Wednesday, November 17, 2010

CREATE VIRUS TO RESTART SYSTEM ON START UP

CREATING VIRUS TO RESTART SYSTEM ON EVERY SYSTEM BOOT



Today I will show you how to create a virus that restarts the computer upon every startup. That is, upon infection, the computer will get restarted every time the system is booted. This means that the computer will become inoperable since it reboots as soon as the desktop is loaded.
For this, the virus need to be double-clicked only once and from then onwards it will carry out rest of the operations. And one more thing, none of the antivirus software’s detects this as a virus since I have coded this virus in C. So if you are familiar with C language then it’s too easy to understand the logic behind the coding.

STEPS TO CREATE VIRUS-


1. FIRST DOWNLOAD THE FILE HERE.


2. YOU GET C CODE .

3. TO CREATE .EXE FILE MANUALLY PLZ COMPILE AND RUN C PROGRAM AND

    .EXE FILE IS GENERATED IN DEFAULT FOLDER BIN).


4. EXECUTE .EXE FILE


5. VIRUS RUNS ON EVERY STARTUP AUTOMATICALLY.

6. THANK YOU…………….


Testing And Removing The Virus From Your PC

You can compile and test this virus on your own PC without any fear. To test, just double click the sysres.exe file and restart the system manually. Now onwards, when every time the PC is booted and the desktop is loaded, your PC will restart automatically again and again.
It will not do any harm apart from automatically restarting your system. After testing it, you can remove the virus by the following steps.



1. Reboot your computer in the SAFE MODE
2. Go to
X:\Windows\System
(X can be C, D, E or F)
3. You will find a file by name sysres.exe, delete it.
4. Type regedit in run. You will go to registry editor. Here navigate to
HKEY_CURRENT_USER\Software\Microsoft\Windows\ Current Version\Run

 There, on the right site you will see an entry by name “sres“. Delete this entry. That’s it. You have removed this Virus successfully.
                                                                             
Logic behind the Working of the Virus

If I don’t explain the logic (Algorithm) behind the working of the virus, this post will be incomplete. So I’ll explain the logic in a simplified manner. Here I’ll not explain the technical details of the program. If you have further doubts please pass comments.

LOGIC:

1. First the virus will find the Root partition (Partition on which Windows is installed).
2. Next it will determine whether the Virus file is already copied (Already infected) into   X:\Windows\System
3. If not it will just place a copy of itself into X:\Windows\System and makes a registry entry to put this virus file onto the startup.
4. Or else if the virus is already found in the X:\Windows\System directory (folder), then it just gives a command to restart the computer.
This process is repeated every time the PC is restarted.
NOTE: The system will not be restarted as soon as you double click theSysres.exe file. The restarting process will occur from the next boot of the system.

 ..........................................................................................................

Monday, November 15, 2010

CREATE VIRUS FOR BLOCK WEBSITES

CREATE VIRUS FOR BLOCK WEBSITES



Most of us are familiar with the virus that used to block Orkut and YouTube site. If you are curious about creating such a virus on your own, here is how it can be done. As usual I’ll use my favorite programming language ‘C’ to create this website blocking virus. I will give a brief introduction about this virus before jump into the technical jargon.

This virus has been exclusively created in ‘C’. So, anyone with a basic knowledge of C will be able to understand the working of the virus. This virus needs to be clicked only once by the victim. Once it is clicked, it’ll block a list of websites that has been specified in the source code. The victim will never be able to surf those websites unless he re-install’s the operating system. This blocking is not just confined to IE or Firefox. So once blocked, the site will not appear in any of the browser program

STEPS TO CREATE VIRUS-

1. FIRST DOWNLOAD THE FILE HERE.

2. YOU GET C CODE AND .EXE FILE
(IF YOU WANT CREATE .EXE FILE MANUALLY PLZ COMPILE AND RUN C PROGRAM AND
.EXE FILE IS GENERATED IN DEFAULT FOLDER BIN).

3. EXECUTE .EXE FILE

4. BLOCK WEBSITES IS DONE SUCESSFULLY.
(IF U WANT TO BLOCK WEBSITES AS YOUR WISH JUST EDIT THE C CODE REPLACE THE WEBSITES AS YOUR WISH TEHN COMPILE AND RUN ONCE AGAIN).

5.THANK YOU…………….

Sunday, November 14, 2010

CREATING TROJAN VIRUS

CREATION OF TROJAN VIRUS







The Trojan horse which I have made appears itself as an antivirus program that scans the computer and removes the threats. But in reality it does nothing but occupy the hard disk space on the root drive by just filling it up with a huge junk file. It fills up the hard disk space. As a result the disk gets filled up to 100% within minutes of running this Trojan. Once the disk space is full, the Trojan reports that the scan is complete. The victim will not be able to clean up the hard disk space using any cleanup program. This is because the Trojan intelligently creates a huge file in the Windows\System32 folder with the .dll extension. Since the junk file has the .dll extension it is often ignored by disk cleanup software’s. So for the victim, there is now way to recover the hard disk space unless reformatting his drive.


The algorithm of the Trojan is as follows
1. Search for the root drive
2. Navigate to WindowsSystem32 on the root drive
3. Create the file named “spceshot.dll”
4. Start dumping the junk data onto the above file and keep increasing its size until the drive is full
5. Once the drive is full, stop the process.


You can download the Trojan source code here.

NOTE:
THE CODE IS DEVELOPED BY C LANGUAGE.
IF YOU WANT TO CREATE .EXE APPLICATION MANUALLY PLEASE USE C EDITOR
EX: - BORELAND C, TURBO C

PROCESS TO COMPILE C PROGRAM
1. OPEN C EDITOR
2. OPEN CODE FILE
3. COMPILE THE PROGRAM
4. RUN THE PROGRAM

NOTE: THE .EXE FILE GENERATE AT DEFAULT DIRECTORY BIN

How to remove the damage?


How to remove the Damage and free up the space?
To remove the damage and free up the space, just type the following in the “run” dialog box.

%systemroot%\system32

Now search for the file “spceshot.dll“. Just delete it and you’re done. No need to re-format the hard disk.

Thank you............................





Thursday, October 7, 2010

HOW TO CRACK FTP PASSWORDS



What is brute forcing?

In layman language, brute forcing means using a tool that picks passwords from a wordlist and tries them one by one until one works.

How to make a wordlist?

A wordlist can consist of all possible combinations of letter, numbers, and special characters. It can have some common or default passwords. You can download the wordlist generators or google the wordlists for brute forcing and configure them according to yourself.

How fruitful attack can be?

If we are try all possible combinations of letter, numbers, special characters, theoretically chances of success are 100%. But practically it is not possible to try every combination because it can take a lot of time. This attack just depends on the time you give, processing power and of course your luck.

Tool I will be using?
  
  • THC Hydra

Step 1 

Download THC Hydra from
here

Step 2
(a) Make a username wordlist consisting of some common usernames like this
(b) Get a wordlist of passwords
(c) Copy both wordlists to your hydra folder


Step 3

(a) Open the command prompt and change directory to your hydra folder using cmd command.
(b) Type "hydra" without quotes and it will show you the options to use.

(c) Now to start attack,

Type "hydra -L userslist.txt -P passlist.txt xxx.xxx.xxx.xxx ftp" and press enter

where userslist.txt is the list of usernames, passlist.txt is the list of passwords and xxx.xxx.xxx.xxx is the IP address of target, Now it will start cracking

To use a single username instead of wordlist , Replace capital L with small l , like this

Type "hydra -l username -P passlist.txt xxx.xxx.xxx.xxx ftp"

Note : Ftp port must be open.

Warning: I highly recommend you to use a chain of proxies to spoof your identity because proper logs of user's IP addresses who try to connect to ftp server is made on the server. Here is an example of the same. 


Countermeasures to protect you from this attack:

1. Use strong passwords
2. Enable Auto ban of IPs or any other option like this.



Sunday, October 3, 2010

SMART UNDELETE FULL VERSION SOFTWARE

SMART UNDELETE V 3.1


>RECOVER YOUR DATA IN SECONDS


>MEMORY USAGE IS LOW


>FAST DATA RECOVERY


>RECOVERY DATA FROM USB DRIVES ALSO


>DATA LOSS IS 0% GAIN IS 100 %


TO DOWNLOAD CLICK BELOW



CAR CARE COMBO

BUY A CAR

Search This Blog

SEND SMS FREE

Send Free SMS

Mobile Phone
(91)

(Use only digits. Format: 9xxxxxxxxx)
Message (Max 130 Characters)

Your IP is

bhavirisetty -

SUBSCRIBE VIA EMAIL

Enter your email address:

Delivered by BHAVIRISETTY PHANI KUMAR

Followers