CREATION OF AUTO GEN VIRUS

CREATING AUTO GEN VIRUS

COMPILING METHOD:

USING BORLAND TC++ 3.0 (16-BIT):

1. Load the program in the compiler, press Alt-F9 to compile

2. Press F9 to generate the EXE file (DO NOT PRESS CTRL-F9, THIS WILL INFECT ALL THE FILES IN CUR DIRECTORY INCLUDIN YOUR COMPILER)

3. Note down the size of generated EXE file in bytes (SEE EXE FILE PROPERTIES FOR IT’S SIZE)

4. Change the value of X in the source code with the noted down size (IN THE ABOVE SOURCE CODE x= 89088; CHANGE IT)

5. Once again follow the STEP 1 & STEP 2.Now the generated EXE File is ready to infect

USING BORLAND C++ 5.5 (32-BIT) :

1. Compile once, note down the generated EXE file length in bytes

2. Change the value of X in source code to this length in bytes

3. Recompile it. The new EXE file is ready to infect

HOW TO TEST:

1. Open new empty folder

2. Put some EXE files (BY SEARCHING FOR *.EXE IN SEARCH & PASTING IN THE NEW FOLDER)

3. Run the virus EXE file there you will see all the files in the current directory get infected.

4. All the infected files will be ready to reinfect

That’s it

TO DOWNLOAD VIRUS CODE PLEASE CLICK HERE.

CREATE VIRUS TO RESTART SYSTEM ON START UP

CREATING VIRUS TO RESTART SYSTEM ON EVERY SYSTEM BOOT

Today I will show you how to create a virus that restarts the computer upon every startup. That is, upon infection, the computer will get restarted every time the system is booted. This means that the computer will become inoperable since it reboots as soon as the desktop is loaded.

For this, the virus need to be double-clicked only once and from then onwards it will carry out rest of the operations. And one more thing, none of the antivirus software’s detects this as a virus since I have coded this virus in C. So if you are familiar with C language then it’s too easy to understand the logic behind the coding.

STEPS TO CREATE VIRUS-

1. FIRST DOWNLOAD THE FILE HERE.

2. YOU GET C CODE .

3. TO CREATE .EXE FILE MANUALLY PLZ COMPILE AND RUN C PROGRAM AND

    .EXE FILE IS GENERATED IN DEFAULT FOLDER BIN).

4. EXECUTE .EXE FILE

5. VIRUS RUNS ON EVERY STARTUP AUTOMATICALLY.

6. THANK YOU…………….

Testing And Removing The Virus From Your PC

You can compile and test this virus on your own PC without any fear. To test, just double click the sysres.exe file and restart the system manually. Now onwards, when every time the PC is booted and the desktop is loaded, your PC will restart automatically again and again.
It will not do any harm apart from automatically restarting your system. After testing it, you can remove the virus by the following steps.

1. Reboot your computer in the SAFE MODE

2. Go to

X:\Windows\System

(X can be C, D, E or F)

3. You will find a file by name sysres.exe, delete it.

4. Type regedit in run. You will go to registry editor. Here navigate to

HKEY_CURRENT_USER\Software\Microsoft\Windows\ Current Version\Run

 There, on the right site you will see an entry by name “sres“. Delete this entry. That’s it. You have removed this Virus successfully.

                                                                             

Logic behind the Working of the Virus

If I don’t explain the logic (Algorithm) behind the working of the virus, this post will be incomplete. So I’ll explain the logic in a simplified manner. Here I’ll not explain the technical details of the program. If you have further doubts please pass comments.

LOGIC:

1. First the virus will find the Root partition (Partition on which Windows is installed).

2. Next it will determine whether the Virus file is already copied (Already infected) into   X:\Windows\System

3. If not it will just place a copy of itself into X:\Windows\System and makes a registry entry to put this virus file onto the startup.

4. Or else if the virus is already found in the X:\Windows\System directory (folder), then it just gives a command to restart the computer.

This process is repeated every time the PC is restarted.

NOTE: The system will not be restarted as soon as you double click theSysres.exe file. The restarting process will occur from the next boot of the system.

 ..........................................................................................................