[
Previous] [
Index] [
Next]
Virus Creation Lab
Group: NuKE
Features: Late in summer 1992 the next virus toolkit software was published:
the Virus Creation Laboratory or VCL. Behind VCL stands the Nowhere Man, a
member of the American group of virus writers,
NuKE.
VCL is quite a
remarkable product: it features a colorful graphical interface of nearly
commercial quality with mouse control and drop-down menus, it is installed
with a separate installation program and it is supplied with quite accurate
and well-written documentation. VCL also contains the ICO and PIF files,
with which it can be handily installed in the Windows Program Manager.
It is possible to easily create several different kinds of viruses with VCL.
From the menus one can choose between a COM file -infecting, a companion
virus or an overwriting one. In addition to those, Trojan Horses and Logical
Bombs can also be made with VCL. The Virus Creation Laboratory is an
application of considerable versatility. By using it, it is possible to
define exact activation conditions for a virus made with it, those being,
for example, the date, time of the day, the number of infected files, a
computer's country code, the version of DOS or the amount of available RAM.
VCL presents many alternatives for the activation routine of a virus or
a Trojan Horse. Selections mentioned on the menu are crashing the computer,
a corruption of files, the printing of a freely chosen text on the screen
or printer, the overwriting of whole disks and the playing of a music sample
that can be freely composed. In addition to this, the user can add routines
to the program's menu. When a user has chosen the desired options, VCL creates
the assembler-language source code of a virus or a Trojan Horse on the disk.
The user can, if he so wishes, edit it still further before compiling it into
an executable form.
Despite its great versatility, VCL has not become very popular among virus
hobbyists. There are many reasons for this, but the most important probably
is that the majority of anti-virus programs were able to find almost all the
viruses made by VCL soon after it had been published. In fact, F-PROT
recognized most of them even before VCL had been analyzed at all. The
functionality of VCL at the hands of virus tinkers is further reduced by the
fact that it occasionally makes viruses that do not work at all - most of the
source codes it creates cannot even be compiled with an assembler compiler.
The Nowhere Man has, however, announced that he is working on a new version
of the program - a possible VCL for Windows is also speculated in the
documentation of VCL 1.0.
There are many interesting details to be found in the extensive documentation
of VCL. Among other things, the Nowhere Man forbids the makers of anti-virus
software from extracting search character strings from VCL or the viruses
made by it. The initial package came with 8 viruses made with VCL and by now
numerous viruses made with VCL are roaming the VX-boards.
In April 1994 Firecracker (then NuKE) released his VCL Mutator intended to
make VCL viruses unscannable again.
Download
| | Filename | Size | Description | Date | |
|---|
| vcl.zip | 190066 | [VCL] (cracked version) | Jul 1992 | MD5 sum a82ac0a215221e29b659c11fdffc84d3 |
Donate