Wed, 28 Feb 2001 02:03:38 GMT Unencrypted source code for the AnnaKournikova email worm, which is written in vbs. http://packetstormsecurity.org/files/24299/AnnaKournikova.jpg.vbs.txt http://packetstormsecurity.org/files/24299/AnnaKournikova.jpg.vbs.txt http://packetstormsecurity.org/files/24299/AnnaKournikova.jpg.vbs.txt.html Wed, 14 Feb 2001 07:25:39 GMT AnnaKournikova.jpg.vbs email virus source code. Warning - Do not rename. http://packetstormsecurity.org/files/23049/Membrain.zip http://packetstormsecurity.org/files/23049/Membrain.zip http://packetstormsecurity.org/files/23049/Membrain.zip.html Tue, 12 Sep 2000 18:02:32 GMT Membrain.zip is a functional overwriting virus written in Quickbasic 4.5. Full source included. http://packetstormsecurity.org/files/17785/love-letter-source.txt http://packetstormsecurity.org/files/17785/love-letter-source.txt http://packetstormsecurity.org/files/17785/love-letter-source.txt.html Tue, 09 May 2000 21:00:47 GMT Possible source to the Love Letter virus. Originally submitted to Packet Storm as Win32DLL.txt. Submitted by Ingenius N.N. who warns "Do not rename Win32DLL.txt with .vbs extention". http://packetstormsecurity.org/files/17780/FIX_TO_LOVE.zip http://packetstormsecurity.org/files/17780/FIX_TO_LOVE.zip http://packetstormsecurity.org/files/17780/FIX_TO_LOVE.zip.html Fri, 05 May 2000 19:23:45 GMT Divorce the Love Letter virus. Cleans the rubbish out that the Virus caused. Not elegant but does the job! Read then run the Run_Fix.bat. Use at your own risk. http://packetstormsecurity.org/files/14558/vengine.zip http://packetstormsecurity.org/files/14558/vengine.zip http://packetstormsecurity.org/files/14558/vengine.zip.html Tue, 17 Aug 1999 00:14:36 GMT vengine.zip (engine + virus source code) is a polymorphizer that can be used to polymorphize any MS-Word macro virus. This file includes Melissa and Polyssa scripts, and instructions simple enough for idiots who desire to spread viruses maliciously. http://packetstormsecurity.org/files/14559/virus.software.info.txt http://packetstormsecurity.org/files/14559/virus.software.info.txt http://packetstormsecurity.org/files/14559/virus.software.info.txt.html Tue, 17 Aug 1999 00:14:36 GMT Excellent Mini-FAQ entitled "antivirus software for Linux". http://packetstormsecurity.org/files/14552/vdatw180.zip http://packetstormsecurity.org/files/14552/vdatw180.zip http://packetstormsecurity.org/files/14552/vdatw180.zip.html Tue, 17 Aug 1999 00:14:35 GMT VDAT, the virus scene database, version 1.80 is THE resource for anything and everything related to the virus scene. Authors, Groups, Interviews, Magazines, Creators, Engines & Tools, Tutorials, Essays & Papers, Legal Issues, Anti-Virus, Virus Glossary, Editorials, and much, much more. At over 13 MB in uncompressed HTML format, there is simply too much to list here. Check out the VDAT web site for a detailed list of new additions in this release. Make sure you check out the interview with Stealthf0rk, Tally's Virus Link Reference, the Wild list March 1999, all of the new zines, and the excellent tutorials. 6.8 MB. http://packetstormsecurity.org/files/14557/vengine.txt http://packetstormsecurity.org/files/14557/vengine.txt http://packetstormsecurity.org/files/14557/vengine.txt.html Tue, 17 Aug 1999 00:14:35 GMT vengine.txt (just the engine) is a polymorphizer that can be used to polymorphize any MS-Word macro virus. http://packetstormsecurity.org/files/14549/califax.tar.gz http://packetstormsecurity.org/files/14549/califax.tar.gz http://packetstormsecurity.org/files/14549/califax.tar.gz.html Tue, 17 Aug 1999 00:14:31 GMT MS-DOS/Linux source-code demonstration virii by SVAT. califax replaces the stdio.h file in the /usr/local/include directory and gets compiled into every file compiled with gcc. http://packetstormsecurity.org/files/14554/module.c http://packetstormsecurity.org/files/14554/module.c http://packetstormsecurity.org/files/14554/module.c.html Tue, 17 Aug 1999 00:14:31 GMT Linux kernel module infecting virus source code. http://packetstormsecurity.org/files/14550/vdatw160.zip http://packetstormsecurity.org/files/14550/vdatw160.zip http://packetstormsecurity.org/files/14550/vdatw160.zip.html Tue, 17 Aug 1999 00:14:31 GMT VDAT v1.6 - THE virus scene database. 5.93MB. http://packetstormsecurity.org/files/14548/VLP_I.c http://packetstormsecurity.org/files/14548/VLP_I.c http://packetstormsecurity.org/files/14548/VLP_I.c.html Tue, 17 Aug 1999 00:14:31 GMT VLP I is a Linux source-code demonstration virus that infects ELF-execs. http://packetstormsecurity.org/files/14560/vsrc.tar.gz http://packetstormsecurity.org/files/14560/vsrc.tar.gz http://packetstormsecurity.org/files/14560/vsrc.tar.gz.html Tue, 17 Aug 1999 00:14:31 GMT UNIX/Linux source-code demonstration virii by the NetW0rker and Stealthf0rk of the SVAT-group. Stealth's web site http://packetstormsecurity.org/files/14553/LinuxVirus.tgz http://packetstormsecurity.org/files/14553/LinuxVirus.tgz http://packetstormsecurity.org/files/14553/LinuxVirus.tgz.html Tue, 17 Aug 1999 00:14:28 GMT Virus that infects ELF-files non-overwriting.