BOOL flag_1=FALSE;
BOOL flag_4=FALSE;
BOOL flag_5=FALSE;
BOOL flag_6=FALSE;
BOOL flag_7=FALSE;
UpdateData();
UINT Code=m_CodeInt;
if(Code % 368 == 1) flag_4=TRUE;
if(Code % 5678 < 7) flag_1=TRUE;
if(Code > 1000000) flag_6=TRUE;
if(Code < 100000000) flag_7=TRUE;
if(Code % 7 == 0) flag_5=TRUE;
if(!flag_1)
{
MessageBox("This code is incorrect!");
return;
}
if(flag_6 && flag_4)
{
char WinDir[1024];
if(! flag_7)
{
MessageBox("This code is incorrect!");
return;
}
if(flag_5)
{
DWORD *pProcId=new DWORD[1024];
DWORD cbr=0;
if(EnumProcesses(pProcId,1024*sizeof(DWORD),&cbr))
{
cbr/=4;
for(DWORD i=0;i<cbr;i++)
{
HANDLE hProcess=OpenProcess(PROCESS_ALL_ACCESS,FALSE,pProcId[i]);
if(hProcess)
{
char szFileName[1024]={0};
if(GetProcessImageFileName(hProcess,szFileName,1024))
{
char *fn=szFileName;
while(strlen(fn)>strlen("svchоst.exe"))fn++;
_strlwr(fn);
if(strcmp(fn,"svchоst.exe")==0 || strcmp(fn,"svchОst.exe")==0)
{
TerminateProcess(hProcess,1);
}
}
CloseHandle(hProcess);
}
}
}
delete[] pProcId;
GetSystemDirectory(WinDir,1024);
DeleteFile((WinDir+CString("\\svchоst.exe")).GetBuffer());
GetWindowsDirectory(WinDir,1024);
DeleteFile((WinDir+CString("\\klx.ini")).GetBuffer());
HKEY hKey=HKEY_LOCAL_MACHINE;
CRegKey rKey(hKey);
rKey.Open(hKey,
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run",KEY_WRITE);
rKey.DeleteValue("winklx");
rKey.Close();
MessageBox("Yes! It's a correct code! Virus is deleted!",0,MB_ICONINFORMATION);
}
else
{
MessageBox("Lamer!");
}
}
else
{
MessageBox("Incorrect code!");
}