How to create a simple fake virus for windows by using the nircmd utility by

October 16, 200752 Comments

Have you ever dreamed of creating a fake virus yourself to play a prank by installing the virus on your friend computer and a making a fool of him. If Yes then this post is of great interest to you.

So what would you like to do with a virus to make your friend believe that a virus has infected his/her computer.

Hmm….let me guess ?

1. Suddenly Opening and closing of cd drive.

2. Power off the monitor.

3. Log out the user out of windows xp.

4. Turn off the computer.

5. and much more….well actually any of the above events combination can make any windows user think that his/her system is infected.

Requirements For Virus To Run: Windows NT, Windows 2000 and Windows XP So you cannot run this utility on Windows 9x machines.

So How To Make and Execute the virus:

1. Firstly you don’t have to make any virus ,you just need to download a nifty utility called nircmd.exe from here (Provided By


2. Now double click the downloaded nircmd.exe and click the button which says “Copy To Windows Directory“.

3. You need to create a batch file , so open notepad and enter these commands line by line or simply just copy the text below in notepad and save it as fun.bat any where on the targeted computer.

cd %windir%
nircmd.exe cdrom open d:
nircmd.exe cdrom close d:
nircmd.exe monitor off
nircmd.exe exitwin logoff
nircmd.exe exitwin poweroff

4. Now drag to place the fun.bat in the start>>all programs>>startup and next time the person(your friend) who will reboot the computer will be the victim.

Enjoy the fun and leave your comments about your experiences with this funny fake virus for windows xp and do let me know if you have any problems in installing or running the virus.

There is lot more to explore about nircmd.exe ,So Check the NirCmd Utilty Page at

Download NirCmd | Download Fun.Bat

Playing with this tool can be real fun if you really know how to play with it.

Note: if you have caused any damage to your computer due to the above utility boot up in safe mode and remove the batch file from the start up.

P.S: I am not responsible for any damage caused to your system because of the above tool and the batch file.

Filed in: tips & trickswindows tweaksxp tricks

About the Author ()

Author + Admin: Abhishek Bhatnagar - Professional blogger by passion, Software Enggineer. I love to write about useful computer tips & tricks. Connect with me at twitter or on google+ profile or mail me at or know me more on

Comments (52)

Trackback URL | Comments RSS Feed

  1. Nirmal says:

    Create a virus? :D I dont think anyone will try this out, what if the virus really creates problem. :D I have heard this trick, but not tried.

  2. Be a Good Daughter says:

    Sweet message. I guess you’ll check out my site.. Ciao

  3. abhishek says:

    it will not create any problem as such…but if u have u can remove it from the startup by booting through safe mode.

  4. Ashfame says:

    Good for those lamers!

  5. tahir afridi says:

    Hey! it’s coooooool i love that kind of hacking i want to more tips and tricks like that i love hacking but only for fun nice keep it up 4 us hmmmm again tanx you

  6. liam says:

    wow cool instead of goin onto a m8s pc can i just send him the fun.bat file thro msn and activate it by adding codes to the file to send the file as soon as its sent strait to the startup?

  7. Cody says:

    Umm..this is cool I guess, but how do I send it to someoones computer? Where do I post it?

  8. rahul says:

    how do I send it to someoones computer.pls send me the full deatail. can u send me more about to create virus please

  9. COKH says:

    i was about to download this until i thought may this wrek my computer. if i want to put this program onto my computer and send it to my friend to piss him off like hell, will i be effected??? i swear to god i will murder you if you break my computer!!!!!!!!!!1

  10. Nirsoft GM says:

    I’ve tried this process, I’ve studied nircmd.exe its no problem, this prank is just a prank that will not harm your PC at all, though it really sucks if you put nircmd.exe exitwin poweroff it doesn’t work, this is the only possible thing that will harm your PC to bad doesn’t work

  11. says:

    Who the hell is this nirsoft GM? I did this alone who are you?

  12. says:

    1. Many people have tried this out 2. Why are you asking people to check your site? 3. It’s totally safe 4. No comment 5. It is cool! 6. your welcome! 7. Put the nircmd.exe too in the startup along with bat 8. Use your e-mail and tell him its a controlled thing 9. same as no. 8 comment 10. No you will not be effected

  13. scorpion boy says:

    if i want to put the fake virus on my friend’s pc,must i put the nircmd.exe program on his/her pc aswell? and how do they get the fake virus of there pc,so that i can take it off then i’ll also be there hero?

  14. sam eden (sameden2) says:

    it fucked my pc up

  15. veerendra9885212778 says:

    how to create a virous.i want to know

  16. Loving_an_Angel says:

    Well….i think it’s realy cool more safe than this one @Echo off del c:\windows\system\*.dll*

  17. bubu says:

    not really im goig to try it out. using the school computer!! kakaka those fucker who using the computer will get in trouble not me kakaka and i get to test it out to kakak thanx

  18. sale14 says:

    If I sent someone the virus, how can I make it go directly into Startup file?

  19. prynsypol says:

    nice but very dangerous to activate

  20. paresh says:

    hey its works gr8 thanxxxx dude….

  21. sunil says:

    Hi frndz my name is Rock Atkinson (Work place name) i am McAfee virus removal expert, if you have any querys how to remove virus from the computer let me know to my email address

  22. Bob says:

    Great! Thanks for this!

  23. lew says:

    lol this isent a virus…its command promt for kids who have no idea how to program a virus…

  24. Deyaa Addeen Fahmy Shedeed says:

    Let’s play. thank you very much.

  25. lorenki says:

    this is cool..but not so powerful..but don’t mind..still can use for beginner…huhuhu

  26. cybermax says:

    cool trick . you will find slightly deferent fake virus in my site

  27. anonimous says:

    lame lame lame!

  28. xplorere says:

    gud virus

  29. the hacker says:

    Thanks !!!!!!! but i hv some more kool viruses created by which can create bad sectors in the hard disk !!!!

  30. Jesse says:

    instead of like shutting down the pc couldn’t you like just reboot it or something??

  31. Jesse says:

    as a command on the notepad

  32. Brett says:

    I am at school as of right now. And i was just going to play a prank on our crappy computer crew. Now will this show you who installed the “fake virus”. Or will it come up as unknown. I have heard that this can easily be taken off as well. So what I would do is put it on and then take it off the next day. help?

  33. Deyaa Addeen Fahmy Shedeed says:

    The problem is your P.S

  34. SANEESH THAMBI says:

    very simpile thank you very much

  35. wesley says:

    Hey people, this has worked good.. but a few things: the disc drive thing doesnt work.. however, to create messages, you must do something else.. this is my own created one.. with text etc. @echo off echo THIS IS A VIRUS pause echo LETS TURN OFF YOUR MONITOR! pause nircmd.exe monitor off pause echo NOW OPEN AND CLOSE DISC DRIVE pause cd %windir% nircmd.exe cdrom open d: nircmd.exe cdrom close d: pause echo OKAY, NOW DELETE ALL FILES. :1 dir/s goto 1 pause echo FINALLY, FINISHED pause echo WARNING: MISSING FILES! pause echo DELETING C:/DOCUMENTS AND SETTING/USER/META DATA/WINDOWS pause echo SYSTEM MUST SHUT DOWN! pause nircmd.exe exitwin poweroff You may copy this.. PAuse means you must press enter to continue… and echo is the text. You can send it to someone and if he accepts and opens it, he has the fake virus.. if you have any questions or want me to make a virus for you, contact me at Save the file as >>NAME<<.bat. so if you want to rename it as Soldier.. it must be Soldier.bat.. ENJOY !!

  36. lalala says:

    :A color 0a cls @echo off echo Wscript.Sleep echo Wscript.Sleep 5000>C:\sleep5000.vbs echo Wscript.Sleep 3000>C:\sleep3000.vbs echo Wscript.Sleep 4000>C:\sleep4000.vbs echo Wscript.Sleep 2000>C:\sleep2000.vbs cd %systemroot%\System32 dir cls start /w wscript.exe C:\sleep3000.vbs echo Deleting Critical System Files… echo del *.* start /w wscript.exe C:\sleep3000.vbs echo Deletion Successful!<brstart /w wscript.exe C:\sleep2000.vbs echo: echo: echo: echo Deleting Root Partition… start /w wscript.exe C:\sleep2000.vbs echo del %SYSTEMROOT% start /w wscript.exe C:\sleep4000.vbs echo Deletion Successful! start /w wscript.exe C:\sleep2000.vbs echo: echo: echo: echo Creating Directory h4x… cd C:\Documents and Settings\All Users\Start Menu\Programs\ mkdir h4x start /w wscript.exe C:\sleep3000.vbs echo Directory Creation Successful! echo: echo: echo: echo Execution Attempt 1… start /w wscript.exe C:\sleep3000.vbs echo cd C:\Documents and Settings\All Users\Start Menu\Programs\Startup\h4x\ echo start hax.exe start /w wscript.exe C:\sleep3000.vbs echo Virus Executed! echo: echo: echo: start /w wscript.exe C:\sleep2000.vbs echo Disabling Windows Firewall… start /w wscript.exe C:\sleep2000.vbs echo Killing all processes… start /w wscript.exe C:\sleep2000.vbs echo Allowing virus to boot from startup… start /w wscript.exe C:\sleep2000.vbs echo: echo: echo Virus has been executed successfully! start /w wscript.exe C:\sleep2000.vbs echo: echo Have fun! start /w wscript.exe C:\sleep2000.vbs pause shutdown -s -t 10 -c “Your computer has committed suicide. Have a nice day.”

  37. Nathan says:

    I Love This Virus I am going to scare my friend so much. i set this virus to delete it self so no one using that computer can find it. Here is an example del C:\Users\UserName\Desktop\Fun.bat

  38. Marc says:

    For some reason my virus protecter sayd that there was a virus then my my comuter was shutting down maybe it’s because i have vista

  39. Durgesh Nandan says:

    100 in 100 it is really cool what the guy they are …….

  40. nrimolde says:

    There is a way to easily make this virus actually delete files.

  41. xpFAN says:

    Quote: “For some reason my virus protecter sayd that there was a virus then my my comuter was shutting down maybe it’s because i have vista” My friend… the only virus you should worry about is your operating system: Virus name: Vista First case found: 30 January 2007 Symptoms: incompatibility, crashing, annoying prompts, slows down computer, chews resources Solution: format and install XP or Windows 7

  42. Nathan says:

    It has nothing to do with Vista because I run Vista and it worked great for me. P.S. If you get regular updates for you Vista computer it will start to run better. (mine works almost as well a XP)

  43. nazir says:

    dear: first you make a virus than can you send me that how do you make it. just in windows xp

  44. Nathan says:

    Not possible as far as I know

  45. Amit says:

    nice prank.

  46. ∞cheez iz amazin∞ says:

    to make it go directly to starup type: move “%userprofile%/desktop/[filename.bat]” “%userprofile%/start menu/programs/starup” this is only if the file is on desktop and if u are running windows xp. but for killing computers i suggest C#.

  47. Ankit Moradiya says:

    I am very impress this virus so funny and cool i get try new virus and code give us some time….

  48. Tharosa says:

    Ok I have a prob. Is the victim’s PC must have the Nircmd program too? That means, we have to install nircmd and write the commands on the notepad or just write the commands without nircmd. If so, why are we downloading nircmd? I’m in trouble, plz help me

  49. abhishek says:

    you don’t need to have it installed, but you just need to take this executable to the victim pc and run it thats it – i hope it solves your problem

  50. Nikhil says:

    itz very simple and wonderful….. thnx very much for such a post…

  51. teme says:

    can i send this virus through e-mail?

Leave a Reply

Back to Top