ラ壺1465腔最唗

枎植泬炊
1994-06-17

        #include <stdio.h>炊
        #include <dir.h>炊
        #include <dos.h>炊
        #include <sys\stat.h>炊
        #include <io.h>炊
        #include <string.h>炊
        FILE *fpi;炊
        main(int argc,char *argv[])
        {炊
        char fname[30],test[30];炊
        int k,n,done,mode,handle;炊
        unsigned char endbyte[20];炊
        struct ffblk ffp;炊
        if (argc!=2) {
        prinft("\n\n syntax:kill1465 FILENAME");
        exit(1);
        }
        炊done=findfirst(argv[1],&ffp,0);炊
        strcpy(test,argv[1]);炊
        if(test[0]=='\\'||test[1]==':')  {炊
        for(k=0;test[k]!=NULL;k++)
        for(n=0;test[k-n]!='\\'&&test[k-n]!=':';n++)
        炊test[k-n+1]=NULL;
        }
        炊  else test[0]=NULL;炊
        while(!done)  {
        strcpy(fname,test);炊
        strcat(fname,ffp.ff_name);炊
        printf("\n\tScaning the file %s",fname);
        mode=ffp.ff_attrib;炊
        _chmod(fname,FA_RDONLY| FA_HIDDEN);
        炊     fpi=fopen(fname,"rb+");
        if(fpi==NULL)  printf("\n\t Error to open the file.");
        else  {炊
        hadnle=fileno(fpi);炊
        fseek(fpi,-0x11,SEEK_END);
        炊fread(endbyte,17,1,fpi);
        炊if(strstr(enbyte,"L4Q0DGDIIB+GLO"))  {
        炊printf("\nFound virus 1465 in %s ,Running...!",fname);炊
        ffp.ff_fsize-=1465;
        if(strstr(fname,"COM"))  kill_com(ffp.ff_fsize);炊
        if(strstr(fname,"EXE"))  kill_exe(ffp.ff_fsize);
        chsize(handle,ffp.ff_fsize);
        炊printf("\n\n\t\t Clear !");
        炊}
        炊}炊
        fclose(fpi);炊
        _chmod(fname,1,mode);炊
        done=findnext(&ffp);
        炊}炊
        }/*main()*/炊
        
        kill_com(long length)
        {炊
        unsigned char lbyte[5];炊
        int i;炊
        fseek(fpi,(long)(length+5*256+32+4),0);炊
        fread(lbyte,5,1,fpi);炊
        for(i=5;i>0;i--) lbyte[5-i]^=i;炊
        fseek(fpi,0,0);
        炊fwrite(lbyte,5,1,fpi);
        }炊
        
        kill_exe(long length)
        {炊
        unsigned char lbytel[30],endbyte[30];炊
        long int i,k,temp;炊
        fseek(fpi,-0x95,SEEK_END);
        炊fread(endbyte,0xa,1,fpi);
        炊for(i=0;i<10;i++)  endbyte[i]^=(10-i);炊
        fseek(fpi,0,SEEK_SET);炊
        fread(lbyte,24,1,fpi);炊
        temp=(long)(length/512)+1;炊
        lbyte[5]=temp-lbyte[5]*256;
        炊k=length-(long)(temp-1)*512;
        炊lbyte[3]=k/256;炊
        lbyte[15]=(endbyte[1]*256+endbyte[0])/256;
        lbyte[14]=endbyte[1]*256+endbyte[0]-(long)lbyte[15]*256;
        lbyte[16]=endbyte[2];lbyte[17]=endbyte[3];
        lbyte[20]=endbyte[6];lbyte[21]=endbyte[7];
        炊   lbyte[23]=(endbyte[9]*256+endbyte[8])/256;
        lbyte[22]=endbyte[9*256+endbyte[8]-lbyte[23]*256;
        炊fseek(fpi,0,0);炊
        fwrite(lbyte,24,1,fpi);炊
        }炊
 
 