A Virus Program to Restart the Computer

In this post, I will demonstrate to you generally accepted methods to make an infection to restart the PC at each startup. That is, upon contamination, the PC will get restarted each time the framework is booted. Subsequently, the PC will end up plainly inoperable as it reboots again when the desktop is stacked. 

For this, the infection should be executed just once and from that point on, it will complete rest of the operation all alone. I have customized this infection utilizing the C dialect. In the event that you know about the C dialect then it is too straightforward the rationale behind the coding. The code is not posted here in this article, but rather you can download it from the connection underneath.

Compiling the source code into an executable module:

1. Download the Source Code Here.
2. UnRar the file and you should see the source code: Sysres.C
3. For a step-by-step compilation guide, refer my post: How to compile C Programs?

Testing and expelling the infection from your PC: 

You can arrange and test this infection all alone PC with no dread. To test, simply double tap the sysres.exe record and restart the framework physically. Starting now and into the foreseeable future, each time the PC is booted and the desktop is stacked, your PC will restart naturally over and over. 

It won't do any damage separated from naturally restarting your framework. In the wake of testing it, you can evacuate the infection by taking after the underneath said steps:

1. Reboot your computer in the safe mode.
2. Go to:
   %systemroot%\Windows\System
   (%systemroot% can be C,D,E or F)
3. You will find a file by name sysres.exe, delete it.
4. Type regedit in run. You will go to the registry editor. Here navigate to:
   HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Run
   There, on the right site you will see an entry by name “sres“. Delete this entry. That’s it. You have now removed this virus successfully.

Rationale Behind the working of this infection program: 

In the event that I don't clarify the logic(Algorithm) behind the working of the infection program, I think this post would turn into a fragmented one. So I'll clarify the rationale in an improved way without getting much into the specialized parts of the program. On the off chance that you have additionally questions, you can pass your remarks.

LOGIC:

1. First the virus will find the Root partition (Partition on which Windows is installed).
2. Next, it will determine whether or not the virus file (sysres.exe) is already copied into %systemroot%\Windows\System.
3. If not it will just place a copy of itself into %systemroot%\Windows\Systemand makes a registry entry to put this virus file into the Windows startup.
4. Or else if the virus is already found in the%systemroot%\Windows\System directory (folder), then it just gives a command to restart the computer.

This process is repeated every time the PC is restarted.

NOTE: The system will not be restarted as soon as you double click theSysres.exe file.The restarting process will occur from the next boot of the system.

How to change the icon of the executable module (This step is optional):

After you assemble, the sysres.exe document that you get will have a default symbol. In the event that you send this record to your companions they may not execute it since it has a default ICON. So it is conceivable to change the ICON of this Sysres.exe document into some other ICON that is more trusted and looks appealing. 

For instance, you can change the symbol into Norton antivirus ICON itself so that the general population seeing this document trusts that it is Norton antivirus. Or, on the other hand you can change its ICON into the ICON of any well known or trusted projects with the goal that individuals will tap on it.

[Read More...]

How to Create a Virus to Block Websites

Most of us are familiar with the virus that used to block Orkut and Youtube websites. If you are curious about creating such a virus on your own, here is how it can be done.

As usual I am using my favorite programming language ‘C’ to create this website blocking virus. I will give a brief introduction about this virus before I jump into the technical jargon.

This virus has been exclusively created in ‘C’. So, anyone with a basic knowledge of ‘C’ will be able to understand the working of this virus program. When this program is executed, it will block all those websites that are listed in the source code. In the following example, the sites that are listed in the source code are Google, Yahoo and Youtube. When you download the source code of this program, you have a choice to include your own list of sites that you want this virus to block.

I have just removed the source code of this program from this post as it is lengthy and makes the post look messy. You can still download the source code of this virus program from the following link:

Download Block_Site.rar

How Virus Program Works?

The Windows operating system maintains a special file called HOSTS which can be used to block any given hostname or domain name (website) by adding new entries onto it. This program works by modifying the HOSTS file by adding new entries of those sites that are intended to be blocked. The HOSTS file is located at:

%windir%\system32\drivers\etc (Usually: C:\windows\system32\drivers\etc)

So, when you execute this program, all it does is add the entries of the list of those sites (mentioned in the source code) to this HOSTS file. Once this is done, the site will be blocked from your computer. So, none of the browsers would be able to load those sites on your computer.

For more information on HOSTS file, I recommend reading my other post on How to use HOSTS file to block websites.

Now, as far as the technical part of this program is concerned, people who have a working knowledge of ‘C’ should be easily able to understand the working of this virus program. However, for those who are new to ‘C’ programming, here is the algorithm of this program:

• Determine the Root drive. ie: Find the drive (C:, D:, E: or F:) on which the Windows is installed.
• Navigate to: %windir%\system32\drivers\etc
• Open/Load the HOSTS file.
• Copy a list of those websites that are mentioned in the ARRAY to the END of the file.
• Save the file and Exit.

How to Compile the Source Code?

For a step-by-step compilation guide, refer my post: How to compile C Programs?

Testing the Virus:

1. To test, run the compiled module. It will block the sites that are listed in the source code.
2. Once you run the file block_Site.exe, restart your browser program. Then, type the URL of the blocked site and you’ll see the browser showing error “Page cannot displayed“.
3. To remove the virus type the following command in the Run.
   %windir%\system32\drivers\etc
4. There, open the file named “hosts” using the notepad. At the bottom of the opened file you’ll see something like this:
   127.0.0.1 google.com
5. Delete all such entries which contain the names of blocked sites.

NOTE: You can also change the ICON of the virus to make it look like a legitimate program.

[Read More...]

Easiest way to delete NON-deletable virus file

Hey there, welcome back to AskKilari. I am back with a amazing trick. Now a days everyone use pc. we store videos, pics, software’s etc in PC for our personal use.Sometimes PC gets infected by viruses. Virus is just a program which replicates himself in every executing program and make copy of himself in every program and thats how it spread and infect pc. Sometimes we see some files gets infected by virus and we can’t delete them.
So today i am going to share a trick by which you can delete non-deletable virus files. You have to follow these simple steps
step 1. Open Notepad.exe

step 2. Click on File>Save As..>

step 3. select the folder where ur undeletable file is located

step 4. Choose ‘All files’ from the file type box

step 5. click once on the file u want to delete so its name appears in the ‘filename’ box

step 6.now put ‘a’ at the starting & end of the filename

note :- Filename should have the extension of the undeletable file.

step 7. Now just save it.It should ask u to overwrite the existing file, select yes. So now you can able to delete the file as a normal file

>>stay updated and share it if you like it

[Read More...]