1-1 - Introduction to 29A#2
1-2 - News since 29A#1
1-3 - 29A Distro Sites
1-4 - Our Greetings
1-5 - Legal Stuff
1-6 - Interview with Qark
1-7 - Words from Jacky Qwerty
1-8 - What is happening in IR/G?
1-9 - Envy makes dorks recuscitate
1-A - Article separator
2-1 - Playing "Hide and Seek"
2-2 - TBSCAN.SIG infection
2-3 - Macro virus trickz
2-4 - WM.CAP virus description
2-5 - Vecna' Random Boot Loader
2-6 - The Necromantic Mutation Engine
2-7 - HMA residency
2-8 - Compression engines
2-9 - Analysis on the decryptor generation
2-A - Strategic Alliances? Bring 'em on, we love 'em!
2-B - Stupid descriptions
3-1 - PE infection under Win32
3-2 - Virus oriented VxD writing tutorial
3-3 - 29A INC files
3-4 - PE Write Section
3-5 - GetProcAddress-alike utility
3-6 - Win32.Cabanas.2999
3-7 - Win32.Jacky.1440
3-8 - Lizard
3-9 - Win95.Z0MBiE v.1.01
3-A - Gollum virus
3-B - You_Got_It virus
4-1 - PM.Wanderer
4-2 - Dementia.4207
4-3 - SSR.19834
4-4 - Z0MBiE.1922
4-5 - SpiceGirl family
4-6 - NUL-Space virus
4-7 - Paraguay 3.0 virus
4-8 - HMA Boot virus
4-9 - Padanian Warrior 1 virus
4-A - Ply family
4-B - ELVIRA virus
5-1 - Esperanto virus
5-2 - Tupac Amaru virus
5-3 - SuckSexee Automated Intruder
5-4 - Zohra virus
5-5 - Anti-ETA virus
5-6 - WordMacro.CAP
5-7 - Orgasmatron virus
5-8 - Android virus
5-9 - DogPaw virus
5-A - Carriers virus
5-B - RedCode virus
5-C - Baby Bug virus
5-D - Prion virus
5-E - Insert 2.0 virus
5-F - Animo virus
Files included:
PEWRSEC COM 06/06/66 06:06 8826
GETPROC EXE 06/06/66 06:06 36864
IAVR EXE 06/06/66 06:06 4944
29A_INCS ZIP 06/06/66 06:06 11378
ANDROID ZIP 06/06/66 06:06 1118
ANIMO ZIP 06/06/66 06:06 597
ANTI-ETA ZIP 06/06/66 06:06 23831
BABYBUG ZIP 06/06/66 06:06 593
CABANAS ZIP 06/06/66 06:06 3401
CAP ZIP 06/06/66 06:06 4172
CARRIERS ZIP 06/06/66 06:06 1458
DEMENTIA ZIP 06/06/66 06:06 3339
DOGPAW ZIP 06/06/66 06:06 985
ELVIRA ZIP 06/06/66 06:06 3201
ESPERANT ZIP 06/06/66 06:06 38916
GOLLUM ZIP 06/06/66 06:06 21837
HMABOOT ZIP 06/06/66 06:06 661
INSERT20 ZIP 06/06/66 06:06 481
JACKY ZIP 06/06/66 06:06 1944
LIZARD ZIP 06/06/66 06:06 2594
NULSPACE ZIP 06/06/66 06:06 842
ORGASMAT ZIP 06/06/66 06:06 601
PARAG-30 ZIP 06/06/66 06:06 2467
PDNWARR1 ZIP 06/06/66 06:06 631
PLY5175 ZIP 06/06/66 06:06 1411
PRION ZIP 06/06/66 06:06 464
REDCODE ZIP 06/06/66 06:06 1430
SPIC2125 ZIP 06/06/66 06:06 1548
SSR19834 ZIP 06/06/66 06:06 17920
SUCKSEXE ZIP 06/06/66 06:06 11204
TUPAC ZIP 06/06/66 06:06 1228
WANDERER ZIP 06/06/66 06:06 3202
YOUGOTIT ZIP 06/06/66 06:06 650
Z0MBIE ZIP 06/06/66 06:06 4998
ZOHRA ZIP 06/06/66 06:06 3122
No 3:
1-1 - Introduction
1-2 - News
1-3 - Membership
1-4 - Distribution
1-5 - Our greetings
1-6 - Policies and goals
1-7 - Secret area
1-8 - About the viewer
1-9 - Mister Sandman's resignation
1-A - Rajaat's resignation
2-1 - Archive32
2-2 - Billy Belcebú virus writing guide
2-3 - Win32 PE infection tutorial
2-4 - Pass to Ring-0 with C/C++
2-5 - Hooking VxDCall
2-6 - How to get the Windoze directory
2-7 - Cross infection part I
2-8 - Cross infection part II
2-9 - Heuristics for antivirus/archiving
2-A - Polymorphism
2-B - Preserving Novell Netware compatibility
2-C - TbScan32 decryptor
2-D - Nick Fitzgerald
2-E - Antivirus pathetism
2-F - JQwerty's compression/encryption engine
2-G - TbMem exploit
3-1 - $UPD v2.2
3-2 - Error Correction Code (ECC)
3-3 - Adinf/AVP Inspector CRC
3-4 - AVP Add-on
3-5 - AVPX v1.01
3-6 - AZCME v0.04
3-7 - AZCME32 v0.04
3-8 - STRC v1.0
3-9 - JQCODING v1.0
3-A - Tiny engines
3-B - APME v1.04b
3-C - RDAE v1.0
4-1 - Win.Bonk
4-2 - Next Step
4-3 - Win95.K32
4-4 - Win95.Z0mbie-II
4-5 - Win95.Marburg
4-6 - Win95.HPS
4-7 - Win95.Bonk32
4-8 - Win95.Inca
4-9 - Win95.Sexy
4-A - Win95.Yabram
4-B - Win32.Apparition
4-C - Win32.Borges
4-D - Win32.REDemption
4-E - VxD infector
5-1 - Califax
5-2 - RISC_OS.Simple
5-3 - Nutcracker.7458
5-4 - Kuarahy v1.1
5-5 - Idea.6126
5-6 - Dark Thoughts v1.20
5-7 - La Diosa
5-8 - Widowmaker v1.02
5-9 - Soulfly
5-A - Candyman v1.01
5-B - Messev
5-C - Gwar v1.10
5-D - Squatter v1.2
5-E - Claudia.8772
5-F - Pusher.374
6-1 - 007JB v1.01.2b
6-2 - FIRE v1.00b
6-3 - M1 [i286]
6-4 - PGPMorph family
6-5 - Zombie.667
6-6 - Fick Nitzgerald
6-7 - Weird Al
6-8 - DSA2
6-9 - Shiver
6-A - Strange Days
6-B - Numbless
6-C - Ancev
6-D - Nutmeg2
6-E - Ithaqua
6-F - Tiny viruses
6-G - Ida.1490
No 4:
Editorial:
101 - Introduction
102 - News
103 - Contributors
104 - Membership
105 - Distribution
106 - Our greetings
107 - Policies and goals
108 - Secret area
109 - About the viewer
110 - DDT: another group dies with its 1st issue
111 - Interview of Billy Belcebu/iKx
112 - Interview of StarZer0/iKx
113 - Words from Benny
114 - Words from Bumblebee
115 - Words from Lord Julus
116 - Words from Prizzy
Articles:
201 - Defeating The Perfect Emulator
202 - Billy Belcebu Virus Writing Guide 1.00 for Win32
203 - MS Project Infectors
204 - Implementing TCPIP 'addons' in your viral stuff
205 - Linux virus writing tutorial
206 - New instructions tutorial
207 - Polymorphism and grammars
208 - Remote infection of XML documents
209 - WinZip DOS Attack
210 - Portable EXE
211 - EPO techniques under Win32
212 - Fuckin' AVs in Win32 enviroment
213 - How to k!ll some AV monitors
214 - InterProcess Communication
215 - Optimization of 32bit code
216 - Theme: Metamorphism
217 - Threads and fibers under Win32
218 - Threads in Ring-0 under Win95/98
219 - M.V.I. (Mudular Virus Interface)
220 - Make your own CheckSumMappedFile
221 - Micro$oft Windows Sockets Guide
222 - WinHelp virus programmers reference
223 - EPO: Entry-Point Obscuring
224 - EXPLORER *in-memory* infection
225 - Win32 Viral Networking Overwiew
226 - Win2K infection
227 - Retrieving API's addresses
228 - Compression (Part I)
229 - Infection Microsoft CAB archive
230 - Hyper Infection
231 - How VirusBuster sorts his virii collection
232 - The number of detected virii war
Utilities:
301 - BeGemot Virus Communication Console [BGVCC]
302 - Benny's Compression Engine for Win32 [BCE32]
303 - Benny's Polymorphic Engine for Win32 [BPE32]
304 - Phantasie Mutation Engine for Windows v 0.00 [PME/W]
305 - Lord Julus' Huffman Compression Engine v 1.0 [LJHCE]
306 - Virsort 2000 Special Edition for 29A
I-Worms:
401 - I-Worm.ZippedFiles
402 - Teddybear
403 - IIS Worm
404 - I-Worm.Happy
405 - I-Worm.Anaphylaxis
406 - I-Worm.Gift of Fury
407 - I-Worm.Plage 2000
408 - I-Worm.RunDllw32
409 - I-Worm.Cholera
Win32 Viruses:
501 - Win32.Kenston
502 - Win32.Ruff
503 - Win32.Oporto
504 - Win32.Harrier
505 - Win32.Bolzano
506 - Win32.FunLove
507 - Win32.Idyll
508 - Win32.Maya
509 - Win32.Kriz
510 - Win32.Weird
511 - Win32.Benny
512 - Win32.Eva
513 - Win32.Leviathan
514 - Win32.Vulcano
515 - Win32.Anvil of Crom
516 - Win32.SPIT v 2.1
517 - Win32.Bogus
518 - Win32.Emotion
519 - Win32.Magic
520 - Win32.CTX Phage
521 - Win32.Parvo v 1.0
522 - Win32.Parvo v 2.0 (spanish version)
523 - Win32.Champagne
524 - Win32.Thunderpick v 2.0
525 - Win32.Crypto
526 - Heathen
527 - Win32.Resurrection
528 - Win32.Nazka
Win9X Viruses:
601 - Win95.Nemesi
602 - Win95.Invirsible
603 - Win95.Powerful 32 v 1.1
604 - Win95.Zerg v 0.1b
605 - Win95.Ylang
606 - Win95.Arianne1
607 - Win95.Unreal
608 - Win95.SK
609 - Win95.Babylonia
610 - Win95.BeGemot
611 - Win95.Yobe
612 - Win95.Luna
613 - Win95.MiniR3
614 - Win95.Prizzy
615 - Win95.Sexy2000
616 - Win98.Priest
617 - Win98.Milennium
618 - Win2000.Installer
DOS Viruses:
701 - Powerful v 5.2
702 - Powerful v 6.1
703 - Deadman family
704 - MIA
705 - Merlin
706 - Zyrtec
707 - Phardera
708 - Serg Enigma family
709 - Total Chaos v 1.0
710 - Miss Lexotan 8
711 - Kreg
712 - TMC family
RISC OS and UNIX Viruses:
801 - BRB2
802 - Creed
803 - Manpage
804 - Glaurung 2k
805 - Diesel
806 - TLB
No 1:
01 - Introduction
02 - Your first lesson
03 - First lesson quiz
04 - Challenge
05 - Virus Creation Labs
06 - On the lighter side
07 - Interview with SPo0ky!
08 - Thoughts from AmadEUS
09 - The Conscience of a Hacker
10 - Need further help?
11 - Windows Grab-Bag
12 - In the News
13 - The halftime ass-chewing
14 - Greetings & Gripes
15 - Advice for the Newbie
16 - Final Notes
Files included:
TASM EXE 10/29/90 02:01 105651
TLINK EXE 10/29/90 02:01 53510
TOAD ASM 10/19/97 23:00 1161
FLY COM 09/12/97 10:18 6
FLY1 COM 09/12/97 10:18 6
FLY2 COM 09/12/97 10:18 6
FLY3 COM 09/12/97 10:18 6
TOAD COM 10/19/97 23:01 180
No 2:
01 - Introduction
02 - Your second lesson
03 - Second lesson quiz
04 - Challenge #2
05 - Encryption
06 - On the lighter side.
07 - Interview with Cicatrix!
08 - Macintosh Virus Tutorial
09 - Macro Virus Tutorial
10 - Useful Hacking Links
11 - In the News
12 - Greetings & Gripes
13 - Final Notes
Files included:
TASM EXE 10/29/90 02:01 105651
TLINK EXE 10/29/90 02:01 53510
TOAD2 ASM 12/08/97 10:26 2223
FLY COM 09/12/97 10:18 6
FLY1 COM 09/12/97 10:18 6
FLY2 COM 09/12/97 10:18 6
FLY3 COM 09/12/97 10:18 6
TOAD2 COM 12/06/97 21:38 163
No 3:
0101 - Introduction
0102 - Credits
0201 - Lesson 3 The Memory Resident Virus Primer By Horny Toad
0202 - Quiz #3 By Horny Toad
0203 - Challenge 3 By Horny Toad
0204 - Back To The Basics by SPo0ky
0205 - An effort to help the naked virus. Encryption: Part 2 By: Sea4
0206 - *** AVOIDING DETECTION **** By Arsonic[Codebreakers]
0207 - Virus "Add-Ons" Tutorial by Opic [Codebreakers,1998]
0208 - ***Hacking Unix/Linux systems*** Via Telnet By: Techno Phunk
0301 - Fact virus [Source]
0302 - Zombie.747 Disassembly by Darkman/29A
0303 - EMS.411 Virus Dissassembly by Vecna/29A
0304 - Marked-X : Metal Militia/Immortal Riot
0401 - Interview with RaiD from SLAM by Opic
0402 - ****Heres a hilarious chat log that will give you the bends*****
0501 - "ON THE LIGHTER SIDE" By:DUKE
0502 - In the News brought to you by Horny Toad
0503 - Greetings & Gripes
0504 - Final Notes By Horny Toad
Files included:
CB-MCB exe 03/06/98 17:00 51531
WART COM 03/18/98 09:11 112
Wart asm 03/18/98 09:10 786
EMS411 asm 01/23/98 13:45 7113
MarkedX asm 03/19/98 07:51 4184
Zombie747 asm 01/23/98 13:51 12811
fact asm 01/23/98 13:53 1450
FLY com 09/12/97 10:18 6
FLY1 com 09/12/97 10:18 6
FLY2 com 09/12/97 10:18 6
FLY3 com 09/12/97 10:18 6
TASM EXE 10/29/90 02:01 105651
TLINK EXE 10/29/90 02:01 53510
EMS411 EXE 03/19/98 07:41 929
FACT COM 03/17/98 13:22 55
MARKEDX COM 03/19/98 07:51 355
ZOMBI747 COM 10/06/96 00:01 767
No 4:
INTRODUCTION:
Contents - contents page
001 - Introduction
002 - Credits
ARTICLES SECTION:
101 - Tutorial #4: Guide To EXE Infection
102 - Quiz #4
103 - Challenge #4
104 - What is "Class Object Infection" ?
105 - Reverse Engineering: The Viral Approach.
106 - Intro to e-mail and usenet anonymity
107 - Identifying Windows Executables
108 - A Lesson In HEXadecimal
109 - Why Access Macro Viruses Will Never Become A Problem.
110 - Introductory Primer To Polymorphism in Theory and Practice
111 - The Only VBA Tutorial You Will Ever Need
112 - Artificial Intelligence and Viruses
113 - Ravage (aka Dodgy) background by muRPhy
114 - Macro Virus Tutorial: Simple Stealth
115 - A Further Analysis of the MDEF (E) Virus Pertaining to its Operation under System 8.
116 - Mos virus generator background
117 - Newbies Corner: You must touch it or you won't get good at it
118 - AVP Patching
119 - Brew folder info
SOURCE:
(codebreakers source)
201 - 666 Malignant v1.1
202 - Basho
203 - W97/Class.Poppy.B
204 - Odessa.B
205 - WM/Demenz
206 - DEScendant
207 - Emotnaf v1.1
208 - Win32.Stupid
209 - Prospero
210 - YeLeT v0.9
(other source)
301 - Win95.CIH v1.2
302 - Win95.CIH v1.3
303 - Win95.CIH v1.4
304 - Sparse.3840 Disassembly
305 - GPB (poly .bat virus)
306 - Module (linux virus)
307 - VLP I (unix virus)
308 - Zorm-B004
309 - Dodgy (aka RAVAGE BSV)
310 - Dementia.4218 Disassembly
311 - MOS2c virus generator
312 - MOS7c virus generator
313 - MOS7d virus generator
314 - MOS.cgi (online generator cgi)
315 - SOK.sh (also used in online generator)
316 - Win95.Mad.2736 disassembly
317 - vbVirus (VB5 Parasitic!)
(CodeBreakers utility source codes)
401 - RC4 encryption program source (pascal)
402 - ExeIdent v1.0 source
403 - Vic's Simple Macro Poly (VSMP)
404 - VicodinES VBA String Converter
INTERVIEWS:
501 - Interview with StealthFork (SVAT)
MISC:
601 - In the News
602 - greets
603 - Conclusion
No 5:
INTRODUCTION:
cb5001.txt = Introduction
cb5002.txt = File Index
cb5003.txt = Credits
ARTICLES:
cb5101.txt = Windows Compatible BS/MBR and Multipartite Viruses
cb5102.txt = Maintaining Your Anonymity on the Internet
cb5103.txt = Win32 Programming in Assembly
cb5104.txt = Analysis Of Variant J Of The 666 (a.k.a. SEVENDUST) Mac Virus
cb5105.txt = BeanHive: The real story
cb5106.txt = Why use encryption in your macro virus
cb5107.txt = In the News
cb5108.txt = The Assembly Language Tutorial
cb5109.txt = Why Viruses are necessary
cb5110.txt = A Project of Vision
cb5111.txt = WinNT.RemoteExplorer Binary Aquisition
cb5112.txt = Spunk Article
INTERVIEWS:
cb5201.txt = Interview with Weird Genius
cb5202.txt = Interview with Foxz[NMVT]
cb5203.txt = Interview with Rhape [UC]
cb5204.txt = Interview with Evil-E
UTILITIES:
cb5301.txt = Filenc32 Utility
cb5302.txt = MBR Save Utility
cb5303.txt = MBR Restore Utility
cb5304.txt = CodeBreakers Windoze Startup-Shutdown Screen
cb5305.txt = Huffman Compression/Decompression in 32bit ASM
VIRUSES:
cb5401.txt = O97M/Jerk.A
cb5402.txt = W97M/Ethan.A
cb5403.txt = W97M/Caligula.A
cb5404.txt = Baphometh2
cb5405.txt = Baphometh21
cb5406.txt = W97M/Koyaanisqatsi.A
cb5407.txt = XF.BlackFriday
cb5408.txt = Spunk
cb5409.txt = Mappy
cb5410.txt = Win95.Obsolete v1.00
cb5411.txt = XF.Paix
cb5412.txt = PARITY.BOOT.B disassembly
cb5413.txt = PE-100
cb5414.txt = Messanger Worm
cb5415.txt = Seig.1711
cb5416.txt = VBS.Rabbit.A
cb5417.txt = VBS.Rabbit.B
cb5418.txt = VBS.Rabbit.C
cb5419.txt = Raadioga.1000 v1.0
cb5420.txt = COMVIR
cb5421.txt = Win32.Savior v1.00
cb5422.txt = LANDING.CAMEL.1.401 Virus source
cb5423.txt = LANDING.CAMEL.2.366 Virus source
cb5424.txt = LANDING.CAMEL.3.443 Virus source
cb5425.txt = LANDING.CAMEL.4.513 Virus source
cb5426.txt = LANDING.CAMEL.5.555 Virus source
cb5427.txt = LANDING.CAMEL.6.500 Virus source
cb5428.txt = Tere.370 v1.0
cb5429.txt = XeXyL
CONCLUSION:
cb5501.txt = CodeBreaker Greets
cb5502.txt = Conclusion
ABOUT:
cb5601.txt = Current CodeBreakers Member List (May '99)
No 1:
fc001 Contents
fc002 Spyda's Editorial
fc003 Rhape79's Editorial
fc004 Member List
fc005 Greets
fc006 Credits
fc011 The Complete Re-write Engine
fc012 Permission To Infect, Sir?
fc013 Why I Write Viruses (And How Not To Stop Me)
fc014 DX100h VIRUS WRITING GUIDE issue # 1
fc015 DX100h VIRUS WRITING GUIDE issue # 2
fc016 DX100h VIRUS WRITING GUIDE issue # 3
fc017 Are Html viruses a menace for users?
fc018 An Introduction to Encryption, Part I
fc019 An Introduction to Encryption, Part II
fc020 Argument For A 'Good' Virus
fc021 CIH 1.5
fc022 Heretic
fc023 Win32.Krized v1.01
fc024 Win32.3x3Eyes
fc025 VanisH virus with [BUME]
fc026 Buffy The Vampire Slayer
fc027 IRC worm
fc028 1st0ne v1.0
fc029 HTML.Lame
fc030 WM97.m00d
fc031 seNse.c (1.1)
fc032 Fast inFected
fc033 Missionary
fc034 Holy Communion
fc035 JULIET.MRC II (B) mIRC Worm Documentation
fc036 The R/A Rabbit Documentation
fc037 Disassembly of Dream.2000
fc038 The hype surounding Win32.Krized
fc040 1nternal
fc041 Evul
fc042 JS.Bach
fc043 Knowdeth
fc044 SerialKiller
fc045 SPo0ky
fc046 VirusBuster
fc047 Foxz Retirement
Files included: several binaries/sources
No 1:
000 - About me, HEX-FILES and everything in this file
001 - An invitation
002 - CARO names for PhVx
003 - PhVx Register
004 - Disassembly of Microbe
005 - Microbe Virus Dropper (ASM and DEBUG script)
006 - Cara.Standard.1024 (ASM and DEBUG script)
007 - Cara.Kara.739 (ASM and DEBUG script)
008 - Duwende (ASM)
009 - Creating variants in a snap
Duwende.409.A (DEBUG script)
Duwende.409.B (DEBUG script)
Duwende.409.C (DEBUG script)
Duwende.409.D (DEBUG script)
Duwende.409.E (DEBUG script)
Duwende.410.A (DEBUG script)
Duwende.410.B (DEBUG script)
010 - Philippines.3133 (DEBUG script)
Files included: none
No 2:
000 - This is the page you have your eyes on!
001 - PhVx Register
002 - Preacher 1.1
003 - On Possessed! and Vindicate 1.01 (AV)
004 - Possessed.2167.B
005 - Possessed.2367
006 - Possessed.2438
007 - Possessed.2443
008 - Possessed.2446.A
009 - Possessed.2446.B
010 - Oggo.3813
011 - Matthew.3044
012 - Disassembly of Quaint.A
013 - Quaint.A Dropper
014 - Philippines 1
015 - Philippines 1A and Philippines 1B
016 - Philippines 3: Kakabakaba
017 - Invitation to all Filipino virus lovers
018 - Compiling instructions
Files included: none
No 3:
000 - Front Page!
001 - PhVx Register
002 - 21/4B01 Stealthing by YeZ
003 - StowAway by Mikee
004 - Quaint.B
005 - Sampo
006 - Rebolusyon.2000.A
007 - June12.Standard.2660
008 - June12.Standard.2695
009 - June12.AntiSPCPD.2660
010 - June12.Sentenaryo.1898
011 - Duwende 2
012 - Kontragapi
013 - Invitation to all Filipino virus lovers
014 - Compiling instructions
Files included: none
No 4:
000 - Indeks!
001 - The Virus Writer's Resume
002 - Virus Verse
003 - Matthew.2667
004 - Jerusalem.AllSystem9.1818
005 - Jerusalem.Bad_Illusion.1238.A
006 - Danao.2869
007 - Wpc_Bats and its screen payload
008 - Wpc_Bats.Ala-Eh.2279
009 - Wpc_Bats.Ala-Eh.3072
010 - Wpc_Bats.Ala-Eh.3161
011 - Wpc_Bats.Lipa.2793
012 - Wpc_Bats.Lipa.3207
013 - Margaret, a word macro
014 - Mary, a word macro
015 - Mykah, a word macro
016 - Philippine virus related mailing lists
017 - Errata: June12
018 - Errata: Cara.Standard.1024
019 - PhVx Register
020 - Invitation to all Filipino virus lovers
Files included: none
No 1:
InterViews:
int1.txt = Duke (by AsmHead)
int2.txt = lord_arz (by AsmHead)
int3.txt = Gigabyte (by The BugHunter)
int4.txt = wrm (by The BugHunter) (note: not available in
the Windows viewer)
Tutorials:
tut1.txt = Easy way to make Batch Infector (by AsmHead)
tut2.txt = The Simple Way to learn Virus writing 1 (by The BugHunter)
tut3.txt = The Simple Way to learn Virus writing 2 (by The BugHunter)
tut4.txt = The Simple Way to learn Virus writing 3 (by The BugHunter)
tut5.txt = IRC WORMS- Theorie and code (by SnakeByte)
tut6.txt = How to use ASM-functions with Q-BASIC 4.5 (by The BugHunter)
tut7.txt = IP Sniffing (by The BugHunter)
tut8.txt = The Simple Way to learn Virus writing 3 (by The BugHunter)
Source:
cw10.asm = Cyber Warrior 1.0 (by The BugHunter)
cw11.asm = Cyber Warrior 1.1 (by The BugHunter)
cw120.asm = Cyber Warrior 1.2 (by The BugHunter)
cw122.asm = Cyber Warrior 1.22 (by The BugHunter)
Assays[sic]:
txt1.txt = Worms and Viruses- A little essay (by Snakebyte)
txt2.txt = A tale about Lamers and Lucky(s) ! (by Snakebyte)
About:
greets.txt = Our greets (all members)
leader.txt = why don't we have a leader (by paradizer)
member.txt = how to become a member (by paradizer)
No 1:
Editorial:
INDEX.TXT Yg lagi lu baca neh
SD#1 - 000 Introduction
SD#1 - 001 Greetz
SD#1 - 002 Disclaimer
Artikel <sic>:
SD#1 - 100 Tutorial 1 : Virus Appending
SD#1 - 101 Tutorial 2 : Virus Prepending
SD#1 - 102 Tutorial 3 : Virus Mid
SD#1 - 103 Virus Overwriting
SD#1 - 104 Virus pada HLL
Viruses:
SD#1 - 200 APPENDING
SD#1 - 201 EASTER.195
SD#1 - 202 ISMIDDLE
SD#1 - 203 Overwriting Viruses
SD#1 - 204 Emulator Fooler
SD#1 - 205 Disassembly of Wawah.787 virus
SD#1 - 300 In Da Next Issue
Files included:
APPEND COM 03/11/00 00:00 208
EASTER COM 03/11/00 00:00 195
EFOOL COM 03/11/00 00:00 250
ISMIDDLE COM 03/11/00 00:00 270
OWCOM COM 03/11/00 00:00 46
OWEXE EXE 03/11/00 00:00 630
WAWAH COM 03/11/00 00:00 795
No 1:
Introduction
Greets
Contacts
Articles
General
Playing God
Y2K Coverup
A Bit Of Light Humour
Random Survey
vX Related
Virus Glossary
Guide For The Beginning Virus Coder
Why Are Virus Writers So Damn Clever?
Virus Scene
The Impact Of A Virus
2 Ways To Fuck AVP
Virus Source Codes
VBS.Phybre
VBS.Eon
Hacking Related
FrontPage Extension Vulnerabilities
Scanning Virtual Hosts For CGI Holes
Coding Related
Windows Registry
Post Fundamentals Of C
Anti-Bait Techniques
Optimising ASM Code
Hiding From CTRL-ALT-Del
No 1:
RANT1.001 - A little history and stuff.. or ranting and ravings..
README.TXT - Description of the viruses & utils .. if I happen to have
em
ENCRYPTI.001 - Of Encryption and Mutation includes sample virus FNS 2.0
and 3.x
TOC -Table o Contents..
001 - Screaming Fist II
002 - Chad.750
003 - Methyl's Lauran v1.0 and v.1b
004 - Death Wizard's Dark Radiation
005 - EXEhdr.Headerbug
006 - Dark Slayer's Assasin_II.959
007 - Ambualnce.796.A
008 - StormBringer's CorporateLife.1929
009 - LittleBrother.385
010 - PHX.823
011 - StormBringer's Shifter
012 - Pro-Alife.3423
013 - Zodiac's DataRape v2.3
Files included:
MTE.ZIP v.91b and 1.00b of one of the first encryption engines.
MTE091B ZIP 02/14/95 21:39 10533
MTE100B ZIP 02/14/95 21:40 9196
VDATA14.ZIP Virus dupe checker with database capable output.
VDATA INI 10/15/94 21:01 120
VDATA DOC 04/26/95 14:15 14141
WHATS NEW 04/26/95 14:21 1650
FILE_ID DIZ 04/26/95 21:28 410
SCANNER LOG 10/11/94 21:58 3719
VDATA H 04/26/95 18:16 2999
4VDATA EXE 04/26/95 21:19 101802
4VDATA IDE 04/26/95 21:20 24620
3DATA EXE 04/26/95 21:21 101802
3DATA IDE 04/26/95 21:21 24338
CRC C 10/13/94 16:04 3918
No 2:
FILE_ID.DIZ - What is this good for again ??
README.TXT - A description of what's what
TOC - Table of Contents
001 - 7th Son v4 COM/NON-TSR
002 - Servant COM/NON-TSR
003 - ShyDemon COM/NON-TSR/ENCRYPTED
004 - Malaria COM/TSR
005 - AstraSYS SYS/TSR
006 - CyberTech COM/TSR/ENCRYPTED
007 - KikiNomo COM/EXE/TSR/POLY/
008 - TPVO.Pitch COM/EXE/TSR/ENCRYPTED
009 - 1/13th COM/EXE/TSR/POLY(VICE)
010 - Mirea.1733 COM/EXE/TSR/POLY
011 - Wulf COM/EXE/TSR/POLY
012 - Smegma COM/EXE/TSR/POLY
MTUN-1.ZIP - Methyl's Tunneling Guide Issue #1
MTUN-2.ZIP - Methyl's Tunneling Guide Issue #2
DUMB-2.001 - Of Dumb and Dumber or how stupid are the AV people
Files included:
SHYCLN ZIP 01/09/97 17:22 7701
SHYCLN EXE 12/31/96 15:26 12288
VICE04BU ZIP 02/25/95 19:33 16034
VICE NFO 02/25/95 01:42 8008a
VICE OBJ 02/24/95 21:34 2549a
FILE_ID DIZ 02/25/95 01:48 345a
ONE-13U ZIP 02/24/95 21:31 10588a
ZIPDEV01 ZIP 01/04/97 20:55 6038
ZIPDEV01 TXT 01/04/97 20:55 4127
ZIPDEV01 C 01/04/97 20:53 15456
No 3:
In the Future - A peek into SOK-4 ?
IFTUT.TXT - if there is going to be a SOK-4
Anti-Heuristics - A look at Uruguay #3 and what could be done to make it even
BLACKBOX.TXT - better. A Uruguay anti-heuristical analysis.
Anti-SoftICE - A little something on how to detect if this debugger
ICECREAM.ZIP - is active in memory
Anti-TBAV - A small footnote on beating TBAV/TBClean along with some good
- all around info
ANTITBAV.001 - The Follies of Thunderbyte Anti-Virus
ANTITBAV.002 - TBSCAN.SIG infector
ANTITBAV.003 - Thunderbyte Anti-Virus API's
ANTITBAV.004 - TBClean 6.50 Analysis
ANTITBAV.005 - How to fool TBScan without changing code!
ANTITBAV.006 - Stealthing TBScan using Int25
In the wild - Whats loose and creating kaos in the world :)
ITW9705.TXT - Did anything from SOK-I or SOK-2 make it ??
Tunneling - Guide #3 from Methyl
Generators - Power Without Knowledge
CODEGEN.TXT - A look at 2 new virus generators (UVC & DREG)
Sponsors - A word for all the people who contirbuted
SPONSOR.TXT - Hello's Greeting's and Goodbye's
Included Virus Source Code
Huir - Basic com appender with some nifty anti-heur in it
NIGHTWAK.ASM - COM/NON-TSR
GreenCat.1575.a - A blast from way far back |- The Green Catipillar virus
GC1575A.ASM - COM/EXE/TSR/Payload
Hate v1.0 - This is [Hate v1.0] Virus dug up out of the newsgroups
HATE.ASM - COM/TSR/CRYPT
Solar.63 - Infect's Borland Pascal 7.0x compiled files only
SOLAR63.ASM
ChickenChoker - Chickenchoker Trivial Variant
CHCHOKE.ASM - COM/OVER-WRITING/NON-TSR
AHChickenChoker - Re-Work of ChickenChoker - A Look at Anti-Heuristics
CHC.ASM - COM/OVER-WRITING/NON-TSR -w- anti-heuristics
Spanska.1000 - Spanska Virus from France
NOPASARA.ASM - COM/NON-TSR |- Graphical payload
Spanska.1500 - Spanska's latest
MARSLAND.ASM - EXE/NON-TSR |- Graphical payload
BROWN2 ASM - COM/EXE | Experimental work from Ramthes
CHARLY2 ASM - COM/TSR | made early in his carreer.
MR-X ASM - COM/TSR |
EntWives - How to confuse AV companies|\
ENTWIVES.ASM - COM/NON-TSR | | hehe 2 viruses in one
- COM/NON-TSR |/ this ones old but interesting.
RIP.TerminatorZ - A farewell to TerminatorZ who died of a drug overdose
TZ.ASM - COM/EXE/TSR
Evolution.2770 - Rather dangerous virus
EVOL2001.ZIP - COM/EXE/TSR/POLY/Destructive
Guerilla - WTF did this one come from ?? who's the author ??
GUERILLA.ASM - COM/EXE/TSR/CRYPT
ARCV.Joanna - A blast from the past from ARCV
JO1_11.ASM - COM/TSR/POLY
RCV1 - OS/2 Rexx based virus ..
RCV1.ZIP
Beta - Beta 3.0 Pascal Virus .. yes I said Pascal
BETA.ZIP
Stoned - Traditional Stoned |- A definate golden oldy
NEWZLAND.ASM - TSR/MBR
Quantum Magic - Included in Anti-TBAV articles
ANTITBAV.004 - EXE/TSR
Novosibirsk - Something from Russia | Donated to Living Turmoil Zine #2
NOVABR.TXT - COM/EXE/TSR | Kept here to take up space
LMD-2000 - Lozinsky Must Die! Russia strikes again
LMD-2000.ASM - COM/TSR/POLY
Traka - Traka - Complete with joke that gave this baby it's name
TRKATRKA.ASM - COM/EXE/TSR
Alpha.4000 - A full featrued virus, disassembly done by Retch
ALPHA.ASM - COM/EXE/SYS/TSR |- disinfects on the fly
HarmWare v1.06 - A rather interesting beastie from Russia .. Unscannable
HW_106_.RAR - COM/EXE/TSR/POLY - compresses host file
SMILE - A nifty combination of features .. our 1st multipartite
SMILE.ASM - COM/EXE/TSR/MULTIPARTITE
SterCor v1.5 - Yosha stikes again with this companion.
STERCOR.ASM - COM/EXE/TSR/ANTI-AV -| nifty anti-av routines
Rusty Bug - Release 3 of version 1 written in something unusual.
RUSTBUG.ASI - COM/EXE/WIN95/CRYPT
Weed - Release 1.1 of this virus
WEED.ASI - COM/EXE/WIN95/CRYPT
FuckHarry - Win95 Virus - Fuck Heroin | In Memory of TerminatorZ |
HARRY3.ZIP - EXE/PE/WIN95/TSR | Who died of Heroin Overdose |
- Rev 3
CP Engine - Disassembly of the Compact PolyMorphic Engine and its test
- generator
RET-CPE.ZIP
SOK-Macro - A custom Word Macro Virus -| Done by NightMare Joker of SLAM
WMSOK.ZIP - DOC/STEALTH
Spanska GFX - Graphical Effects for all the Spanksa Viruses ..
- Just the effects folks and nothing else .. enjoy em
Included BONUS files:
Bonus ZIP - Encrypted Bonus package haha
- Weed - all versions (1.0-1.5) | Done by Casio in Asic |
- Rusty Bug - all releases (1-4) | ASIC=Basic Derivative |
- Tiffany.Towers.440 & Tiffany.Towers.458
- COM/EXE/TSR
- Tiawanese Macro Viruses (source code)
- Tiawanese Bat virus Sofa
- Solar.Diz 78 | From the dusty archives of SolarDiz
- Solar.Diz 90 | Infect Borland Pascal 7.0x compiled files only
- Solar.Diz 97 | is generic
- FuckHarry Rev 1
- Win95 Virus - Fuck Heroin | In Memory of TerminatorZ |
- EXE/PE/WIN95/TSR | Who died of Heroin Overdose |
No 1:
000 - You're reading it!
001 - Why am I doing this?
002 - Modifying virii to get past scan. (Taken from 40Hex)
003 - This issues Virus Challange.
004 - Who was that asshole? And AntiEXE Virus!
005 - Application form for VBB
006 - The Color Macro Virus
007 - EXTRA! The Doom II Virus!
008 - Virus News! A List of Virii in the Wild
Files included:
SETUP WRI 03/15/95 09:48 1152
AAAUUE EXE 03/16/95 10:23 64916
UUDECODE COM 01/05/95 14:04 1158
UUENCODE COM 01/05/95 14:05 987
FILE_ID DIZ 03/16/95 22:05 414
No 2:
000 -You're reading it!
001 -What's Up?
002 -Subst Safety Issues
003 -Virus Special! THe Monkey Virus
004 -This Issues Virus Challenge
005 -The Underground Macro Virus FAQ
006 -Macro Virus Spotlight! The Xenixos (Nemesis) Virus
007 -Macro Special! New and Undetectable Macro Virus!
Files included:
MARAUDER ASM 06/28/92 14:09 18581
AAAUUE20 ZIP 05/26/96 13:10 31084
SETUP WRI 03/15/95 09:48 1152
AAAUUE EXE 03/16/95 10:23 64916
UUDECODE COM 01/05/95 14:04 1158
UUENCODE COM 01/05/95 14:05 987
FILE_ID DIZ 03/16/95 22:05 414
MTE ZIP 01/12/96 18:52 9874
MTE OBJ 04/22/92 12:00 2509
MTE DOC 04/22/92 12:00 9732
MAKE BAT 04/22/92 12:00 131
NOPS BIN 04/22/92 12:00 16
READ ME 04/22/92 12:00 1424
RND ASM 04/22/92 12:00 914
DEMOVIR ASM 04/22/92 12:00 2998
No 3:
000 - You're reading it! :)
001 - What's up!
002 - Not again! Caught by F-prot.
003 - Table of Important Interrupt Functions
004 - The Win.Tentacle Virus!
005 - The Die Hard Virus!
006 - Homemade Macro Virus by Phardera! Enjoy.
007 - Rickdoggs Lord Natas v666.
008 - The Bandung Macro Virus
009 - New Macro Virus! Daniel_1F.
010 - The HD Euthanasia Virus! Pretty Dangerous!
011 - Virus Writers VBB Application Form!
012 - Where To ?
Files included:
HDEUTHAN EXV 07/01/96 09:08 25785
RICKDOGG EXV 03/07/96 16:57 37640
TENTACLE EXV 03/07/96 00:12 13222
No 4:
000 - Index
001 - News
002 - Hare Update
003&004 - 2 more Rickdogg Virii! Enjoy! [ed. 2 Trojans
CCTX]
005 - The Destruction Kit
006 - WMV.ARCHIE - A Demolition Kit Translation
007 - The Coconut Virus Resurected!
008 - Computers, Viruses & The Long Arm Of The Law - Rickdoggs Story
009 - Virus Related Newsgroups! A rundown by God@rky!
010 - Hidden F-Prot Parameters
011 - Excel Macro Virus Yohimbe
012 - VBB HOMEMADE! The Excel Legend Macro Virus by Pyro
013 - A list of all known Macro Virii!
014 - Nice Stealth Macro Virus!
015 - The Outlaw Macro Virus!
016 - Hacking Article
017 - POLYMORPHISM IN MACRO VIRII
018 - RETRO MACRO VIRII
019 - HOW TO OPTIMIZE YOUR MACRO VIRII
020 - COM Infections
021 - Directory Traversal
022 - VBB IS EXPANDING!
Files included: none
No 1:
< Editorial >
DDT#1.1_1 - Introduction to DDT
DDT#1.1_2 - Membership
DDT#1.1_3 - Distribution sites
DDT#1.1_4 - Greetings
DDT#1.1_5 - Disclaimer
DDT#1.1_6 - Interview with Pockets [FS]
DDT#1.1_7 - Interview with Wintermute
DDT#1.1_8 - Interview with Int13h/iKX
DDT#1.1_9 - Valencian VX meetings
DDT#1.1_A - The magazine
DDT#1.1_B - In the media and oddities
DDT#1.1_C - Words from Billy Belcebú - Agur
< Articles >
DDT#1.2_1 - Heuristic technology
DDT#1.2_2 - Six ways for infect a COM
DDT#1.2_3 - Harder to detect (theory)
DDT#1.2_4 - Residence in Windows viruses at Ring-3 level
DDT#1.2_5 - Multiple payloads
DDT#1.2_6 - Using Structured Exception Handler (SEH)
DDT#1.2_7 - Viric life and die theories
DDT#1.2_8 - Internet:A resource source for the Virus Writer
DDT#1.2_9 - Billy Belcebú Virus Writing Guide 1.04
DDT#1.2_A - How to disable some residents shields
DDT#1.2_B - Demoscene: Fire effect
DDT#1.2_C - Demoscene: Bump Mapping effect
DDT#1.2_D - Simple Ring-0 tutorial
DDT#1.2_E - "Do Polymorphism" tutorial
DDT#1.2_F - Simplest way for get KERNEL32 base address
DDT#1.2_G - 32 bit optimization
< Viruses >
DDT#1.3_1 - nIgr0 Compression Engine
DDT#1.3_2 - Win32.Highway virus
DDT#1.3_3 - Win95.WINP32 virus
DDT#1.3_4 - Bat-Boy virus
DDT#1.3_5 - Freedom virus
DDT#1.3_6 - Floating Point Polymorphic Engine
DDT#1.3_7 - Life Of Agony mIRC worm
DDT#1.3_8 - Bastard.1979 disassembly
DDT#1.3_9 - Win95.Sexy 2.0.33 virus
DDT#1.3_A - Messev 2.01 virus
DDT#1.3_B - Gwar 1.03 virus
DDT#1.3_C - Multy Decryptor Poly Engine
DDT#1.3_D - Win95.Paykiller-22 virus
DDT#1.3_E - Benny Polymorphic Engine
DDT#1.3_F - Anti-Aznar virus
< DDT Viruses >
DDT#1.4_1 - Win95.Iced Earth virus
DDT#1.4_2 - Win95.Garaipena
DDT#1.4_3 - RideOn virus
DDT#1.4_4 - CS.GaLaDRieL virus
DDT#1.4_5 - Glaurung v2.0 virus [beta]
DDT#1.4_6 - Replay II virus [beta]
DDT#1.4_7 - Penguin virus [beta]
DDT#1.4_8 - Azatoth virus [beta]
DDT#1.4_9 - Guinness virus [beta]
DDT#1.4_A - Win95.Auryn
No 1:
INDEX.TXT - What do you think you are reading ?
PVW1.001 - Editorial by Zoom23 .
PVW1.002 - Membership form .
PVW1.003 - Overwritting virus ,an explanation
PVW1.004 - Batch file virus , A tutorial
PVW1.005 - The "Bulunggit" Overwritting virus
PVW1.006 - Closing & Greets
No 2:
PVW2.001 - This file .(Duh ?!)
PVW2.002 - Editorial .
PVW2.003 - Virology Corner the " Pinoy Freak " Virus
PVW2.004 - Newz! .
PVW2.005 - A134-95 strain b UUdecode script .
PVW2.006 - Membership Arena .
PVW2.007 - Cheska Garcia Virus ( UUE Script )
PVW2.008 - V-shock ( AV Beta Version )
PVW2.009 - Program source of DBug.exe
PVW2.010 - AV-Ches ( A.V. UUE script)
PVW2.011 - alt.comp.virus.source.code FAQ
PVW2.012 - Zoom23 Virus Engine
PVW2.013 - 808 Virus From SKISM
PVW2.014 - Dark Avenger Virus Source
PVW2.015 - Tiny-F virus Source
PVW2.016 - Sui-Generis !
Files included:
Greetz.pvw- What da ya think ?
Zve1.tpu - Zoom23 Virus Engine Pascal UNIT
No 3:
PVW3.001 - Thiz phyle .(Duh ?!)
PVW3.002 - A Thought .
PVW3.003 - Newz !
PVW3.004 - A134-95 strain b Source .
PVW3.005 - Lamerz! .
PVW3.006 - Membership Arena .
PVW3.007 - Pinoy Links.
PVW3.008 - UUE Script JoJoV Virus
PVW3.009 - " One for the Vikings "
PVW3.010 - Ansi-Bombs Tutorial.
PVW3.011 - AV source for Manzon Virus in Pascal.
PVW3.012 - Detect DA's Mutation engine.
PVW3.013 - "TakeDown"
PVW3.014 - On the lighter side...
PVW3.015 - Nina Virus Disassembly
PVW3.016 - Rise of the Trojans
PVW3.017 - Virii Article BY: Adrian AKA "Prometheus"
PVW3.018 - Real Player Killer by Lorz
PVW3.019 - Trojan Horse Written in C by Lorz
PVW3.020 - Greetz and Insults
Files included:
PVW3LOGO.EXE - PVW issue #3 LOGO
TPC.EXE - Turbo Pascal Compiler ver 7.0
TURBO.TPL - Accompanying Unit
UUDEC.COM - For decrypting UUE Scripts to binary form.
MVT.ZIP - Virus' (virii@earthlink.net) contribution
No 4:
PVW4.001 - Huh?
PVW4.002 - Editorial.
PVW4.003 - !!! Newz !!!
PVW4.004 - Lamerz for all.
PVW4.005 - AV of Taipan Virus source in Pascal.
PVW4.006 - Membership Arena
PVW4.007 - Why Study -- and Create -- Viruses?
PVW4.008 - "Just the BASICs"
PVW4.009 - Zoom23- PVW Editor Virography
PVW4.010 - AV Question s Windows a virus ?
PVW4.011 - Siri Virus UUE Script By Zoom23
PVW4.012 - Inquisitor 3 macro virii by Kryten
PVW4.013 - Pinoy Virus Writers Mailing List FAQ & Info
PVW4.014 - Why be a Virus Writer? (Respose from Alt.Comp.Virus )
PVW4.015 - AV Check on my babies
PVW4.016 -"Geek Life" U need not read this if ya hate stupid insights from me. - Editor
PVW4.017 - Cheska Virus Strain B UUE Script Source
PVW4.018 - MadCow Virus By: Mandragore
PVW4.019 - Margaret Trojan by Lorz
PVW4.020 - Hostile Applets By Lorz
PVW4.021 - Mykah Macro Virus By Lorz
PVW4.022 - Virus Goats By: Zoom23
PVW4.023 - 213 Macro Virus By Lorz
PVW4.024 - Interview with Putok sa Kawayan of the HEXFILES
PVW4.025 - Adidas Virus source by Lorz
PVW4.026 - Bacillus Virus source by Lorz
PVW4.027 - Maestro Virus source By Lorz
PVW4.028 - Pklight Virus source by Lorz
Files included:
UUDEC.COM - For decrypting UUE Scripts to binary form.
PVW4LOGO.EXE - PVW4 Logo
SAMPLE.DOC - Inquisitor 3 Macro virii By Kryten
MVT2.ZIP - Macro Virus MVT version 2
FA102.ZIP - Fisrt Aid AV By Jparas for my Babies
No 5:
PVW5.000 - This page...
PVW5.001 - Greetings
PVW5.002 - Editorial
PVW5.003 - E-mail Passwords
PVW5.004 - Miscellanous Detection
PVW5.005 - Virus Algorithm Analysis
PVW5.006 - Screensavers
PVW5.007 - Microsoft Excel Hole
PVW5.008 - Trojan Horse
PVW5.009 - Back Orifice
PVW5.010 - Sign Of The Hammer Virus
PVW5.011 - P.O.T. Virus
PVW5.012 - Elaine_213 Virus
PVW5.013 - AMA Virus
PVW5.014 - Mayon Virus
PVW5.015 - Neil Virus
PVW5.016 - 213 Macro Virus (Bug Fixed Version)
PVW5.017 - Maestro Virus (Bug Fixed Version)
PVW5.018 - Hiwaga Virus
PVW5.019 - Polymorphism in C++
PVW5.020 - Lord's Anti-Debugging & Anti-Emulator Lair
PVW5.021 - Lord's Anti-Debugging & Anti-Emulator Lair (Examples)
PVW5.022 - Membership Arena
PVW5.023 - babyBlue Virus By Zoom23
Files included:
HIWAGA.ZIP - Live Hiwaga Virus
TROJAN.C ---------- Sources (Trojan Horse)
MOVE.ASM ------|
RANDOM.ASM |
HEXWORD.ASM |
TAYLOR.ASM |---- Sources
PYT.ASM | (Lord's Anti-Debugging & Anti-Emulator Lair)
PYT_C.ASM |
TAYLOR_C.ASM --|
No 1:
XINE-1.000 - You are looking at it!
XINE-1.001 - X-ine Editorial
XINE-1.002 - Disclaimer
XINE-1.003 - Where to catch us?
XINE-1.004 - Greets and insults (where needed)
XINE-1.005 - An interview with Rogue Warrior/Genesis
XINE-1.006 - Infections by VXD
XINE-1.007 - TBScan heuristics flags explained
XINE-1.008 - Guide to Wordmacro Viruses
XINE-1.009 - Mutation Engines
XINE-1.010 - Tunnelling with Single step Mode
XINE-1.011 - Tunnelling with Single step Mode Example Program
XINE-1.012 - Denial of service attacks
XINE-1.013 - Low level Internet hacking with Injector
XINE-1.014 - Useful reference for building packets
XINE-1.015 - How to fuck around with CompuServe (Basics)
XINE-1.016 - Introduction to encryption methods
XINE-1.017 - The Lock Box
XINE-1.018 - The Mild Mutation Engine
XINE-1.019 - Virus - Sailor.Mercury
XINE-1.020 - Virus - Sailor.Venus
XINE-1.021 - Virus - Sailor.Mars
XINE-1.022 - Virus - Sailor.Jupiter
XINE-1.023 - Virus - Wordmacro.Padania
Files included:
MME.ZIP - Mild Mutation Engine Example
TUNNEL.ZIP - Methyl's example interrupt tunneller
INJECTOR.ZIP - Injector (unzip with -d option!)
VIRUSES.ZIP - Compiled viruses included in the magazine
No 2:
XINE-2.000 - WTF do you think you are currently reading??
XINE-2.001 - Second issue editorial
XINE-2.002 - Disclaimer
XINE-2.003 - How to (not) contact us?
XINE-2.004 - Greetings and such like
XINE-2.005 - Interview with MrSandman of 29A
XINE-2.006 - News and events
XINE-2.007 - Userlevel TSR under Win (3.1 up to 95)
XINE-2.008 - Virus spreading on TCP/IP networks with Windows
XINE-2.009 - Finding Kernel32 API's
XINE-2.010 - Coding in 32 bit assembly for Win95
XINE-2.011 - PE Infection preparations
XINE-2.012 - The 18 Tech
XINE-2.013 - TBAV CRC files demistyfied
XINE-2.014 - Wordmacro mailing intro
XINE-2.015 - Introduction to Amiga platform
XINE-2.016 - Amiga residency
XINE-2.017 - Infecting Amiga executables
XINE-2.018 - Gaining information about a site from outside
XINE-2.019 - TUPoSca - TCP/UDP Port Scanner 0.1b
XINE-2.020 - IP Scanner
XINE-2.021 - Virus - Homer
XINE-2.022 - Virus - Header Infector
XINE-2.023 - Virus - Spawn95B
XINE-2.024 - Virus - Puma
XINE-2.025 - Virus - Xine2
XINE-2.026 - Virus - Sailor.Uranus
XINE-2.027 - Virus - Sailor.Pluto
XINE-2.028 - Virus - Sailor.Neptune
XINE-2.029 - Virus - B00bs
XINE-2.030 - Amiga Virus - Beol ]I[ v2
XINE-2.031 - Amiga Virus - Beol 96 Poly Engine
XINE-2.032 - Disasm - Guerilla.1996
XINE-2.033 - Short Addendum to Injector (from issue #1)
Files included:
GETADD.EXE - GetProcAdd for Kernel32
IPSCAN.TGZ - IP Scanner
TUPOSCA.TGZ - TUPoSca, TCP/UDP Scanner
FPING.TGZ - The FPing package for IPScan and TUPoSca
XINE2.ANS - An ansi graphics for Xine #2
VIRIIS.ZIP - Zip file with viruses (encrypted, see disclaimer)
No 3:
XINE-3.000 - Err, the secret area maybe?
XINE-3.001 - Some intro words
XINE-3.002 - Usual Disclaimer
XINE-3.003 - How to contact us?
XINE-3.004 - Greetings and such like
XINE-3.005 - The South American virus scene
XINE-3.006 - Interview with OWL[FS]
XINE-3.007 - Interview with Griyo/29A
XINE-3.008 - The story of the 2Trout and Lilith viruses ITW
XINE-3.100 - Win95 structures and secrets
XINE-3.101 - Ideas and theoryes on PE infection
XINE-3.102 - Simple test of the SEH method in Win32
XINE-3.103 - Midinfection on relocations
XINE-3.104 - A new way to defeat virus scanners
XINE-3.105 - Formatting an extra track
XINE-3.106 - Little SYS infection tutorial
XINE-3.107 - Archive Infectors: Generalities
XINE-3.108 - Dropping and companioning over ZIP archives
XINE-3.109 - Dropping over ARJ archives
XINE-3.110 - Dropping over RAR archives
XINE-3.111 - Dropping over HA & ACE archives
XINE-3.112 - Dropping, a view on the past
XINE-3.113 - Introduction to Conway cellular life automata
XINE-3.114 - The Schumrz algorithm of genetical mutation
XINE-3.115 - Using Ptrace to intercept System calls under Linux
XINE-3.116 - pippa, a network datapipe in Perl
XINE-3.200 - Virus - MarkJ
XINE-3.201 - Virus - Cerebrus
XINE-3.202 - Virus - Padania_Libera
XINE-3.203 - Virus - Murkry2
XINE-3.204 - Virus - Darkside
XINE-3.205 - Virus - Free_Padania
XINE-3.206 - Virus - Kuarahy
XINE-3.207 - Virus - Alicia
XINE-3.208 - Virus - Literatura 2.0
XINE-3.209 - Virus - Stratovarius
XINE-3.210 - Virus - Sandrina
XINE-3.211 - Virus - Sailor_Saturn
XINE-3.300 - Virus - Outsider2
XINE-3.301 - Virus - ByWay
XINE-3.302 - Poly engine - Red Team Polymorphy 0.1b
XINE-3.303 - Virus Spotlite - The Second NewBorn Trout
XINE-3.304 - Virus Spotlite - Lilith
XINE-3.305 - Virus Spotlite - Overkill_IV
XINE-3.306 - Disasm - Grog.2075
XINE-3.307 - Disasm - Grog.2825
XINE-3.308 - Disasm - TME.643
XINE-3.309 - Disasm - TVED 1.0
XINE-3.310 - Mini Conway game of life emulator
Files included:
VIRII\ - Live viruses
2TROUT .COM - The Second Newborn Trout virus
ALICIA .COM - Alicia virus
CAMILO .EXE - Camilo virus
CEREBRUS.EXE - Cerebrus virus
DARKSIDE.COM - DarkSide virus
FREE .EXE - Free_Padania virus
GROG2075.EXE - Grog.2075 virus
GROG2825.EXE - Grog.2825 virus
KUARAHY .EXE - Kuarahy virus
LILITH .COM - Lilith virus image
LITERA2 .COM - Literatura 2.0 virus
MARKJ .EXE - MarkJ virus
MURKRY2 .COM - Murkry II virus
OKILL_IV.EXE - Overkill_IV virus
PADANIA .DOC - Wordmacro.Padania virus (the original one)
PADLIB .EXE - Padania_Libera virus
PLUTOB .ZIP - Sailor_Pluto.b virus
RTPDV .COM - Red Team Polymorphy Demo virus
SAN .COM - Sandrina virus
SAT .EXE - Sailor_Saturn virus
STRATO .COM - Stratovarius virus TUTS\ - Tutorials samples
ACEINF .COM - Demo of ACE infection
ARJINF .COM - Demo of ARJ infection
HAINF .COM - Demo of HA infection
LIFE .ZIP - Conway life automata program and samples
LZHINF .COM - Demo of LZH infection
NEWTRACK.COM - Demo of the extra track formatting
PSP95 .EXE - Demo of the Win95 'PSP'
RARINF .COM - Demo of RAR infection
SIMPLE .SYS - Demo SYS file displaying a greeting
ZIPINF .COM - Demo of ZIP infection
ZOOINF .COM - Demo of ZOO infection MISC\ - Some other stuff for our readers
IKX .COM - IKX GFX for your AUTOEXEC.BAT ;)))
LIFEGAME.COM - Mini Conaway game of life emulator
RTP_GEN .COM - Red Team Polymorphy sample generator
SATPLD .EXE - Graphical payload of the Sailor_Saturn virus
VECTORS .ZIP - Tool for displaying all the int vectors
No 4:
XINE-4.000 - Some people call this file an 'index'
XINE-4.001 - News and stuff from us
XINE-4.002 - Disclaimer
XINE-4.003 - Getting in touch with us
XINE-4.004 - Greetings and such like
XINE-4.005 - Interview with Super/29A
XINE-4.006 - The history of Grog and his viruses
XINE-4.007 - The short monologue of virus Wendell
XINE-4.008 - Virus + Literature + Music
XINE-4.009 - Why writing viruses?
XINE-4.100 - A tour over PE infection
XINE-4.101 - Tips and tricks about PE infection
XINE-4.102 - Getting Apis addresses
XINE-4.103 - Paging and fooling debuggers
XINE-4.104 - System Managment Mode
XINE-4.105 - Metamorphism essay
XINE-4.106 - Win32 Anti-Debugging tricks
XINE-4.107 - Companion viruses for 16 and 32 bits
XINE-4.108 - Infecting OBJs
XINE-4.109 - Encryption ideas and theories
XINE-4.110 - Piggyback, *nix prependers
XINE-4.111 - Automating things with expect
XINE-4.112 - Scappa, tcp service scanner
XINE-4.200 - Virus - The Mole
XINE-4.201 - Virus - The Voodoo virus
XINE-4.202 - Virus - AxelleBailey
XINE-4.203 - Virus - Aldebaran
XINE-4.204 - Virus - Win32.Thorin
XINE-4.205 - Virus - RegIkx
XINE-4.206 - Virus - Win32.Borges v.2.0
XINE-4.207 - Virus - Wm/W32.Cocaine
XINE-4.208 - Virus - Win32.Apathy
XINE-4.209 - Virus - Win95.Poshkiller
XINE-4.210 - Virus - Win95.IceHeart v1.5
XINE-4.211 - Virus - Autoworm
XINE-4.212 - Virus - SV
XINE-4.213 - Virus - Werther
XINE-4.214 - Virus - Win32.Legacy
XINE-4.215 - Virus - Win95.Molly
XINE-4.216 - Virus - Win32.Paradise
XINE-4.300 - Poly - ETMS 0.1
XINE-4.301 - Poly - MMXE
XINE-4.302 - Tool - Spoutnik 2
XINE-4.303 - Tool - Spoutnik 3
XINE-4.304 - Virus - VBvirus
XINE-4.305 - Virus - Albiroja
XINE-4.306 - Virus - Fuxpro
XINE-4.307 - Virus - Tolkien
XINE-4.308 - Spotlite - Peacekeeper
XINE-4.309 - Spotlite - Lithium
XINE-4.310 - Disasm - PME for Windows v0.00
XINE-4.311 - Disasm - Diablo
XINE-4.312 - Disasm - Win9X.Joker
Files included:
VIRII\ - Live viruses
ALBIROJA.EXE - Albiroja virus
ALDEBARA.EXE - Aldebaran virus
APATHY .EXE - Win32.Apathy virus
AUTOWORM.EXE - Autoworm autorun worm
AXELLE .EXE - AxelleBailey
BORGES .EXE - Win32.Borges v2.0 virus
COCAINE .DOC - Wm/W32.Cocaine virus (DOC)
COCAINE .EXE - Wm/W32.Cocaine virus (EXE)
DIABLO .COM - Diablo virus boot image
JOKER .EXE - Win9X.Joker
LEGACY .EXE - Win32.Legacy
LITH4101.COM - Lithium.4101 virus
LOVECRAF.COM - Lovecraft virus
MOLLY .EXE - Win95.Molly
PARADISE.EXE - Win32.Paradise
PILSEN .EXE - Win32.Pilsen virus
PMEW .OBJ - PME/W poly engine module
POSKHILL.EXE - Win95.Poshkiller virus
REGIKX .EXE - RegIKX virus
SOVRANA .OBJ - Padania Sovrana virus
SV .EXE - SV virus
THORIN .EXE - Win32.Thorin.11956 virus
VBVIRUS .ZIP - VBVirus virus
VOODOO .EXE - Voodoo virus
WERTHER .EXE - Werther virus
MISC\
ALBIROJA.EXE - Albiroja virus payload
IKXFONTS.ZIP - IKX's fonts changer
SPUTNIK2.EXE - Spoutnik 2
SPUTNIK3.EXE - Spoutnik 3
*-Zine