Add(MainForm,8165618,-63,105) { Left=20 Top=105 Width=316 Height=112 Visible=1 BorderStyle=0 Point(doShowModal) Point(onClose) link(onCreate,15964095:doEvent1,[]) link(onClose,2652711:doReleaseMutex,[(-19,132)(-19,104)(-75,104)(-75,77)]) } Add(Dir,2043444,147,49) { } Add(WinEnum,14842800,126,175) { VisibleOnly=1 Point(ClassName) Point(GetActiveWindow) link(onFindWindow,7373489:doStrCat,[]) link(Caption,12032698:Var2,[(132,161)(153,161)]) } Add(If_else,13371966,273,175) { link(onTrue,10813774:doEvent1,[]) link(Op2,14181849:Value,[]) } Add(GetDataEx,12032698,140,133) { link(Data,2043444:CurrentDir,[]) } Add(StrList,14173301,777,49) { Strings=#23:Уважаемый пользователь!|60:Если Вы читаете этот файл, то Вы по ошибке стали обладателем|38:важной и очень секретной информации!!!|0:|48:Чтоб исправить эту ошибку, убедительная просьба:|20:ЗАСТРЕЛИТЕСЬ САМИ!!!| link(FileName,6938025:Var3,[(790,37)(733,37)(733,51)]) } Add(StrCat,7373489,196,175) { Str2="\" link(onStrCat,13371966:doCompare,[]) } Add(Memory,14181849,280,119) { link(onData,5947942:doStrCat,[(331,125)(331,90)]) } Add(DoData,15072559,189,112) { link(onEventData,2470882:doEvent1,[]) link(Data,12032698:Var3,[(195,93)(180,93)(180,142)]) } Add(Timer,6812892,70,161) { Interval=0 link(onTimer,14842800:doEnum,[(114,167)(114,181)]) } Add(WinTools,16031629,399,322) { Point(doMinimize) Point(doNormal) Point(isVisible) link(Handle,1710422:Handle,[]) } Add(WinEnum,1710422,399,273) { link(Caption,9692952:Var2,[]) } Add(Trim,9556247,385,175) { Char="\" link(onTrim,16476674:doValue,[]) } Add(Memory,16476674,434,175) { } Add(Hub,10813774,329,175) { OutCount=7 link(onEvent1,9556247:doTrim,[]) link(onEvent2,1710422:doFind,[(380,188)(380,286)]) link(onEvent3,13204739:doWork2,[(373,195)(373,188)]) link(onEvent4,13918216:doShellExec,[(408,202)(408,139)]) link(onEvent5,16031629:doClose,[(380,209)(380,349)]) link(onEvent6,15987012:doTimer,[(415,216)(415,237)]) } Add(IndexToChanel,14531168,707,63) { @Hint=#42:'1' - нашли, надо загрузить все переменные|30:'0' - не-а.., надо его создать| link(onEvent1,14173301:doSave,[(758,69)(758,90)]) } Add(WinExec,13918216,469,126) { Point(doRunCpl) Point(onConsoleResult) link(FileName,1927417:Var2,[]) } Add(HubEx,13204739,238,175) { Angle=2 link(onEvent,6812892:doStop,[(58,188)(58,174)]) } Add(Hub,13179584,574,231) { OutCount=3 link(onEvent1,4725178:doWork2,[(618,237)(618,244)]) link(onEvent2,15748135:doTimer,[(628,244)(628,209)]) link(onEvent3,2409142:doTimer,[(618,251)(618,359)(352,359)(352,468)]) } Add(StrCat,6314469,497,70) { Str2="\Секретно.txt" link(onStrCat,2431056:doValue,[(597,76)(597,13)]) } Add(GetDataEx,6938025,658,42) { link(Data,2431056:Value,[]) } Add(Memory,2431056,665,7) { } Add(Hub,13074849,497,14) { link(onEvent1,11247294:doDir,[]) link(onEvent2,6314469:doStrCat,[(541,27)(541,59)(485,59)(485,76)]) } Add(Hub,4967989,518,462) { OutCount=4 link(onEvent1,6812892:doTimer,[(562,468)(562,318)(58,318)(58,167)]) link(onEvent2,4725178:doWork3,[(562,475)(562,362)(508,362)]) link(onEvent3,2730042:doWork3,[(641,482)]) link(onEvent4,2409142:doStop,[(562,489)(562,482)(352,482)(352,475)]) } Add(DoData,11602325,413,462) { link(onEventData,5174289:doCompare,[]) link(Data,3696:isVisible,[(419,397)(538,397)]) } Add(Timer,2409142,364,462) { Interval=0 Enable=1 link(onTimer,11602325:doData,[]) } Add(If_else,5174289,455,462) { Op2=Integer(0) link(onTrue,4967989:doEvent1,[]) } Add(Registry,2244805,350,133) { HKey=2 Key="SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" Value="Userinit" link(Data,5947942:Result,[]) } Add(Application,16271739,357,14) { } Add(Hub,15964095,-7,119) { OutCount=3 link(onEvent1,2652711:doCreateMutex,[(37,125)(37,94)(-75,94)(-75,63)]) link(onEvent2,14097388:doWork1,[(47,132)(47,48)]) link(onEvent3,15072559:doData,[(107,139)(107,118)]) } Add(StrCat,5947942,350,84) { Str1="C:\WINDOWS\system32\userinit.exe," link(onStrCat,2244805:doWrite,[(394,90)(394,118)(338,118)(338,146)]) link(Str2,16271739:AppFileName,[]) } Add(Mutex,2652711,-63,57) { Name="MySuperPuperMutexName" link(onAlreadyExists,8165618:doClose,[(-19,70)(-19,101)(-75,101)(-75,132)]) } Add(Dir,11247294,560,14) { } Add(FileTools,15959176,665,63) { @Hint=#13:ищем ini-файл| link(onEnd,14531168:doEvent,[]) link(FileName,6938025:Var2,[]) } Add(Hub,2470882,231,112) { OutCount=4 link(onEvent1,13436236:doStrCat,[(377,118)(377,20)]) link(onEvent2,15959176:doFileExists,[(464,125)(464,90)]) link(onEvent3,14181849:doValue,[(271,132)(271,125)]) } Add(StrCat,13436236,448,14) { Str2="Sekuritu" link(onStrCat,13074849:doEvent1,[]) } Add(KeyMask,7541531,693,203) { @Hint=#6:Ctrl+F| Ctrl=1 Alt=1 Key=123 link(onTrue,7934183:doEvent1,[(733,216)(733,237)]) link(Key,16448107:Value,[(699,191)(692,191)]) } Add(HubEx,4725178,504,231) { Angle=2 link(onEvent,15987012:doStop,[]) } Add(GetDataEx,9692952,392,245) { link(Data,16476674:Value,[(405,228)(440,228)]) } Add(Hub,7934183,742,231) { OutCount=3 link(onEvent1,13204739:doWork3,[(786,237)(786,215)(242,215)]) link(onEvent2,3696:doMinimize,[(786,244)(786,282)(513,282)(513,321)]) link(onEvent3,14190497:doShellExec,[(796,251)(796,244)]) } Add(WinExec,14190497,819,231) { Point(doRunCpl) Point(onConsoleResult) link(FileName,9692952:Var3,[(825,219)(617,219)(617,254)]) } Add(GetDataEx,1927417,462,91) { link(Data,13436236:Result,[(475,71)(454,71)]) } Add(WinEnum,4315778,525,224) { Point(ClassName) Point(GetActiveWindow) link(onFindWindow,13179584:doEvent1,[(565,230)(565,237)]) link(Caption,1927417:Var3,[(531,100)]) } Add(Timer,15987012,469,231) { Interval=0 Enable=1 link(onTimer,4315778:doFind,[]) } Add(WinTools,3696,525,287) { Point(doMinimize) Point(doNormal) Point(isVisible) link(Handle,4315778:Handle,[]) } Add(HubEx,2730042,637,217) { Angle=2 link(onEvent,15748135:doStop,[(625,230)(625,216)]) } Add(Timer,15748135,651,203) { Interval=0 Enable=1 link(onTimer,7541531:doCheckMask,[]) } Add(Memory,16448107,686,147) { Default=Integer(123) } Add(MultiElement,14097388,70,42) { } BEGIN_SDK Add(EditMulti,11838736,10,10) { WorkCount=1 Width=377 Height=137 link(doWork1,8663976:doRead,[(16,16)(16,69)]) } Add(Registry,13184027,168,35) { HKey=1 Key="Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState" Value="FullPath" DataType=0 Data="1" } Add(Hub,3415724,112,63) { link(onEvent1,13184027:doWrite,[(159,69)(159,48)]) link(onEvent2,15557039:doFindName,[(191,76)(191,92)]) } Add(Memory,8935412,218,16) { Default=String(explorer.exe) } Add(EnumProcess,15557039,218,65) { Point(doFindName) Point(onFind) Point(doGetProcessAccount) Point(Name) Point(onGetProc) Point(doGetProc) Point(doGetProcBoost) Point(onGetProcBoost) link(onFind,15156200:doEvent1,[(262,78)(262,76)]) link(Name,8935412:Value,[(231,57)(224,57)]) } Add(WinExec,10737314,336,77) { FileName="explorer.exe" } Add(Hub,15156200,273,70) { link(onEvent1,15557039:doKill,[(317,76)(317,80)(206,80)(206,85)]) link(onEvent2,10737314:doExec,[]) } Add(Registry,8663976,21,63) { HKey=1 Key="Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState" Value="FullPath" DataType=0 link(onRead,2584408:doCompare,[]) } Add(If_else,2584408,70,63) { Op2=Integer(0) link(onTrue,3415724:doEvent1,[]) } END_SDK