A Virus Program to Restart the Computer

Posted by : kuch March 15, 2014

A Virus Program to Restart the Computer

In this post, I will show you how to create a virus to restart the computer at every startup. That is, upon infection, the computer will get restarted every time the system is booted. As a result, the computer will become inoperable as it reboots again as soon as the desktop is loaded.

For this, the virus needs to be executed only once and from then on, it will carry out rest of the operation on its own. I have programmed this virus using the C language. If you are familiar with the C language then it is too easy to understand the logic behind the coding. The code is not posted here in this article, but you can download it from the link below.

Compiling the source code into an executable module:

Download the Source Code Here.
UnRar the file and you should see the source code: Sysres.C
For a step-by-step compilation guide, refer my post: How to compile C Programs?

Testing and removing the virus from your PC:

You can compile and test this virus on your own PC without any fear. To test, just double-click the sysres.exe file and restart the system manually. From now on, every time the PC is booted and the desktop is loaded, your PC will restart automatically again and again.

It will not do any harm apart from automatically restarting your system. After testing it, you can remove the virus by following the below mentioned steps:

Reboot your computer in the safe mode.
Go to:

%systemroot%\Windows\System

(%systemroot% can be C,D,E or F)
You will find a file by name sysres.exe, delete it.
Type regedit in run. You will go to the registry editor. Here navigate to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Run

There, on the right site you will see an entry by name “sres“. Delete this entry. That’s it. You have now removed this virus successfully.

Logic Behind the working of this virus program:

If I do not explain the logic(Algorithm) behind the working of the virus program, I think this post would become an incomplete one. So I’ll explain the logic in a simplified manner without getting much into the technical aspects of the program. If you have further doubts, you can pass your comments.

LOGIC:

First the virus will find the Root partition (Partition on which Windows is installed).
Next, it will determine whether or not the virus file (sysres.exe) is already copied into %systemroot%\Windows\System.
If not it will just place a copy of itself into %systemroot%\Windows\System and makes a registry entry to put this virus file into the Windows startup.
Or else if the virus is already found in the %systemroot%\Windows\System directory (folder), then it just gives a command to restart the computer.