www.pudn.com > antinimda.zip > w32_nimda.h

// w32_nimda_a.h: interface for the w32_nimda_a class. 
// 
////////////////////////////////////////////////////////////////////// 
 
#if !defined(AFX_W32_NIMDA_A_H__57EA730B_EB3D_4B45_97CC_360AB879FABC__INCLUDED_) 
#define AFX_W32_NIMDA_A_H__57EA730B_EB3D_4B45_97CC_360AB879FABC__INCLUDED_ 
 
#if _MSC_VER > 1000 
#pragma once 
#endif // _MSC_VER > 1000 
 
#include "../src/VirusKiller.h" 
 
/* VIRUS DEFINITION FOR Win32.NIMDA */ 
 
 
/* cleans nimda infected files that contain the actual executable code */ 
class w32_nimda_a  : public VirusKiller 
{ 
public: 
	w32_nimda_a() : VirusKiller("Win32.Nimda", "exe;dll") 
		{ m_signature = (LPBYTE)"Concept Virus"; } 
 
	/* cleans the specified file */ 
	virtual SCANRESULT Clean(LPCTSTR file); 
 
#ifdef _DEBUG 
	/* used in debugging to find all the resources in a dll or exe */ 
	static BOOL CALLBACK s_enumresourcetypes(HMODULE hModule, LPTSTR lpszType, LONG lParam); 
	static BOOL CALLBACK s_enumresourcenames(HMODULE hModule, LPCTSTR lpszType, LPTSTR lpszName, LONG lParam); 
#endif 
}; 
 
 
/* cleans infected web files that contain the javascript code that 
	replicates virus to client computers */	 
class w32_nimda_b  : public VirusKiller 
{ 
public: 
	w32_nimda_b() : VirusKiller("Win32.Nimda", "html;htm;asp")  
		{ m_signature = (LPBYTE)"