From Hack Story

Jump to: navigation, search
Staff Zap (Under Construction)black.jpg


% A new spanish virus writing group - DDT %

 In the last half of 1997 a virus group was created, called DDT. We're a very
 young group, and we are six members:
 zAxOn, dustfaery, Frontis, The Wizard, mandragore and Billy Belcebu (myself).
 We are working now in a e-zine, and a kinda virus generator. The e-zine will
 be probably released in February/March of 1999, and the virus generator
 between December 1998 and June 1999 :) But don't worry about the date, it'll
 be released... but... when? :)

 We also have a web site in a fix address at http://www.sourceofkaos.com/homes/ddt
 I must send some greetings/thanx to super, for his help, to darkman, for giving me
 the chance of publish this presentation in 29A#3, to Int13h (you know why), to
 nIgr0 (join us ;), to all the DDT crowd and to all our IRC friends (you know who
 you are).

 Billy Belcebu,
 mass killer and ass kicker


DDT: another group dies with its 1st issue. 29A Issue # 4 (12-99)

             DDT: another group dies with its 1st issue
                          only the good die young

 This article is dedicated to all the DDT members in their short (but active)
 history, that are/were (chronologically):

        + Billy Belcebu (who writes this)
        + zAxOn
        + Frontis/JuaNJo
        + Johnny Mnemonic (was kicked, you'll see why)
        + DuSTFaeRie
        + SeptiC (only 2 days)
        + VirusBuster (only 1 week)
        + ThE_WiZArD
        + Mandragore
        + Ypsilon

 This is for all you, friends. DDT forever!

 [ Introduction ]

 As you know, DDT is dead. Although I don't know if ThE_WiZArD continues
 carrying the DDT label, I consider it dead as a group. And that makes me to
 feel sadness. You are wondering now why such a promising group, as we were,
 is dead. How could it happen? Why? Ok, let me tell you the whole (but short)
 DDT history.

 [ Why, when and how DDT appeared? ]

 Well, this is going to appear in a book soon (hey SyS, lo acabas o no?), but
 anyway I think it should be interesting for you to know it.

 Personally, I always wanted to write a virus, since i've read the interview
 published in PCMANIA with Wintermute and Mister Sandman, and about 29A, and
 all the virus descriptions in this same magazine fascinated me.

 The story began in October of 1997, a long time ago. After our school mate
 JuaNJo downloaded (he was the only one of us that had inet) some virus rela-
 ted material, such as IVP, G2, NRLG, some Hacking/Phreaking/Bomb-making
 stuff, and passed it to zAxOn and me, we began to be interested in writing
 some undergroung material. I had an idea in my mind: create a viruswriting
 group, such as NuKE, YAM and 29A were (hey, don't blame me. We only knew
 that three groups!), but I was afraid to tell it to zAxOn, because he'd
 laugh on me, as always. But I finally commented it to him, but i've never
 expected his answer: "oh, shit, i've thought the same as you. It could be
 nice!". So, I, with my knowledge of Pascal, and him, with his little
 knowledge of assembler, tried to write our first thing: a virus creator.
 JuaNJo was included in the group because he's a very close friend to zAxOn
 and me, and thanx to him we had some access to the contents of the net. Also
 we included Johnny Mnemonic in the list, but he had no idea even of use his
 computer (and still he doesn't know to do some others things like HTML code
 and play videogames), but he passed us Carmageddon, and we had to include
 him here. The first thing that was born was the interface of the program,
 written by me. It was nice, with some bitmapped satanic fonts (unreadable!),
 such as NRLG ones, but even more radical. It was also menu-based, but not
 as VCL. It was black (I like that color) with a menu in the left middle in
 the screen (a'la IRG#8). After i've done it, I took all the code of it and
 went to zAxOn's home to write together the virus engines. It took us one
 weekend to rip most of the IVP code, adapt it, change some parts, and add
 many payloads. As I didn't knew how the hell to code in ASM, zAxOn done it
 for me. Also, some other routines were ripped from NRLG. Don't blame, yes,
 we know it was lame, but see... I was 14 and zAxOn was 15... So, what the
 fuck you expect? Well, the virus generator was finished, and we called it
 NOP ViRUS CREATOR 0.666 (we didn't knew that there was a group called NoP).
 It had some cool things in the interface, such as very nice copper bars
 going up and down in the goodbye screen, some political messages inside the
 program (what do you expect of me? i can't avoid it!). It was, and will
 never be released to the public. As we were growing up in coding, I started
 to write the interface for the second version of the virus creator, the
 NOP 1.666. But our plans were fucked up, as in Christmas, zAxOn failed 6
 subjects (imagine his parents, he never had failed any subject in his life).
 So, his parents punished him. I was alone in the coding. Anyway, i built a
 very very good new interface for the new program, with some graphical stuff,
 such as fire, bump mapping, pictures, fadings, etc. As I knew a bit of
 assembler, I coded many different payloads for the virus. The interface had
 some windows, was able to save your settings, it still had some political
 messages :) The most important, the virus engine, was taken from 29A#1,
 Wintermute's Apocalyptic virus. As you know, that virus is a TSR COM/EXE
 size-stealth virus. I modified a bit the source, gave many greets to Winter
 (although i didn't knew him), and finished it, alone. It was a great mental
 exercice. Just after it, I wrote a brand new interface for the NOP 2.666.
 This virus generator was never finished. But still, you can see its interfa-
 ce in DDT#1, as it's the same (KME!). We began to give our first steps in
 the real virus coding. We kicked Johnny because his lameness, he didn't
 wanted to collaborate in anything, or learn. So,we focused our coding skills
 in writing the NOP 2.666 virus engines by ourselves. The project was very
 ambitious. While i've written the runtime engines and the TSR ones, zAxOn
 wrote a polymorphic engine for NOP, called zPe (zAxOn's Polymorphic Engine).
 As i was a bit bored of the project, I began to write my Antichrist
 Superstar. zAxOn helped me with its encryption. The virus was a TSR COM/EXE
 with antidebug/antibait/retro/antiheuristic/antiemulator/antitbclean, size-
 stealth, and some other features I am not able to remember. Meanwhile, zAxOn
 was giving his firsts steps in Win32 ASM programming. I've written also a
 poly engine, X-FME (X-Files Mutation Engine). Also, I wrote my Virus Writing
 Guide, version 1.00. The group idea was working ok. I've written a little
 test of a magazine for the group, with all our current stuff, called ROL#1
 (Rebels Of Leather magazine). But as we had a lack of stuff (we were only
 2 coders), we didn't published it. Also, the NOP 2.666 project was dormant.
 And here came to our lives Internet. After 3 months earning money (in my
 case; zAxOn had already a modem) I bought a Diamond SupraExpress modem 56k.
 It was our first big step. With both us connected, the project of DDT would
 be a reality. As i am a sucker, and at that time I seeked for fame,I applied
 both 29A (MrSandman rejected me) and iKX (also rejected me and didn't answe-
 red my emails). so, I realized that my place was at DDT, and we had to make
 it to be a good group, and demonstrate everyone that any group, with hard
 work, coudl do very good things.

 [ DDT grew up: new members, appears in the media... ]

 I labeled myself as organization of the group (zAxOn agreed), so it was my
 task. In one of the ussual netsplits of undernet's #vir channel I met with
 DuSTFaeRie, a 16 year old french coder, that was interested in viruses and
 demoscene. He had a TSR COM infector, and I asked him to join. He did! The
 group was formed by 3 16 year old guys (zAxOn, JuaNJo and DuST), and a 15
 year old kid (me!). After uploading our first webpage, in xoom (at the same
 address where I have my personal web now), and VirusBuster put it in his
 links, Cicatrix interviewed zAxOn and me. We were grewing up step by step.
 I've met with a wonderful guy called SeptiC, that was 17 year old, and was
 member at that time of JVS. He asked him to join. He did, but anyway he
 decided to leave us 2 days after. After some months in IRC, and asking many
 people for join and/or contributing, happened the thing that marked a the
 before and after of the group. I asked some time ago many times ThE_WiZArD
 to join us, but he always ignored me ;) Well, one day I connected and
 suddendly VirusBuster told me "Hey, i'm a new member of DDT, and ThE_WiZArD
 is too". Fuck! What a point! One of the most respected, loved, and known
 VXers joined DDT!. What two additions! So, the viewpoint of many people
 about the group changed. We passed from being one of those heap of unproduc-
 tive groups that only chat in the IRC to be a serious one. In my case, I was
 lost in the coding of my Win95.Garaipena, zAxOn was coding his Win95.Auryn,
 and giving form to great ideas, and all was going ok.

 Some days after joining, VirusBuster changed his status inside the group as
 collaborator, although he had all the privileges of a member, for re-join
 29A (he asked me for do it before, and i agreed).

 We implanted the democracy in the group, all our decissions since here were
 made voting.

 I continued searching for new members. A french guy called Mandragore asked
 for contribute. He sent two viruses, Replay II and Glaurung v2.0. I asked
 him for join, and he agreed, and all the DDT members answered YES to his
 apply. So, here was another impressive coder in our group! It was growing!

 Here came our media apparitions, in the most famous spanish paper-printed
 magazines. They all described us as a very promising group, with a name in
 the world's virus scene (damn, it was true!).

 The joining of Ypsilon was similar to ThE_WiZArD's one. I asked him many
 times to join, as Super told me how good he is. He always replied to me
 "Let me think about it". But after many asks by my side, he said "Why not?".
 All the members also agreed, so he became a member, although I lost communi-
 cation with him since there.

 Some people helped us in our way to the elite, mainly were 29A and Feathered
 Serpents. 29A helped us letting me publish an intro to DDT in 29A#3, and
 with a lot of contribution from their members to DDT#1, and Owl, the leader
 of FS commented me about the Feathered Serpents Alliance idea, we all agreed
 with it, and DDT became part of the powerful FSA.

 [ DDT#1: the group impresses the scene, and my own decay begins ]

 We were developing an impressive piece of work with our first e-zine. Indeed
 it was the best first e-zine of a group ever, because our hard work. But,
 some months before publish it (in January) happened the thing that was the
 main reason of my decay as organizer, and as DDT member:after two impressive
 phone bills (over $500 both two), my neurotic mother cutted litterally my
 connection to the net. Fuck. That was the beginning of a hard time to me.
 I passed the control of the group to zAxOn's hands. But my life situation
 turned againist me:my vice (IRC) fucked up my studies,i failed two subjects,
 and many other problems appeared (imagine it, and its consequences). So, I
 had to think about my situation. For me, DDT was screwing my real life.
 There wasn't any other solution i could think of: if I don't leave it, it'd
 screw up my access to the university. Of course, my coding activity, after
 finish my two first released viruses (Win95.Garaipena, and Win95.Iced Earth)
 decreased a lot, in order to pass the exams (that were very near). Also,
 I thought that all the stuff we had for DDT#1 was enough, so i mailed it to
 ThE_WiZArD for let him to upload it in his web (as our SOK address was down)
 So, he done it, and that's what appeared. DDT was over for me.

 [ What happened to DDT after Billy's departure? ]

 As I have a very close relation with zAxOn, I knew what was happening to the
 group. I planned to let it in the hands of zAxOn,but instead him, ThE_WiZArD
 took care of the group, and asked to all the members if they would continue
 after DDT#1. As far as I know, DuST, Mandragore, zAxOn and JuaNJo said that
 they would leave. I don't know what happened with Ypsilon, but I know he's
 not in the group now, so I guess he left too. So, ThE_WiZArD was the only
 one. I think he left too.

 I wasn't a good end for a very promising virus group. Fuck, if i've known
 that they all would leave, I wouldn't left. However, everyone can still take
 a look to the wonderful and impressive DDT#1.

 [ What happened to Billy? ]
 Luckily, after I passed the exams, everyone went good, so I could be able
 again to code, and the summer was there for let me code even more. I had the
 offer of iKX and i accepted it. And here i am.

 [ What happened to the rest of DDT? ]

 JuaNJo is still carrying its life (if we can say he has a "life" ;), copying
 CDs to every lifeform around, getting games even 1 month before its release,
 getting OS betas for free, etc ;)

 zAxOn left the whole idea of virus coding, after releasing only two viruses,
 including the first PE infector that a member of DDT wrote, and the world's
 ever first CorelDraw virus. He's working right know in strange things in
 C related to neural nets, and, btw, he doesn't have installed Windows in any
 of his 2 computers, he only uses LiNUX.

 DuSTFaeRie is still coding demos.

 Ypsilon is still working in earn more and more money, fucking with his gf,
 and trying to make his VAS to work in SP4 :)

 About ThE_WiZArD and Mandragore i don't know anything (hey, mail me!)

 Sadly, another group died.
 (c) 1999 Billy Belcebu/iKX


http://vx.netlux.org/lib/static/vdat/ivzaxon.htm Interview with Zaxon

Retrieved from "https://hackstory.net/DDT"
Hackstory.es - La historia nunca contada del underground hacker en la Península Ibérica.